About
The compliance infrastructure for emerging-market commodity trade.
OilFlow is a B2B SaaS company selling five compliance products to bank, insurer, and trading-house compliance teams, plus the front-office RMs they clear deals for. The platform's verification stack caught a $50M Chevron-CEO impersonation in 30 minutes — proof that the commercially valuable asset is the trust infrastructure. The products (Regulatory Matrix API, KYC-as-API, Scam Cluster Intelligence Feed, Trade-Compliance Workflow Suite, Pre-Deal Compliance Copilot) span 235 jurisdictions with 8-list sanctions screening + PEP.
WHAT WE ARE
- 7-step KYC, 8-list sanctions + PEPStatus: live
- 235-jurisdiction regulatory matrixStatus: live
- First-party-investigated fraud clustersStatus: live
- White-label workflow + audit logStatus: live
WHAT WE ARE NOT
- A bank, MSB, or fund custodianStatus: blocked
- An LC issuer, advisor, or confirmerStatus: blocked
- An inspection or insurance underwriterStatus: blocked
- A dispute arbitratorStatus: blocked
“The commercially valuable thing isn’t the marketplace. It’s the compliance infrastructure that caught the fraud.”
Origin
Marketplace MVP to compliance infrastructure
OilFlow did not start as a compliance company. It became one the day the verification gate caught a fraud the marketplace was about to introduce.
Full teardown · /case-studies/simar
- Early 2026Marketplace MVP
Commodity buyer/seller matching, with a 7-step verification gate in front of every introduction. The gate mattered more than the matching.
- May 2026The Simar catch
The verification stack flagged a Chevron-CEO impersonation behind a $50M cargo lift in 30 minutes. The evidence chain is published in full.
- May 2026Pivot to compliance infrastructure
The verification stack became the product: five compliance products sold to the desks that already pay for screening.
Founder
Why I built OilFlow
I'm not an oil trader. The people I built this for are everywhere physical oil trades: refinery operators in Lahore, Mumbai, and Bilbao; thirty-year veterans of the Houston and Geneva trading floors; brokers working Rotterdam, Singapore, Karachi, and Lagos. I spent months listening to them describe the same thing. Deals that fell apart, not because the price was wrong. Because the counterparty turned out to be a broker of a broker. Because the documents never matched. Because no one could confirm who was actually shipping what. The story was identical in every timezone.
OilFlow is what I built after hearing that story enough times. A verification stack across 235 jurisdictions: a 7-step background check running sanctions screening against eight lists plus PEP (OFAC SDN, OFAC Consolidated, UN, EU, UK HMT, Canadian SEMA, Australian DFAT, Swiss SECO), company registration, regulator licensing, and trade references. All of it exposed as APIs.
In May 2026, the screening engine caught a verifiable Chevron-CEO impersonation in 30 minutes. It would have cost a buyer $50M. That moment changed what I thought OilFlow was. The commercially valuable thing wasn't the marketplace I had started building. It was the compliance infrastructure that caught the fraud. So I productized it: five products for bank, insurer, and trading-house compliance teams, and for the front office that wants a deal cleared before structuring it. Regulatory Matrix API, Counterparty KYC-as-API, Scam Cluster Intelligence Feed, Trade-Compliance Workflow Suite, Pre-Deal Copilot. Live today, self-serve from $99/mo.
We don't hold funds. We don't issue letters of credit. We don't arbitrate disputes. We do the unglamorous parts: verification, regulatory screening, fraud-pattern detection, document orchestration. And we license them to the people who already pay for compliance.
Talk to me about early-access pricing if you run a trade-finance compliance desk, a trade credit underwriting book, or a trading-house compliance team. If what I described doesn't fit, reply and tell me where I'm wrong. I read every message.
Rafae Musharraf
Founder · Karachi, Pakistan
COMPLIANCE APIs
Five products. Early access open.
Regulatory Matrix API (developer / production / enterprise tiers), KYC-as-API (PAYG and seat-based), Scam Cluster Intelligence Feed, Trade-Compliance Workflow Suite, and the Pre-Deal Compliance Copilot. Talk to us about pilot pricing for compliance teams.