Demo
Verify a message against the demo tenant
This is the Fromenance communication provenance demo: a registered fraud alert from Northfield Bank (demo), a lure that imitates it, and the same public verify endpoint your customers would use. Paste either one and read the verdict, the locked wording, and the rule that produced it.
Northfield Bank (demo) verify page
Demo tenant: Northfield Bank (demo). Site key sk_pub_demo_northfield. Real API, real latency.
Registered message
This fraud alert was registered at send time to jane.doe@example.com. The footer carries the verify code twice on purpose.
Northfield Bank We noticed a card transaction Hi Jane, A purchase of $412.90 at ACME ELECTRONICS was made with your Northfield Bank Visa ending in 4471 on September 24 at 10:42 AM. If this was you, no action is needed. If you do not recognize this transaction, review it in the app or call the number on the back of your card. Review this transaction: https://www.northfieldbank.com/app/alerts/tx/98812?utm=email Thank you, Northfield Bank Fraud Team Not sure this email is from Northfield Bank? Forward it to verify@northfieldbank.com or enter code KX73-PQ9G at northfieldbank.com/verify. Reference: KX73-PQ9G Northfield Bank, Member FDIC. 100 Main Street, Northfield, VT 05663. Privacy: https://www.northfieldbank.com/privacyNorthfield Bank Urgent: your card has been temporarily restricted Hi Jane, A purchase of $412.90 at ACME ELECTRONICS was attempted with your Northfield Bank Visa ending in 4471 on September 24 at 10:42 AM and has been placed on hold. To avoid permanent suspension of your card, confirm your identity within 24 hours. Confirm your identity now: https://northfield-bank-secure.com/login?ref=8812 Thank you, Northfield Bank Fraud Team Not sure this email is from Northfield Bank? Forward it to verify@northfieldbank.com or enter code QF29-TH40 at northfieldbank.com/verify. Reference: QF29-TH40 Northfield Bank, Member FDIC. 100 Main Street, Northfield, VT 05663.
The reply never quotes the suspicious message or its links. It says only what the institution can stand behind: a registered communication matches, or no registered communication does.
What to try
- Verified
Paste the registered message with the recipient address left as jane.doe@example.com. The code resolves, the recipient matches, and the fingerprint is within threshold: rule
code+recipient+content. - Not verified
Paste the lure. Its code was never issued and its content is far from any registration for that recipient, so no rule matches (rule
no_match). Change the email on the registered message and the same code fails the recipient check (code:recipient_mismatch). Submit the code by itself with no address and it is treated as a copied footer (code:replay). - Known fraud
Not reachable from this page on purpose. Known fraud requires an analyst on the tenant to confirm a lure or add an indicator to the fraud list. Nothing a submission says can produce it.
The demo tenant is rate limited like any other site key. Submissions here are stored on the demo tenant with the same retention as production, so do not paste real customer messages.