SealfieOne selfie, one irrefutable trace, wherever a decision moves your money.
“When I saw this wave coming at the UN, I didn’t write yet another report. I built Sealfie. Because you can’t train humans to spot perfect AI fakes. You need an anti-AI verification that works in 30 seconds. That’s it. That’s Sealfie.”
The Challenge: a 30-min video call where we simulate an executive-fraud attack on your procedure. Free, written report included.
Your team would have approved that wire too.
In 2024, at ARUP, a finance employee wired $25M after a video call where every other participant, including the CFO, were deepfakes. Trained professionals. MFA everywhere.Zero chance of catching the scam.
“Train harder” will not be enough: your cyber-awareness training fights yesterday’s threats while criminals use today’s AI. You need a control that doesn’t depend on human judgment and that leaves an irrefutable trace.
What actually worries me
“That ARUP attack? Sophisticated enough to fool trained finance professionals, with tools anyone can rent. A whole call of deepfakes. Your CFO gets the same call tomorrow, and approves.”
You take a selfie. We do the rest.
One method. Multiple verifications. Zero human judgment required.
- Take a selfie when asked
- Confirm with your phone’s biometrics, you already do it twenty times a day
- We query your mobile carrier in real time: SIM swap in the last 48 h, same line, same device. Most “secure” systems never do this; we do, every time
- We check the device against your registered hardware fingerprint
- We detect whether it’s a real human or a deepfake (biometric liveness)
- We seal every check into a timestamped, tamper-evident, third-party-verifiable log
- We update these controls as new attacks emerge: you never see it, never configure it
The same selfie protects the order, the meeting and your processes.
Sealfie isn’t yet another app: it’s the seal you place wherever a decision commits the company. Email, Slack, Teams, WhatsApp: we don’t change your workflow, we make it fraud-proof.
The wire order
Before a sensitive wire goes out, the real requester confirms with a selfie. The criminal using your CEO’s stolen credentials? Their SIM swap gets caught right here. If the order is fake, it is never executed; if it’s real, you keep an irrefutable trace of it.
The decisive meeting
Attesta, the Sealfie version for video calls, works inside Teams, Zoom and the market’s tools. Participants in a sensitive session are identified, and the minutes are signed in-session, with the same gesture. No more “+1 555… joined the meeting” that nobody dares to question.
Your own processes
Supplier bank-detail change, document validation, critical access: any approval flow can require the seal.Need a custom integration with your ERP? We’ll build it. Want to stay email-only? That works too.
The requester signs the receipt; the event collection joins your archives, third-party verifiable.
The founder’s voice, unfiltered.
You follow the process, we handle the technical part
“What troubles me: despite the tools and training that already exist, the attacks still get through. BEC (executive fraud by email or video call) is the natural target. I've watched MFA get bypassed for 15 years: SIM swap, phishing, a simple search. Nothing is unbreakable, but you follow your process: Sealfie verifies what a human can't see.”
An audit trail that holds up
“When your auditor asks ‘how do you know the CFO really approved this?’, you show them the log: every verification timestamped, sealed, third-party verifiable, instead of email forwards.”
Dead simple, by principle
“A protection that requires training has already failed. Nothing to learn also means nothing to social-engineer. No training. No complexity. No excuses.”
Direct access, no tickets
“Your payment workflows don’t fit in a box? Neither does our support: direct access to me and my team. We configure. You just use it.”
The risk sits with you; the trace must too. Sealfie doesn’t promise you’ll win a lawsuit. No tool can. It guarantees that the day you’re asked to account for a decision (auditor, insurer, judge) you’ll have more to show than an email: irrefutable traces of who verified what, and when.
Your BEC exposure, in euros, in 60 seconds.
Six questions. In return: your annual incident probability and the total expected cost (stolen funds, forensics, legal counsel, crisis communication), in euros, with a confidence range. Public methodology, every coefficient sourced: your auditor can redo the math.Sources: FBI IC3, ANSSI, Verizon DBIR.
€95 to avoid an average €119k in stolen funds. Here’s why so little.
Because we don’t watch everything: we verify only what can cost you a fraud. 20 verifications a year.
Sealfie
- 20 verifications per year
- Real-time mobile-carrier verification: nobody else does this
- Sealed, timestamped, exportable log
- Up and running in 30 minutes. Not 30 days.
- We configure. You just use it.
Enterprise
- Meetings use case: certified sessions in Teams/Zoom
- Multiple approval chains, custom verification sources
- ERP/accounting integration, if you want it; works without too
- Add capabilities when you need them, not all at once
- Direct access to the founder and the team, no ticket system
Before you believe us, put us to the test.
A video call with our team. You describe your validation circuit as it exists today.
We simulate an executive-fraud attack on your procedure, with your consent, without touching your systems.
You leave with a written report of the weaknesses found. It’s yours, whether you sign or not.
Free. None of your systems touched. The report is yours. Who answers you: Nicolas Thomas