gig worker payout fraud — quick-start

checklist

1. lock or revert payout destination on the platform account — redirect often precedes bulk skim.
2. export platform earnings and payout history from the driver app or support ticket — csv/screenshots until native parsers ship.
3. pull stripe connect or payout subpoena response — normalize transfers and destination account changes.
4. pull paypal subpoena or transaction export — correlate payout rails the platform may use.
5. export venmo transaction history — mobile artifact or account export; tip skimming routes here.
6. inventory cash app or secondary payout apps if the victim switched rails — ios artifact or export.
7. compare declared tips vs in-app earnings statements — flag tip skimming deltas week over week.
8. list ghost driver accounts sharing payout destination, device, or bank routing — duplicate identity signals.
9. hash every export sha-256 and build an evidence manifest before cross-correlation.
10. begin the primary tool path below — stripe/paypal/venmo normalizers until doordash/uber parsers ship.

primary tools

1. 01payment processor subpoena response normalizer stripedrop stripe subpoena response · parse merchant + transaction artifacts · runs locally
2. 02payment processor subpoena response normalizer paypaldrop paypal subpoena response · parse account + transaction artifacts · runs locally
3. 03venmo transaction export forensic analyzerdrop venmo download · parse payment timeline + notes · runs locally
4. 04ios venmo artifact forensic extractordrop iOS Venmo database files from the app container · parse payment records and transaction notes · surface audience settings (public/friends/private) · surface social feed likes and comments on transactions · reconstruct Venmo financial and social activity timeline · runs locally
5. 05case report generatorfill in case number · examiner · dates · findings · drop evidence files for auto hash · generates structured forensic report PDF · runs locally

go deeper