Free to be verified. Paid to see who is. Nothing to install for the people you're verifying.
An administrator signs in with Google Workspace or Microsoft 365. POshield confirms with your own directory that they really are an administrator, then records the organization on the blockchain as an irreversible hash. Names and addresses are encrypted in our database and never written to the chain. Free, and it only needs to happen once.
Your administrator registers the specific people authorized to send purchase orders, send or approve invoices, or change payment details. Not every employee. Keeping the list small is what keeps the verification meaningful.
When one of your verified people emails an organization you are connected with, a green check appears beside their name in Gmail or Outlook. When a sender’s address resembles a company you trust but is not it, a mismatch flag appears instead, with a note explaining what differs.
Their own organization's administrator authorized this person to send purchase orders or payment requests, and your organizations are connected. The address is exactly the registered one.
The sender's address resembles a company you've connected with but is not it, or a reply would go to a different domain than the message came from. A note above the message says exactly what differs. POshield flags it. You make the call.
You aren't connected with this sender's organization, or they aren't on POshield. It is not a verdict either way. Most mail has no badge, and that is normal.
Not one industry. Most organizations have all four.
POshield works through private one-to-one connections with the organizations you actually work with, like contacts in your phone rather than a searchable list. Verification appears for your connections only. Nobody can browse who you work with, and nobody can look up who at your company is authorized to approve payments. That list is exactly what an attacker wants, so POshield never publishes it.
Lookalike detection is built from this same list. Because POshield knows which domains you trust, it can spot the ones designed to be mistaken for them. Every connection you add extends what it can flag.
You don't need everyone at once. Whether you work with ten counterparties or four hundred, the large payments and shipments run through a fraction of them. Start there and add more over time. Getting them verified is free, and it protects both sides.
Register the people at your company who send POs, invoices, or payment requests. Now your name carries proof when you email anyone you’re connected with.
Start with the relationships carrying your largest payments and shipments. Share your invite link in the emails you already send. Verification is free for them and takes their administrator about five minutes.
Each organization you connect with is one more relationship where impersonation gets flagged, in both directions. The list only grows.