Case Study | Technology

Enhancing Anti-Fraud Operations with Secure Cloud Architecture

Building a secure, multi-partner cloud platform that accelerated fraud detection and strengthened cross-industry collaboration.

Automated
 End-to-end fraud data ingestion, validation & distribution, replacing all manual processes

Multi-Account AWS  Isolated, secure environments for portal, ingestion, and distribution workloads

Real-Time Detection Accelerated fraud investigations through event-driven automation & partner API integrations

About the Customer

Stop Scams UK (SSUK) is a cross-industry organization dedicated to combating fraud and protecting consumers across the United Kingdom. It brings together some of the world’s most prominent companies from financial services, technology, and telecommunications, including Barclays, Amazon, Google, BT, and Three to tackle scams through collaborative intelligence sharing. By distributing actionable fraud intelligence to its member organizations and sector partners, Stop Scams UK works to prevent scams before they reach consumers, safeguard public trust, and strengthen the UK’s collective defenses against an increasingly sophisticated fraud landscape. As the organization’s member base and data volumes grew, it required a modern, cloud-native platform capable of meeting the demands of real-time, cross-sector fraud prevention at national scale. 

Customer Challenge

Stop Scams UK’s existing operations were heavily dependent on manual processes and email-driven communications. As SSUK expanded its member network and increased fraud data volumes, the limitations of this approach became critical operational risks. 

Scalability was the most pressing concern. Manual data handling did not support efficient scaling, meaning that as SSUK brought more member organizations and processed greater volumes of fraud signals, the system would buckle under load. Efficiency suffered equally. Email-based workflows introduced delays and human error into every stage of data processing, from initial ingestion through to distribution to partners. These delays created dangerous gaps between when fraud data was received and when it could be acted upon, gaps that sophisticated fraudsters exploit. Without automated validation, data integrity was also at risk: errors in fraud intelligence could either flood partners with false signals or, worse, allow genuine fraud patterns to go undetected. 

Finally, the existing system user interface and experience were not designed for the complex, high-stakes workflows required by fraud analysts and member organizations. Poor usability increased the cognitive load on operators, raised the likelihood of user error, and slowed down the response cycles that Stop Scams UK’s mission depended on. Without intervention, these compounding challenges, manual bottlenecks, scalability constraints, and poor usability, posed a direct threat to SSUK’s ability to scale its impact and maintain the trust of its high-profile member network. 

Partner Solution

10Pearls partnered with Stop Scams UK to design and deliver a fully automated, secure, and scalable fraud intelligence platform built entirely on AWS.  The architecture was deployed across multiple AWS accounts to provide strong environment isolation, fine-grained access control, and independent scaling of each functional layer, Portal, Ingestion, and Distribution. At the core of the solution: 

Automating End-to-End Fraud Data Ingestion and Processing

10Pearls replaced Stop Scams UK’s manual, email-driven workflows with a fully automated data pipeline built on AWS-native services.

  • Amazon ECS with Fargate orchestrated containerized microservices for fraud data ingestion and validation, enabling the platform to scale processing capacity automatically in response to incoming data volumes, with no manual intervention required
  • AWS Lambda handled event-driven serverless processing, executing validation logic, transformation routines, and automated triage of fraud signals in real time as data arrived from member organizations
  • Amazon S3 provided secure, durable object storage for raw fraud data inputs, processed outputs, and audit-trail records, with versioning and lifecycle policies ensuring both integrity and cost efficiency
  • Amazon SQS and SNS managed message queuing and event notifications across the platform, decoupling services to prevent bottlenecks and ensuring reliable, ordered delivery of fraud intelligence to downstream consumers

The automated pipeline eliminated the manual handoffs that had previously delayed fraud intelligence delivery.

Implementing Enterprise-Grade Security and Identity Management

Handling sensitive fraud intelligence on behalf of banks, telecoms, and technology partners required the highest standards of security, access control, and compliance. 10Pearls embedded security deeply into every layer of the architecture.

  • Amazon Cognito managed user authentication, identity federation, and role-based access control across all platform interfaces, ensuring that each member organization and operator could access only the data and functions appropriate to their role
  • AWS WAF (Web Application Firewall) protected all web-facing platform components from common exploits including SQL injection, cross-site scripting, and automated bot attacks, critical for a platform handling high-value financial fraud data
  • Multiple AWS accounts provided hard environment isolation between the Portal, Ingestion, and Distribution tiers, ensuring that a security event in one layer could not propagate to others
  • All data in transit and at rest was encrypted using AWS-native key management, with audit logs maintained for compliance and forensic purposes

The multi-account architecture gave each functional tier its own security boundary, IAM policies, and resource controls.

Enabling Scalable Data Management and Partner API Integrations

Effective fraud prevention at scale requires not only clean, reliable data storage but also the ability to share intelligence rapidly and securely with a network of external partners.

  • Amazon Aurora PostgreSQL served as the core relational database, managing all structured fraud intelligence records, member account data, and audit histories with high availability, automated failover, and point-in-time recovery
  • Amazon API Gateway provided a secure, scalable API management layer enabling SSUK to share fraud intelligence with external partners including Meta and LexisNexis, with fine-grained throttling, authorization, and usage monitoring on every API call
  • Standardized API contracts allowed member organizations to integrate SSUK’s fraud feeds directly into their own fraud detection systems, eliminating the manual data exchange steps that had previously introduced delays
  • API Gateway’s usage plans and API keys gave SSUK precise control over which partners could access which intelligence streams, at what volume, and under what authentication requirements

Amazon API Gateway transformed Stop Scams UK from a manual intelligence distributor into a real-time fraud data network.

Optimizing Platform Performance and Reliable Service Delivery

With member organizations across the UK depending on the platform for time-sensitive fraud intelligence, consistent performance and high availability were non-negotiable.

  • Amazon CloudFront served as the content delivery network for the platform’s web interfaces, ensuring fast load times for fraud analysts and member operators regardless of geographic location across the UK
  • AWS Application Load Balancer (ALB) distributed incoming web traffic across the containerized services, maintaining responsiveness during peak demand and preventing any single service instance from becoming a bottleneck
  • AWS Network Load Balancer (NLB) handled high-throughput network traffic for the ingestion and distribution tiers, delivering ultra-low latency routing for the data pipelines where processing speed directly impacts fraud detection outcomes
  • Amazon SES (Simple Email Service) replaced the ad-hoc email processes that had previously driven manual workflows, now handling automated alerts, member notifications, and system communications at scale with delivery tracking and compliance logging

By combining CloudFront, ALB, and NLB, 10Pearls ensured the platform could absorb traffic without performance degradation, keeping fraud intelligence flowing when it matters most.

Establishing Reliable DNS and Network Infrastructure

A platform serving regulated financial institutions requires a network foundation that is as dependable as it is secure.

  • AWS Route 53 provided highly available, scalable DNS services for the platform, managing public DNS records for all platform endpoints with health-check-based routing to ensure members are always directed to healthy service instances
  • Failover routing policies ensured that if a service endpoint became unavailable, DNS resolution automatically redirected traffic to healthy alternatives, maintaining platform accessibility with no manual intervention
  • Route 53’s integration with other AWS services enabled seamless, automated DNS updates as the architecture scaled and new service endpoints were provisioned

Route 53’s health-check-driven failover routing gave Stop Scams UK an always-on DNS layer.

Results and Benefits

The deployment of the AWS-native platform transformed Stop Scams UK’s operational capabilities. By replacing manual, email-driven workflows with fully automated ingestion, validation, and distribution pipelines built on Amazon ECS, AWS Lambda, SQS, and SNS, SSUK eliminated the processing delays that had previously slowed fraud intelligence delivery. Fraud signals are now received, validated, and distributed to member organizations in real time, giving banks, telecoms, and technology partners the timely intelligence they need to act before consumers are harmed. 

Security and compliance improved significantly across all data handling and member interactions. The multi-account AWS architecture, combined with Amazon Cognito identity management and AWS WAF protection, gave Stop Scams UK a platform that meets the stringent security requirements of its regulated financial services members. Every data access event is logged, every API call is authenticated and monitored, and every environment tier operates within its own secure boundary, providing the audit trail and access controls that member organizations require. 

The platform established a scalable, future-ready infrastructure for the cross-industry fraud prevention effort. With Amazon Aurora PostgreSQL managing fraud intelligence data at scale, Amazon API Gateway enabling programmatic partner integrations with organizations like Meta and LexisNexis, and a multi-account architecture that can absorb new member organizations and data sources without re-engineering the core system, Stop Scams UK now has the technological foundation to grow its impact across the UK — and to stay ahead of an evolving fraud threat landscape. 

About the Partner

10Pearls is an award-winning, AI-native digital development company headquartered in Washington, D.C., with delivery centers across the United States, Latin America, the United Kingdom, and Pakistan. 
The company specializes in product strategy, software engineering, data and analytics, cloud modernization, and AI solutions for clients across healthcare, energy, financial services, technology, and other industries. As an established AWS Partner, 10Pearls brings deep expertise in designing and delivering cloud-native solutions on AWS, helping enterprises migrate, modernize, and innovate at scale. 
10Pearls holds AWS Partner status and has a proven track record of delivering high-impact AWS engagements across data engineering, application modernization, and managed cloud services. 

Related case studies

Ready to get started?

Contact us today to learn how we can transform your products or ideas into scalable solutions that drive business value and growth.

Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.

Strictly necessary cookies

Strictly necessary cookies should be enabled at all times so that we can save your preferences for cookie settings.

Third-party cookies

This website uses third party tools such as Google Analytics to collect anonymous information such as the number of visitors to the site, and the most popular pages.

Keeping this cookie enabled helps us to improve our website.