Scammers are using legitimate-looking special purpose vehicles, regulatory filings, and MiFID II language to extract confidential data from startups seeking capital.
If your company is raising capital, you are a target. A class of fraud is exploiting the very processes founders trust — NDAs, data rooms, due diligence calls — to gain access to sensitive business information and, eventually, money.
We recently analyzed an email thread involving a company called “Transmission Finance DAC” that illustrates this scheme with textbook precision. The playbook is sophisticated, patient, and specifically designed to pass initial scrutiny.
How the scheme works
These scams do not announce themselves. They unfold in stages, with each step designed to build enough trust to justify the next. Here is the anatomy of the approach we documented:
Stage 1 — Targeted cold outreach
The fraudster identifies a company known to be raising capital, often via deal announcements, press releases, or financial databases. The initial message is personalized, AI-polished, and uses correct industry terminology. It feels like an informed investor who has done their homework.
Your innovative approach to AI-powered contact center solutions is impressive—particularly your focus on enhancing customer experiences through intelligent interactions. At Transmission Finance, we provide structured financing — primarily convertible notes and special purpose vehicles — to companies building strong technology or scalable business models. We work fast, keep terms founder-friendly, and don’t require equity upfront. Would you be open to a 15–30 minute call to explore whether there’s a fit? — Benoît Fontaine, Founding Partner, TRANSMISSION FINANCE DAC · Ireland
Stage 2 — The NDA & data room play
An NDA arrives, pre-signed by the “investor.” The target countersigns and shares a management presentation. Data room access is requested. This is the core extraction moment — confidential financials, intellectual property, and competitive strategy are now in the fraudster’s hands. No money has changed hands yet, but the damage may already be done.
Stage 3 — Manufactured credibility
When the target runs cursory diligence — as any prudent CEO should — the fraudster deploys real but deliberately misrepresented regulatory records. A Central Bank of Ireland prospectus. A Global LEI Foundation registration. A stock exchange listing. Each link is genuine. The entity behind it is not what it claims to be.
Stage 4 — The advance fee
Once sufficient trust has been established, a fee, deposit, or legal compliance cost is requested as a precondition to “releasing” the committed capital. This money disappears. No investment was ever coming.
The credibility trap
What makes this scheme unusually dangerous is the way it weaponizes real regulatory infrastructure. An approved prospectus on the Central Bank of Ireland’s website is genuinely authoritative. A Global LEI Foundation registration is genuinely how institutional counterparties verify each other. A Euronext Dublin listing is genuinely a regulated venue.
But none of these facts answer the question that actually matters: does this entity have capital to invest, and is this person authorized to deploy it?
The Central Bank of Ireland filing is real. The company is real. The investor is not. That gap is the fraud.
In the case we reviewed, Transmission Finance DAC is an Irish special purpose vehicle created specifically as a bond issuance conduit for a Finnish electricity distributor. It has no investment mandate, no fund structure, and no legal authority to make convertible note investments in US technology companies. The regulatory records cited for verification are entirely authentic. The investor identity constructed on top of them is fabricated. We reached out to Transmission Finance DAC and confirmed Benoît is fake.
This is the sophistication that distinguishes this generation of fraud from older, cruder approaches. Fraudsters are not creating fake regulatory records — they are finding real ones that sound authoritative to a non-specialist, and relying on the target not knowing what those records actually mean.
Red flags to watch for
The following warning signs appeared in the case we documented and are consistent with this class of fraud more broadly:
- Cold outreach that references your fundraising round with suspiciously accurate detail
- Unusually fast NDA execution — pre-signed documents that arrive within hours of initial contact
- Immediate data room access requests before any substantive diligence conversation has taken place
- MiFID II or institutional-sounding boilerplate in email signatures from an individual with no verifiable footprint
- Verification links that lead to real regulatory sources — but do not actually confirm an investment mandate or the individual’s role
- No third-party footprint: no press coverage of prior deals, no portfolio companies, no verifiable transaction history
- Requests for fees, legal deposits, or compliance costs as preconditions to capital release
- Resistance to live video verification, or a “video call” that appears AI-generated or pre-recorded
What to do if you receive this kind of outreach
First, do not share any materials until the investor’s identity has been independently verified — not through links they provide, but through sources you find yourself. Search the individual’s name across LinkedIn, prior transactions, news coverage, and professional registries. If they claim a role at a registered entity, call that entity’s official number on record, not a number provided in the email. Run a FINRA broker check.
Second, loop in your financial advisor or investment banker immediately. In the case we documented, the target’s banking partner had already granted data room access before the verification failure was identified. That access should be revoked until verification is complete, and the banker should be made aware of the suspected contact.
Third, understand what regulatory records actually verify — and what they do not. An entity appearing on a stock exchange or a central bank registry confirms that a legal entity was incorporated and filed a document. It does not confirm that the entity is active, that a named individual works there, or that the entity has any capital to deploy.
Fourth, if you believe you have been targeted, report it. In the United States, the SEC’s Office of Investor Education and Advocacy accepts tips at sec.gov/tcr. The FBI’s Internet Crime Complaint Center handles cross-border financial fraud at ic3.gov. In Ireland, the Central Bank of Ireland accepts reports of entities misusing its regulatory filings and public registry.
The broader pattern
This is not an isolated incident. Advance fee fraud targeting companies in active fundraising processes is rising alongside the availability of AI tools that make it cheaper and faster to produce convincing, personalized outreach at scale. What previously required significant effort — a believable persona, polished correspondence, credible supporting documentation — can now be assembled in hours.
The sophistication of the cover story is no longer a reliable proxy for legitimacy. A grammatically impeccable email with the right terminology and a stack of regulatory links is not evidence of a real investor. It is evidence that someone spent an afternoon on it.
The best defense is a consistent verification process that does not rely on materials provided by the counterparty — and a culture in which anyone on the team, from the CEO down, feels empowered to pump the brakes when something does not add up.
If you have encountered a similar scheme, or would like help verifying the identity of an investor or counterparty before it matters, Backgrounder can help.