The Noctula platform

Real-Time AML, Fraud Detection, and Sanctions Screening Engine

One system that checks every payment for money laundering, fraud and sanctions risk. It ships with 78 ready-made rules and 8 pattern detectors, and links accounts on a graph so you can see who is connected.

Core capabilities

See risk in full context

Six services your compliance team uses every day, and three capabilities that support them.

Core Services

AML Compliance

Find money laundering and report it

Spot money being split, layered and moved through chains of accounts, then get a suspicious activity report drafted for your jurisdiction.
  • Detects structuring, smurfing and layering across several accounts
  • Drafts SARs with the timeline and reasons already written
  • Exports goAML and national XML formats, plus PDF and Word for audit

CTF & Sanctions

Screen names and hidden owners

Check every name against sanctions, PEP and adverse media lists, including owners hidden behind holding companies.
  • Flags owners above the EU AMLR 25% threshold
  • Applies the OFAC 50% rule across ownership layers
  • Matches names across spellings and alphabets
  • Screens against every sanctions and PEP list you load

Fraud Detection

Stop account takeover and scams

Catch account takeovers, card fraud and unusual payments while the customer is still in the session.
  • Scores how fast and how unusually an account is moving money
  • Recognises devices and detects emulators
  • Recommends extra verification or a block, case by case

Rule Management

Change rules without engineers

Start with 78 ready-made rules. Add your own, adjust weights, switch rules on or off, and export them as JSON.
  • Threshold, velocity, total and watchlist rules
  • Test a rule on past data before it goes live
  • Rolling time windows evaluated as payments arrive

Data Analytics & Link Analysis

See who is connected to whom

Follow shared devices, IP addresses, IBANs and fast-moving money to find organised groups on one graph.
  • Groups linked accounts into likely networks automatically
  • Finds money that goes round in a circle and comes back
  • Opens the full profile of any account in one click

Case Management

One case, one approver, full audit trail

Bring related alerts, evidence and payments into one case. The AI makes the call and a person approves it.
  • One case file with evidence and a payment timeline
  • Human approval for closing cases, filing SARs and changing rules
  • A log of every analyst and AI action that cannot be edited

Advanced Capabilities

Geographic Intelligence

Where the money goes

Map payment corridors, spot logins from places a customer could not reach in time, and profile high-risk countries.
  • Risk maps of cross-border corridors
  • Impossible-travel detection
  • FATF high-risk country profiles

OSINT Automation

Public information, without leaving the case

Look up any email address, phone number, IP address or IBAN in public sources from inside the case.
  • Disposable email and internet phone detection
  • VPN, proxy and data centre IP detection
  • Lookups run through a private, encrypted pipeline

Corporate KYB & UBO

Who really owns a company

Unpick layered company structures and find the people who ultimately own or control them.
  • Ownership thresholds calculated for you (EU AMLR 25%, OFAC 50%)
  • Walks parent and subsidiary chains
  • Passes risk from one company to the ones it owns

Investigations

See crime networks and high-risk entities clearly

Rules catch single payments. Investigations need the whole picture: every linked account and every connection, in one place.

Money Mule Ring & Layering Detection

Criminal groups split payments across dozens of accounts to stay under the radar. Noctula follows the money through several hops and links accounts that share devices or addresses, so the whole ring shows up at once.

  • Finds rings and the account at their centre automatically
  • Links accounts through shared devices, IP ranges and beneficiaries
  • Shows the direction and amount of every transfer
9,4009,8509,6009,95021,30017,100Account ••4821••1187••3302••7741••9058Exit account, LTExit account, RO
  • Collecting account
  • Likely mule
  • Exit account
  • Amounts in EUR
Ring
R-002, 7 accounts
Moved in 6 hours
38,400 EUR
Pattern
Payments kept just under 10,000 EUR, then sent abroad
Risk score
91 / 100Block

Sample data

Consolidated Investigation & Anomaly Profiling

Open any customer or company and see everything about them on one screen: who they are connected to, their accounts, IP addresses, adverse media results and how unusual their behaviour is.

  • See related customers through shared IPs, devices and payments
  • Groups suspected fraud rings for you
  • One 0 to 100 risk score, with critical cases escalated automatically

Customer profile

Customer ••4821

Retail account, opened 9 days ago

Risk score

88 / 100

Linked accounts
4
Shared IP
203.0.113.24
Adverse media
None found

Related customers

  • Customer ••5530

    Same IPSame devicePayments

    85 / 100

  • Customer ••2914

    Same IPPayments

    78 / 100

  • Customer ••0672

    Same device

    72 / 100

  • Customer ••8145

    Same IP

    41 / 100

Sample data

End to end

How the platform works

Three steps, from your payment data to a report your regulator can read.
  1. Step 1

    Ingest & Enrich

    Connect your payment data

    Send payments to Noctula through the API or in batches. Nothing changes in how your payments run.

    • Live API stream or large batch uploads
    • Checks the data format for you
    • Screens against sanctions and PEP lists on arrival
    • Collects device and session signals
    • Reads ISO 20022, JSON and CSV
  2. Step 2

    Detect & Explain

    Score every payment and say why

    Each payment gets a 0 to 100 risk score, with the reasons written out, before the money leaves.

    • 78 ready-made rules for AML, terrorist financing and fraud
    • 8 pattern detectors, from structuring to round-tripping
    • 190+ data points looked at per payment
    • A plain-language reason on every alert
  3. Step 3

    Investigate & Report

    Decide, then file

    AI analysts gather the evidence, make the call and draft the report. A person approves it.

    • 5 AI analysts: fraud, sanctions, AML, KYC and report drafting
    • SAR drafts written for your jurisdiction
    • A person approves before anything is filed
    • goAML and national XML formats, plus PDF, Word and audit log exports