How banks halt fraudulent activity in seconds. Administrators can toggle an account's freeze state, immediately blocking all outbound transfers and loan actions.
When unauthorized activity or credential theft is detected, security operators must immediately freeze outbound ledger movements without deleting user history. NexoraBank's freeze middleware intercepts all mutating API requests with an immediate HTTP 403 response.
Every API request checks account freeze state before permitting ledger mutations.
Frozen accounts return HTTP 403 Forbidden with clear user explanation banners.
Administrators can restore full account privileges once verification is complete.
Every freeze and unfreeze event is logged with operator identity and timestamp.
| Endpoint | POST /api/admin/toggle-freeze |
| Enforcement Layer | Express Server Auth Middleware |
| Client Feedback | Red Security Freeze Alert Banner |
Log in to the Admin Control Panel, find the target user, and click 'Freeze Account'.
Open the administrator console to test account quarantine.