Skip to content
Capillary Technologies Faces €3 Million Payment-Diversion Fraud via Impersonation

Capillary Technologies Faces €3 Million Payment-Diversion Fraud via Impersonation

First seen 31 Oct 2026, 20:13 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 31, 2026 at 21:42 UTC
  • •Capillary Technologies lost over €3 million due to impersonation fraud.
  • •The fraud involved a lookalike domain and off-channel communications.
  • •KPMG found no evidence of malware or unauthorized system access.

Capillary Technologies' Czech subsidiary, Session M Czech Republic s.r.o., lost €3,041,169.90 due to a payment-diversion fraud scheme identified by KPMG. The fraud involved impersonation of executives and legal professionals, utilizing a lookalike domain and off-channel communications, primarily through WhatsApp and personal email. The fraudulent payments occurred between June 26 and July 2, 2026, with no evidence of malware or unauthorized access to Capillary's systems. KPMG's investigation found that the fraudsters used a domain resembling the legitimate ogier.com, and communications passed standard sender checks. However, KPMG could not trace the ultimate movement of funds or identify the perpetrators. The investigation's findings were limited by the absence of certain records, including bank-portal approval logs and Slack communications. Capillary's stock has declined significantly following the incident, reflecting investor concerns.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-06-26
Fraudulent payments initiated
Four disputed payments were executed from June 26 to July 2, totaling over €3 million.
Multibagg.Ai
2026-07-31
Capillary announced KPMG investigation
Capillary Technologies disclosed an investigation into a cyber-enabled banking fraud affecting its Czech subsidiary.
Multibagg.Ai
2026-10-31
KPMG report released
KPMG's forensic review revealed a €3 million payment-diversion fraud linked to impersonation.
Tradingview

More articles in this cluster (2)

Following this threat?

Track Capillary Technologies in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

How did the fraud occur?
The fraud involved impersonation of executives and legal professionals using a lookalike domain and off-channel communications.
What evidence did KPMG find?
KPMG found no evidence of malware or unauthorized access, but identified the use of a lookalike domain and social engineering tactics.
What is the current status of the funds?
KPMG could not trace the ultimate movement of the funds or identify the owners of the receiving entities.