Varion AI
Request a walkthrough

Varion Casefile

Every scam case, on the record.

Case handling for scam and fraud reports, built for smaller Malaysian financial institutions.

Request a Casefile walkthrough
Status
Design-partner assessment on synthetic cases
Varion Casefile in 3D: a decided scam case, the proposal its proposer could not approve, and the approval by a second person. Synthetic data.

Nobody approves their own decision.

In Varion Casefile, a proposed decision must be approved by a different person. The proposer cannot approve that same decision, including when they are an administrator.

Try it yourself. You are Farah, the analyst.

Try Varion Casefile

Varion CasefileDemo Bank Berhad (synthetic data)Synthetic data
DEMO-2026-0002InvestigatingPending decisionDecidedClosedCritical priority

Fake PDRM officer, parcel with drugs

Authorised (customer initiated the payment) Impersonation scam (officials, bank, parcel) Internet banking

MYR 65,000.00 MYR 12,000.00 recovered

You are
Case views

Step 1 of 4

You are Farah Lim, the analyst

This scam case has been investigated, reported to NSRC and its controls assessed, as the road to decision shows. The outcome is proposed on the Decision tab.

Open the Decision tab.

Step 1 of 4

Propose the outcome

For an authorised payment with a control gap, Casefile's guidance suggests a goodwill payment. Farah proposes one, and Casefile sends it for independent review.

Press Propose decision.

Step 1 of 4

Nothing to review yet

Kumar Selvam reviews decisions, and none has been proposed. In Casefile a reviewer may propose too; in this demo Farah proposes and Kumar reviews.

Switch to Farah Lim, the analyst.

Step 2 of 4

No Approve button for Farah

Farah proposed this decision, so Casefile does not offer her Approve. Under four-eyes someone else must review it, and that holds for an administrator too.

Switch to Kumar Selvam, the reviewer.

Step 2 of 4

Kumar can review it

Kumar is a reviewer and did not propose this decision, so Casefile offers him Approve on the Decision tab.

Open the Decision tab.

Step 2 of 4

Kumar can approve it

Kumar is a reviewer and did not propose this decision, so Casefile offers him Approve, which Farah never saw.

Press Approve.

Step 3 of 4

Approved by a second person

The decision now carries two names, and the case is Decided. Once the customer is told the outcome, the analyst or the reviewer closes the case.

Press Change status to Closed.

Step 4 of 4

Case closed

The closure is on the timeline and in the audit trail, and a closed case takes no new entries. The case file puts the whole case on one record.

Press Case file.

Done

The whole case, on one record

The case file holds the case summary, the customer's account, the classification, the duty-of-care assessment, the timeline, the decision and the audit trail.

Explore the tabs, or start again.

Start again

Explore

Timeline and evidence

Every event on the case, newest first. The timeline is append-only: once recorded, an entry cannot be edited or removed.

Press Add entry to record a funds freeze request.

Explore

Entry added

The freeze request is on the timeline for good, and the audit trail records who added it.

Open the Decision tab to carry on.

Explore

Casefile writes the status changes

Proposing moved the case to Pending decision, and Casefile put that on the timeline itself. Nothing here can be edited or removed.

Open the Decision tab to carry on.

Explore

Duty of care

The institution's own controls, assessed before the customer's conduct. Ten of the eleven that apply were applied. REP-01 was not: the case has no National Fraud Portal report.

Open a group to see each control and its evidence.

Explore

Audit trail

Every create, change, decision, download and export is recorded here automatically, newest first, and the database refuses edits to this table.

Your own steps appear at the top.

DEMO-2026-0002

Fake PDRM officer, parcel with drugs

Demo Bank Berhad (synthetic data)

Case file generated

Status: Closed

  1. 1. Case summaryAuthorised (customer initiated the payment). Impersonation scam (officials, bank, parcel). MYR 65,000.00 lost, MYR 12,000.00 recovered. Reported to NSRC 15 Oct 2026, 11:30.
  2. 2. Customer's accountA caller claiming to be from PDRM Bukit Aman said a parcel containing drugs was registered in the customer's name and instructed him to move his savings to a safe account for investigation. (Synthetic demonstration data.)
  3. 3. ClassificationCustomer Initiated Payment: Yes. Third Party Instruction: Yes. Customer Ignored Warning: Yes.
  4. 4. Duty-of-care assessment (institution's controls)12 controls: 10 Applied, 1 Not applied (REP-01), 1 Not assessed (REP-02), assessed by Farah Lim.
  5. 5. Timeline and evidenceEvery entry, oldest first, with its files and their SHA-256 checksums.9 entries and 1 file10 entries and 1 file
  6. 6. Reimbursement decisionGoodwill payment, MYR 15,900.00, split 30% / 70%. Proposed by Farah Lim, approved by Kumar Selvam.
  7. 7. Audit trailEvery recorded action before this file was generated.21 entries22 entries

Prepared by (name, signature, date)Reviewed by (name, signature, date)

In Varion Casefile the case file opens as a page to print or save as PDF.

Customer's account of events

A caller claiming to be from PDRM Bukit Aman said a parcel containing drugs was registered in the customer's name and instructed him to move his savings to a safe account for investigation. (Synthetic demonstration data.)

Regulatory reporting

NSRC (997)
15 Oct 2026, 11:30
PayNet National Fraud Portal
Not submitted
Police report
KL/DEMO/2026/5002

Road to decision

  1. ClassifiedAuthorised (customer initiated the payment)
  2. Reported to NSRC15 Oct 2026, 11:30
  3. Duty of care assessed10 of 11 applied, 1 gap(s)
  4. DecisionGuidance: Goodwill paymentGoodwill payment: Awaiting reviewGoodwill payment: Approved
  5. ClosedClose once the customer is informed

Before this is final

Independent review by a reviewer or administrator is required before the decision is final (four-eyes principle).

Timeline and evidence

Append-only. Entries cannot be edited or removed once recorded.

  1. Internal noteStatus changed to ClosedCustomer informed of the outcome.Recorded by Farah LimRecorded by Kumar Selvam
  2. Internal noteStatus changed to DecidedDecision Goodwill payment approved.Recorded by Kumar Selvam
  3. Internal noteStatus changed to Pending decisionA reimbursement decision was proposed and is awaiting independent review.Recorded by Farah Lim
  4. Funds freeze / trace requestFreeze request sent to the receiving bankRequest to hold the funds while the trace runs.Recorded by Farah LimRecorded by Kumar Selvam
  5. Internal noteStatus changed to InvestigatingRecorded by Farah Lim
  6. Internal noteStatus changed to TriageRecorded by Farah Lim
  7. Police reportPolice report recorded (KL/DEMO/2026/5002)Recorded by Farah Lim
  8. Internal noteCase openedCase DEMO-2026-0002 created. 12 duty-of-care controls added for assessment.Recorded by Farah Lim
  9. NSRC reportReported to the National Scam Response Centre (NSRC)Recorded by Farah Lim
  10. Customer contactCustomer interviewed by phoneStatement recorded; customer consented to the investigation and to data sharing with NSRC where applicable.customer-statement.txtRecorded by Farah Lim

Assess the institution's own controls before weighing the customer's conduct.

Duty-of-care checklist

11 of 11 applicable controls assessed

Authentication3 Applied
  • AUTH-01Secure (non-SMS-OTP) authentication used for the transactionTransaction was authenticated with in-app or equivalent secure authentication rather than SMS OTP, in line with the migration directive.Confirmed from system records (AUTH-01).Assessed by Farah LimApplied
  • AUTH-02Single-device binding enforcedOnline banking access was restricted to one registered secure device at the time of the transaction.Confirmed from system records (AUTH-02).Assessed by Farah LimApplied
  • AUTH-03Cooling-off period applied to first-time enrolment or new deviceA cooling-off period was applied before a newly enrolled account or newly registered device could transact.Confirmed from system records (AUTH-03).Assessed by Farah LimApplied
Transaction controls2 Applied
  • TXN-01Transaction limits enforcedDaily and per-transaction limits, including customer-set limits, were enforced for the disputed transaction(s).Confirmed from system records (TXN-01).Assessed by Farah LimApplied
  • TXN-02Call-back or additional verification for high-risk transactionA call-back or additional verification step was performed for a high-risk, high-value or first-time payee transaction.Confirmed from system records (TXN-02).Assessed by Farah LimApplied
Customer warnings2 Applied
  • WARN-01Scam warning shown at point of paymentA scam warning, payee confirmation or risk message was displayed to the customer before the payment was confirmed.Confirmed from system records (WARN-01).Assessed by Farah LimApplied
  • WARN-02Prior fraud awareness communication to customerThe customer had received fraud awareness communication (in-app notice, campaign, statement insert) relevant to this scam type before the incident.Confirmed from system records (WARN-02).Assessed by Farah LimApplied
Detection and response3 Applied
  • DET-01Anomaly detection alert raisedFraud monitoring generated an alert for the out-of-pattern transaction and the alert was actioned.Confirmed from system records (DET-01).Assessed by Farah LimApplied
  • RESP-01Kill switch available and actionedThe self-service kill switch was available and, once the customer reported, access was suspended promptly.Confirmed from system records (RESP-01).Assessed by Farah LimApplied
  • RESP-02Report acknowledged and funds trace initiated within SLAThe customer's report was acknowledged and a funds trace or freeze request was initiated within the institution's service level.Confirmed from system records (RESP-02).Assessed by Farah LimApplied
Reporting and timeliness1 Not applied, 1 Not assessed
  • REP-01Reported to NSRC and National Fraud Portal on timeThe case was reported to the National Scam Response Centre and lodged in the National Fraud Portal within the required timeframe.Reported to NSRC on 15 Oct 2026. No National Fraud Portal submission is recorded for this case.Assessed by Farah LimNot applied
  • REP-02Investigation completed within prescribed timeframeThe investigation and outcome communication met the timeframe prescribed under SEFT, or financial assistance was provided where it did not.Applies to unauthorised transactions only; not relevant to this case.Not assessed

Decisions

No decision has been proposed yet. Complete the duty-of-care assessment, then propose the outcome for independent review.

Goodwill payment MYR 15,900.00Awaiting reviewApproved

Waiting for someone else to review (four-eyes)

Liability split
Institution 30% · Customer 70%
Rationale
Demo rationale: bank-side control gap(s) REP-01 identified. Customer factors considered as recorded in the indicators.
Proposed by
Farah Lim
Approved by
Kumar Selvam
Guidance at the time
Goodwill payment

Audit trail for this case

Newest first; the database refuses edits to this table

  1. case.file_generatedDEMO-2026-0002: case file generatedFarah LimKumar Selvam
  2. case.status_changedDEMO-2026-0002: Decided to ClosedFarah LimKumar Selvam
  3. decision.approvedDEMO-2026-0002: decision approvedKumar Selvam
  4. decision.proposedDEMO-2026-0002: Goodwill payment proposed (15900.00 MYR)Farah Lim
  5. case.event_addedDEMO-2026-0002: Funds freeze / trace request recordedFarah LimKumar Selvam
  6. case.control_assessedDEMO-2026-0002: REP-01 marked Not appliedFarah Lim
  7. case.control_assessedDEMO-2026-0002: RESP-02 marked AppliedFarah Lim
  8. case.control_assessedDEMO-2026-0002: RESP-01 marked AppliedFarah Lim
  9. case.control_assessedDEMO-2026-0002: WARN-02 marked AppliedFarah Lim
  10. case.control_assessedDEMO-2026-0002: WARN-01 marked AppliedFarah Lim
  11. case.control_assessedDEMO-2026-0002: DET-01 marked AppliedFarah Lim
  12. case.control_assessedDEMO-2026-0002: TXN-02 marked AppliedFarah Lim
  13. case.control_assessedDEMO-2026-0002: TXN-01 marked AppliedFarah Lim
  14. case.control_assessedDEMO-2026-0002: AUTH-03 marked AppliedFarah Lim
  15. case.control_assessedDEMO-2026-0002: AUTH-02 marked AppliedFarah Lim
  16. case.control_assessedDEMO-2026-0002: AUTH-01 marked AppliedFarah Lim
  17. case.attachment_addedDEMO-2026-0002: evidence file "customer-statement.txt" attachedFarah Lim
  18. case.event_addedDEMO-2026-0002: Customer contact recordedFarah Lim
  19. case.status_changedDEMO-2026-0002: Triage to InvestigatingFarah Lim
  20. case.status_changedDEMO-2026-0002: New to TriageFarah Lim
  21. case.reporting_updatedDEMO-2026-0002: regulatory reporting details updatedFarah Lim
  22. case.assignedDEMO-2026-0002 assigned to Farah LimFarah Lim
  23. case.createdCreated case DEMO-2026-0002Farah Lim
How to use this demo
  1. Open the Decision tab and propose the outcome as Farah.Done
  2. Switch to Kumar, the reviewer, and approve it.Done
  3. Close the case.Done
  4. Open the case file.Done

Also try Add a timeline entry, and look through Duty of care and Audit.

Start again

Interactive demo on synthetic data. Nothing you click leaves this page.

What it records.

Varion Casefile provides case records, supporting evidence, control assessments, decision review, audit history and exports. It is offered for a bounded design-partner assessment using synthetic cases.

  • Case records

    Each scam report held as a case record of its own.

  • Supporting evidence

    Evidence kept with the case it supports.

  • Control assessments

    The required controls assessed and recorded on the case.

  • Decision review

    A proposed decision is approved by a different person.

  • Audit history

    A history of what happened on the case.

  • Exports

    A case can be exported with its history.

Where it stands.

Design partners get a say in the roadmap, a pilot shaped to their workflow and phased delivery, with price, timeline and scope set after a scoping call.

  • Varion Casefile uses deterministic rules and does not call a model API.

  • Production suitability, operational acceptance and legal or reimbursement guidance have not been independently validated.

See it on a synthetic case.

A 30-minute walkthrough, then a conversation about your workflow.

Request a Casefile walkthrough

You will hear back from Hirthic.