Appendix
Fact registry, sources and methodology
Slides carry clean numbers. Every figure is reproduced here with its source and a confidence marker: Fact from a primary source, Vendor claim for unaudited company statements, Estimate for modeled or extrapolated figures.
A1. Full fact registry
Market (S02)
| F-M1 | 57% of adults worldwide experienced a scam in the past year; 23% lost money. Fact (survey) GASA / Feedzai, Global State of Scams 2025 (Oct 7, 2025; 46,000 adults, 42 countries). |
| F-M2 | Global losses estimated at $442B. Estimate Same report. |
| F-M3 | US consumers reported $12.5B lost to fraud in 2024, +25% year over year. Fact (reported) FTC press release, Mar 10, 2025. |
| F-M4 | Share of US fraud reports involving money loss: 27% (2023) to 38% (2024). Fact FTC. |
| F-M5 | Investment scams: largest US category at $5.7B. Fact FTC. |
| F-M6 | UK: £1.28B stolen through payment fraud in 2025, +4%. Fact UK Finance, Annual Fraud Report 2026 (June 2026). |
| F-M7 | APP fraud: £576.4M, +19%, 248,070 cases. Fact UK Finance. |
| F-M8 | UK investment fraud: largest loss category, £221.5M, +40%. Fact UK Finance. |
| F-M9 | Fraud and scams: largest crime category globally. Position GASA Policy Agenda 2026. |
Competitive window (S04)
| F-C1 | Bitdefender Scamio, Norton Genie, McAfee Scam Detector and Malwarebytes Scam Guard all launched free AI scam checkers. Fact Company products. |
| F-C2 | Guardio raised $80M Series B (ION Crossover Partners), near 3x valuation vs the 2021 $47M round (Tiger Global). Fact (reported) TechCrunch, Nov 19, 2025. |
| F-C3 | Guardio: 500,000 paying users, $100M ARR. Vendor claim Company statements via TechCrunch. |
| F-C4 | GASA and OpenAI launched Scam.org (Mar 2026), 50+ languages; partners Malwarebytes, Netcraft, ScamAdviser, Spamhaus. Fact Scam.org. |
| F-C5 | Meta shipped anti-scam tools in WhatsApp, Facebook and Messenger (Mar 2026); removed 159M scam ads in 2025, 92% proactively. Vendor claim Meta. |
| F-C6 | T-Frame differentiation: speed, multi-format (text, link, QR, document, identity in one interface), OSINT-grade depth. Position Internal. |
Case studies (S06 to S10)
| F-K1a | Truecaller: ~429M MAU (Q4 FY24). Fact · Company reporting. |
| F-K1b | 83% of users active daily. Vendor claim · Company reporting. |
| F-K1c | India: 71% of revenue. Fact · Company reporting. |
| F-K1d | 4M+ paying subscribers (Premium / Gold). Fact · Company reporting. |
| F-K1e | Truecaller for Business: +48% constant-currency growth, Q4 2025. Fact · Company reporting. |
| F-K1f | Criticized on consent and data collection (The Caravan investigation; regulators in several markets). What we avoid: T-Frame keeps no messages, only anonymized results. Fact · Press, product site. |
| F-K2a | HIBP: ~180M visits. Fact · Public stats. |
| F-K2b | FBI partnership: 630M compromised passwords in a single tranche. Fact · HIBP blog. |
| F-K2c | 46 governments on the free government service. Fact · HIBP. |
| F-K2d | Integrated into Firefox and 1Password. Fact · Public. |
| F-K2e | ~1B Pwned Passwords queries per month via Cloudflare cache. Fact · HIBP. |
| F-K2f | Founder reputation (Troy Hunt) as a marketing asset. Position · Analysis. |
| F-K3a | Guardio: 1.5M users, 500k paying, ~$100M ARR. Vendor claim · TechCrunch, company claims. |
| F-K3b | Premium: $14.99 / month. Fact · Product page. |
| F-K3c | Guardio for Teams targets 17M US microbusinesses. Vendor claim · Company. |
| F-K3d | Threat-intel API licensing; Lovable partnership (Feb 2026) for scanning newly built sites. Fact · Press. |
| F-K3e | Context threat: Chrome Safe Browsing (~1B users) and Edge SmartScreen are free and built in; incremental value must be shown. Fact · Public. |
| F-K4a | Scamio: free bot on Web / WhatsApp / Messenger / Discord; checks text, link, screenshot, QR. Fact · Product. |
| F-K4b | Scamio WhatsApp launch in Australia: 7.4M users reachable. Fact · Press. |
| F-K4c | Upsell path: Bitdefender Premium Security $129.99; Norton 360 bundles up to $10,000 scam insurance. Fact · Product pages. |
| F-K4d | Norton Genie weakness: no continuous multi-item sessions. Fact (reviews) · Tom's Guide / Yahoo tests. |
| F-K5a | ScamAdviser: website checker built on 40+ data sources. Vendor claim · Company. |
| F-K5b | Licenses data to ad networks, law enforcement, brands, brand-protection agencies. Fact · Company. |
| F-K5c | Engine powers UK Get Safe Online Check a Website (with Cifas). Fact · Public. |
| F-K5d | GASA / Scam.org membership as a legitimacy channel. Fact · Public. |
Organic engine (S11)
| F-O1 | Core organic: intercept "is X a scam" queries via programmatic SEO at scale (50 pages day 30 to 500+ day 60). Position · Plan. |
| F-O2 | AEO / GEO: engineered citability in ChatGPT, Perplexity, Google AI Overviews; baseline audit day 0, measurement day 90. Position · Plan. |
| F-O3 | Shareable Scam / Safe verdicts as a built-in viral loop. Position · Plan. |
| F-O4 | Own scam-statistics reports as a recurring PR hook (data flywheel). Position · Plan; HIBP / GASA precedent. |
Influencers (S12)
| F-I1 | Niche priority: scam-baiters, then personal finance, then elder-care and family safety, then tech reviewers. Position · Plan. |
| F-I2 | Kitboga: 3.6M YouTube + 1.2M Twitch; launched own product Seraph Secure (2024); Kraken partnership. Fact · Public. |
| F-I3 | Other targets: Scammer Payback, Jim Browning, Pleasant Green. Fact · Public. |
| F-I4 | Finance-niche CPM: $50 to $200. Estimate · Creators Agency. |
| F-I5 | Baseline CPM $15 to $80; finance modifier 1.5 to 2.0x; B2B SaaS 1.8 to 2.5x; dedicated video 1.5 to 2x vs integration. Estimate · OutlierKit, Creators Agency, SponsorRadar, Influencer Marketing Hub (2026). |
| F-I6 | Per-video pricing by tier (see A3). Estimate · Same sources. |
| F-I7 | First brand offer is typically 30 to 40% below real budget; counter with a rate card based on average views of the last 10 videos, not subscriber count. Practice · Same sources. |
| F-I8 | AARP: Scam.org partner; produced a podcast with Kitboga. Fact · Public. |
| F-I9 | Start micro / mid to test messaging; standard creator media kit + company FAQ (entity, EU infrastructure, SOC 2, independent audit); full transparency in due diligence. Position · Plan. |
Ecosystems (S13)
| F-E1 | Chrome Web Store featuring as primary entry point (Guardio playbook); then Edge, Opera, Brave, Samsung Internet. Position · Plan. |
| F-E2 | Messenger bots (WhatsApp / Telegram / Messenger): zero-install entry plus built-in viral forwarding. Position · Plan; Scamio playbook. |
| F-E3 | Bank incentive: APP reimbursement £354.3M, 61% of losses returned in 2025; 89% of in-scope APP fraud reimbursed in the first 15 months of the regime. Fact · UK Finance; PSR. |
| F-E4 | UK Finance leadership publicly calls on tech and telecom firms to invest in upstream prevention, arguing banks cannot be the only line of defense. Fact · UK Finance, 2026 report (paraphrase). |
| F-E5 | Gov / NGO channels: UK national anti-fraud campaign, FTC campaigns, GASA / Scam.org partner slot, AARP. Fact · Public. |
| F-E6 | Password-manager and AV integrations (HIBP with 1Password / Firefox precedent). Fact · Public. |
Paid acceleration (S14)
| F-P1 | Channel priority: Google Search intent capture, then Meta Advantage+ (45+ audience), then TikTok Smart+ / Reels / Shorts, then YouTube pre-roll on scam-baiting content, then Reddit (r/scams; r/ScamNumbers, 62k members). Position · Plan. |
| F-P2 | Advantage+ tests up to 150 creative combinations; claimed 3.14 ROAS vs 2.70 manual (+16%). Vendor claim · Meta. |
| F-P3 | TikTok launched an Ads MCP server for agentic campaign management (May 12, 2026). Fact · TikTok. |
| F-P4 | CPI benchmarks: North America $2.5 to $5.28; EMEA $2 to $4; LatAm $0.5 to $2; finance apps ~$8.23. Estimate · Business of Apps, Adapty, AppsFlyer 2025 to 2026. |
| F-P5 | Global UA spend: $78B in 2025, +13% YoY; iOS +35%. Fact (reported) · AppsFlyer. |
| F-P6 | Target CAC per signup: $2 to $4; primary metric is cost per active user (checker activation), not CPI; freemium install to paying conversion is 1 to 5%. Estimate · Plan; industry benchmarks. |
| F-P7 | Agentic creative loop: Meta Muse Image (Jul 7, 2026), TikTok Symphony Agent (Jun 22, 2026), Canva Grow 2.0 (Jun 25, 2026). Human gates: brand safety, offer, budget. Governed autonomy: spend caps, approval gates, audit logs, kill switch. Fact · Platform announcements. |
Workstreams (S15)
| F-W1 | Seven agentic workstreams, each with a mandatory human gate: content factory (legal / claims review); programmatic SEO (brand safety + fact check); AEO / GEO (strategic review); ad creatives (offer + budget + brand safety); influencer prospecting and outreach (contract + creator due diligence); community monitoring (publication + crisis PR); analytics (budget decisions). Plan |
| F-W2 | Stack: n8n (orchestration) + Claude (reasoning) + MCP (connectivity) + Clay / Instantly (outreach) + Frase / AirOps (content / AEO) + generative creative tools (HeyGen, ElevenLabs, Runway, Midjourney). Plan |
| F-W3 | Human-critical zones: brand governance, legal / claims (fraud detection is regulated territory; no guarantees; product stays AI-assisted and informational only), influencer contracts, partner deals, crisis PR. Plan |
Geography (S16)
Ranking criteria: per-victim losses, digital adoption, English-first reach, and the maturity of national anti-fraud campaigns.
| F-G1 | US (Tier 1): ~$64B total; avg $1,086.70 / victim; 70% targeted. Estimate · GASA State of Scams USA 2025 (with Iris / Generali). |
| F-G2 | UK (T1): £9.4B stolen; avg £878.60 / victim; 1 in 5 loses money. Estimate · GASA UK 2025 (with Cifas). |
| F-G3 | Singapore (T1): highest per capita, avg US$2,132 / victim; FT (May 2025) reported avg US$4,031 for 2024. Estimate · GASA SEA 2025; FT. |
| F-G4 | Australia (T1): A$2.18B reported, +7.8%; avg Scamwatch report A$12,212. Fact (reported) · NASC Targeting Scams, Mar 2026. |
| F-G5 | Canada (T1): avg ~C$2,406 / victim (2023 data); 75% encounter scams (2025). Estimate · GASA. |
| F-G6 | UAE (Tier 2, months 4 to 6): 1 in 3 loses money; avg US$2,194; Arabic and English localization. Estimate · GASA 2024 (with BioCatch). |
| F-G7 | Germany (T2): est. €12B; avg €2,619 / victim; German localization required. Estimate · GASA Germany 2026 (with Worldline). |
| F-G8 | Philippines (T2): 65% targeted, ~31% lose money (2nd in SE Asia); avg ₱11,896 near US$210. Estimate · GASA. |
| F-G9 | Tier 3 (volume, later): Brazil est. US$54B (R$99B), Portuguese; India US$48B, WhatsApp-first. Enter after the model is proven. Estimate · GASA. |
| F-G10 | See A2 methodology note. Method note · GASA. |
Monetization (S17)
| F-Z1 | Idea 1: anonymized real-time threat-intel feed (new phishing domains, IBAN swaps, message templates) licensed to banks and insurers. Revenue high, ethical risk low with full anonymization, fit excellent. Position |
| F-Z2 | Idea 2: Verified Sender status for brands. See A5 for guardrails in full. Position |
| F-Z3 | Idea 3: white-label engine for telecoms, ISPs and banks (ScamAdviser with Get Safe Online playbook). Revenue high, recurring, near-zero CAC; ethical risk low; fit excellent. Position |
| F-Z4 | Idea 4: anonymized threat-intel licensing to cyber vendors, AI browsers, fintech and KYC platforms via API (Guardio with Lovable playbook). Revenue mid-high, recurring; ethical risk low; fit excellent. Position |
| F-Z5 | Idea 5: government and NGO grants funding free citizen access (HIBP government playbook, 46 countries). Revenue mid; ethical risk minimal; fit excellent as a trust and legitimacy channel. Position |
| F-Z6 | Avoid: referrals of victims to recovery services (recovery scams are themselves a top fraud category). B2C2B: ship invite-your-team / Teams early, then a Trust Defender upsell. Position |
Roadmap and gates (S19, S22)
| F-R1 | Days 0 to 30 (Foundation): start SOC 2 Type I; publish transparency page + company and trust FAQ; submit Chrome extension; 50 programmatic SEO pages; AEO baseline audit; deploy agent stack (n8n, Clay, Frase); pilot 5 to 10 micro influencers; ship shareable verdict mechanic. KPI: 25,000 signups. Plan |
| F-R2 | Days 31 to 60 (Traction): WhatsApp / Telegram bot; scale SEO to 500+ pages; first own scam-statistics PR report; paid tests on Meta / Google with CAC target under $4; dedicated video with a mid-tier scam-baiter; GASA / Scam.org application. KPI: 120,000 cumulative. Plan |
| F-R3 | Days 61 to 90 (Scale): double down on winning channels; first bank / telecom pilot conversation (B2C2B / threat intel); referral mechanic; AEO citability measurement; Tier 2 geo expansion. KPI: 250,000+; trajectory to 500k by month 6 to 9. Plan |
| F-R4 | Decision thresholds: day 30 under 15k, rethink channels; over 40k, accelerate budget. Paid CAC over $6 after optimization, shift budget to organic and influencers. Trust or provenance questions in the first 10 creator conversations, accelerate the trust program before scaling spend. Plan |
Budgets (S20)
| F-B1 | Lean (~$150k / 3 mo): organic-first (SEO / AEO / bot); $40k paid tests; $30k micro / mid influencers; $30k agent stack + SOC 2; remainder content / ops. CAC target $3 to $4. Expected ~150 to 200k users. Estimate |
| F-B2 | Growth (~$500k / 3 mo): +$200k paid (Meta / Google / TikTok); + macro scam-baiter dedicated; + Tier 2 localization. Expected ~350 to 450k users. Estimate |
| F-B3 | Aggressive ($1M+ / 3 mo): + mega influencers; broad YouTube campaigns; full geo expansion. 500k+ achievable by month 3 to 4. Estimate |
Caveats (S21)
| F-X1 | Influencer and CAC figures are industry benchmarks, not guarantees; actuals depend on creative, product and market. |
| F-X2 | Platform lifts (Advantage+ 3.14 ROAS, Muse ratings) are vendor-stated and not independently audited. |
| F-X3 | GASA methodology changed in 2025; full reports are member-only; figures come from press releases and partner pages; verify against source PDFs before public use. |
| F-X4 | Guardio's 500k paying / $100M ARR are company claims, not audited reporting. |
| F-X5 | Fraud detection is regulated territory: every public claim passes legal review; no detection guarantees, ever. |
A2. GASA methodology note
GASA changed its methodology in 2025: it trims the top 2 to 5% of outliers and no longer extrapolates a single global total. As a result, the $442B figure is not comparable to the prior estimate near $1T, and country figures are not year-over-year comparable. Verify each number against source PDFs before any public use.
A3. Influencer pricing detail
Per-video pricing by audience tier: nano (1 to 10k) $50 to $500; micro (10 to 100k) $200 to $5,000; mid (100 to 500k) $1,500 to $25,000; macro (500k to 1M) $5,000 to $80,000; mega (1M+) $15,000 to $250,000. Baseline CPM $15 to $80, with a finance modifier of 1.5 to 2.0x, B2B SaaS 1.8 to 2.5x, and a dedicated video worth 1.5 to 2x an integration. Sources: OutlierKit, Creators Agency, SponsorRadar, Influencer Marketing Hub (2026).
A4. CAC benchmark detail
CPI benchmarks: North America $2.5 to $5.28; EMEA $2 to $4; LatAm $0.5 to $2; finance apps around $8.23. Global user-acquisition spend reached $78B in 2025, up 13%, with iOS up 35%. Our target CAC per signup is $2 to $4, and the primary metric is cost per active user, not cost per install. Freemium install to paying conversion runs 1 to 5%. Sources: Business of Apps, Adapty, AppsFlyer 2025 to 2026.
A5. Monetization guardrails (Verified Sender, in full)
Idea 2, a Verified Sender status for brands, carries mid-to-high revenue but a high ethical risk, because a pay-to-play badge can corrupt the trust the product sells. It ships only behind strict guardrails: verification rests on objective KYC and technical signals only; the trust score is never for sale; labeling is fully transparent; and an independent body provides oversight. Fit is cautious, not excellent.
A6. Trust program detail
The trust architecture is built proactively, the way any serious anti-scam consumer brand earns credibility. Certifications: SOC 2, ISO 27001 and GDPR compliance, verified by an independent audit. Data: EU and Swiss data residency on independent hosting, with no messages stored, only anonymized results. Transparency: a public report that includes law-enforcement request statistics. Credibility signals: named security advisors and reputable investors, following the signal ION sent by backing Guardio. Due diligence: a standard creator media kit and company FAQ covering entity, infrastructure, certifications and audits. Brand separation: the consumer brand Trusterity is kept distinct from the enterprise product line, because privacy-conscious consumers distrust tools that feel adjacent to enforcement. Outreach starts with micro and mid creators to test the message before scaling.
A7. Sources
- GASA / Feedzai, Global State of Scams 2025 (Oct 7, 2025; 46,000 adults, 42 countries)
- GASA Policy Agenda 2026
- GASA State of Scams USA 2025 (with Iris / Generali)
- GASA UK 2025 (with Cifas); GASA SEA 2025; GASA Germany 2026 (with Worldline); GASA 2024 (with BioCatch)
- FTC press release, Mar 10, 2025
- UK Finance, Annual Fraud Report 2026 (June 2026); Payment Systems Regulator
- NASC Targeting Scams, Mar 2026 (Australia)
- Financial Times, May 2025 (Singapore average loss)
- TechCrunch, Nov 19, 2025 (Guardio Series B)
- Scam.org (GASA and OpenAI launch, Mar 2026)
- Meta, TikTok, Canva platform announcements (2026)
- Company reporting and product pages: Truecaller, Have I Been Pwned, Guardio, Bitdefender, Norton, ScamAdviser
- Tom's Guide, Yahoo (Norton Genie reviews)
- Business of Apps, Adapty, AppsFlyer 2025 to 2026 (UA and CPI benchmarks)
- OutlierKit, Creators Agency, SponsorRadar, Influencer Marketing Hub 2026 (creator pricing)
- Public creator channels: Kitboga, Scammer Payback, Jim Browning, Pleasant Green; AARP