Fraud
What TierSafe sees of a fraud, and what it does not
A fraud almost always goes through false data: a director, a head office, bank details, a domain name. False data is a mistake, or a falsification. TierSafe compares this data with public registers and warns you when it changes; it replaces neither your bank nor your procedures.
Your own company
A fraudster who impersonates your company first changes the register or imitates your domain name, to write to your customers. Free of charge, for up to 10 companies, TierSafe reports:
- a change of director, head office or name, a dissolution, and a deed filed with the companies register even before its notice in the BODACC; a new establishment opened under your SIREN; a company created under a name very close to yours;
- a domain name close to yours that receives e-mail or answers on the web, among the variants we guess; how well your domain is protected against address spoofing (SPF, DMARC), its expiry and your website certificate;
- a change of your e-invoicing address or of your receiving platform.
The alert goes out by e-mail within the hour after it is published by the register for a filed deed or a change of director, at the daily 8 am run for the rest, to you and up to 5 other recipients, and is sent again four hours and then twenty-four hours later if nobody has acknowledged it.
Your customers and suppliers
- When a file is checked: an unknown SIREN, a name that does not match the register, a closed establishment, an incorrect VAT number, the same IBAN carried by different companies, an invalid or inconsistent IBAN or BIC.
- With Sentinelle monitoring: a change of director, an insolvency proceeding, a closure, a VAT number that became invalid or a platform struck off trigger an alert at the daily run; a head office move or a change of name comes in the Monday digest. An IBAN changed in your file triggers an alert as soon as it is imported. Each change opens a vigilance where needed: bank details, invoicing or orders.
- Without an account, the "Check a bank details change" tool cross-checks the announced IBAN, the BODACC notices and the domain of the e-mail received.
- Without an account, the "Check an order" tool compares the delivery address with the customer's establishments, reads the buyer's address and, when entered, the VAT number: against the fake customer ordering in the name of a real company.
- Before paying, the payment file check reads each payee again: IBAN changed or shared with another company, company ceased, bank holding the account according to the REGAFI register.
- When a company announces new bank details, the request goes through a recorded process: source checks, a call back on a number known before the request (never the one it gives), then a decision by another person. Each step is dated, the file exports to PDF.
- The French national asset freeze register: a third party whose SIREN is listed is flagged in file checks, in monitoring, in the bank details tool and in the transfer file check; an identical name is flagged as an identity to check, never as a finding. Making funds available to it is prohibited (article L. 562-4 of the French Monetary and Financial Code).
What TierSafe does not see
Better to know it before you need it:
- CEO fraud: a call or an e-mail impersonating your director leaves no trace in any register. The defence is internal: double approval of any unusual transfer, and a call back on a number already known.
- The holder of an account: TierSafe checks the format, the check digits and the country of an IBAN, not who owns the account. Your bank compares the payee name with the account holder before a SEPA transfer in euros (verification of payee, mandatory since 9 October 2025).
- A hacked mailbox at a supplier: an e-mail sent from their real address passes the domain checks.
- A fake company extract or fake bank details shown without changing the register: only a document issued by TierSafe can be checked on our page; a company extract can be cross-checked with the register by checking its SIRET.
- Your invoices: TierSafe does not read the invoices you receive.
- A domain name that imitates yours other than through the variants we guess.
- The moment itself: monitoring runs once a day, it does not stop a transfer in progress.
Start with your own company
Monitoring your company is free, without a subscription: an account and a SIREN are enough.
Monitor my company for free Check a bank details change Check an order