Documentation

Shield Integrity Protection

Learn how LinkWrangler Shield protects your products from counterfeiting and supply chain diversion using advanced detection logic.

Detection Logic

Shield uses real-time analysis of scan events to identify suspicious patterns, counterfeits, and unauthorized distribution. Below are the primary threat types we detect.

Impossible Traveler

What it is: A single product item (identified by its Unique Serial Number) being scanned in two different locations that are physically impossible to travel between in the elapsed time.

How it works: We calculate the velocity between consecutive scans of the same serial number. If the product appears to move faster than 1000 km/h, it indicates the serial number has been cloned.

DETECT IF: speed(serial_A) > 1000 km/h

Ghost Products

What it is: Scans detected for serial numbers that do not legally exist in your production database.

How it works: (Technically referred to as Unknown Serial). If a scan occurs for a GTIN/Batch combination but the serial number is not found in our registry, it is flagged as a counterfeit "Ghost" product.

DETECT IF: serial_number NOT IN account_registry

Zombie Products

What it is: Scans detected for products that have been explicitly decommissioned or marked as destroyed.

How it works: (Technically referred to as Decommissioned Serial). If a serial number is marked as decommissioned in your inventory but continues to be scanned by consumers, it indicates stolen or diverted waste.

DETECT IF: serial_status == 'decommissioned'

Grey Market / Diversion

What it is: Authentic product being sold or scanned in a region where it is not authorized for sale.

How it works: Each production batch is assigned authorized countries. If a scan occurs outside this list, it is flagged as a diversion risk.

DETECT IF: scan.country NOT IN batch.authorized_countries

Serial Cloning

What it is: A single valid serial number that has been copied and printed onto multiple fake products.

How it works: We monitor the frequency and device diversity. If one serial is scanned more than 10 times by more than 5 unique devices, it is marked as a clone.

DETECT IF: scan_count > 10 AND unique_visitors > 5

Sample Units

What it is: Scans of products marked as samples or returns that should not be available for retail sale.

How it works: (Technically referred to as Sample Serial). If a serial number marked as a sample is scanned in a retail environment, it is flagged for investigation.

DETECT IF: serial_status == 'sample'

Using the Shield Dashboard

The Shield Dashboard provides a real-time visualization of your global product integrity.

Shield Dashboard
The global map visualizes both safe scans and detected threats in real-time.

Advanced Filtering

Drill down into specific threats using our advanced filter suite. You can filter by:

  • Product & Batch: Isolate issues to specific production runs.
  • Security Alert Type: Focus specifically on Clones, Ghosts, or Zombies.
  • Expiry Range: Monitor products nearing or past their end-of-life.
Dashboard Filters

Visual Modes

Switch between business and security perspectives using the Visual Display toggle:

  • Marketing (Safe): Shows only legitimate consumer engagement.
  • Security (Threats): Focuses exclusively on flagged threats and anomalies.
  • Both: A comprehensive view of all activity.
Alert Feed