Solution

Catch referral fraud before the credit clears.

One user farms ten referral bonuses. A team seat gets cloned across three Gmail aliases. Tellr links the accounts by device, network plus behavior and flags the chain before payout.

verdict.json
200 OK
{  "verdict": "block",  "score": 0.94,  "reasons": [    "device_cluster_id",    "shared_canvas_hash"  ],  "signals": 267}

88%

Recall on linked account clusters during launch programs.

$0

Wasted on referral payouts that never had a chance.

267

Signals scored on every signup, invite, and seat add.

How it works

Three quick steps wired through one single API call.

1

Send Tellr the invite event.

Hit the check API on signup, on invite acceptance plus on seat upgrade. Same shape every time.

2

We cluster the accounts.

Device, TLS fingerprint, behavior cadence. Tellr returns a cluster ID along with the verdict.

3

Block payouts on suspect chains.

Wire the cluster ID into your referral pipeline. Hold the bonus, open a review and pay clean traffic.

Signals we score

Every dimension covered by every single check.

Linking

88 signals
  • device_cluster_id
  • shared_canvas_hash
  • shared_tls_fingerprint
  • asn_history_overlap
  • session_cookie_reuse

Plus 83 more in this group.

Behavior

90 signals
  • typing_cadence_match
  • mouse_path_similarity
  • plan_velocity_24h
  • time_to_first_invite
  • referral_chain_depth

Plus 85 more in this group.

Identity

89 signals
  • plus_alias_family
  • normalized_email_match
  • phone_carrier_match
  • card_bin_repeat
  • org_domain_anomaly

Plus 84 more in this group.

267 signals in total. Every one of them computed by Tellr and every one of them in the response.

What teams get

Built for the people who actually ship the product.

Cluster IDs you can ship today.

Every verdict comes with a stable cluster ID. Use it in queries or use it in joins, with no black box involved.

Built for modern invite flows.

Check the inviter, the invitee plus the seat add with the same call. You get three verdicts under one contract.

Audit any payout you make.

Every cluster decision is replayable. Defend the legit users and recover from the fraud.

Policies live per project.

Stricter on payouts and looser on free seats. You own the trade off.

Pricing

Pay per request. No seats. No feature tiers.

One signal set. One verdict format. Pick a plan by how much signup traffic you protect each month.

Starter

For early stage products validating signup quality on the way to product market fit.

$0per month

50 checks per week included

Get started
  • 1,000 check API calls each month
  • 267 signals on every verdict
  • 7 day signal retention window

Starter includes

  • Browser SDK plus REST API access
  • Threat intel for Tor, cloud plus disposable email
  • One project paired with one environment

Pro

Most popular

For growing SaaS teams running real trial flows day in and day out.

$150per month

2,500 checks per month included

Get started
  • 2,500 check API calls each month
  • Rules engine paired with shadow mode
  • 30 day retention with webhooks included

Everything in Starter, plus

  • Custom rules tested in shadow mode
  • Signed webhooks streaming to billing or SIEM
  • Up to five projects with role based access

Business

For scaled products that want dedicated infrastructure plus a real SLA on every verdict.

$500per month

10,000 checks per month included

Get started
  • 10,000 check API calls each month
  • Dedicated infrastructure plus SLA
  • 12 month retention, bring your own storage

Everything in Pro, plus

  • Single tenant deployment option
  • SOC2 Type II report alongside a custom DPA
  • Named CSM with 24/7 incident response

For custom enterprise solutions contact us now so we can scope volume, deployment plus SLA against your traffic.

Wire it up just once and sleep right through the next attack.

Free for 50 checks a week on the Starter plan, upgrade only when you need more.