Identify who redirected your money. DEPSINT™ provides track and trace cyber intelligence for businesses hit by invoice fraud and business email compromise – where a payment instruction was altered and funds went to an account that was not your supplier’s. We work to identify who is behind the fraudulent account, email and domain, and to trace where the money went.
This is the evidence your bank, your insurer and law enforcement all need, and the sooner it exists, the better the prospects.
Business email compromise works by impersonating a supplier or executive and quietly changing bank details on a genuine-looking invoice. By the time it is noticed, the money has moved. DEPSINT identifies the people and infrastructure behind the fraudulent account and domain, and traces the onward movement of funds.
DEPSINT combines:
to connect the accounts, emails, numbers and domains involved to the real people behind them.
There is usually a second pressure here that nobody talks about: explaining internally how it happened. Identifying who is behind the account moves that conversation from a mistake to a targeted attack — which is what it was. These operations rehearse on hundreds of companies before they reach yours.
DEPSINT analyzes the fraudulent email infrastructure, spoofed domains and sending patterns to connect the compromise to the actors behind it – who is rarely the impersonated supplier and often part of a wider operation.
Our AI-driven technology processes massive volumes of digital data to detect and map correlations that no manual search could find — linking the accounts involved to the wider network operating them.
Many times, transaction analysis leads to additional identifiers with which we can launch a track and trace cyber analysis. With crypto transactions, we can also look for wallet ownership attribution and collect further data to support your efforts.
Every case is handled with strict confidentiality and secure data protocols. The subject of the analysis is not contacted or alerted, and your matter is discussed only with you and those you authorise. You speak directly with our team — not a call centre.
Our track and trace cyber analysis report documents the compromise and the attribution in a form banks, insurers and law enforcement can rely on – which materially affects both recovery and any insurance claim.
Related reading: how business email compromise works and online fraud.
Funds move onward quickly, and so does the evidence around the compromised account. Most analyses return in days rather than weeks, and where a payment has just gone out we can move faster still.
