Read the intent behind the message, and the account number inside it.
Two engines run over message content. A fast rule-based pass weighs known fraud-intent language, and an optional AI classifier performs a deeper semantic read. Alongside them, the financial engine extracts payment details and compares them to the account you already know.
Weighted phrase analysis for bank-detail changes, wire urgency, secrecy and authority pressure.
Extracted IBAN, SWIFT and account numbers are compared against your vendor baseline — a mismatch is the strongest BEC signal there is.
An optional classifier adds semantic judgement where phrase rules cannot reach, and degrades silently if unavailable.
The first pass is deterministic and instant. Phrases associated with payment redirection, artificial urgency, confidentiality pressure and authority impersonation each carry a weight; the total is capped so that content alone can raise suspicion but never single-handedly quarantine a legitimate message.
The financial engine extracts IBANs, SWIFT/BIC codes and raw account numbers from the message body and any attached text, then compares them against the vendor bank accounts registered in your Trust Center.
A payment instruction that matches your baseline passes quietly. One that does not match — a new account for an existing vendor — is the single highest-value fraud signal in the platform, because it is exactly the moment money is redirected.
The deep classification pass only runs for organizations whose plan includes it. Below that tier the engine is not merely disabled in the interface — the provider is never called at all, so no content is transmitted and no usage is incurred.
The classifier is contract-based: the platform ships a no-op driver, a free-tier driver and a production driver behind one interface. Promoting from evaluation to production is a configuration change, not a rebuild.
Body text, subject and any OCR-extracted attachment text are combined.
Rule-based fraud-intent phrases are matched and scored, capped to keep proportionality.
Where entitled, the AI classifier adds a semantic verdict with its own capped contribution.
Payment details are extracted and diffed against the known vendor baseline.
The outcome
A message asking to redirect payment to an account you have never used arrives at the decision engine carrying both a content signal and a financial signal — enough to require sign-off before release.
Set up your organization in minutes — no inbound migration required.