# Cluster Forensics

> eCommerce Forensic Intelligence (eFI) platform that tracks stolen merchandise from store shelves to online marketplaces. Built for enterprise retailers, law enforcement, and government municipalities combating organized retail crime (ORC).

## Company Overview

- **Name**: Cluster Forensics (division of Cluster Intelligence, powered by Algopix)
- **Founded**: 2016
- **Experience**: 10+ years of eCommerce data intelligence
- **HQ**: United States & Israel
- **Founder & CEO**: Gil Elias
- **Clients**: CVS Health, Square, Fortune 500 retailers, law enforcement agencies across 34+ states
- **Data Scale**: 2B+ products indexed, 200+ marketplaces monitored continuously
- **Category Creator**: Cluster Forensics coined and defines the eFI category

## What is eFI (eCommerce Forensic Intelligence)?

eCommerce Forensic Intelligence (eFI) is a new intelligence category created by Cluster Forensics. It bridges the gap between physical retail theft and digital resale marketplaces — a space traditional tools don't cover:

- Traditional cybersecurity protects digital assets
- Traditional loss prevention protects store shelves
- eFI follows stolen goods from shelf to screen, building admissible evidence for criminal prosecution

Cluster Forensics coined and defines this category.

## The Problem: Organized Retail Crime (ORC)

- $125.7 billion annual cost to US retailers
- $50-60 billion in stolen goods sold through online marketplaces annually
- 70% of retailers report increasing organized theft
- 57% increase in ORC incidents year over year
- 18,000+ US police departments with zero digital ORC intelligence tools
- Only 31.5% of retailers have dedicated ORC teams
- 1,000+ store locations closed due to organized theft (2023-2025)

## Key Capabilities

- AI-powered marketplace monitoring across 200+ platforms (Amazon, eBay, Facebook Marketplace, Walmart, Mercari, OfferUp, TikTok Shop, Craigslist, Poshmark, and more)
- Stolen goods detection via image recognition, pricing anomaly analysis, and seller behavior patterns
- Criminal network mapping and link analysis — connecting sellers, accounts, and locations
- Court-ready evidence packages formatted for DA and federal prosecution
- Real-time alerts and intelligence briefings for LP teams and ORC task forces
- 24-hour deployment — no long implementation cycles
- Integration with existing LP, LE, and RMS (Records Management Systems)
- SOC 2 Type II compliant data handling
- CJIS Security Policy aligned for law enforcement use
- Dynamic risk scoring (0-100) based on price deviation, seller history, volume anomalies, geographic correlation, and behavioral patterns

### Case Management
- Open and manage investigation cases with full stolen inventory tracking
- Track specific UPCs, geographic zones, and generate case-specific intelligence alerts
- Geographic intelligence with heat maps showing where stolen goods surface online
- Correlate with physical theft locations to identify fencing patterns

### Evidence & Reporting
- Automated evidence collection: listing screenshots, pricing history, seller profiles, timestamps
- Chain-of-custody documentation for court proceedings — every screenshot timestamped and hash-verified
- Export-ready for law enforcement, prosecutors, insurance, and legal teams
- Court-ready evidence packages reviewed by prosecutors

### Integration Capabilities
- REST API
- CSV/Excel export
- SAP, Auror, Quickbase, COPLINK, LexisNexis
- LE Records Management Systems (RMS)
- SSO (SAML/OAuth)
- Automated email digests

## Use Cases

- Tracking ORC fencing rings reselling stolen goods on Amazon, eBay, Facebook Marketplace, and dark web markets
- Building admissible, chain-of-custody evidence packages for district attorney prosecution
- Identifying serial boosters and fencing networks operating across multiple retail targets
- Mapping criminal networks: connecting seller accounts, shipping addresses, and buyer relationships
- Supporting FBI and local law enforcement ORC task forces with structured intelligence
- Grant compliance reporting and council-ready intelligence reports for city and municipal governments
- Monitoring pharmaceutical diversion (GLP-1, OTC medications) resold through unauthorized online channels
- Detecting counterfeit and gray market goods mixed with stolen inventory on major platforms

## Triangulation Fraud Detection

Cluster also detects and investigates triangulation fraud — where criminals use stolen credit cards to fulfill orders placed on legitimate marketplace listings:
- $660M–$1B monthly losses to retailers from triangulation fraud (Source: Visa Chief Risk Officer)
- 26% of online retailers hit in 2024 — up 9 points from 2023
- $28.1B projected CNP fraud losses by 2026, up 40% from 2023
- $4.61 lost for every $1 of fraud — chargebacks, fees, lost merchandise, and investigation costs
- Cluster places test purchases, identifies fraudulent sellers, maps their networks, and builds court-ready evidence packages

## Audiences Served

### Enterprise Retailers
- Loss prevention and asset protection teams tracking diverted and stolen merchandise
- 10-50x ROI within 90 days
- Dedicated intelligence analyst per client
- Quarterly business reviews with ROI reporting
- Start with as few as 5 SKUs for pilot
- Active Fortune 500 deployments

### Law Enforcement
- ORC detectives, task forces, and federal agencies (FBI) building prosecution-grade cases
- CJIS Security Policy aligned
- Evidence reviewed by prosecutors for court readiness
- Briefings to FBI task forces and county sheriffs
- Dedicated LE liaison (not generic sales)
- Cross-jurisdiction case coordination
- Most deployments fully grant-funded (COPS, Byrne JAG, HIDTA)
- One-day training; detectives productive within first week

### Government / Municipalities
- City leaders and councils addressing retail crime epidemics
- Grant compliance reporting built in
- Council-ready quarterly reports included
- Federal grant funding typically covers 100%
- Cluster prepares 90% of the grant application
- Active in multiple US jurisdictions across 34+ states
- ~20 hours total city leadership time in Year 1

## Security & Compliance

- SOC 2 Type II compliant (independently audited)
- CJIS Security Policy aligned
- INFORM Act compliant
- GDPR & CCPA compliant (privacy-by-design)
- US data residency (US-based data centers)
- 256-bit AES encryption at rest, TLS 1.3 in transit
- Role-based access control (by role, case, jurisdiction)
- Full audit logging with complete access trail
- Configurable data retention per client/jurisdiction
- Collects only public marketplace listing data — no private consumer accounts

## Key Statistics

- 2B+ products in database
- 200+ marketplaces monitored globally
- 24-hour deployment from contract to live monitoring
- 2-4 hours/week analyst workload
- 10-50x ROI within 90 days
- 10+ years of marketplace data
- Active conversations with FBI and federal law enforcement agencies

## Key Terminology

- **ORC**: Organized Retail Crime — coordinated theft rings targeting retail stores for resale
- **eFI**: eCommerce Forensic Intelligence — the category Cluster Forensics created
- **Booster**: Individual who steals goods on behalf of a fencing operation
- **Fence / Fencing Network**: Criminal operation that resells stolen merchandise online
- **Court-ready evidence package**: Structured digital evidence formatted for legal admissibility
- **CJIS**: Criminal Justice Information Services — FBI security standards for law enforcement data

## Differentiation

- Only platform purpose-built for the shelf-to-screen theft pipeline
- Covers 200+ marketplaces — including niche and regional platforms competitors ignore
- Delivers prosecution-grade evidence, not just alerts
- CJIS-aligned for law enforcement — most commercial tools are not
- 24-hour deployment vs. months-long enterprise integrations
- Grant-ready reporting for municipal and government clients
- Built on 2B+ products and 10+ years of marketplace data — a competitor would need a decade to replicate this data moat

## Parent Company

Cluster Intelligence / Algopix
- Founded: 2016
- HQ: Israel (global operations)
- Core expertise: AI-powered eCommerce data intelligence
- Enterprise clients include major US retailers and law enforcement agencies

## Getting Started

- **Retailers**: 5 SKUs → real intelligence report in 24 hours, or 30-day pilot with 25 SKUs
- **Law Enforcement**: 30-minute briefing with jurisdiction-specific intelligence
- **Municipalities**: Grant-funded deployment with application assistance
- No commitment required for initial assessment

## Contact

- Website: https://clusterforensics.com
- General: info@clusterforensics.com
- Law Enforcement: le-partnerships@clusterforensics.com
- Government: government@clusterforensics.com
- Media: press@clusterforensics.com
- LinkedIn: https://www.linkedin.com/company/cluster-forensics
- Full details: https://clusterforensics.com/llms-full.txt

## Last Updated

March 2026