Skip to content
Spectre WatchHONOUR IN EVERY ACTION
How we engage

A disciplined operating model, from brief to prevention.

Each stage has a named owner and a defined deliverable. You see progress at every step.

Operating model

Eight stages. Named owners. Clear deliverables.

The same discipline runs a guard deployment, a fraud investigation or a dark-web takedown.

  1. 1

    Client requirement

    Brief and objectives

  2. 2

    Assessment & scope

    Plan and boundaries

  3. 3

    Intelligence collection

    OSINT, HUMINT, data

  4. 4

    Analysis & validation

    Corroborate findings

  5. 5

    Field & digital investigation

    Enquiry and forensics

  6. 6

    Evidence & reporting

    Counsel-ready findings

  7. 7

    Action & recovery

    Enforcement and asset recovery

  8. 8

    Prevention & monitoring

    Controls that continue

Proof of execution

Illustrative case studies.

How mandates run in practice — across field, forensic and digital work.

Case 1 · Brand · Trade channel

Trade-channel diversion at a consumer goods manufacturer

Situation
Identical stock was selling below trade price in two states the company did not supply, reported first by its own distributors.
Risk
Channel leakage, price erosion and breach of distributor agreements across a region carrying a material share of national revenue.
Approach
Field enquiry across retail points, test purchases, batch-code tracing, and reconciliation of depot dispatch records against secondary sales.
Technology used
IP Octopus monitored online listings and resellers alongside the field enquiry, linking physical and digital channels.
What was established
Two depots were identified as the leakage point, with documented evidence used in contract termination and recovery.
What followed
Monitoring was retained on the region’s trade channel and marketplaces after the matter closed.

Illustrative and anonymised. Client names, locations and figures are withheld under confidentiality obligations.

Case 2 · Forensic · Procurement

Procurement fraud surfaced by a whistleblower report

Situation
A whistleblower report alleged that a plant procurement team was awarding orders to vendors connected to its own employees.
Risk
Vendor collusion, inflated pricing and undeclared conflicts of interest across a substantial annual procurement spend.
Approach
Forensic review of vendor masters, bid records and bank statements, corporate-records diligence on each vendor, and structured management interviews.
Technology used
Whistle Sentinel received, triaged and case-managed the report with a complete audit trail from intake to closure.
What was established
Several vendors were traced to relatives of two employees, supporting disciplinary action and recovery of overpayments.
What followed
Third-party integrity screening was embedded into vendor onboarding and reviewed each quarter.

Illustrative and anonymised. Client names, locations and figures are withheld under confidentiality obligations.

Case 3 · Cyber · Digital risk

Executive impersonation and data leakage traced through digital intelligence

Situation
Executives were impersonated across email and social profiles while customer data surfaced for sale on a dark-web forum.
Risk
The activity spanned domains, platforms and closed forums, with no single owner and no obvious point of entry.
Approach
Threat intelligence, dark-web monitoring and infrastructure analysis combined with a forensic review of the affected mailboxes.
Technology used
FraudSentinel360 and dark-web monitoring correlated the fake domains, profiles and data listing to a common actor.
What was established
The leak was traced to a compromised third-party vendor account; the impersonation infrastructure was mapped and evidenced.
What followed
Domains and profiles were taken down, vendor access closed, and monitoring retained on brand and executives.

Illustrative and anonymised. Client names, locations and figures are withheld under confidentiality obligations.

Engagement models

From a single assignment to continuous cover.

Commercial structure follows the mandate: fixed fee, retainer, managed service or subscription.

Project

A defined investigation, audit or deployment — fixed scope and fee.

Retainer

Ongoing intelligence, investigation and security support.

Managed service

Continuous monitoring, investigation, manpower and reporting.

Technology

Platform subscription and technology-enabled service.

Have a situation that needs discreet, decisive handling?

Talk to a senior team member. Every enquiry is treated as confidential from the first conversation.

CallContact us