About
The compliance infrastructure for emerging-market commodity trade.
OilFlow is a B2B SaaS company selling five compliance products to bank, insurer, and trading-house compliance teams, plus the front-office RMs they clear deals for. The platform's verification stack caught a $50M Chevron-CEO impersonation in 30 minutes — proof that the commercially valuable asset is the trust infrastructure. The products (Regulatory Matrix API, KYC-as-API, Scam Cluster Intelligence Feed, Trade-Compliance Workflow Suite, Pre-Deal Compliance Copilot) span 235 jurisdictions with 8-list sanctions screening + PEP.
WHAT WE ARE
- 7-step KYC, 8-list sanctions + PEPStatus: live
- 235-jurisdiction regulatory matrixStatus: live
- First-party-investigated fraud clustersStatus: live
- White-label workflow + audit logStatus: live
WHAT WE ARE NOT
- A bank, MSB, or fund custodianStatus: blocked
- An LC issuer, advisor, or confirmerStatus: blocked
- An inspection or insurance underwriterStatus: blocked
- A dispute arbitratorStatus: blocked
“The commercially valuable thing isn’t the marketplace. It’s the compliance infrastructure that caught the fraud.”
Origin
Marketplace MVP to compliance infrastructure
OilFlow did not start as a compliance company. It became one the day the verification gate caught a fraud the marketplace was about to introduce.
Full teardown · /case-studies/simar
- Early 2026Marketplace MVP
Commodity buyer/seller matching, with a 7-step verification gate in front of every introduction. The gate mattered more than the matching.
- May 2026The Simar catch
The verification stack flagged a Chevron-CEO impersonation behind a $50M cargo lift in 30 minutes. The evidence chain is published in full.
- May 2026Pivot to compliance infrastructure
The verification stack became the product: five compliance products sold to the desks that already pay for screening.
From the founder
I'm not an oil trader. I built this for the people who are: refinery operators in Lahore, Mumbai, and Bilbao; thirty-year veterans of the Houston and Geneva floors; brokers working Rotterdam, Singapore, Karachi, and Lagos. I spent months listening to them describe the same failure. Deals that fell apart, not on price, but because the counterparty was a broker of a broker, the documents never matched, and no one could confirm who was actually shipping what.
OilFlow is what I built after hearing that story enough times. A verification stack across 235 jurisdictions: a 7-step background check screening sanctions against eight lists plus PEP (OFAC SDN, OFAC Consolidated, UN, EU, UK HMT, Canadian SEMA, Australian DFAT, Swiss SECO), company registration, regulator licensing, and trade references. All of it exposed as APIs.
In May 2026, the screening engine caught a verifiable Chevron-CEO impersonation in about 30 minutes. It would have cost a buyer $50M. That moment changed what I thought OilFlow was. The commercially valuable thing wasn't the marketplace I had started building. It was the compliance infrastructure that caught the fraud. So I productized it: five products for bank, insurer, and trading-house compliance teams, and for the front office that wants a deal cleared before structuring it.
We don't hold funds. We don't issue letters of credit. We don't arbitrate disputes. We do the unglamorous parts: verification, regulatory screening, fraud-pattern detection, document orchestration. And we license them to the people who already pay for compliance.
Talk to me if you run a trade-finance compliance desk, a trade-credit underwriting book, or a trading-house compliance team. If what I described doesn't fit, reply and tell me where I'm wrong. I read every message.
Rafae Musharraf
Founder · Karachi, Pakistan
COMPLIANCE APIs
Five products. Early access open.
Regulatory Matrix API (developer / production / enterprise tiers), KYC-as-API (PAYG and seat-based), Scam Cluster Intelligence Feed, Trade-Compliance Workflow Suite, and the Pre-Deal Compliance Copilot. Talk to us about pilot pricing for compliance teams.