Cleafy

Cleafy builds real-time fraud detection technology embedded into banking and financial-services mobile and web applications, designed to spot the malware, overlay attacks, and social-engineering session takeovers that traditional endpoint antivirus typically misses because the attack happens inside a legitimate, authenticated banking session. Founded in Milan in 2014, the company’s engine focuses on detecting hostile infrastructure and attacker intent before a fraudulent transaction completes, rather than only flagging fraud after the fact.

Cleafy has raised a total of about €22 million, including a €12 million Series B led by United Ventures and eCAPITAL, and reports protecting over 250 million end users across more than 150 financial institutions in Europe and Latin America, with named clients including ING, BCC Iccrea Group, Illimity Bank, and Banca Popolare di Sondrio (Suisse) confirmed via independent press coverage of its funding rounds. The company also claims more than 85 international patents on its detection engine, a claim that is vendor-stated and has not been independently audited by this review.

Banking-malware and mobile-fraud detection is a genuinely hard, adversarial problem, since fraud techniques (overlay attacks, on-device remote-access-trojan fraud, social engineering) evolve quickly to evade detection, and Cleafy competes with other European and global fraud-detection vendors in a space where independent, apples-to-apples accuracy benchmarks are rare. Its differentiation is European banking-sector depth and a real customer base at meaningful scale, rather than a uniquely novel detection technique.