Systems and methods for a generated fraud sandbox

A computer-implemented method, comprising:

• receiving, by a financial institution computing system associated with a financial institution, a content request from a user computing device associated with a user, the content request requesting content from a network destination not associated with the financial institution;
• determining, by the financial institution computing system, if the network destination is associated with a trusted entity based on information stored in a network destination database associated with the financial institution computing system;
• determining, by the financial institution computing system, that the requested content includes at least one field into which the user may input sensitive information comprising:
• transmitting, by the financial institution computing system, a content request to the network destination;
• receiving, by the financial institution computing system, content from the network destination;
• and
• determining, by the financial institution computing system, that the received content includes at least one descriptor of sensitive information;
• transmitting, by the financial institution computing system, substitution content that is a substitute webpage to the user computing device responsive to determining that the network destination is not associated with the trusted entity and to determining that the requested content includes at least one field into which the user may input sensitive information, the substitution content including at least one prompt requesting the user to input sensitive information;
• receiving, by the financial institution computing system, a user input, the user input containing sensitive information regarding the user;
• transmitting, by the financial institution computing system, a modified input to the network destination, the modified input comprising undecipherable information;
• and
• transmitting, by the financial institution computing system, an alert to the user computing device, the alert informing the user that the network destination from which the content was requested is illegitimate.

A non-transitory computer readable media having computer-executable instructions embodied therein that, when executed by a processor of a financial institution computing system associated with a financial institution, cause the processor to perform various operations, the operations comprising:

• receiving a content request from a user computing device associated with a user, the content request requesting content from a network destination not associated with the financial institution;
• determining if the network destination is associated with a trusted entity based on information stored in a network destination database associated with the financial institution computing system comprising:
• determining that the requested content includes at least one field into which the user may input sensitive information comprising:
• transmitting a content request to the network destination;
• receiving content from the network destination;
• and
• determining that the received content includes at least one descriptor of sensitive information;
• transmitting substitution content that is a substitute webpage to the user computing device responsive to determining that the network destination not associated with the trusted entity and to determining that the requested content includes at least one field into which the user may input sensitive information, the substitution content including at least one prompt requesting the user to input sensitive information;
• receiving a user input from the user computing device, the user input containing sensitive information regarding the user;
• transmitting a modified input to the network destination, the modified input comprising undecipherable information;
• and
• transmitting an alert to the user computing device, the alert informing the user that the network destination from which the content was requested is illegitimate.