RockWallet / MNEE App blocks device-based and large-scale fraud attacks with Sardine
RockWallet / MNEE App is a U.S.-based fintech platform that enables customers to buy, sell, store, send, receive, and swap digital assets alongside regulated fiat payment services. Designed to make crypto accessible to both new and experienced users, the platform combines a simple user experience with regulated fiat on-ramps, including card and bank transfers. That combination of regulated fiat on-ramps, self-custodial security, and expanding payment capabilities makes comprehensive fraud and compliance controls foundational to the business.
Based on a customer referral, RockWallet / MNEE App selected Sardine to stand up an anti-fraud and compliance program from scratch. Using Sardine’s solutions, the team quickly reduced fraud across payments, identity verification, and chargebacks.
Over time, RockWallet / MNEE App expanded its program to include rules-based scoring, device intelligence, behavioral biometrics, and sanctions screening to support growth without increasing risk.
The challenge
When RockWallet / MNEE App began adding fiat payment options to its crypto platform, the team was starting from scratch. Fraud prevention quickly became a priority. With contractual obligations to keep chargebacks below 1%, building an in-house fraud detection system was not a viable option. RockWallet / MNEE App needed a provider that could ensure clean, verified traffic through the payment flow and support a fast launch.
In addition to chargeback risk, RockWallet / MNEE App needed stronger controls to detect device tampering, emulator use, and other high-risk behaviors during identity verification and card-funded transactions. RockWallet / MNEE App made a deliberate call not to launch fiat payment rails until fraud controls were in place. Sardine integration ran in parallel with the payment provider rollout, so the team could go live without leaving gaps.
Why Sardine: Data insights and product breadth
After a competitive analysis of fraud prevention tools, RockWallet / MNEE App chose Sardine for the ability to build on top of its controls and go beyond transaction-only signals. Sardine provided rich, end-to-end device and behavioral data for rule creation, along with ongoing monitoring and reporting across identity verification and payment flows.
The program started with data sharing through APIs, and RockWallet / MNEE App has continued embedding Sardine’s SDK at key points in the customer journey, including transactions and KYC, as the program matures. What began as a competitive selection several years ago has since grown into one of Sardine's deeper platform partnerships.
The results: Fraud and risk management
- Kept chargebacks below 1%. Through tailored risk rules aligned to business needs, chargeback activity was reduced by approximately 35% year-over-year, with the chargeback rate maintained well below the 1% threshold throughout the period.
- Blocked bot-driven attacks using device intelligence. Over 23,000 fraudulent account signups were blocked during a single coordinated bot attack, leveraging device intelligence signals to identify and stop automated threats in real time.
- Built a system of checkpoints to monitor account signups and suspicious transactions. New fraud rules are backtested across 40 days of live ACH data before deployment, achieving approximately 90% rule precision.
- Rules targeting organized fraud patterns have successfully mitigated attacks through automated blocks.
After integrating with Sardine, RockWallet / MNEE App quickly identified patterns of suspicious behavior. Fraud tactics change frequently, so the fraud and compliance teams implemented a responsive scoring system that could adapt to new attacks, including short-lived spikes and automated bursts that transaction data alone would have missed. By adjusting scores and rules, RockWallet / MNEE App could stop fraud based on specific risk scenarios.
Fraud in this category is a cat-and-mouse game. RockWallet / MNEE App used Sardine to spot patterns early, then adjust scoring and group rules quickly as tactics changed. This agility proved essential when addressing region-specific fraud patterns. The team developed custom rules to intercept localized threats by combining geofencing with identity and payment signals, allowing RockWallet / MNEE App to isolate and block regional fraud rings without impacting legitimate users.
Beyond these technical signals, the team implemented Sardine’s specialized rules that help protect vulnerable customers even in the absence of immediate risk signals. These allow RockWallet / MNEE App to proactively shield at-risk users, such as elderly customers, from social engineering and “guided” scams. By monitoring subtle behavioral cues that indicate a user may be acting under someone else’s direction, the system detects a scam in progress even when no immediate technical risk is present.
To maintain this level of protection, Sardine provided RockWallet / MNEE App with a series of integrated checkpoints that monitor the full customer lifecycle. By capturing data across every touchpoint from account creation and funding to logins and payments, the system identifies account takeover attempts in real time. These checkpoints analyze over 6,000 risk signals, including behavioral biometrics that detect guided mouse movements or the use of remote access tools. This real-time, pre-authorization scoring ensures that if a fraudster bypasses one gate, the next checkpoint can detect the inconsistency before a transaction is finalized.
“The device data is extremely handy. The fraud attack started with us picking up device spikes. Then we started diving deeper and deeper with Sardine and were able to find something else happening.”
Fraud responds to economic incentives, which is why RockWallet / MNEE App now focuses on increasing the cost of an attack through layered controls. The team codifies repeated patterns of suspicious behavior into formal rules. By layering these human-vetted gates rather than relying on single technical checks, RockWallet / MNEE App ensures that sophisticated attacks become too resource-intensive to sustain.
A clear example of this approach occurred during a coordinated bot attack involving hundreds of accounts. While the attackers attempted to mimic legitimate registrations, Sardine’s Device Intelligence flagged subtle technical inconsistencies in the device telemetry that real customer hardware would not exhibit. After seeing the pattern recur, RockWallet / MNEE App codified the signal into a formal rule to block the emulator-driven automation before it could bypass the final payment gates.
“The hardest part of fraud in this space isn’t stopping attackers, it’s doing that without stopping legitimate customers. Sardine’s rules engine gave us the precision to build layered controls that are genuinely targeted.”
"Maintaining a sub-1% chargeback rate while actively onboarding new customers in crypto is genuinely hard. RockWallet has done it consistently, and they've done it using Sardine's device intelligence and rules engine to catch things transaction data alone would have missed, from emulator-driven bot attacks to region-specific fraud rings. What we've built together over the past several years is a program that actually gets harder to beat as it matures. When they saw hundreds of fraudulent signups in a single attack, they didn't just block it, they turned it into a permanent rule. That's the kind of discipline, and the kind of partnership, that compounds over time."
Moving forward
Together, RockWallet / MNEE App and Sardine built a comprehensive fraud strategy that kept chargebacks below 1% while continuing to onboard new customers. Even when downstream partners notice a spike, RockWallet / MNEE App’s team is already aware of the event in advance. Sardine helps keep the team in the know, so they can take a proactive approach rather than reacting after the fact.