Enigma Technologies, Inc.

Regulators in several states are now treating med spas as medical clinics, meaning they must be specially registered and licensed. On paper, most of these med spas are still just salons, but the procedures they offer (injectables, lasers, peels) are medical, and oversight is finally treating them that way. So we looked at how 12,646 med spas describe themselves in their own filings. 85.9% classify under a beauty-industry code, the same bucket as nail salons and day spas, rather than a medical one. In New York, 87.9% of traditional medical practices register as professional corporations, the structure the state requires for physician-owned medicine. Among med spas, the pattern flips: most file as standard LLCs. Even though plenty of med spas certainly run compliant management-services structures, the industry codes that represent these businesses are still self-reported. So when a business offering medical procedures files like a salon, that gap is exactly what a registration-only KYB check waves through, and exactly what regulators are now chasing. Registration tells you what a business calls itself. Not what it does. Read our full analysis: https://lnkd.in/eG846frq

A KYB check is a timestamp: true the day you run it, trusted for months after the business changes hands, loses a license, or faces sanctions exposure. That gap is the #2 fraud category in the U.S., part of $212B in suspicious activity, according to Financial Crimes Enforcement Network, US Treasury research. Today we're announcing our solution with Proof to close it. Business Certificates bind continuously verified business identity (Enigma) to the people and systems authorized to act for it (Proof), then cryptographically sign that identity into every wire, contract, and piece of content the business puts into the world. The timestamp problem becomes a non-issue when verification stays current and every action is signed. You can read more on the partnership in our latest article -> https://lnkd.in/gBmEePKg Want to learn more about Business Certificates, use cases, and get your questions answered live? Join our CTO Ryan Green and Proof's CTO Eric Fleischman & Sr. PM Abbie Kaiser Thursday July 23 → https://hubs.la/Q04nXSGX0

So excited to partner with Hicham and the Enigma Technologies, Inc. team. We talk a lot about identity, but commerce and trust sit at the intersection of two parties. One is most often a business. People must know they're doing business with who they intend to. Proof now ensures the businesses on our platform are vetted and verified. Business identity is also being threatened by the same forces as personal identity - forgery, false records, fraudulent statements, email compromise. Every organization must claim their identity online to protect their own brand, voice, data, and financial flows. Proof's business certificates and content certification tackles things like business email compromise, request for payment fraud, false records, and so much more. We believe x401 will soon be the standard for agentic authorization and it's critical that businesses can participate too, certifying agentic commerce in their name.

Regulators in several states are now treating med spas as medical clinics, meaning they must be specially registered and licensed. On paper, most of these med spas are still just salons, but the procedures they offer (injectables, lasers, peels) are medical, and oversight is finally treating them that way. So we looked at how 12,646 med spas describe themselves in their own filings. 85.9% classify under a beauty-industry code, the same bucket as nail salons and day spas, rather than a medical one. In New York, 87.9% of traditional medical practices register as professional corporations, the structure the state requires for physician-owned medicine. Among med spas, the pattern flips: most file as standard LLCs. Even though plenty of med spas certainly run compliant management-services structures, the industry codes that represent these businesses are still self-reported. So when a business offering medical procedures files like a salon, that gap is exactly what a registration-only KYB check waves through, and exactly what regulators are now chasing. Registration tells you what a business calls itself. Not what it does. Read our full analysis: https://lnkd.in/eG846frq

Cargo theft has hit roughly $725 million a year, and a growing share of it starts with a clean-looking KYB check. A fraudulent freight broker registers, gets an MC number, and within days is bidding on loads. Then a shipper runs a simple KYB check: active, bonded, passed. Then their cargo disappears. These costly KYB failures result from reading the same thin layer: the registration anyone can file for a fee. The FMCSA lists 111K active broker authorities, but fewer than 25K carry the bond you need to actually operate. Our latest investigation digs into what "active" really means in the freight industry, and why a passing verification is only as good as the evidence behind it.

Corporate registrations are the weakest evidence used in KYB verification checks. A registration just shows that someone filed self-reported paperwork, while a tax ID means a number was issued by the IRS. Both of these sources of "proof" can be produced in an afternoon, for a filing fee, and neither one proves that the business operates, sells anything, or exists outside its own documents. The right way to rank verification evidence is by its origin from independent sources. A registration is produced by the business itself. A customer review, a payment record, and a government inspection come from parties other than the business, and each signal gets harder to fake as more independent parties have to agree on the facts. Official records are the floor of a KYB stack. The evidence worth trusting is the evidence a business could not author on its own, the kind whose cost to fake converges with the cost of actually operating. https://lnkd.in/eR4dJAGb

A registered-agent address is one of the most common risk flags in KYB. It may also be the least useful one left. Just 128,124 addresses now account for 26.6% of all U.S. businesses. That's 0.21% of addresses carrying more than a quarter of the country's corporate filings, most of them registered-agent hubs in Wilmington, Sacramento, and Tallahassee. One of those addresses is the registered home of 1,913 businesses, and 79% of them generate zero card revenue. When a single mailroom holds that share of the registry, you can't sort risky businesses from ordinary ones just by asking "is this a registered-agent address?" That question flags a sizable slice of the legitimate economy right along with everything else. The hub is no longer the anomaly. It's the baseline. You find the right signals one layer down, with the entity instead of the address. So you ask: "does this business show operating evidence that the others at this mailbox do not?" Card revenue, a real location, a customer trail. The address tells you a registered agent works there. Only the operating record tells you which ones are actually doing business. Learn more about the landscape of registered agent hubs: https://lnkd.in/eqRX7tHu

Without fresh data, a growing account can look dead in your CRM while it's having its best year. A business may open a second location in March, cross into a new revenue tier in May, and hit its busy season in July, but the enriched record in your system would still describe the business you first pulled six months ago. Run that stale record through your GTM motion and the misses stack up: a fast-growing account scored as dormant, a closed location still getting outreach, a seasonal merchant worked right after their peak instead of before it. A good prospect would get deprioritized because your data is half a year behind. Now put an agent in the loop. You can't count on a model to notice the record has aged. So it scores the account wrong, routes the lead wrong, or works a business that no longer matches the one on file. This is the gap Enigma Enrich is built to close. Enrich connects your records to a living identity graph and real transaction signals, matching each one back to a verified business and with data that refreshes as the business changes: new locations, revenue trajectory, operating status, peak season. The record you act on is the business as it is today, not the one you loaded last quarter. Qualify and prioritize on current data:

If the running theme of the Enigma newsletter is what business identity actually looks like at scale, this week’s piece pushes that question past its breaking point by examining a federal docket where the defendants are phantom online storefronts selling counterfeit goods. The data for this story comes courtesy of our friends at the Free Law Project, whose CourtListener database is a fantastic tool for acquiring documents from the US court system.

If someone told you they started a school for AI and esoteric sciences with Bill Gates and Elon Musk, would you believe them? Would it help if they produced a piece of paper where they had written the same information down and had a clerk stamp it? Yet this exact business is officially on record with the Missouri Secretary of State. And it's not just them: a Texas company formed last September named the current president as director of a corporation called the Occult Defense Department. If you run a KYB check with a company that uses only these corporate registration records for business verification, you're working with exactly the same self-reported information you'd get if a random stranger told you he's collaborating with his good friends Bill and Elon to teach esoteric sciences to the masses. This is why Enigma's verification works from operating signals: revenue, location history, license records. A registrant can file whatever they want in a state form. They cannot manufacture card transactions. Read our full report on the abuse of self-reported corporate records: https://lnkd.in/g5d9H8UB