Account takeover can start before the first login
A defensive review of online enrollment, account discovery, recovery, and the controls between a customer record and digital access.
The Tervaq journal
Closer to the evidence.
Security research and fraud intelligence for people who need to make a decision, not just read another warning. We examine identity, account abuse, AI systems, and the work of validating a response.
Research notes & analysis
What makes a fraud-intelligence report actionable?
How to separate source claims from observations, preserve context, and give a security or fraud team a decision-ready evidence brief.
AI-enabled fraud: investigate the workflow, not the label
A practical way to assess claims of AI-assisted fraud without confusing model capability, automation, and a demonstrated control failure.
A fraud control is not fixed until it has been retested
How to define a remediation test that checks the original failure, legitimate customer paths, and the evidence needed to close a security finding.