ERP Interception
Invoice attachment or bank change request arrives via email or vendor portal. Automated webhook captures exposure.
Built for the CALL-E Hackathon · $10,000 Prize Pool
Every vendor bank change demands an airgap phone call.
Business Email Compromise (BEC) steals $55 Billion by tricking AP clerks with fake invoice wire changes. VaultCall uses CALL-E to autonomously dial pre-verified corporate treasury officers, execute voice challenge-responses, and mint cryptographic release certificates before a single dollar moves.
✓Deterministic Fixture Replay·✓Zero API Key Required·✓Simulated SOX 404 Advisory Standard
Live Synthetic Defense Audit
Apex Global Logistics LLC
Phishing Invoice Intercepted ($785,000)Claimed burner phone +1 (305) ***-0144 STRIPPED
CALL-E Dialed Corporate PBXDialed +1 (312) ***-0188 · Security Ref: Bravo-Zulu-918
Controller Shouted Fraud on Record"DO NOT send that money! Email was breached!"
Capital Saved$785,000 USD
Security ActionAccount Frozen
From Suspicious Email to Cryptographic Release
The 4-Step Out-of-Band Defense Architecture
The phone call is never an isolated chatbot conversation. It is an immutable cryptographic verification gate integrated directly into enterprise ERP accounting before any wire moves.
Airgap Policy Gate
Strictly strips any phone number in the email. Resolves pre-verified corporate PBX from hardened registry and mints NATO token.
CALL-E Spoken Challenge
CALL-E dials the CFO, requests Tax ID digits, states invoice details, and records verbal assent or fraud denial.
Cryptographic Verdict
Evidence reconciler links transcript turns. Valid verifications mint a SHA-256 certificate; fraud attempts lock accounts.
Evidence-Linked Grounding
No silent hallucinations. Extracted claims are matched against literal callee turns. Any ungrounded claim strikes through and fails closed.
Fail-Closed Gatekeeper Hold
Voicemail, IVRs, and receptionists are NOT verification reaches. Transactions remain securely locked until an authorized officer speaks.
SHA-256 Irrevocable Audit
Every verification mints a cryptographically stamped audit receipt with timestamps and advisory release tokens for internal control reviews.