Karsten Wenzlaff, Advisor
August 26th, 2025
Funding | Nov 10, 2023
Cavelo's platform aligns with stringent data privacy and security regulations like GDPR and HIPAA, simplifying compliance and risk management. The platform's effectiveness is echoed by customers like William Ercolano, Vice President of Client Technology at ECI, who praised its ability to intelligently present data leakage risks. Despite market challenges, Cavelo has achieved a notable 272% year-over-year revenue growth.
Taha Mubashir, Principal at Inovia Capital:
"Cavelo represents the future of cybersecurity investments. Their customer-first approach and commitment to innovation in attack surface management are driving significant growth."
James Mignacca, Founder and CEO of Cavelo, highlights the platform's design, focusing on customer needs in an era of increasing digitalization and cloud service adoption.
"Our success is a direct result of our customers' trust. The Cavelo platform is a turnkey product that mitigates risk and exposure by identifying sensitive data, its location, access, and prioritizing software vulnerability remediation."
This investment marks a significant milestone for Cavelo, enabling it to enhance its support for customers and channel partners in navigating the evolving cybersecurity landscape. View the original press release here.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Oct 27, 2023

Photo by Sora Shimazaki from Pexels
In an increasingly interconnected world, where digital transactions are the norm, push payment fraud has emerged as a significant global threat. This insidious form of cybercrime affects not only individuals but also organisations, causing widespread financial losses and eroding trust in online financial systems.
This article delves into the rising risk of push payment fraud, explores its worldwide implications, and highlights preventive measures, cybersecurity trends, and legal actions aimed at countering these evolving threats.
Push payment fraud, also known as authorised push payment (APP) fraud, is a type of cybercrime in which individuals are manipulated into transferring money to a fraudulent account willingly. Unlike traditional unauthorised transactions, push payment fraud relies on deception and manipulation rather than hacking.
Push payment fraud schemes have become more sophisticated, and fraudsters employ various tactics to deceive victims. One common method is impersonating legitimate organisations or individuals, such as a bank, a vendor, or even a close friend.
Through carefully crafted emails, phone calls, or messages, fraudsters convince victims to make payments or divulge sensitive financial information.
The global scale of push payment fraud is striking. In the United Kingdom, for example, the UK Finance report revealed a staggering £479 million lost to APP fraud in 2020, affecting thousands of individuals and businesses. The ramifications extend far beyond monetary losses, as victims often experience emotional distress and reputational damage.
The consequences of push payment fraud are not confined to a single nation; it's a global issue with cascading effects. Here's a closer look at how it affects individuals and businesses worldwide:
The immediate impact of push payment fraud is financial. Victims lose their hard-earned money to criminals, often with little hope of recovery.
Being deceived in a push payment scam can be emotionally devastating. Victims experience a range of emotions, from anger and betrayal to shame and embarrassment.

Photo by Sora Shimazaki from Pexels
The loss of trust in digital transactions can have far-reaching effects. Individuals may become more sceptical, leading to slower adoption of digital financial services.
For businesses, push payment fraud can result in substantial financial losses. This affects their profitability, hindering growth and sustainability.
Detecting and addressing fraud can disrupt business operations. This can involve investigations, legal proceedings, and the need for enhanced cybersecurity measures.
Falling victim to payment fraud can tarnish a business's reputation. Customers may lose trust, impacting long-term relationships and competitiveness.
Addressing the global impact of push payment fraud requires a multifaceted approach involving individuals, businesses, and regulatory bodies. Here are some key preventive measures and cybersecurity trends that are emerging in response to this growing threat:
Educating individuals and employees about the tactics used by fraudsters is crucial. Raising awareness can help people recognise and avoid falling victim to push payment scams.
Implementing 2FA can add an extra layer of security to financial transactions. This requires users to provide two different authentication factors, such as a password and a one-time code, making it more challenging for fraudsters to gain access.
Businesses are increasingly using real-time monitoring systems to detect and prevent fraudulent transactions. These systems can spot suspicious activities and halt transactions before money is transferred.
Governments and regulatory bodies are taking legal actions to combat push payment fraud. In the UK, the introduction of the Contingent Reimbursement Model (CRM) Code is a significant step toward protecting consumers.
Collaboration between financial institutions, law enforcement agencies, and businesses is essential to address push payment fraud effectively. Sharing information and best practices can improve collective defences.
AI and machine learning are being employed to identify patterns and anomalies associated with fraud. These technologies can enhance the detection of fraudulent activities.
In response to the rising threat of push payment fraud, the UK introduced the CRM Code in 2019. This voluntary code sets out standards for banks and other payment service providers to adhere to when determining whether victims should be reimbursed.
The code outlines circumstances under which victims can expect to be reimbursed and encourages better industry cooperation to combat fraud. The CRM Code has been a significant development in the fight against push payment fraud, offering consumers greater protection.

Photo by Tima Miroshnichenko from Pexels
Push payment fraud is not just a local or regional problem, it's a global issue with far-reaching consequences. Its impact on individuals and businesses extends beyond financial losses, affecting trust, emotional well-being, and reputation. As the world becomes more digitally connected, the threat of push payment fraud continues to grow.
In response to these challenges, a combination of education, awareness, technological advancements, and legal actions is essential to mitigate the global impact of push payment fraud. By staying informed, implementing security measures, and collaborating across sectors, we can work toward a safer digital space for individuals and businesses worldwide.
The rise of push payment fraud is a global concern with significant consequences. Preventive measures and trends in cybersecurity are emerging to counter this threat, and legal actions, such as the CRM Code in the UK, offer consumers greater protection. Push payment fraud requires a collective effort to safeguard the global community from its damaging effects.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Regulation | Oct 25, 2023

Image: Unsplash/Vitaly Taranov
FinCEN has announced a Notice of Proposed Rule Making (NPRM), identifying international CVC mixing as a primary concern in money laundering activities. This proposal aims to increase transparency around CVC mixing, preventing its misuse by malicious entities such as Hamas, Palestinian Islamic Jihad, and the Democratic People’s Republic of Korea (DPRK). The proposal is available for viewing in the federal register here.
In May 2022, the US Treasury of Foreign Assets Control designated crypto mixer Blender.io as a Specially Designated National ("SDN"), marking the first time a virtual currency mixer had been sanctioned.
Andrea Gacki, FinCEN Director:
CVC mixing offers a critical service that allows players in the ransomware ecosystem, rogue state actors, and other criminals to fund their unlawful activities and obfuscate the flow of ill-gotten gains. This is FinCEN’s first ever use of the Section 311 authority to target a class of transactions of primary money laundering concern, and, just as with our efforts in the traditional financial system, Treasury will work to identify and root out the illicit use and abuse of the CVC ecosystem.
The proposed rule aims to deny illicit actors access to the U.S. and global financial systems by increasing transparency and reporting requirements for financial institutions.
The NPRM is currently available for public viewing, and written comments can be submitted within 90 days of its publication in the Federal Register.
By targeting CVC mixing, the Treasury aims to combat the illicit use of virtual currencies by various actors, safeguarding the integrity of the financial system. This initiative reflects the government’s proactive approach to adapting to the evolving landscape of virtual currencies and ensuring that innovation does not compromise security.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |