Professional Fraud
Investigation Tools
Built in the Field.

Persistent, multi-state case tracking with a full evidence timeline. Every tool result can be attached to a case with one click.

• 7-state lifecycle: new, active, in progress, cold, closed, reopened, archived
• Full evidence timeline with source-tool attribution
• Add-to-Case from any module
• Export: PDF, Word, HTML, JSON — chain-of-custody footer on every report

Match a probe photo against your owned reference sets. Calibrated confidence bands — green confirmed, yellow possible — with a one-click marginal lead tier.

• Operator-owned reference sets only — no open-web face search
• SHA-256 dedup + EXIF extraction + GPS parsing on ingest
• Confirmed matches (distance < 0.6) vs marginal leads (0.6–0.8)
• Batch ingest: folder picker or multi-file select
• Image delete with orphan cleanup — chain-of-custody safe

Run any reference set against any other. Catch repeat actors across cases instantly — the same scammer showing up in new submissions triggers an automatic match.

• Set A vs Set B — N×M comparisons, best-first ranked output
• Self-reference dedup (find duplicate identities within one set)
• Uses the same calibrated thresholds as the flagship face engine
• Add confirmed cross-matches directly to the active case

Age-progress or age-regress a photo using local GPU inference. No API keys. No cloud. Runs entirely on your machine using Stable Diffusion.

• Target-age slider 1–100 with known-age anchor for accuracy
• Local GPU inference — RTX 3060 Ti optimized, ~10s per transform
• Age progression, regression, portrait, and restore modes
• Results saved to evidence folder + Add to Case on one click

31 platforms across social, payment, people-search, genealogy, and regional categories. Six search engines. Dork routing bypasses login walls automatically.

• Name, username, email, and face search modes
• Dork mode routes login-walled platforms through public search indexes
• Three-tier permutation confidence — tight, standard, wide
• Per-card status tags, notes, and session save/load
• Platform packs: Scam, WA State, People Search, and more

Paste raw text or upload a file. Pulls every indicator of compromise in seconds — no API, pure local extraction.

• IPv4, IPv6, domains, URLs, emails, phone numbers
• MD5, SHA-1, SHA-256 hashes + Bitcoin wallet addresses
• Defanged indicator refanging (hxxp://, evil[.]com, bad[at]domain)
• Add all indicators to the active case in one click

Recover deleted files from drives, memory cards, and disk images by scanning raw bytes — works even when the filesystem is gone.

• 40+ file signatures: images, video, audio, documents, raw camera formats
• SHA-256 + MD5 on every carved file — chain-of-custody ready
• CSV + JSON manifests for evidence documentation
• One-click ingest of recovered images into a reference set
• Reads SD cards, USB drives, disk images, raw physical devices

Generate court-ready case reports in four formats from a single click. Every report includes a chain-of-custody generation footer.

• PDF — structured, branded, court-presentable
• Word (.docx) — editable, for attorney review and annotation
• HTML — shareable, self-contained evidence package
• JSON — machine-readable for data handoff and archiving