Find
We monitor for impersonation of your firm and your people across websites, LinkedIn, X, Telegram, other social platforms and search ads.
Block
Once we confirm a malicious website or phishing link, we block it across security integrations, including enterprise DNS filtering, within minutes. Major browsers such as Chrome, Safari, Edge and Firefox typically block it within 1–2 hours, so customers see a warning while the takedown runs. Blocking applies to web domains and URLs. Fake social profiles and chat accounts are removed through platform takedowns.
File
We file takedowns with platforms, hosts and registrars on your behalf, with the evidence each one requires.
Follow up
We follow up with platforms until we’ve confirmed each case has been removed, and escalate and re-file whenever a provider stalls or rejects.
05
Ongoing reporting and visibility
You can follow every case in the ChainPatrol app as it moves, and receive regular threat snapshot reports.
How an investment impersonation scam unfolds
Most cases follow the same four steps. We look for each one, so a fake can be stopped before money moves.
01
A profile appears
A copy of a partner, executive or adviser shows up on LinkedIn or X, with your firm’s name and photos.
Where we step in
Fake profiles are found and reported for removal.
02
Outreach starts
The fake contacts founders, clients or investors with a deal, a fund or an allocation.
Where we step in
Linked phishing sites are confirmed and flagged in browsers.
03
The chat moves
Targets are moved into a private chat or group, where the pitch gets specific.
Where we step in
Telegram and WhatsApp groups are filed for takedown.
04
Money is requested
A cloned website or fake document asks for a fee, a deposit or personal data.
Where we step in
Cloned sites are taken down with the host and registrar.
What we watch for your firm
Monitoring is set up around the things people trust when they hear your name.
People
Partners, executives and advisers
Fake profiles and messages that use your team’s names and photos.
Brand
Firm and fund names
Your names and logos used on sites, ads, groups and documents.
Domains
Website and email domains
Lookalike domains built to pass as your site, portal or email.
Channels
Official accounts and communities
Copies of your official social accounts and investor channels.
Built for each kind of firm
Venture capital firms
Fake partner profiles, fake investor outreach to founders and fake fundraises using your firm’s name.
See venture capital →
Trading firms and asset managers
Fake advisers, cloned client portals and fake investment groups targeting your clients.
See trading firms and asset managers →
Applied to your policy
Detection and takedown rules are set around your legal standard. Assets that use your name, logo or claim official affiliation are pursued. Commentary, community discussion and fan accounts that don’t claim to be you are left alone, so your team isn’t policing your own community. Automation handles high-volume threats at scale. Cases that need judgment, such as fan accounts, staff profiles and cases a provider is stalling on, go to our operations team. Decisions that need you come back to you for a quick approval.