Intelligence fusion platform
Gov AI
From fused picture to decision
Every intelligence discipline in one ontology, turned into warnings, assessments and briefs.
Explore Gov AI
Intelligence fusion · Financial crime · Cyber defense
Clarity for the decisions that protect nations and markets
Intelligence fusion for governments, graph analytics for financial institutions, and security software for both.
Platforms & services
Three disciplines, one hardened platform
Intelligence fusion, financial-crime analytics and cyber defense share one governed data model, one audit trail and one accountable team.
- On-premises, government cloud or hybrid
- Air-gapped deployment support
- Tamper-evident audit trail
- POPIA and GDPR aligned
Fraud, AML & compliance
FinCrimes
Expose the ring, not just the transaction
Graph analytics and compliance toolkits for banks, insurers, central banks and FIUs.
Explore FinCrimesSecurity products & services
Cybersecurity
Protect privileged access, credentials and operations
GovPAM and KeyCare Pass, backed by 24/7 security operations and offensive testing.
Explore CybersecurityGov AI · Intelligence fusion
Every discipline, one operating picture
Seven intelligence disciplines resolve into one governed ontology, so every person, place and account is a single record, and analysts act on warnings rather than raw feeds.
Capabilities
Where teams start
Gov AIMulti-INT fusion: every discipline resolved into one ontologyGov AI · MissionCounter-terrorism: networks, financing, travel and warning indicatorsGov AI · MissionPublic order: crowd safety and violence early warning at mass gatheringsGov AIGeospatial intelligence and visual geolocation of imageryFinCrimesGraph analytics that expose laundering rings and fraud networksFinCrimesSupervisory analytics for central banks, regulators and FIUsCybersecurity · ProductGovPAM: vault, approve and record every privileged sessionCybersecurity · ProductKeyCare Pass: password vaults encrypted on the device
Built for your mission
All use casesElection-period disinformation surgeWeeks before a national election, coordinated networks flood nine social platforms with voter-suppression narratives in local languages that English-only monitoring tools never see.Cross-border threat cell trackingA trafficking cell operates across porous borders while its digital footprint sits fragmented across informants, signals and open sources that analysts stitch together by hand.Mule network cashing outStolen funds hop through dozens of freshly opened accounts and exit through ATMs and remittance corridors before the bank's overnight batch review even runs.SIM-swap account takeoverFraudsters hijack a customer's phone number, intercept one-time passcodes and drain accounts in minutes, long before the victim's first call to the contact center.Staged-accident ring across provincesThe same tow operators, assessors and 'witnesses' keep resurfacing in collision claims across multiple provinces, but each claim looks clean when reviewed on its own.Ghost policies and provider collusionBilling clerks and colluding medical providers write phantom policies and file claims for treatments no patient ever received, quietly bleeding the book for years.Ransomware readiness for a regional bankA mid-size bank knows it is a ransomware target but runs no overnight security coverage and has never tested how far an attacker could actually get.Cloud migration without a CISOA fast-growing enterprise is moving core workloads to the cloud with no security executive, no architecture baseline and auditors already asking questions.A laundering network spread across banksA financial intelligence unit receives reports from many banks, but a network that keeps each account below one bank’s thresholds never looks unusual to any single reporter.Shared administrator passwords in a ministryAdministrators and suppliers share root and domain-admin passwords, supplier VPN profiles outlive their contracts, and nobody can say who changed a critical server or when.
Typology library
Know the scheme before it reaches you
Twenty-eight fraud and AML typologies explained the way an investigator would: mechanics, red flags, data signals and response.
Dark Pools Research
All insightsInsights
Intelligence · 11 October 2026Super Intelligence (SI): what the federal rename of AI means3 min read Financial crime · 9 October 2026How mule networks cash out before the overnight review runs4 min read Financial crime · 9 October 2026SIM-swap account takeover: the signals in the first minutes4 min read Intelligence · 9 October 2026Election disinformation in local languages: what English-only monitoring misses4 min read Financial crime · 9 October 2026Why every fraud alert should show its work4 min read
Industries
Solutions by sector
Global presence
Serving governments and financial institutions worldwide
Offices in Cape Town, Johannesburg, Manzini and Dover, with deployments across the European Union.
FAQ
Frequently asked questions
Dark Pools builds intelligence fusion software for governments (Gov AI), graph analytics and AML compliance software for banks, insurers, central banks and financial intelligence units (FinCrimes), and security products and services (GovPAM, KeyCare Pass and 24/7 security operations), deployed on infrastructure each client controls.
Dark Pools monitors Facebook, Twitter/X, Instagram, TikTok, WhatsApp, Telegram, LinkedIn, YouTube and Reddit across South Africa, Zimbabwe, Botswana, Namibia, Eswatini, Lesotho, Mozambique and Zambia.
The platform supports 11+ languages including English, Afrikaans, isiZulu, isiXhosa, Sesotho, Setswana, Swahili, Shona, Ndebele and Portuguese, for coverage across Southern Africa.
FinCrimes covers 28 fraud and AML typologies across two licensed workspaces. Banking covers structuring, mule rings, velocity spikes, dormant-account reactivation, round-tripping, synthetic identities, card testing, stolen-card bursts, BIN attacks, SIM-swap takeover, agent cash-out laundering, mobile-money Ponzi schemes, corridor structuring and funnel accounts. Insurance covers staged-accident rings, phantom vehicles, multi-claim VINs, inflated claims, ghost policies, early-death clusters, over-insurance, provider collusion, phantom billing, doctor shopping, impossible billing days, arson patterns, repeat losses and inflated contents claims.
Yes. A real-time scoring API returns a 0–100 risk score with contributing signals, matched typologies and an approve, review or block recommendation in milliseconds, before a transaction is booked or a claim is paid. The same engine scores streamed micro-batches and full historical backfiles, and every alert ships with an explainable evidence trail.
Dark Pools provides 24/7 SOC-as-a-Service from its Southern African operations centers, SIEM engineering and management, penetration testing and red teaming across web, API, mobile, network and cloud, continuous vulnerability management, MITRE ATT&CK-aligned threat hunting with dark-web monitoring, and advisory services including vCISO, ISO 27001, NIST and POPIA readiness and security-first enterprise architecture.
Ready to transform your intelligence, fraud and security operations?
Join government agencies, banks and insurers across the United States and Southern Africa using Dark Pools for mission-critical intelligence analysis, financial-crime detection and 24/7 cyber defense.
Demonstrations are arranged to your security requirements, on synthetic data or in your own environment.