Malspam & phishing
Collecting and organizing high-volume malicious email to identify recurring lures, infrastructure, and delivery patterns.
Independent email fraud research
Escrow Experts
We study the emails behind business email compromise, payment diversion, phishing, and malicious email campaigns.
Research focus
From one suspicious email to the campaign behind it.
BEC & payment diversion
Studying the language, identities, and infrastructure used to redirect invoices, payroll, escrow, and wire payments.
Campaign intelligence
Connecting individual messages into useful campaign-level reporting with transparent evidence and confidence.
Method
Evidence first. Conclusions second.
The goal is not to make every message sound dramatic. It is to preserve what arrived, explain what can be proven, and clearly label what is inferred.
Collect
Preserve raw email and collection context before analysis changes the evidence.
Analyze
Extract headers, identities, URLs, attachments, language, and authentication results.
Connect
Cluster related messages and infrastructure without pretending every shared indicator proves attribution.
Report
Turn technical findings into concise intelligence that supports detection and investigation.
Have a suspicious email?
Preserve the original message.
Authorized researchers and partners can submit complete .eml files to research@escrowesperts.com. Remove unrelated personal or customer data before sharing.