Book a demo
Fraud forensics for Indian lenders · beta

The paperwork is only half the story.

Rimor reads the other half: the phone, its integrity, and the behaviour of whoever filled the form. Every score comes with the evidence behind it.

Book a demo Try it in your browser
Beneath the formshadow
Application
BL-48213
Fraud risk
0.87 high
  • Emulatorsdk_gphone64 · ranchu
  • Pasteincome pasted, 0 keys
  • Rhythm41 ms ± 3, no corrections
  • Deviceon 4 other applications today
Illustrative. In shadow mode nothing is sent back to the app.
8
integrity checks, each with the evidence that fired
~70
behaviour features per application
0
runtime permissions asked
½ day
to integrate
One SDK, inside your loan app

Three layers of evidence. Proof before any decision.

Device integrity

Is this a real, untampered phone?

  • Root
  • Hooking
  • Emulator
  • Debugger
  • App cloning
  • Screen overlay
  • Remote access
  • Mock location

Device intelligence

Have we seen this phone before?

  • Hardware fingerprint
  • Install ID
  • Build and patch
  • Developer options
  • USB debugging
  • SIM country
  • Network type
  • VPN

Behaviour

Did a person fill this in?

  • Typing rhythm
  • Hesitation
  • Paste and autofill
  • Corrections
  • Touch pressure
  • Swipe dynamics
  • Motion
  • Field order

Never collected: SMS, call logs, contacts, photos, location, phone number, IMEI, installed apps, or the characters anyone types.

Every signal, explained
Half a day
for one Android developer. Four calls, no third-party dependencies, Android 7 and up.
No permissions
asked of the applicant. Nothing Google Play bans for personal loan apps.
10 to 20 KB
per finished application, sealed and sent in the background.
Never crashes
the host app. One retry if the network drops, and every loss is counted.
LoanActivity.kt
// when the applicant starts
Forensics.start(context, applicantRef, consent)
Forensics.attach(this)

// when they submit
uploader.send(Forensics.snapshot(), consent, leadId)
Forensics.endSession()
How integration works

Your lending policy stays. Our work earns its place.

  1. 01Day 1

    The SDK goes into a staging build, with consent copy in your journey.

  2. 02Weeks 1 to 8

    Every application is scored in silence. Applicants and decisions don't change.

  3. 03As loans mature

    Scores are joined to outcomes such as DPD 30, through hashed application IDs.

  4. 04Readout

    Fraud caught at your review budget, good customers flagged by mistake, and what didn't work.

How a shadow pilot runs

Stored in India

Borrower data, backups and server logs stay in India.

Sealed at rest

AES-256-GCM on every upload, keys outside the database.

Hashed IDs

Your application ID is kept only as a keyed hash.

Consent first

No consent receipt, no upload. The server refuses it too.

Timing, never text

Typing is measured. What anyone types is never read.

Deleted on time

Raw data is deleted after 180 days by default.

Read the security overview
Try it

Same form. Different story.

Fill it the way you normally would, then let a bot have a go. This runs only in your browser, and it never reads what you type.

loan applicationnothing leaves this page

Type as you normally would. Then try pasting a number into income, or let a bot fill the form and compare.

Live readoutruns in your browser
Verdict
Waiting for input
Keys
0
Rhythm
no data
Pastes
0
Input source
none yet
Gaps between keys, last 32
Evidence
  • Nothing yet.
Where we are

Built in the open. Clear about the stage.

Our first lending partner has the SDK and is integrating it for a shadow pilot. Here is what runs today and what follows.

Now

live in beta
  • Android capture SDK 0.3.1
  • Sealed capture into India
  • Raw evidence log per application
  • Daily data health report

Next

building
  • Scores trained on your outcomes
  • Real-time decision API
  • Play Integrity attestation
  • Document and selfie forensics

Later

planned
  • Device graph for fraud rings
  • iOS and web SDKs
  • Case files and audit exports
  • Deployment in your cloud

Run Rimor in shadow on your next 10,000 applications.

One SDK, no change to your decisions, and a straight answer on whether it helps.

Book a demo See the product