Pinned Tweet
Check the email before you pay.
Fromensics reads it in Gmail or Outlook and gives one answer: Don't pay, Check first, or Nothing looks off. Your email never leaves your browser.
Free for Chrome. New website is live: fromensics.com/
Almost 100 users, no ads yet.
Fromensics is a free Chrome extension for Gmail and Outlook web. Open an email, tap Check sender under the sender's name, and get one answer: Don't pay, Check first, or Nothing looks off. No account, and the email itself stays in your browser.
chromewebstore.google.com/de…
Fromensics 0.1.9 is live.
Every report now gives one answer: Don't pay, Check first, or Nothing looks off. Check sender sits under the sender in Gmail and Outlook. Signing controls now live beside Send, not inside the message.
chromewebstore.google.com/de…
Invoice looks wrong.
Supplier just updated their bank info.
Don’t pay until you confirm.
fromensics.com/help/bank-det…
Fromensics retweeted
We hit 100 on @Fromensics and it keeps growing. Thank you for the support everyone. Thank you to all the builders.
This is a service I know a lot of people would need. Living in #SouthAfrica, I am sure there are other countries also, we get these sms and emails from scammers and this would be a great tool. Giving it a test run. Hope you provide api for developers also so that I can plug it into my email processing pipeline for my clients.
Replying to @tawanike
Fromensics: local-first Chrome extension for vendor email/domain checks before pay. Happy for honest eyes from builders.
Replying to @Fromensics
Local-first vendor checks before paying is clever. How are you validating email reputation on-device?
When a vendor emails “new bank details,” the email is the request — not the proof.
Call a number you already have on file. Never the one in the message.
LA business paid $40k to a vendor it knew for years. Investigators: vendor email was compromised. Funds → ATMs + Bitcoin.
Known sender ≠ safe payment. Verify email/domain before you pay.
Ashfield lost $47k on a solar invoice. Fake domain: solects.com vs solect.com. Mid-thread ACH switch. Account drained in ~2 weeks.
One letter. Check the domain before you pay.
Replying to @Fromensics
Vendor-risk checks before checkout could save founders a bad surprise. Would fit nicely on @vibekingfun too 👑
Fromensics retweeted
I’m looking to connect with builders in marketing tech, OSINT, and AI. Who’s hungry?
When "new bank details" arrive by email, treat the destination as untrusted until you verify out-of-band.
Real invoices. Wrong account. That's how $800k walks.
Fromensics retweeted
We have a new Fromensics investigator.
This Post is from a suspended account. Learn more
Sudden change to a supplier’s bank details in email is a classic BEC move — even when the sender looks familiar.
Confirm with a phone number or channel you already trust from before that message. Never use the contact details inside the request itself.
A supplier email says “we’ve updated our bank details.”
Before you pay: call a number you already have on file, compare to the last invoice you paid, and treat urgency as a yellow flag.
fromensics.com/help/bank-det…
We never call an email “safe.”
The answers are Don’t pay, Check first, or Nothing looks off — same checks, same result every time, on your device.
fromensics.com/help/
Payment diversion still works the same way: a real-looking invoice, a new account number, and pressure to pay fast.
Fromensics checks that email on your device and answers Don’t pay / Check first / Nothing looks off.
How the invoice check works: fromensics.com/help/invoice-…






