Cleafy, a Milan-based cybersecurity company specializing in the banking sector, has raised €12 million in a Series B round co-led by United Ventures and eCAPITAL, bringing total funding to €22 million. The company serves more than 150 financial institutions across Europe and Latin America and protects over 250 million end users; clients include ING, BCC Iccrea Group, Illimity Bank, and BPS (Suisse).

With this round, Cleafy strengthens its position in the sector as a solution capable of reconstructing and stopping the full chain of a fraudulent cyberattack days before any damage occurs. The new capital will be used to accelerate the development of its predictive capabilities, scale threat analysis globally, and drive expansion into key banking markets across Europe and Latin America.

Traditional security and anti-fraud tools operate in silos: they analyze isolated signals or individual transactions, following static, predefined rules. Banks are left in a position of always reacting after fraud has already occurred — facing financial losses, operational disruption, and reputational damage that is hard to recover from. Yet many attacks could be stopped in advance, if it were possible to identify the attacker's infrastructure and intent early enough.

Cleafy fills this gap through a continuously updated system that reconstructs how attacks originate, evolve, and spread across digital channels and internal systems. By combining web, mobile, backend, and network telemetry with real-time global threat analysis, it can identify hostile infrastructure, attacker intent, and attack patterns early — turning prevention from the exception into the rule. With the launch of Cleafy for Workforce, the approach now extends to detecting insider threats and compromised accounts within corporate systems.

The round comes at a time when European regulations — including DORA (Digital Operational Resilience Act) and the cybersecurity requirements introduced by NIS2 — are raising the bar for digital resilience in the financial sector.

"While fraudsters weaponize AI to scale attacks at machine speed, European banks are fighting back with outdated, reactive tools. We built Cleafy to change this equation fundamentally, reconstructing how attacks form and stopping them weeks before they can cause damage. Our zero customer churn over more than a decade proves this approach works."

—Matteo Bogana, CEO & Co-Founder at Cleafy

‍“Cleafy represents the kind of European technology leadership we need in critical infrastructure protection. As fraud becomes more sophisticated, their predictive, intelligence-driven approach to anticipating and disrupting attacks before they materialize is a strategic imperative. Their solid growth and exceptional customer retention validate they’ve built something truly differentiated. We are proud to continue supporting the company as it advances into its next chapter of growth”

—Fabio Pirovano, Partner at United Ventures

 

“Cleafy stands out through clear technical differentiation: turning cross-channel telemetry and threat intelligence into a coherent picture of attacker intent and infrastructure. Just as important, the solution is built for real-world deployment in complex banking environments. We’re excited to support Cleafy in scaling this capability into a foundational layer for protecting financial critical infrastructure.”

– Lucas Merle, Partner at eCAPITAL