Email compromise and wire-fraud investigations for San Antonio businesses.
A single spoofed email can cost a business a wire transfer. Our examiners investigate business email compromise for companies in San Antonio and throughout Bexar County, tracing unauthorized access, malicious inbox rules, and the path the fraud took. We produce the documentation your bank, insurer, and counsel need to act.
We determine whether your email tenant was actually compromised or the message was spoofed from outside, scope which accounts were reached, and preserve the evidence properly. Speed matters, because bank recall windows close fast.
For San Antonio and the wider San Antonio Region, our team supports military-adjacent contractors, medical practices, and small businesses across South Central Texas after wire fraud and account takeover. We work Microsoft 365 and Google Workspace audit logs and coordinate with your fraud and legal teams.
Every engagement is handled by a licensed Texas examiner, documented end to end, and written up in plain language you can act on.
San Antonio is the seat of Bexar County and the base of our practice, a major military, medical, and tourism center in South Central Texas.
San Antonio sits in Bexar County, part of San Antonio Region. County and district matters for San Antonio are heard in the Bexar County courts here in San Antonio, where our practice is based.
Our examiners work with San Antonio residents, attorneys, and businesses, and cover the surrounding communities including New Braunfels, Schertz, Seguin, Boerne. Most email compromise work begins remotely from a forensic image, with on-site collection in San Antonio arranged by appointment from our San Antonio base. The Bexar County courts sit in San Antonio, and any report or testimony is prepared with that venue in mind.
Straight answers to the questions San Antonio clients ask first. If yours is not here, the first scoping call is free.
Recovery depends on the bank and the timing, and we cannot promise it. What our examiners provide is the fast, documented scope that gives your bank and an IC3 filing the best chance.
That is one of the first questions we answer. We determine whether the compromise originated in your tenant or was an external spoof, which changes the right response.
We scope every account the attacker reached, not just the one you noticed, because business email compromise rarely stops at a single inbox.
Explore other services in San Antonio, or the same service in nearby communities across San Antonio Region.