Search Insights are triggered on any of the following: SSN, Address, Phone, Email, and IP.

Cluster Behavior Alerts flag when an SSN, address, phone, or email is linked to suspicious activity across applications in the SentiLink Cluster, helping identify potential fraud at account opening or during account takeover review. Hover over the alert to see the specific reason it was triggered.

SSN Issuance Date & State helps confirm whether the issuance details align with the applicant's age and background, making it especially useful for new-to-credit applicants when there is no matching SSN on record.

Area code, VOIP, Disposable Phones & Porting Info flags phone numbers that may be disposable or VOIP-based and includes the timeframe of the last port.

Email Risk returns the first seen date and age of an email to help identify newly created addresses that may indicate fraud, and also flags disposable email domains as risky.

IP Address insights show location details and potential risks. 

• Risky anonymization or traffic routing: The IP uses technology to conceal the user's identity (not always malicious)
• Unusual IP location patterns: A mismatch between the IP's location data and other associated metadata
• Suspected automated or bot activity: Signs of non-human usage
• Associated with risky or illicit behavior: Linked to dark web usage or illegal file sharing
• Potential residential proxy: The IP is fraudulently attempting to appear as a residential address