Skip to main content
Solution

Keep a fraudulent transfer from clearing

Verify the people and the payment instructions on the call where money moves, and catch the pressure that pushes a wire through before anyone verifies it.

30 minutes · NDA-safe · Built for security and fraud teams at private equity firms and large enterprises
$25.6M
lost on one deepfake CFO call
Source · Arup, 2024
~$200M
redirected on closing wires in one quarter
Source · Q1 2025
$35M
moved on a single cloned-voice call
Source · Reported, 2024
The risk

Where wire fraud happens

Redirected closing and treasury wires

Bank, treasury, and closing wires redirected through impersonation and last-minute instruction changes.

Vendor and invoice changes

Banking detail changes pushed under urgency on accounts-payable and vendor onboarding calls.

The attack playbook

How a wire fraud attack unfolds

These attacks move through a recognizable sequence. Diopter scores that sequence while the call is still in progress.

01
Authority

An impersonated authority

A cloned CFO, a title agent, or a known vendor establishes a believable reason to move money.

02
Urgency

The deal closes today

Time pressure compresses the verification that would normally catch a redirect.

03
Isolation

The channel narrows

Instructions arrive off the usual path, a new email domain, a private call, a different contact.

04
Escalation

The transfers stack

One approved wire normalizes the next, the way fifteen transfers cleared on the Arup call.

05
The ask

The wire clears

Funds leave for an account that does not come back once the transfer settles.

How Diopter helps

What Diopter looks for

01

Identity and payment verification

Confirm who is on the call and validate wire instructions, flagging fraud signals like a brand-new email domain or a SIM-swapped number.

02

Pressure and policy checks

Detect the urgency and out-of-policy framing that accompanies a redirect, and catch asks that skip your controls.

03

Impersonation detection

Score the call for synthetic voice and video used to authorize the transfer.

The verdict

From signals to one action your team can take.

What drove this verdict
  • IdentityUnconfirmed
  • PaymentNew account
  • ConversationUrgency rising
  • PolicyOut of policy
Verdict
Hold the wire

Diopter recommends holding the wire and routing to a second approver before funds move.

Why Diopter

Most tools check one clip. Diopter reads the whole call.

Point-in-time detectors answer a single question: is this video or voice fake? A good clone passes that test. Diopter scores the whole conversation, the authority claims, the manufactured urgency, the push to go off-channel, and the escalating ask, then raises a verdict on the pattern a single frame cannot show.

A clone can imitate your CFO. It cannot reproduce a real approval: the right people, the right channel, and instructions that match your controls.

Deployment & trust

Light to deploy, clear about what runs where.

Pilot in days, roll wider through MDM, and keep sensitive call media inside your perimeter.

Deployment & trust
  • On-prem and hybrid deployments supported
  • No caller-side install
  • Bot or bot-free capture
  • Configurable retention, including ZDR
  • MDM rollout (Intune, Jamf)
  • SOC 2 Type II in progress
Common questions

What security and fraud teams ask first.

Walkthrough · 30 min · NDA-safe

Walk an attack arc with Diopter.

In 30 minutes, we will replay a real deepfake incident, show the signals Diopter would score, and map the verdict your team could act on.