Set up Graph Intelligence

Before you start

Graph Intelligence is available as an add-on to select RiskOS™ enrichments. To use it, first add one of the following enrichments to your workflow:

• Sigma Identity Fraud
• Sigma First-Party Fraud
• Verify
• Verify Plus
• Email Risk (Only allows adding Graph Intelligence Standard)
• Phone Risk (Only allows adding Graph Intelligence Standard)

After you have confirmed that one of the above enrichments is in your workflow, you can add one of the following Graph Intelligence enrichments to your workflows:

• Graph Intelligence Standard
• Graph Intelligence Plus

For more details on the differences between these variations, see Graph Intelligence Standard vs Plus.

⚠️
Note:
When building/editing a workflow, it is possible to add Graph Intelligence Standard or Graph Intelligence Plus even if no required add-on enrichment is in the workflow yet. However, you won't be able to publish the workflow until a required enrichment has been added.
If you are missing a required enrichment, a warning message will be shown in the editor when saving the workflow.

How it works

Graph Intelligence provides additional signals that reflect how identity attributes relate to other entities within a broader network context.

These signals can help surface patterns such as reuse, connectivity, or unusual relationships that may indicate elevated fraud risk.

Graph Intelligence outputs

Graph Intelligence returns structured features associated with identity attributes evaluated in the request.

• Features are grouped by attribute type (for example: phone or national id).
• Each group may include multiple signals describing observed relationships or activity patterns.
• Most features are numeric and can be incorporated into workflow logic as part of a broader risk strategy.

Not all features are available for every evaluation. Availability depends on the inputs provided and the context in which they are evaluated.

Using Graph Intelligence in workflows

You can reference Graph Intelligence outputs when defining Conditions in your workflow to support routing decisions such as review, escalation, or additional verification.

Graph Intelligence outputs are intended to complement other enrichment outputs and should be interpreted in context rather than used in isolation.

Considerations

• Graph Intelligence signals are only available for attributes included in the request and successfully evaluated.
• Some signals may be unavailable or incomplete when limited historical context exists for a given attribute.
• Results may vary over time as new information becomes available.

Updated 3 months ago