A CEO-impersonation email asks for an urgent, confidential transfer. Vilkax screens the sender, the domain and the intent, and flags it before the money moves.
An animated preview of real detection, not live footage.
Vilkax Protectdemo
CEO · Urgent payment
ceo@vilkax-corp.co: "Wire €48,000 to a new supplier today, keep it confidential."
INBOX
Screening sender, domain & intent
BEC · CEO-impersonation
Look-alike domain (vilkax-corp.co, not vilkax.com) plus an urgency and secrecy pattern.
BLOCKED
Risk 94 / 100Security team alerted
Animated preview of real detection, not live footage
One engine. Two ways in.
Protect your team.Protect your product.
For your team
A domain-scoped threat pulse
See who is at risk and where threats are landing across your people. PII-safe by design: domains and aggregates, never an address column.
For your product
The same engine, as a Protect API
One explained verdict at the yes / no / review moment: score, reason, action. Drop it into onboarding, checkout, payouts or KYB.
The balance sheet and the brand: payment fraud, account takeover, BEC, vendor and invoice fraud, look-alike domains.
A scored, explained verdict before the loss.
Your staff
Your people are the new perimeter: phishing, social engineering, AI voice and deepfake pressure, insider misuse.
Behaviour-based, never surveillance of a person.
The tools you run
Entity intelligence, universal risk search, transaction screening, the case desk and the Protect API, in one place.
One workspace, one engine, one API.
The threats we catch
One engine, the whole chain. Human to financial to on-chain.
Grouped the way risk, compliance and security teams think. Every match returns one explained verdict: pattern, evidence, confidence.
Financial fraud
The money's gone before the alert fires. We catch it at the yes / no / review moment.
Transaction fraud
Payment fraud (card-not-present)
BIN attacks
Account takeover
Chargeback abuse
Money-mule activity
Synthetic identity
First-party fraud
Bust-out
Refund / promo abuse
Credential stuffing
Invoice fraud (duplicate / inflated / fictitious)
Vendor bank-detail change (VEC)
Caught by B2B fraud ML + the Protect APIStarter+
AML & compliance
Structuring, shells and sanctioned counterparties hide between systems. We surface them as decision-support, including scam proceeds a single-lane vendor would never see.
KYB risk (shell / sanctioned / PEP)
AML structuring & layering
Sanctions exposure
Trade-based laundering
Shell-company layering
Related-party round-tripping
Market-abuse hints (wash-trade / spoofing)
Scam-proceeds inflow
Caught by B2B fraud ML + anti-scam intel + the OSINT moatPro+
Crypto & on-chain
One sanctioned hop can poison a payout. KYT screens any wallet or transaction in real time and returns an allow / review / block verdict with the evidence behind it.
Wallet-drainer exposure
Mixer & bridge laundering
Sanctioned-address proximity
Ransomware exposure
Caught by KYT (Know-Your-Transaction) + the investigation enginePro+
Workplace & insider
Your hiring funnel, your approvals and your endpoints are the newest attack surface. We read the pattern and support your security and audit teams. Assessment only, never surveillance of a person.
Fraudulent hiring (laptop-farm)
Interview / coding-test malware
Data exfiltration
Insider threat
Endpoint compromise
Payroll diversion
Privilege / segregation-of-duties abuse
Ghost employees
Expense / reimbursement abuse
Insider collusion rings
Bribery / kickbacks & facilitation payments
Conflict of interest / self-dealing
Procurement collusion & bid-rigging
Caught by B2B fraud ML + anti-scam intel + the AI Security ShieldPro+
Cyber
Most loss starts with a message and a look-alike domain. We catch the lure before it lands a wire or a credential.
Phishing & BEC
Vendor / supply-chain fraud
Ransomware exposure
Typosquatting / look-alike domains
Breach exposure
SIM-swap
Caught by OSINT moat + the domain pulseStarter+
Coordinated rings
A device, wallet or payee reused across supposedly independent accounts is a fraud ring. A supplier shared by half your vendors is a single point of failure. We read both on the exposure graph.
Fraud rings
Shared-infrastructure detection
Procurement collusion
Supplier substitution & concentration
Fourth-party / supply-chain contagion
Caught by entity intelligence + the exposure graphPro+
Assessment, not accusation. Vilkax detects patterns, never labels a person a criminal, and never auto-acts. High-stakes calls route to human review with the evidence. Every clear verdict carries a false-clear risk: thin coverage is flagged, not silenced.
The Vilkax edge
One engine beatsa stack of vendors.
Cross-domain
One engine, the whole chain
Spans human → financial → on-chain in one model. Because Vilkax runs the consumer scam moat, we see a pig-butchering victim's payout land as scam-proceeds in a customer's AML picture - the consumer scam and the financial exposure together, an angle no single-lane vendor has.
Explainable
Never a black box
Every verdict ships with reasons, evidence and a confidence score. Your team and your regulator both see exactly why.
Day one
Works before your data does
Catches threats from day one with built-in intelligence. No model to train, no history needed.
Honest
No false all-clear
When a source isn't live, the verdict says so. It never returns a clean result from missing data.
Who it is for
Four kinds of organisation.An honest answer for each.
Small and medium businesses
Stop invoice and CEO fraud before money moves: a payee-change hold with an out-of-band checklist, where whoever raised a hold cannot be the one who verifies it; a phishing report button that tells the reporter the verdict; email domain checks (SPF, DMARC, MTA-STS); and a monthly report you can forward to the owner.
Enterprises and MSSPs
Vilkax is SOC-lite, not a SOC platform. It adds scam and fraud signals, staff phishing triage, impossible-travel and connected-app findings, response playbooks, SCIM provisioning, OIDC sign-in (SAML is not available yet) and a hash-chained audit export for your SIEM. If you already run a full SOC platform such as ClearSkies, keep it: Vilkax sits alongside through the audit export and signed webhooks.
Banks, fintechs and telcos
A scam-intelligence API with idempotent screening; sandbox keys that return fixed test answers and write nothing; signed webhooks (HMAC with a timestamp) with a delivery log and replay; and Protected Customer Link, in pilot, so a customer can check on their own device whether a call that claims to be you is real.
Schools, councils and care homes
Family and elder protection modes, Kin circles, a carer rule that asks a chosen person before a large payment, and a panic alarm whose emergency relay is free on every plan. There is no institutional plan yet: tell us what you need and we will say honestly what fits.