About the Founder
Weverson Gomes is a Digital Fraud and Human Risk Specialist dedicated to helping organizations reduce digital fraud by strengthening their most valuable security asset, their people.
For more than three decades, he has worked in demanding operational environments where sound judgment, careful analysis, leadership, and effective decision-making were essential. Those experiences shaped the practical, people-focused approach that defines DIGSHIELD today.
Rather than focusing solely on technology, Weverson helps organizations strengthen their human defenses through phishing simulation campaigns, social engineering awareness, digital investigations, and practical security training designed for real business environments.
He believes that most successful cyberattacks don't begin with sophisticated technology. They begin by exploiting trust, urgency, curiosity, and human behavior.
That belief drives DIGSHIELD's mission: helping organizations build stronger human defenses through education, realistic testing, and measurable improvements in security awareness.
Outside the digital security field, Weverson has spent more than 35 years teaching Brazilian Jiu-Jitsu, Mixed Martial Arts, and Close Combat. Decades of coaching students under pressure reinforced principles that also define effective security: preparation, discipline, situational awareness, adaptability, and continuous learning.
Today, he works with businesses, NGOs, financial institutions, and other organizations seeking practical strategies to reduce human risk, prevent digital fraud, and build a stronger security culture.
"The most dangerous cyberattack doesn't begin with malicious code, it begins the moment someone is persuaded to trust the wrong message. Technology is essential, but resilient organizations are built by informed people. That's why DIGSHIELD exists: to help organizations strengthen their human defenses before criminals have the opportunity to exploit them."
Weverson Gomes
Founder & Principal Consultant - DIGSHIELD
About DIGSHIELD
DIGSHIELD is a specialist advisory firm focused on one category of risk: human-layer fraud.
Most digital security firms protect systems. We protect the moment of human decision — when an employee receives a suspicious payment request, when a finance team is pressured into wiring funds, when a fraudster impersonates a CEO over WhatsApp.
We do not do penetration testing. We do not sell software. We do not promise generic cybersecurity. What we do is help organizations across Uganda and East Africa recognize, prevent, investigate, and recover from fraud.
"
Our Mission
To make professional fraud advisory accessible to every serious organization in Uganda and East Africa, regardless of size, sector, or budget.
Why DIGSHIELD?
Across Uganda and East Africa, organizations are losing money to fraud at a scale that traditional cybersecurity is not built to address.
The losses do not come from sophisticated technical hacks. They come from spoofed emails, vendor impersonation, mobile money scams, recruitment fraud, payroll diversion, and social engineering. The attackers do not break the firewall; they bypass it by targeting the people behind it.
DIGSHIELD exists because this category of risk needs specialists, not generalists. It needs advisors who understand the local fraud landscape, mobile money networks, regional payment systems, the specific schemes hitting Ugandan businesses, not imported global frameworks.
How We Work?
Every engagement follows the same four-stage approach, whether we are assessing a small NGO, investigating an active fraud case, or training a financial institution's leadership team.
Understand
We start by listening. Before any recommendation, we learn your organization, your sector, your existing controls, and the specific risks you face, not from a checklist, but from real conversations with the people who handle money, vendors, payments, and decisions every day.
Assess
You receive clear, prioritized recommendations written in plain language. No jargon. No 100-page reports nobody reads. Quick wins for this month, structural improvements for this quarter, and strategic actions for the year ahead.
Recommend
We map your exposure to the fraud patterns most relevant to your context. This includes payment workflows, email security, vendor verification, executive impersonation risk, mobile money handling, and the human decision points that fraudsters target.
Support
We stay engaged through implementation. When new threats emerge, and they will, we update your defences. When fraud strikes, we respond. The relationship does not end when the report is delivered.
What Makes DIGSHIELD Different?
Every engagement follows the same four-stage approach, whether we are assessing a small NGO, investigating an active fraud case, or training a financial institution's leadership team.
We Specialize. We Do Not Generalize.
We do not offer penetration testing, software development, or compliance certification. We focus on one category — human-layer fraud — and we go deeper in it than firms that try to cover everything..
We Understand the Local Landscape.
Fraud in Uganda is not fraud in London. Mobile money mule networks, SACCO insider schemes, MTN MoMo reversal scams, vendor impersonation patterns — we know the specific attacks targeting organizations in our region because we work with them every day.
We Speak Plain Language.
Our reports can be read by a CEO with no technical background and a finance officer in equal measure. Every recommendation is actionable. Every finding is explained. No acronyms used without explanation. No technical performance for its own sake.
We Operate to Professional Standards.
Evidence is preserved with proper chain of custody. Confidentiality is absolute. Recommendations are defensible. When our work supports a police case, an insurance claim, or a court proceeding, it is built to withstand scrutiny.
Who We Serve
DIGSHIELD is built to support organizations whose operations carry meaningful fraud exposure and whose leadership takes that exposure seriously.
We specialize in supporting:
> Small and medium businesses handling regular financial transactions, vendor payments, or sensitive customer data.
> Financial institutions including banks, microfinance institutions, and SACCOs facing the full range of payment and identity fraud.
> Law firms managing client funds, sensitive case data, and high-value transaction communications.
> NGOs and donor-funded organizations whose operating models attract specific fraud schemes — fake beneficiaries, ghost vendors, donation diversion.
If your organization handles money, holds sensitive data, or operates in a sector where trust is the currency of business, we are built to support you.
Our Standards
How we work matters as much as what we deliver. These four principles govern every engagement.
Confidentiality
Everything our clients share with us is confidential. We do not name clients publicly without permission, we do not share case details across engagements, and we do not use one client's situation as a teaching example to another.
Independence
Our loyalty is to the facts and to the client's best interest. We do not soften findings to manage relationships. We do not sell products on commission. We do not have conflicts of interest with software vendors or service providers.
Honesty About Outcomes
We do not promise fund recovery, guaranteed prevention, or any specific outcome we cannot control. We promise thorough, professional work that gives clients the strongest possible foundation for the decisions they need to make.
Defensible Work
Our findings can be defended. Our evidence is properly preserved. Our methodology can be explained. When our work is used in police investigations, court proceedings, or insurance claims, it is built to hold up.
Let's Talk About Your Fraud Exposure
If you are concerned about your organization's exposure to fraud, are responding to a recent incident, or simply want to understand the threats facing your sector — we are happy to talk.
Book a free 30-minute consultation. We will listen first, then recommend the right approach. No pressure. No sales pitch.