Gig Economy & Marketplace Fraud

async function verifyGigWorkerPhone(phoneNumber) {
  const response = await fetch('https://scamverify.ai/api/v1/phone/lookup', {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${process.env.SCAMVERIFY_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({ phone_number: phoneNumber }),
  });

  if (!response.ok) {
    throw new Error(`ScamVerify API error: ${response.status}`);
  }

  const result = await response.json();

  const isHighRiskVoip =
    result.signals.line_type === 'voip' && result.risk_score >= 40;
  const hasComplaints = result.signals.ftc_complaints > 0;
  const isRobocaller = result.signals.robocall_detected === true;

  // Tiered decision logic
  if (result.risk_score >= 60 || isRobocaller) {
    return {
      decision: 'REJECT',
      reason: result.explanation,
      riskScore: result.risk_score,
      signals: {
        lineType: result.signals.line_type,
        carrier: result.signals.carrier,
        ftcComplaints: result.signals.ftc_complaints,
        robocall: result.signals.robocall_detected,
      },
    };
  }

  if (isHighRiskVoip || hasComplaints) {
    return {
      decision: 'REVIEW',
      reason: 'Phone number requires additional identity verification',
      riskScore: result.risk_score,
      requireIdUpload: true,
      signals: {
        lineType: result.signals.line_type,
        carrier: result.signals.carrier,
        ftcComplaints: result.signals.ftc_complaints,
      },
    };
  }

  return {
    decision: 'APPROVE',
    riskScore: result.risk_score,
    monitoring: result.risk_score >= 20 ? 'enhanced' : 'standard',
  };
}

// Integration with your signup endpoint
app.post('/api/workers/register', async (req, res) => {
  const { phone, email, name } = req.body;

  const verification = await verifyGigWorkerPhone(phone);

  switch (verification.decision) {
    case 'REJECT':
      await logRejectedSignup({ phone, email, ...verification });
      return res.status(400).json({
        error: 'We could not verify this phone number. Please try a different number.',
        code: 'PHONE_VERIFICATION_FAILED',
      });

    case 'REVIEW':
      const account = await createAccount({
        phone, email, name,
        status: 'pending_verification',
        riskScore: verification.riskScore,
      });
      // Require government ID upload before activation
      return res.json({
        accountId: account.id,
        status: 'pending_verification',
        nextStep: 'id_upload',
        message: 'Please upload a government-issued ID to complete verification.',
      });

    case 'APPROVE':
      const approved = await createAccount({
        phone, email, name,
        status: 'active',
        riskScore: verification.riskScore,
        monitoringLevel: verification.monitoring,
      });
      return res.json({
        accountId: approved.id,
        status: 'active',
      });
  }
});

import requests
import os

def verify_gig_worker_phone(phone_number: str) -> dict:
    response = requests.post(
        "https://scamverify.ai/api/v1/phone/lookup",
        headers={
            "Authorization": f"Bearer {os.environ['SCAMVERIFY_API_KEY']}",
            "Content-Type": "application/json",
        },
        json={"phone_number": phone_number},
    )
    response.raise_for_status()
    result = response.json()

    is_high_risk_voip = (
        result["signals"]["line_type"] == "voip"
        and result["risk_score"] >= 40
    )
    has_complaints = result["signals"]["ftc_complaints"] > 0
    is_robocaller = result["signals"].get("robocall_detected", False)

    if result["risk_score"] >= 60 or is_robocaller:
        return {
            "decision": "REJECT",
            "reason": result["explanation"],
            "risk_score": result["risk_score"],
            "signals": {
                "line_type": result["signals"]["line_type"],
                "carrier": result["signals"]["carrier"],
                "ftc_complaints": result["signals"]["ftc_complaints"],
            },
        }

    if is_high_risk_voip or has_complaints:
        return {
            "decision": "REVIEW",
            "reason": "Phone number requires additional identity verification",
            "risk_score": result["risk_score"],
            "require_id_upload": True,
        }

    return {
        "decision": "APPROVE",
        "risk_score": result["risk_score"],
        "monitoring": "enhanced" if result["risk_score"] >= 20 else "standard",
    }