// runnable playbook

gig worker payout fraud

platform payout redirect · tip skimming · ghost driver accounts — interim playbook until DoorDash/Uber parsers ship.

a guided path, not automation — each step opens a tool you run yourself; nothing uploads. progress is saved only in this browser.

// based on the curated pipeline

wraps the gig worker payout — processor kit preset — drop Stripe + PayPal + Venmo exports → normalize each processor → cross-correlate → report

methodology guide →worked example →full tool list + 1 more pipeline →

guided steps

0/6 done

01
evidence manifest generator
hash processor exports before normalization
open tool →methodology
your note (local only)
02
payment processor subpoena response normalizer stripe
normalize Stripe rows — payout redirect + ghost account patterns
open tool →methodology
your note (local only)
03
payment processor subpoena response normalizer paypal
normalize PayPal rows — tip skimming + unauthorized payout destination
open tool →methodology
your note (local only)
04
venmo transaction export forensic analyzer
parse Venmo transaction export — payout redirect + memo patterns
open tool →methodology
your note (local only)
05
fatcousin cross export ioc hash correlator
join shared account identifiers across processor exports
open tool →methodology
your note (local only)
06
case report generator
draft report linking payout redirect across payment processors
suggested options · title: gig worker payout fraud — processor assessment
open tool →methodology
your note (local only)

when you're done

export a run summary — a small JSON record of which steps you marked done, your notes, and a self-hash so the record can't be silently altered. it is your reproducibility note, not a per-tool receipt: each tool emits its own input→output receipt when you run it.