Fraud prevention for broking and demat apps
Your investors are recruited into fake trading groups before they ever reach your app, and the accounts that receive the money pass your onboarding. The first transfer from a new investor is where both show.
Cool off
COOL_OFF · screen share · details pasted · first-time payee · amount unusual- Your customer sees
- Sending in two parts. This is your first large payment to this account. ₹10,000 can go now, the rest in 12 hours. Before then, look the firm up yourself, not through the group.
- Your FRM receives
- SCREEN_SHAREDDETAILS_PASTEDFIRST_TIME_PAYEEAMOUNT_UNUSUAL
What broking and demat apps face now.
- Investment scams run through broker and trading apps, and the first transfer from a new investor is where they show.
- Trading and demat accounts are rented out to move scam proceeds.
- Crypto off-ramps are where money leaves the regulated system.
Across the customer journey.
Where each attack appears for broking and demat apps, what DeepID reads at that moment and the action it returns. Each moment is checked against what the one before it bound.
| Moment | The attack | What DeepID does | Decision |
|---|---|---|---|
| Account opening | Mule trading and demat accounts | The face searched across your customers, and one device behind several accounts, read at opening. | Cool off or block |
| Funding | Deposits from many unrelated senders | Money arriving from senders with no link to the account holder, read on the graph before it is traded. | Cool off, then hold |
| Trading and transfers | An account handed to a ring | A change of device or behaviour after opening, and a session with none of a genuine investor’s browsing. | Step up |
| Withdrawal | Scam proceeds leaving through payouts | The withdrawal held when a reused face, a shared device or mule-linked funding appears. | Hold |
Where to start.
The journey most at risk: the first transfer from a new investor. Start at account opening, where the face and the funding account are bound, so that the first funding and the first withdrawal have something to check against.
- 1Sign-upThe face, the device and the funding account, verified and bound.
- 2Investment scamsThe coached first transfer, and the account someone else controls.
- 3Crypto off-rampsThe withdrawal held while the money is still in reach.
- 4Mule account detectionAccounts that receive from many unrelated senders.
Your free first analysis.
A free retrospective on 30 to 90 days of account openings, funding and withdrawals.
What it shows. The accounts that shared a face, a device or a funding account, and the withdrawals that left through accounts already carrying those links. No figure is published for this; you count it on your own data, against what you see today.
Use cases for broking and demat apps.
Each shows how the attack unfolds, what your checks saw at each step, what DeepID read and the decision it returned.
Digital arrest
Hold the coerced payment before it leaves the account.Hold, then call backMule accounts
Catch mule accounts before the money moves.Cool off, then holdVideo KYC deepfakes
A live person, in front of a real camera, on every video KYC call.Step up, hold or blockAccount takeover
Protect the account through recovery and the hours after.Step up, then cool offInvestment scams
Slow the scam payment and hold the mule trading account.Warn, then cool offCrypto off-ramps
Hold the withdrawal before scam money goes offshore.HoldInsider fraud
Hold the takeover that starts with a contact change made from the inside.Step up, then hold
The modules these use cases read with.
Open a module to see what it reads and the reasons it sends with each decision.
See DeepID on a real phone.
We show your fraud, security and engineering leads how DeepID would run your sign-up, login or payment journey, then plan a pilot on your own traffic.