SForest

Fraud Prevention Policy

Fraud Prevention Policy

Effective Date: April 10, 2026

Jurisdiction: United States

1. Purpose and Scope

Slumbering Forest LLC ("SForest," "we," "us," or "our") is committed to preventing, detecting, and mitigating fraudulent activity on our platform. This Fraud Prevention Policy outlines our approach to:

  • Identifying and preventing fraudulent transactions and activities
  • Monitoring user accounts and financial transactions
  • Taking appropriate action when fraud is suspected
  • Cooperating with law enforcement and financial institutions
  • Protecting our users, payment processors, and SForest from fraud losses

This policy applies to all users of SForest, including our website (https://sforest.io), mobile applications, and all associated services.

2. Fraud Monitoring Methods

SForest employs a combination of automated and manual review processes to identify and prevent fraudulent activity:

2.1 Automated Monitoring

  • Transaction Pattern Analysis: Real-time analysis of transaction amounts, frequencies, and patterns to identify anomalies
  • Behavioral Analysis: Tracking user behavior, login patterns, and account access from new or unusual locations
  • Device Fingerprinting: Monitoring devices, device identifiers, and hardware signatures associated with accounts
  • IP Address and Geolocation Tracking: Analyzing IP addresses and geographic locations for suspicious patterns or impossible travel scenarios
  • Velocity Checks: Identifying rapid or unusual transaction volumes within short time periods
  • Machine Learning Models: Utilizing advanced algorithms to detect emerging fraud patterns and risk indicators

2.2 Manual Review

  • Compliance Team Review: Specialized compliance personnel review flagged transactions and accounts
  • Risk Assessment: Expert analysis of individual transactions and account behavior
  • Investigation: Detailed investigation of suspected fraudulent activity
  • Merchant/Provider Verification: Confirmation of merchant legitimacy and transaction details

3. Risk Indicators and Fraud Triggers

SForest monitors the following risk indicators that may trigger fraud investigation and preventive action:

  • Rapid or Unusual Transactions: Multiple transactions in quick succession or unusual transaction patterns
  • Failed Payments: Multiple failed payment attempts or cards being declined
  • Chargebacks: History of chargebacks, refund requests, or disputes
  • Large Transactions: Unusually large transactions compared to historical account activity
  • Mismatched Information: Billing address, shipping address, or cardholder information that does not match
  • Multiple Payment Methods: Multiple payment methods being used on a single account in a short timeframe
  • New Account Activity: High-risk activity on newly created accounts
  • Account Takeover Indicators: Sudden changes in login location, device, or password
  • Multiple Accounts: Multiple accounts created from the same device, IP address, or payment method
  • Unverified Account Information: Accounts with missing, incomplete, or suspicious information
  • Account Suspension History: Previous accounts associated with fraud or suspicious activity

3.3 User Behavior Indicators

  • Geographic Anomalies: Access from countries known for high fraud rates or impossible travel scenarios
  • VPN/Proxy Usage: Use of VPNs, proxies, or anonymization tools
  • Unusual Access Patterns: Access at unusual times or rapid changes in access patterns
  • Communication Anomalies: Suspicious email addresses, phone numbers, or communication patterns

4. Actions Taken Upon Suspicion of Fraud

When SForest suspects fraudulent activity, we may take one or more of the following actions at our sole discretion:

4.1 Immediate Actions

  • Transaction Suspension: Temporarily suspend or block a transaction pending review
  • Account Freeze: Temporarily restrict access to a user's account
  • Payment Hold: Place a temporary hold on funds or transactions
  • Notification: Contact the user via email, phone, or in-app notification to verify account activity

4.2 Investigation and Assessment

  • Review Initiation: Begin a formal fraud investigation
  • Evidence Collection: Gather and analyze transaction records, account information, and device data
  • Merchant/Provider Consultation: Contact merchants or payment processors for additional information
  • Third-Party Consultation: Consult with fraud prevention specialists or law enforcement as needed

4.3 Escalation and Resolution

  • Account Verification: Request additional identification or verification information
  • Pattern Analysis: Analyze patterns across multiple transactions or accounts
  • Risk Determination: Determine whether activity is fraudulent or legitimate
  • Remedial Action: Take appropriate action based on findings (see Section 4.4 below)

4.4 Remedial Actions

Depending on the severity and nature of suspected fraud, SForest may:

  • Remove Content: Delete or disable access to fraudulently obtained content or services
  • Revoke Transactions: Reverse fraudulent transactions and issue refunds
  • Account Suspension: Temporarily suspend the user's account pending resolution
  • Account Termination: Permanently terminate the user's account and access to SForest
  • Reporting: Report the fraud to relevant payment processors, merchants, and law enforcement
  • Claim Filing: File claims with appropriate financial institutions and merchants

5. Escalation Procedures

Fraud investigation follows an escalation protocol:

5.1 Escalation Levels

Level 1 - Initial Detection:

  • Automated or manual detection of suspicious activity
  • Initial review by fraud monitoring systems
  • User notification if appropriate

Level 2 - Fraud Team Investigation:

  • Detailed review by SForest fraud team
  • Collection of additional evidence
  • Decision on preliminary action (hold, suspension, etc.)
  • Internal documentation of findings

Level 3 - Compliance Review:

  • Review by SForest Compliance Officer
  • Assessment of regulatory implications
  • Determination of escalation to Legal or Law Enforcement
  • Documentation of compliance review

Level 4 - Legal and Law Enforcement Escalation:

  • Involvement of SForest Legal Team
  • Cooperation with law enforcement agencies (FBI, Secret Service, state law enforcement)
  • Reporting to financial institutions and payment processors
  • Potential civil or criminal proceedings

6. Record-Keeping and Documentation

SForest maintains comprehensive records of all fraud-related activities:

6.1 Record Types

  • Transaction Records: Complete records of all transactions flagged as suspicious
  • Investigation Records: Documentation of all fraud investigations, including findings and actions taken
  • Account Records: Account information, user data, and transaction history
  • Communication Records: Copies of communications with users, merchants, payment processors, and law enforcement
  • Decision Records: Documentation of decisions made regarding suspected fraud

6.2 Record Retention

  • Retention Period: Minimum of five (5) years from the date of the transaction or investigation conclusion
  • Legal Holds: Records subject to legal holds may be retained beyond the standard retention period
  • Secure Storage: All records are stored securely with appropriate access controls
  • Destruction: Records are destroyed securely after the retention period expires

7. Data Protection and Privacy

SForest processes fraud-related data in compliance with applicable privacy laws and regulations:

  • Fraud Prevention: Processing of personal data is necessary for fraud prevention and security purposes
  • Legal Compliance: Processing is required to comply with legal obligations under the Bank Secrecy Act (BSA), Financial Crimes Enforcement Network (FinCEN) regulations, and Office of Foreign Assets Control (OFAC) sanctions
  • Legitimate Interest: SForest has a legitimate interest in preventing fraud and protecting its platform, users, and payment processors

7.2 Data Minimization

  • Only data necessary for fraud prevention is collected and processed
  • Data is retained only as long as necessary for fraud prevention and legal compliance
  • Users are informed of fraud monitoring practices in our Privacy Policy

7.3 User Rights

  • Users have the right to request information about their personal data in our fraud prevention records
  • Users may challenge fraud determinations through our dispute resolution process (see Section 8 below)
  • Users' data is protected from unauthorized access or disclosure

8. Cooperation with Law Enforcement and Regulatory Agencies

SForest cooperates with US law enforcement and regulatory agencies in investigating fraud:

8.1 Agency Cooperation

  • FinCEN (Financial Crimes Enforcement Network): Reporting of suspicious activity and compliance with SAR (Suspicious Activity Report) filing requirements
  • OFAC (Office of Foreign Assets Control): Compliance with sanctions screening and reporting
  • FBI and Secret Service: Cooperation in criminal fraud investigations
  • State Law Enforcement: Cooperation with state attorneys general and law enforcement agencies
  • Payment Processors: Cooperation with Visa, Mastercard, American Express, and other payment networks

8.2 Information Disclosure

SForest will disclose user information to law enforcement and regulatory agencies:

  • When required by law, subpoena, search warrant, or court order
  • When we believe, in good faith, that disclosure is necessary to prevent fraud, criminal activity, or harm
  • In response to government requests made in accordance with legal process

9. Sanctions Screening and OFAC Compliance

SForest complies with Office of Foreign Assets Control (OFAC) sanctions regulations:

9.1 Screening Requirements

  • All users and transactions are screened against OFAC Specially Designated Nationals (SDN) lists
  • Transactions involving sanctioned countries or entities are blocked
  • SForest maintains records of all sanctions screening activities

9.2 Prohibited Transactions

  • Transactions with individuals or entities on OFAC SDN lists are prohibited
  • Transactions involving sanctioned countries or regions are prohibited
  • Users in or from sanctioned jurisdictions may be restricted from using SForest

10. Dispute Resolution and Appeals

Users who believe they have been incorrectly identified as engaged in fraudulent activity may dispute the determination:

10.1 Dispute Process

  • Notification: User receives notification of fraud determination and right to dispute
  • Submission: User submits written dispute with supporting documentation
  • Review: Dispute is reviewed by SForest fraud and compliance team
  • Decision: SForest issues written decision within 30 days of dispute submission
  • Appeal: Users may appeal the initial decision to SForest's Compliance Officer

10.2 Remedies

If a user's account was suspended or terminated in error:

  • Account access is restored
  • Any blocked transactions are processed
  • Any erroneous fees or charges are refunded

11. Governing Law

This Fraud Prevention Policy is governed by and construed in accordance with the laws of the State of Washington, without regard to its conflict of law provisions. SForest's fraud prevention practices are also governed by:

  • Bank Secrecy Act (31 U.S.C. § 5301 et seq.)
  • Money Laundering Control Act (18 U.S.C. § 1956 et seq.)
  • OFAC Regulations (31 C.F.R. Chapter V)
  • Washington State Consumer Protection Act (RCW 19.86)
  • Other applicable federal and state financial crimes laws

12. Modifications to This Policy

SForest reserves the right to modify this policy at any time to reflect changes in technology, fraud patterns, or legal requirements. Changes will be effective upon posting to the website. Your continued use of SForest following the posting of changes constitutes your acceptance of the revised policy.

13. Contact and Support

If you have questions about this Fraud Prevention Policy, believe your account has been incorrectly flagged, or wish to dispute a fraud determination, please contact:

[email protected]

For more information about SForest's legal policies, please see our Terms of Service, Privacy Policy, Acceptable Use Policy, and Financial Information Policies.

Last Updated: April 10, 2026