Validating an idea: adding proof-of-possession to fight payment fraud (with an AI twist)

Hey SaaS builders,

We’re working on a problem We’ve seen again and again in finance and B2B payments:

👉 Refunds, invoices, and wire transfers often get hijacked because attackers intercept emails and slip in fake bank details.
👉 Most companies rely on email for payment instructions, which is super easy to compromise.
👉 The result? Fraud losses, compliance headaches, and reputation damage.

The idea:
We’re building Attesta, a Proof of Possession platform. Instead of just checking identity, it proves people actually control the accounts they claim (IBAN, phone, email).

• OTP verification for IBANs, phone numbers, and emails
• Immutable audit trails for compliance
• Real-time proof before money moves
• (Optional add-on) AI Behavior Detection: users can enable an AI-powered risk analysis during verification sessions. It monitors natural behaviors (typing cadence, mouse movements, interaction speed) and feeds them into an LLM to flag anomalies that may indicate fraud attempts during the verification.

Early use cases:

• Bank wire refund fraud prevention
• Invoice redirection scam prevention
• Real estate wire fraud protection
• Vendor payment fraud prevention

We’re starting with a subscription business model (Free Tier, Basic and Pro) and let companies buy additional tokens for the AI add-on.

Specific to the idea:

• Have you or your company experienced this kind of fraud risk?
• Do you think a “proof of possession” step would actually solve it?
• Does the AI behavior add-on sound valuable, or gimmicky?

More general product feedback:

• How would you expect pricing to work (per verification, per seat, flat SaaS)?
• What would make you not trust a tool like this?

Really appreciate any thoughts — happy to answer questions and share more details 🙏