Risk Monitor · Fraud Intelligence · Mauritius

POS Fraud Monitoring for Mauritius Restaurants.
Every Cashier Refund Attempt Tracked. Flagged. Controlled.

Webymind Risk Monitor is the refund control and fraud intelligence layer built into your POS. Management defines daily cashier refund limits. The system records every attempt, issues warnings when behaviour becomes risky, blocks attempts that exceed configured thresholds, and maintains a complete audit trail — so every suspicious action is visible, accountable, and traceable.

🚫 Refund Safety Limits 📋 Attempt Audit Trail 👤 Cashier Flagging 🔑 Admin Override 📊 Risk Scoring
Webymind Risk Monitor
3
High Severity
7
Medium Severity
2
Cashiers Flagged
Total Attempts 18
Attempt Log — Today
Rs 485 — Jean-Pierre BLOCKED
3rd attempt · Limit exceeded · Score +2
Rs 120 — Marie OK
Manager-approved · Within daily limit
⚠️ 1 cashier flagged — Jean-Pierre — Score: 7 — Admin review recommended
What Is Risk Monitor?

Your Restaurant's Refund Control
and Fraud Intelligence Layer.

Every restaurant that handles refunds at the POS faces a silent risk: unmonitored cashier refund activity. Without rules, limits, or an audit trail, a cashier can process excessive refunds, void orders without proper accountability, or exploit the refund mechanism in ways that slowly drain revenue — without the owner ever noticing until the damage has compounded.

Webymind Risk Monitor is the dedicated refund control and fraud intelligence module built into your POS. Management defines the rules. The system enforces them automatically, records every attempt, and flags when behaviour falls outside normal operating patterns. You, the owner, stay in control — even when you are not at the till.

  • Admin-defined cashier refund limits — management controls who can refund how much and when
  • Rule-based risk monitoring — every refund attempt checked against configured safety policy
  • Warning and block logic — system issues warnings before escalating to hard blocks
  • Complete attempt audit trail — every action logged with user identity, time, and outcome
  • Cashier risk scoring and flagging — repeated unusual behaviour surfaced automatically
  • Admin override authority — management always retains full control for exceptional cases
Risk Monitor covers
🚫Refund Safety Limits · Per Role
📋Attempt Audit Trail · Full Log
👤Cashier Risk Scoring · Flagging
📊Severity Classification · Review
🔑Admin Override · Full Control
⏱️Period Filters · Custom Review
Everything visible in one owner dashboard. No manual log searches. No guesswork. Clear accountability on every refund action across every shift.
Admin-Defined Refund Safety Limits

Management Defines the Rules.
The System Enforces Them.

The most powerful part of Webymind Risk Monitor is not the detection — it is the prevention. Before any suspicious behaviour occurs, management can define exactly how much refund activity is acceptable per cashier role. Set a daily refund threshold. Configure at what level a warning triggers. Configure at what level the system blocks further attempts. Cashiers operate within the policy defined by management — automatically and without requiring manual supervision at the till.

One critical rule is always in effect: the Admin role always bypasses cashier refund limits. When a legitimate exceptional refund is needed outside configured policy, an administrator can process it without restriction — while the attempt is still fully logged in the audit trail.

  • Daily refund threshold per cashier role — configurable by management from the admin dashboard
  • Warning trigger level — system issues a warning when refund volume approaches the defined threshold
  • Block trigger level — further refund attempts blocked when daily limit is reached or exceeded
  • Different limits by role — Cashier, Supervisor, and Manager can each have separate configurations
  • Admin role always bypasses all limits — full override authority retained for exceptional operational needs
🚫 Refund Safety Policy — By Role
Role
Daily Max
Warning
Block
Cashier
Rs 500
Rs 300
Rs 500
Supervisor
Rs 1,500
Rs 1,000
Rs 1,500
Manager
Rs 5,000
Rs 3,500
Rs 5,000
🔑 Admin ✓ BYPASS ALL — No limit applies
All thresholds are fully configurable from the admin dashboard. Values above are illustrative examples — your management sets the actual policy for your restaurant.
Rule-Based Risk Monitoring Logic

When a Refund Happens,
The System Checks. Records. Acts.

Webymind Risk Monitor operates continuously in the background during every shift. Every refund action — whether it completes, triggers a warning, or is blocked — is processed through the configured safety rules without any manual management intervention. The intelligent fraud monitoring logic compares each event against policy, updates the cashier's risk score in real time, and surfaces any escalation in the owner dashboard immediately.

  • Every refund attempt captured — cashier identity, amount, order reference, timestamp, and event type
  • Checked against role-based safety rules — compared against the per-role daily refund threshold
  • Warning issued when volume approaches threshold — cashier and manager notified
  • Attempt blocked when limit is reached — blocked event still logged in full detail
  • Risk score updated per cashier — repeated unusual behaviour automatically escalates to flagging
How each refund attempt is processed
1
Refund action attempted at POS
Cashier initiates a refund or void. Event captured instantly by Risk Monitor.
2
Checked against configured safety limits
System reads the cashier's role-based daily refund policy and compares against current totals.
3
Warning issued if approaching limit
Medium severity event logged. Cashier and manager alerted. Risk score incremented.
4
Attempt blocked if limit exceeded
High severity event logged. Attempt refused at till. Risk score updated. Admin notified.
5
Cashier flagged if score threshold reached
Score ≥ 5 or 2+ blocked attempts triggers cashier flag. Owner dashboard alerted immediately.
All steps happen automatically. No manual monitoring required. Every event is recorded regardless of outcome — completed, warned, or blocked.
Refund Attempt Audit Trail

Every Action Logged.
Nothing Hidden. Nothing Lost.

One of the most valuable functions of Webymind Risk Monitor is not what it blocks — it is what it records. Every refund-related action, whether it completed successfully, triggered a warning, or was blocked entirely, is logged in the Refund Attempt Audit Trail with complete identifying information. This creates a permanent, tamper-free operational record that protects the restaurant owner, provides accountability for every cashier action, and eliminates the ambiguity that makes refund-based manipulation so difficult to detect in restaurants without audit tools.

  • Cashier / user identity — every log entry attached to the individual who initiated the action
  • Timestamp — exact date and time of every refund attempt, warning, or block event
  • Amount — refund value for every logged event, regardless of outcome
  • Order / transaction reference — every entry linked to the original transaction for full traceability
  • Severity outcome — High, Medium, or Normal classification visible immediately per entry
📋 Refund Attempt Audit Trail
Refund — Rs 485 — Jean-Pierre HIGH · BLOCKED
14:32 · Order #1089 · 3rd attempt today · Daily limit Rs 500 exceeded
Refund — Rs 320 — Jean-Pierre MED · WARNING
13:07 · Order #1072 · 2nd attempt today · Approaching daily limit
Refund — Rs 120 — Marie NORMAL · OK
12:24 · Order #1058 · Manager approved · 1st attempt today
Refund — Rs 1,800 — Admin ADMIN · BYPASS
10:18 · Order #1034 · Admin override — policy exemption logged
💡 All entries are read-only. No audit log entry can be deleted or modified after recording — permanent accountability trail.
Severity Classification System

Four Risk Metrics That Tell You Exactly What Is Happening.

The Risk Monitor dashboard surfaces four key indicators that give the restaurant owner an immediate operational picture — without needing to read through every individual log entry manually.

🔴

High Severity — Blocked Attempts

A High Severity event means a refund attempt was blocked by the system because it exceeded the configured daily limit for that cashier role. The refund did not complete. The event is logged with full details and increments the cashier's risk score. Each blocked attempt is a direct signal that the policy is working — or that a cashier's behaviour requires immediate management attention.

⚠️

Medium Severity — Warnings Issued

A Medium Severity event means a refund proceeded, but the cashier's cumulative daily refund value crossed the warning threshold. The attempt completed, but the system recorded a risk event and updated the cashier's score. Medium alerts allow management to monitor and intervene before behaviour escalates to a blocked event.

👤

Cashiers Flagged — Score Threshold

A cashier is flagged when their risk score reaches 5 or higher, or when they record 2 or more blocked attempts within the review period. Flagged cashiers are surfaced prominently in the owner dashboard — not buried in the full attempt log. This gives management a clear, actionable signal about which staff require closer review.

📊

Total Attempts — Full Activity Count

Total Attempts counts every refund-related event processed through the Risk Monitor during the selected review period — regardless of severity or outcome. This gives context to the severity ratio. High total attempts with low severity indicates healthy operations. A growing High Severity count against Total Attempts signals a personnel or policy issue that needs attention.

Cashier Flagging & Risk Scoring

Identify Risky Patterns
Before the Damage Compounds.

The most effective fraud protection is not reactive — it is early detection. Webymind's cashier risk scoring tracks refund-related behaviour and accumulates a score per cashier across the review period. This score does not reset after each event — it builds over time, so patterns of repeated borderline behaviour are visible even when no single event crosses the block threshold on its own. Management receives a clear, early signal about which cashiers need closer review before losses become structural.

  • Risk score accumulates per cashier across the entire selected review period
  • Cashier flagged automatically when score reaches 5 or when 2+ block events are recorded
  • Flagged cashiers surfaced prominently in dashboard — not buried in the full attempt log
  • Pattern tracking persists across shifts — repeated borderline behaviour visible without a single hard block
  • Per-cashier drill-down — view full attempt history for any flagged staff member in one click
👤 Cashier Risk Score — Today
Jean-Pierre FLAGGED
Score: 7 · 3 blocked · 2 warnings Admin Review Needed
Priya WATCH
Score: 3 · 0 blocked · 2 warnings Monitor
Marie NORMAL
Score: 0 · 0 blocked · 0 warnings · All activity within policy
💡 Score ≥ 5 or 2+ blocked attempts triggers automatic flagging. Owner dashboard alerted immediately.
Flexible Review Periods & Filters

Review Any Period. Filter Any Cashier.
See Exactly What You Need.

Investigating a suspicious refund pattern is not always about today. Webymind Risk Monitor gives management the ability to review any period of refund activity — from a single shift to the full operational history. Combined with per-cashier and per-severity filters, owners can isolate exactly the refund activity they need to review without manually searching through general transaction logs.

  • Review period: Today, Last 7 Days, This Month, All Time, or Custom date range
  • Filter by cashier — view all refund activity for a specific staff member across any period
  • Filter by severity — view only High, only Medium, or all attempts in one filtered view
  • Filter by event type — refund, void, discount action, or any combination
  • Export available — full filtered audit log for offline review or dispute documentation
Review Period Selector
Today Last 7 Days This Month All Time Custom
Filter By
Cashier Jean-Pierre ▾
Severity High ▾
Event Type All Types ▾
Filtered results update instantly. No waiting for a report export. Results owned by admin without delay.
Built for Mauritius Restaurants

Multi-Cashier Environments Need
More Than a Basic POS Log.

Mauritius restaurants operate in an environment where refund risk is real and often invisible. Tourist-heavy locations generate split billing, partial refunds, and complex transaction patterns across multiple cashiers during a single service. Restaurants near Grand Baie, Flic en Flac, and beachside venues regularly handle refund scenarios that genuinely test cashier honesty and management oversight. Without a dedicated audit trail and refund policy enforcement tool, the owner is trusting by default — with no way to detect a problem until the month-end figures show unexplained shortfalls.

  • Multi-cashier operations — multiple staff processing refunds across different terminals simultaneously
  • Tourist split billing — complex patterns that create pressure-tested refund scenarios at peak service
  • Peak service pressure — busy lunch and dinner periods where manual oversight is not realistic
  • Refund misuse risk — without limits and an audit trail, manipulation can go completely unnoticed
  • Fully automated protection — the system works in the background across every shift, every day
❌ Without Risk Monitor
  • No refund limits at the till — cashiers can process unlimited refunds with no restriction or warning throughout the shift
  • No dedicated audit trail — refund activity only visible in the general transaction log with no severity context or flagging
  • No risk scoring — no way to identify which cashiers have unusual refund patterns over time before damage compounds
  • No cashier flagging — suspicious behaviour remains invisible until a formal investigation is manually triggered
  • No structured admin override — legitimate exceptional refunds handled exactly the same way as suspicious attempts with no distinction
Risk Monitor Dashboard

Complete Refund Intelligence.
One View. Any Device. Live.

The Webymind Risk Monitor owner dashboard brings every refund signal together — severity totals, flagged cashiers, full attempt log, and policy status — in one live view accessible from any device, from anywhere in Mauritius.

🚫

Refund Safety Policy View

View and manage the active refund safety policy directly from the dashboard. See per-role daily limits, warning thresholds, and block thresholds at a glance. Adjust policy in response to operational needs — changes take effect immediately across all active POS terminals.

📋

Full Attempt Audit Log

The complete attempt log with period selectors and filters. Every refund event — completed, warned, or blocked — visible in chronological order with cashier identity, amount, order reference, timestamp, and severity outcome. No information missing from any entry.

🔴

High Severity Alert Panel

Blocked attempts surfaced in a dedicated High Severity panel. Each entry shows which cashier was blocked, the amount, the order reference, and the exact time — giving management targeted visibility over the most critical refund events without reviewing the full log.

👤

Cashier Score Summary

Per-cashier risk score and flag status visible in one summary view. Flagged cashiers shown prominently at the top. Drill into any cashier's full attempt history across any period to understand exactly what behaviour pattern drove their current risk classification.

📊

Period Summary Statistics

High Severity total, Medium Severity total, Cashiers Flagged count, and Total Attempts — all updated live for the selected review period. Provides immediate operational context without requiring manual log review to understand the overall refund risk picture.

🔑

Admin Override & Policy Controls

Management retains full control at all times. Adjust refund policies, review flagged cashiers, approve exceptional cases, and maintain operational flexibility — all from the secure admin-only section of the Risk Monitor dashboard. Every admin action is also logged.

Risk Monitor FAQ

Every Question About Refund Safety

Honest answers to what Mauritius restaurant owners ask before implementing cashier refund controls with Webymind Risk Monitor.

Can management define cashier refund limits? +
Yes — management can define daily refund limits per cashier role directly from the admin dashboard.

Configure how much a Cashier, Supervisor, or Manager can refund per day. Set the warning threshold — the amount at which the system begins issuing alerts. Set the block threshold — the amount at which further refund attempts are refused. All thresholds are configurable and take effect immediately across all POS terminals. No coding or technical support required.
Can admin override refund restrictions? +
Yes — the Admin role always bypasses cashier refund limits by design.

When an exceptional case arises that genuinely requires a refund above the configured cashier policy, an administrator can process it without restriction. This is not a workaround — it is a deliberate and essential design feature that keeps the system operationally flexible for management. Critically, even admin-override events are fully logged in the audit trail with the same detail as any other attempt, so the owner always has a complete record of every exceptional action taken.
What happens when a cashier exceeds their refund limit? +
The attempt is blocked at the POS terminal and recorded as a High Severity event in the audit trail.

The cashier is unable to complete the refund. The event is recorded in the Refund Attempt Audit Log with their identity, the amount attempted, the order reference, and the timestamp. The cashier's risk score is incremented. If this is the second blocked attempt, the cashier is automatically flagged and the owner dashboard is alerted. Management can then review the full attempt history and decide on the appropriate response.
Are refund attempts logged even when they are blocked? +
Yes — every attempt is logged regardless of whether it completed, received a warning, or was blocked.

The audit trail is comprehensive and non-selective. Completed refunds, medium-severity warned events, high-severity blocked events, and admin-override events all appear in the full log with identical detail. This is essential for the integrity of the audit trail: a system that only logs successful actions cannot detect patterns of repeated blocked attempts — which is precisely the behaviour pattern that indicates a problem.
How are suspicious cashiers flagged? +
The system flags a cashier automatically when their risk score reaches 5 or when they record 2 or more blocked attempts.

The risk score accumulates across the review period — it does not reset after each event. This means a cashier who repeatedly approaches the warning threshold without formally crossing the block limit will still accumulate a score over time. Flagged cashiers are surfaced prominently in the owner dashboard alongside their total score, blocked count, and warning count — giving management an immediate, contextualised picture without needing to perform manual log analysis.
Can I review refund attempts by time period? +
Yes — Risk Monitor supports flexible period-based review: Today, Last 7 Days, This Month, All Time, and Custom date ranges.

Each period view updates all dashboard statistics, severity counts, cashier scores, and the full attempt log simultaneously. You can also filter within any period by cashier name, severity level, or event type — allowing you to isolate exactly the activity you need to investigate. This is particularly useful when responding to a customer complaint, reviewing a cashier's performance over a specific period, or preparing documentation for an internal review.
Is Risk Monitor useful for multi-cashier restaurants? +
Yes — it is specifically designed for restaurant environments with multiple cashiers operating simultaneously across one or more terminals.

When several cashiers are active at the same time, manual oversight of refund behaviour becomes practically impossible for a single manager or owner. Risk Monitor automates this layer completely: each cashier's refund activity is tracked independently, scored independently, and flagged independently. The owner sees a consolidated dashboard view across all cashiers — with individual drill-down available for any staff member. Multi-cashier restaurants get the accountability layer that was previously only achievable through intensive and unreliable manual monitoring.
Free Trial

Start Your Free Trial Today

No commitment. No credit card. Your complete Webymind ERP & POS system active within 24 hours. Supported by our Grand-Baie team every step of the way.

📍 Grand-Baie, Mauritius · +230 5254•••• · conta••@webymind.com · 🇲🇺 Built in Mauritius

Click to reveal full phone number and email

💬