Most fraud, scams, hacks and insider loss are caught too late. By the time the alert fires, the money is already gone. Vilkax catches them at the decision: one explainable risk engine protecting your company, your staff and the tools you give them, and telling you exactly why it flagged each one.
[email protected]: "Wire €48,000 to a new supplier today, keep it confidential."
INBOX
Screening sender, domain & intent
BEC · CEO-impersonation
Look-alike domain (vilkax-corp.co, not vilkax.com) plus an urgency and secrecy pattern.
BLOCKED
Risk 94 / 100Security team alerted
Animated preview of real detection, not live footage
One engine. Two ways in.
For your team
A domain-scoped pulse: who's at risk, who's in a breach, where the threats hit. PII-safe, so a screenshot goes straight to legal without redaction.
For your product
The same engine as a Protect API: one explained verdict with a score, a reason, and a recommended action, at the moment a yes / no / review decision happens.
The ROI is the loss you never take: a redirected wire, a duplicate invoice, a bust-out, a kickback caught at the decision point rather than in next quarter's audit. One engine across fraud, corruption, insider and AML replaces a stack of single-lane vendors.
AI Security Shield, the case desk, the incidents & tasks workspace
AI Ops and threat intelligence keeping every verdict explainable
The Protect API: the same engine, drop-in to your product
Outcome: stop stitching single-lane vendors together. Protection, intelligence and decisioning in one place.
The threats we catch
one engine · the whole human → financial → on-chain chain
Grouped the way your risk, compliance and security teams think. Every match comes back as one explained verdict: the pattern, the evidence, and the confidence level.
◈
Financial fraud
The money's gone before the alert fires. We catch it at the yes / no / review moment.
Transaction fraud
Payment fraud (card-not-present)
BIN attacks
Account takeover
Chargeback abuse
Money-mule activity
Synthetic identity
First-party fraud
Bust-out
Refund / promo abuse
Credential stuffing
Invoice fraud (duplicate / inflated / fictitious)
Vendor bank-detail change (VEC)
Caught by B2B fraud ML + the Protect APIStarter+
§
AML & compliance
Structuring, shells and sanctioned counterparties hide between systems. We surface them as decision-support, including scam proceeds a single-lane vendor would never see.
KYB risk (shell / sanctioned / PEP)
AML structuring & layering
Sanctions exposure
Trade-based laundering
Shell-company layering
Related-party round-tripping
Market-abuse hints (wash-trade / spoofing)
Scam-proceeds inflow
Caught by B2B fraud ML + anti-scam intel + the OSINT moatPro+
⬡
Crypto & on-chain
One sanctioned hop can poison a payout. KYT screens any wallet or transaction in real time and returns an allow / review / block verdict with the evidence behind it.
Wallet-drainer exposure
Mixer & bridge laundering
Sanctioned-address proximity
Ransomware exposure
Caught by KYT (Know-Your-Transaction) + the investigation enginePro+
⚑
Workplace & insider
Your hiring funnel, your approvals and your endpoints are the newest attack surface. We read the pattern and support your security and audit teams. Assessment only, never surveillance of a person.
Fraudulent hiring (laptop-farm)
Interview / coding-test malware
Data exfiltration
Insider threat
Endpoint compromise
Payroll diversion
Privilege / segregation-of-duties abuse
Ghost employees
Expense / reimbursement abuse
Insider collusion rings
Bribery / kickbacks & facilitation payments
Conflict of interest / self-dealing
Procurement collusion & bid-rigging
Caught by B2B fraud ML + anti-scam intel + the AI Security ShieldPro+
✶
Cyber
Most loss starts with a message and a look-alike domain. We catch the lure before it lands a wire or a credential.
Phishing & BEC
Vendor / supply-chain fraud
Ransomware exposure
Typosquatting / look-alike domains
Breach exposure
SIM-swap
Caught by OSINT moat + the domain pulseStarter+
⬢
Coordinated rings
The same device, wallet, payee, or a supplier shared by half your vendors, reused across independent accounts is a ring or a single point of failure. We read both on the exposure graph.
Fraud rings
Shared-infrastructure detection
Procurement collusion
Supplier substitution & concentration
Fourth-party / supply-chain contagion
Caught by entity intelligence + the exposure graphPro+
Assessment, not accusation. Vilkax detects behaviours and patterns. It never labels a person or business a criminal, and it never auto-acts. High-stakes, low-certainty calls (sanctions / PEP, mule, AML layering, synthetic identity, bribery / corruption, conflict-of-interest, insider) route to human review with the evidence in hand, never an automated judgement of a named person. And it's honest about coverage: every clear verdict carries a false-clear risk. A clear from thin coverage is flagged as weak, because absence of evidence is not evidence of safety.
The Vilkax edge
why one engine beats a stack of single-lane vendors
Cross-domain
One engine, the whole chain
Vilkax spans the human → financial → on-chain chain in one model. Because we see both the consumer scam side and the financial exposure side, we can tell a fintech that an inbound counterparty is receiving the proceeds of a romance or pig-butchering scam - an angle no single-lane vendor can see.
Explainable
Never a black box
Every verdict ships with its reasons, evidence and a confidence score, plus a stable id for disputes. Your team and your regulator both see exactly why.
Day one
Works before your data does
Catches the common threats from day one, before you've sent a single signal of your own. No model to train, no historical data needed.
Honest
No false all-clear
Vilkax tells you what it can and can't see. When a source isn't live, the verdict says so. It never returns a clean result from missing data.
Built for your field
one engine · tuned to where your risk actually lives
The threats land differently per industry. Vilkax is the same engine everywhere. Here is where it lands for you.
Fintech & payments
Payment and CNP fraud, payout screening with KYT, AML and sanctions as decision-support, with the evidence your examiners expect.
Crypto & exchanges
Wallet and counterparty screening before signing: drainer, mixer and sanctioned-hop exposure caught before funds move.
Marketplaces
Score sellers and payout wallets continuously, not just at signup, and read the rings that reuse one device or payee across accounts.
Ecommerce
Card-not-present fraud, chargeback and promo abuse, BIN attacks. Caught at checkout without punishing good buyers.
Healthcare & professional services
BEC, vendor fraud, insider and data-exfiltration risk. Assessment-based, audit-safe and PII-quiet by design.
Logistics & supply chain
Supply-chain and vendor-impersonation fraud, payroll diversion and the BEC that precedes a redirected payment.
SMB → enterprise
Works from day one with built-in threat intelligence, and scales on usage not seats. No model to train first.
Examples of where the engine applies. Vilkax names capabilities only, never invented case studies or customer numbers.
The tools that catch them
one workspace · the engines behind every verdict
⬡
Investigation Engine
One unified workspace: follow the money, map the graph, and let the AI copilot surface what you'd miss.
Multi-hop fund-trace + UTXO forensics
Sanctions / mixer / scam exposure scoring
AI copilot + counterparty graph
◎
Universal Risk Search
Paste any BIN, IBAN, wallet or entity and it tells you what it is and its risk level.
BIN / IBAN / wallet / entity auto-detection
Issuer, country, and risk resolution
Redacted audit trail on every lookup
🛡
AI Security Shield
Every member's device protected and its posture visible to you.
Edge + gateway + on-device layers
Fleet posture + threat-hit reporting
Behaviour-based, never accusatory
✺
Case Desk
An AI support desk where the best-drafted reply wins the next round.
AI triage + draft replies
Best-engine-wins routing
SLA + analytics
❖
Threat Intelligence
The intelligence layer that makes every verdict explainable and current.
Multi-source intelligence fusion
Live threat feeds
Explainable, evidence-backed verdicts
⚙
AI Ops
The layer that keeps every verdict sharp, current, and explainable.
Routed to the best available AI model at every call
Deep investigation dossier with legal strategy and next steps
Available to Enterprise clients. Request access via the contact form below.
◇
Protect API
The same engine, drop-in: one verdict at the yes / no / review moment.
One verdict: score, reasons, evidence
Onboarding · checkout · payouts · KYB
Stable dispute id on every call
Available by plan: Starter unlocks risk search and Shield; Pro adds the investigation engine and case desk; Enterprise adds full threat intelligence, AI Ops, and unlimited seats. Building a product? Signals, pricing and docs live on the platform page.
Live defence layers
-
Active layers right now. Green = live, grey = roadmap.
Safe to share, built in-house
PII-safe by design · auditable · no third-party trackers
Quiet by default. The business view is domains and aggregates only. It never touches the address column. A screenshot goes to legal, security or the board without redaction.
One screenshot proves your posture. Encryption coverage, retention age (0-7d / 7-30d / 30-90d / 90d+) and breach exposure, domain-scoped and refreshed live.
No third-party trackers or charts. Every graph is drawn by us; your data never leaves into someone else's analytics widget. No ad pixels, no behavioural analytics.
Strong encryption at rest. Your data is encrypted on our side, with a key we can rotate any time.
Plans
15-day trial · per-seat plans · Enterprise for your domain
Downloads: test the apps
Coming soon
the desktop lineup · public test builds land soon
◎
Risk Search
Universal search + AI Pivot Studio on the desktop.
Coming soon
⬡
Investigation Desktop
Exposure, forensics, KYT and fund-trace, on your machine.
Coming soon
🛡
Security Shield Agent
The on-device shield that reports fleet posture back to you.
Coming soon
We sign every build before we publish it. No unsigned binaries. Want early access to a test build?
Ask for a test.
See the tools in action
a deeper look at the investigation suite & the Protect API
▶
Video coming soon
The deep-dive is in production. In the meantime, the live demo shows it end-to-end. Arrange a test.
Arrange a test or demo
tell us what you want to see · we reply by email
No calendar to wrestle with. Tell us what you'd like to see and someone from the team will reply to set up a walkthrough.
Start your business workspace
no password · a secure sign-in link lands in your inbox
Up and running in under a minute. We email you a secure sign-in link that drops you straight into your control panel. Pick a plan now and change it whenever you like.