Skip to main content
Diopter
Log inBook a demo
Industries

Real-time social engineering defense by industry

Diopter helps security teams in finance, investment funds, healthcare, and law, as well as companies of every size, stop social engineering on the calls where money and access move. We test your people with agentic social engineering simulations, then assist them on their own calls with real-time alerts when a caller's identity, voice, words, or request doesn't fit.

Your first agentic attack is on usBook a walkthrough

A free simulated attack on a team you choose, with an NDA first if you want one.

Which call does an attacker pick in each industry?

Attackers go after the call where one person can approve money or access. That call differs by industry.

How does Diopter help stop social engineering on a live call?

Diopter checks four things on every call, in every industry, for as long as the call runs.

Identity

Whether the caller is who they say they are and whether the account, number, or bank details match what you have on file

Mismatch

Voice and video

Cloned or text-to-speech voices, plus face-swap and lip-sync artifacts on video, scored for the whole call

Synthetic

Conversation

Pressure such as a "CFO" who needs the payment today and wants it kept off email

Pattern

Policy

Whether the ask follows your process, such as a callback before a new account for the payment or a check before an MFA reset

Out of policy

The person on the call sees the alert, the reason, and a suggested next step, such as calling back on a known number. A person decides with the evidence in front of them.

Which real social engineering attacks have happened on live calls?

Attackers have used cloned voices and deepfake video on live calls to target companies such as Arup, WPP, and Ferrari.

  1. In early 2024, a finance employee at the engineering firm Arup joined a video call with what looked like the CFO and several colleagues, then approved 15 transfers worth about US$25 million. Everyone else on the call was a deepfake.1

  2. Scammers targeting WPP set up a Microsoft Teams meeting through a WhatsApp account that used CEO Mark Read's photo. They used a voice clone built from YouTube footage to ask an agency leader to start a new business, but the attempt failed.2

  3. In July 2024, a Ferrari executive got WhatsApp messages and then a call from a cloned voice of CEO Benedetto Vigna about a confidential deal. When he asked about a book Vigna had recommended days earlier, the caller hung up.3

These attacks follow the same pattern:

  1. A message from a familiar name arrives first, often on WhatsApp, Teams, or text.

  2. A call follows, with a familiar voice or face and a reason it has to happen today.

  3. The ask breaks a process, such as a new account for the payment, a reset, or "keep it off email."

  4. The attack only stops when someone checks, by asking a question the caller can't answer or calling back on a known number.

Why does social engineering work the same way in every industry?

Attackers use the same method at a bank, a hospital, or a law firm. Only the call changes, along with who on it can approve the request. A few minutes of public footage from an earnings call or a webinar is now enough for off-the-shelf software to copy someone's face and voice on a live call. The FBI recorded US$2.77 billion in business email compromise losses in 2024 and has warned that criminals now use AI-generated audio and video on live calls to pass as executives and vendors.4

How do agentic social engineering simulations work for your industry?

Diopter runs agentic attacks against the teams an attacker would call in your industry, with a cloned voice or deepfake video if you want it. You see who spotted the attack and at which step, so you can harden your policies and your people. Do the dry runs with us, so our agents hit you before a real attacker does.

  1. We'll run simulated calls built from real attacks in your industry

  2. You'll receive results by team and by step, so you know which teams to fix first

  3. The same scenarios then become the checks Diopter runs on live calls

How does Diopter roll out for a security team?

Diopter works with the platforms, deployment options, and retention settings below.
  • OpenTelemetry native: logs flow into your SIEM, and EDR and MDR connect via API
  • Runs on Zoom, Microsoft Teams, Google Meet, and phone lines (Dialpad, RingCentral, and any carrier via API), with Webex coming soon
  • Captures calls with or without a bot, with nothing to install for the person on the other end of the call
  • Rolls out through MDM (Intune, Jamf)
  • Offers configurable data retention, including zero retention, and on-prem or hybrid deployments
  • Has completed a SOC 2 Type II audit

What if my industry isn't listed?

Diopter works the same way in every industry, so the capability pages cover your attack even if your industry has no page yet.

The industry pages cover the sectors where buyers ask us the same questions most often. The capability pages cover the attacks themselves, including wire fraud, vendor impersonation, executive impersonation, and help desk calls.

Two ways to start

Your first agentic attack is on us. Fill out the form, and we'll run a simulated attack on one of your teams at no cost. Want to talk about live-call defense instead? Book a walkthrough, and we'll replay a real attack and show you what Diopter caught and when.

Your first agentic attack is on usBook a walkthrough

Common questions for security and finance teams

Can Diopter test our team with a simulated attack first?

Yes. We'll run one simulated attack on one of your teams at no cost, using a cloned voice or deepfake video if you'd like. Most teams start there, then turn on the same scenarios for live calls.

Which industries does Diopter's social engineering defense work for?

Diopter works for security and fraud teams in financial services and banking, hedge funds and private equity, fund administration, healthcare, law firms, and companies of every size. The product is the same in each, and the industry pages show you which call carries the risk.

Is Diopter a different product for each industry?

No. Diopter is a single product that checks identity, voice, conversation, and policy on every call. The industry pages describe the calls, scenarios, and questions specific to each sector.

We're in two of these industries. Where do we start?

We suggest starting with the team that approves the hardest thing to undo, which is usually payments, then access resets. The pilot starts with one team and one platform, then expands from there.

Does Diopter work on phone calls as well as video?

Yes. Diopter covers video meetings and voice calls. On VoIP and conference lines, through Dialpad, RingCentral, or any carrier via API, it checks the voice for cloning and the conversation for pressure, which covers help desks, payment calls, and settlement-day calls.

What should a security team look for in social engineering defense?

Start with your own process. A callback on a known number and a second approver for payments, password resets, and bank changes can stop many of these attacks without any tool. When you compare tools, run each one on your own calls during a pilot and measure how often it raises a false alarm, how fast the alert reaches the person on the call, and what it does with recordings and data. Check that it covers the channels your team uses and fits your existing security tools. The final decision should stay with a person. Your own pilot will tell you more than any vendor's benchmark, ours included.

Research behind social engineering defense

Sources
  1. CNN, May 16, 2024, on the Arup deepfake scam.
  2. Storyboard18, May 13, 2024, citing The Guardian, on the WPP attempt.
  3. Fortune, Jul 27, 2024, citing Bloomberg, on the Ferrari attempt.
  4. FBI IC3 2024 Internet Crime Report, and FBI PSA I-120324-PSA, Dec 3, 2024.