Click Install in the Square App Marketplace. Authorize Canary to read your transaction data. Canary ingests the past 30 days of transactions and begins analyzing immediately.
Chirp — our detection engine — evaluates every transaction in real time as it arrives via Square webhooks. 37 rules across 10 categories analyze refund patterns, employee behavior, timing anomalies, and velocity spikes.
Every alert links to the triggering transaction, the detection rule, the employee, and the severity grade. When you need to investigate, Fox provides structured case management with a complete evidence chain and documented resolution workflows.
| Rule | Trigger Condition | Default Severity | Category |
|---|---|---|---|
| Rapid Refund | Refund within 15 min of sale | High | Payment |
| Excessive Refund Rate | Refund rate >15% of shift transactions | High | Payment |
| Round Amount Pattern | 5+ round-dollar transactions per hour | Medium | Payment |
| After-Hours Transaction | Transaction outside business hours | Medium | Payment |
| Card Velocity | Same card 5+ times per hour | High | Payment |
| Split Tender Pattern | 3+ split-tender transactions per hour | Medium | Payment |
| High Value Refund | Single refund >$100 | High | Payment |
| Manual Entry Spike | 5+ keyed-in cards per shift | Medium | Payment |
| Square Delay Hold | Square flagged delay hold | Critical | Payment |
| Partial Authorization | Bank approved less than requested | High | Payment |
| No Sale Detected | Cash drawer opened, no transaction | High | Payment |
| No-Sale Abuse | 5+ no-sale drawer opens per shift | High | Cash Drawer |
| Cash Variance | Shift variance >$20 | High | Cash Drawer |
| Paid-Out Anomaly | Paid-out >$50 without override | Medium | Cash Drawer |
| After-Hours Drawer | Drawer opened after hours | Critical | Cash Drawer |
| Excessive Discount Rate | Average discount >50% | High | Order |
| Line Item Void Rate | Void rate >10% | High | Order |
| Sweethearting | Discount without approval >$20 | High | Order |
| Untendered Order | Order with no payment for 24+ hours | Critical | Order |
| Off-Clock Transaction | Transaction with no open timecard | Critical | Timecard |
| Break Transaction | Transaction during declared break | High | Timecard |
| Wrong Location | Clocked in at different location | High | Timecard |
| High Void Rate | 5+ voids per shift | High | Void |
| Post-Void Alert | Full refund of completed sale | Critical | Void |
| Gift Card Load Velocity | 3+ gift card loads per hour | High | Gift Card |
| Gift Card Drain | Full redeem immediately after load | Critical | Gift Card |
| Rapid Point Accumulation | 5+ point events per hour | Medium | Loyalty |
| Bulk Redemption | 5000+ points in single event | High | Loyalty |
| Cross-Location Velocity | 3+ locations in 2 hours | High | Loyalty |
| Enrollment Fraud | 10+ enrollments per day per employee | Medium | Loyalty |
| SRA Threshold Breach | Shrink risk >3% of sales | High | Composite |
| Dispute Created | New dispute filed | High | Dispute |
| Dispute Lost | Dispute lost — chargeback | Critical | Dispute |
| Dispute Velocity | 3+ disputes in 30 days | High | Dispute |
| Invoice Overdue | Past due, still unpaid | Medium | Invoice |
| Invoice Charge Failed | Scheduled charge failed | High | Invoice |
| High Value Invoice Unpaid | Unpaid invoice >$500 | High | Invoice |