When a payment screenshot comes in, it extracts the transaction data using OCR (Tesseractl ocally, Groq Vision or Gemini as fallback for low-quality images), checks it against a duplicate store so recycled receipts don't slip through, then hits the Stripe API to verify the payment is real. The primary match key is the customer's email from the WhatsApp caption not just the transaction ID, because that alone is too easy to fake. It replies
directly in the group with the verdict: ✅ verified, 🚨 fraud flagged, or 🔁 duplicate.
Everything logs to Google Sheets. Anything suspicious fires a Telegram alert.