Aura hits $340M ARR protecting families from identity theft, deepfakes, and AI-powered scams averaging $25K per incident

Aura is at $340M ARR, protecting families from identity theft, financial fraud, deepfakes, and AI-powered scams that now average $25,000 per incident, up from a few thousand dollars in earlier years. Hari Ravichandran, the company's founder and CEO, attributes the jump in both frequency and severity to AI tools that bad actors use to run more convincing attacks at scale, combined with a growing volume of personal data circulating on the dark web.

“Certain scams used to be a few thousand dollars worth. Now we see that's gone up to $25,000 per scam on average. At Aura, we have a fully trained foundation model looking at sequences of stuff — data breaches and information getting out on the dark web is a pretty early and good tell for actual identity theft at the back end. We hit about $340 some odd million of ARR.”

The threat landscape

Ravichandran points to recent large-scale data breaches, including the NPD breach exposing Social Security numbers and a more recent ID verification service breach affecting a significant portion of the US population, as early indicators of downstream harm rather than isolated incidents. Aura runs a foundation model that sequences these signals, treating dark web data exposure as a leading indicator of identity theft. The practical advice he gives: monitor credit continuously, watch for anomalies in physical mail, and treat data breaches as a warning of what follows rather than the problem itself.

He also flags an increasing intersection of digital and physical crime, where stolen data gets sold and used for in-person crimes, not just online fraud.

Enterprise crossover

Aura sells through large enterprises as well as direct to consumers, and Ravichandran argues the boundary between home and work exposure is effectively gone. Many enterprise breaches originate from social engineering attacks on individual employees, which means securing the consumer is part of securing the company. He says CISOs at large firms increasingly frame employee digital safety as an enterprise risk management issue, not just a benefits perk.

Product differentiation

The core product pitch is personalization. Most consumer security products, in Ravichandran's framing, understand the category of threat but not the specific user. Aura builds a family graph that maps relationships and digital footprints, then runs inference and risk-reasoning systems on top of it. The goal is to cut time-to-value in onboarding and deliver alerts and guidance that are specific to a household rather than generic. He describes this as the primary product distinction versus competitors.

Aura is Ravichandran's third company. At $340M ARR, it is a sizable consumer security business in a threat environment that is, by every metric he cites, getting worse.