Find
We monitor for impersonation of your brand across websites, search ads, social platforms, Telegram, official app stores, third-party app stores and APK sites.
Block
Once we confirm a malicious website or phishing link, we block it across security integrations, including enterprise DNS filtering, within minutes. Major browsers such as Chrome, Safari, Edge and Firefox typically block it within 1–2 hours, so customers see a warning while the takedown runs. Blocking applies to web domains and URLs. Fake social profiles and chat accounts are removed through platform takedowns.
File
We file takedowns with platforms, hosts and registrars on your behalf, with the evidence each one requires.
Follow up
We follow up with platforms until we’ve confirmed each case has been removed, and escalate and re-file whenever a provider stalls or rejects.
05
Ongoing reporting and visibility
You can follow every case in the ChainPatrol app, with a timestamped history of each step, and export case data as CSV or through the API.
A record of every case
Fraud and security teams need evidence they can keep. Every case comes with a timestamped history from detection to removal.
Evidence
Captured at detection
Full-page screenshots, WHOIS and registrar details, and hosting records for every finding.
Timeline
Every step, timestamped
Detection, review, filings with hosts and platforms, follow-ups and liveness checks, in order.
Status
Live or offline, clearly
Each case shows whether the threat is still up or has been confirmed removed.
Export
Take the data with you
Export cases as CSV, or pull them through the API into your own tools.
Built for lean fraud and security teams
ChainPatrol is fully managed, so the work happens whether or not your team logs in.
Managed
Analysts do the work
Our team reviews findings, files takedowns and follows up with hosts and platforms. You see the results.
Control
You set the approval rules
Confirmed phishing sites can go straight to takedown, while cases involving your staff or executives wait for your review.
Setup
No integration needed
Setup takes a signed Letter of Authorization and a list of your official domains, apps and accounts. Nothing touches your banking systems.
Applied to your policy
Detection and takedown rules are set around your legal standard. Assets that use your name, logo or claim official affiliation are pursued. Commentary, community discussion and fan accounts that don’t claim to be you are left alone, so your team isn’t policing your own community. Automation handles high-volume threats at scale. Cases that need judgment, such as fan accounts, staff profiles and cases a provider is stalling on, go to our operations team. Decisions that need you come back to you for a quick approval.