Fraud Extended Detection and Response (FxDR)

See fraud forming up to 15 days before money moves.

Cleafy FxDR exposes coordinated fraud activity across the customer journey, helping banks act on evidence weeks before the money moves.

Trusted by leading
banks and FIs

A global authority in
cyber-fraud defence

85+

Technology patents
and continuous improvement

Rated 4.2 on Gartner
peer insights

Most fraud tools fire too late

Catch the campaign, not just the transaction

Traditional approach

Detection at the transaction

Traditional fraud systems light up at the point of payment. By then, reconnaissance, credential testing, device staging, and social engineering have already run. The system sees the final move, not the campaign behind it.

  • Login to digital banking app

  • Reconnaissance: not in the score

  • Credential probing: not in the score

  • Device staging: not in the score

  • Session manipulation: not in the scene

  • Transaction: scored, too

Detection at the end
of the chain.

Action
triggered
after the fact.

Cleafy FxDR

Capture. Structure. Correlate. Execute.

FxDR watches the whole attack lifecycle, from pre-login reconnaissance through to the transaction. Staging activity, credential probing, device farms, and session manipulation surface as the campaign forms. The bank intervenes early, with the case already built.

  • Pre-attack to transaction

  • Reconnaissance: in evidence

  • Credential probing: in evidence

  • Device staging: in evidence

  • Session manipulation: in evidence

  • Chain broken before transaction

Detection across
the chain.
Risk forms in motion.

Bank
intervenes
at any stage.

Audit-defendable decisions

Digital risk, redefined.


Every event is reasoned against the user, the device, and the session it belongs to. The record is continuous. The reasoning runs against the whole picture, not on the isolated signal. Every decision carries the evidence that produced it.

FxDR ingests behavioural, device, identity, and session events the moment they happen, each one kept as evidence.

Events are organised into a continuous session record from pre-login through to transaction.


Reasoning runs against the connected record, not against isolated signals. Every new event refines what the platform knows about the session.

Bank-defined controls are enforced during active sessions through step-up authentication, holds, and session termination.

Built for industrialised, AI-powered fraud

Nyx. The agentic AI for autonomous fraud operations

Nyx operates continuously across coordinated fraud activity, prioritising active attack conditions and executing bank-defined response actions under volumes manual teams cannot sustain alone. The team sets the strategy. Nyx runs the operations.

Discover Nyx
Powering Nyx and FxDR

Cleafy LABS. Six years tracking adversaries before banks see them.

Cleafy LABS is an elite threat intelligence team that has tracked adversaries across every Cleafy customer since 2020. Their findings flow into every bank's defence in real time. Threats LABS has dismantled at source include TeaBot, Sharkbot, Pixpirate, Spynote, and BingoMod.

Learn more
Contact us

See, understand, and stop digital banking fraud.