Most fraud targeting overseas vendor payments doesn't come from a new contact — it comes from someone impersonating a supplier you've paid for years. Onfleex checks the invoice and payee account against 9 criteria before you send, and delivers the verdict as a single report.
Send us your company details, contact information, and the invoice file — our specialist team takes it from there. Questions and inquiries are welcome too.
If the form isn't convenient, or you'd just like to ask a question first, feel free to reach out directly.
Everyone stays alert with a new vendor. Attackers know this, which is why they impersonate a supplier you already trust. Onfleex inserts one extra check right into that moment of "it's just our usual payment."
An email impersonating your contact at the supplier announces a new account number. It's actually the attacker's account — and your next payment goes straight to them.
The invoice carries the legitimate company name, but the designated account belongs to an individual or an unrelated third party — a clear sign to verify through a separate channel.
Total losses reported to the FBI from Business Email Compromise (BEC) in 2025. Once the money is sent, recovery is nearly impossible.
BEC cases reported the same year (+15% YoY)
Average loss per incident
* Source: FBI / IC3 statistics (2025). Figures reflect U.S.-reported cases; equivalent domestic figures for Japan and Korea are still being confirmed.
Send us your company details, contact information, and the invoice.
Our specialist team checks the account name, corporate registration, sending domain, and more (first request: about 1 business day).
A report stating the verdict, the evidence behind it, and our recommended next step — delivered by email.
Any questions afterward are answered directly by our specialist team by email.
* Verification combines review by our specialist team with cross-checks against multiple databases.
We confirm the registered account holder matches the invoice issuer.
Checked against public OFAC, EU, UN, and other national watchlists.
We compare the registered address against the address on the invoice.
We verify registry information such as the representative and incorporation status.
We inspect the file data and layout for signs of manipulation.
We check for signs commonly seen in impersonation emails.
We compare against past invoices to see whether the account has recently changed.
We check formatting details such as tax rates and registration numbers.
We check publicly available information on the ultimate beneficial owner.
Onfleex was built by people who've worked in fund transfer operations, based on analysis of real fraud cases we've encountered. Rather than relying on one person's eye, we combine public database checks with multi-angle review from a specialist team to produce a consistent, repeatable verdict.
Because our capacity is limited, we recommend starting with a single case so you can see exactly what the verdict looks like before committing further.