AI-fuelled fraud economics: what security teams need to act on

TL;DR: An AI model beat a commercial licensing system in under five hours for $3.88, according to Kasada's Q2 2026 threat intelligence report, while 11.7M stolen accounts, 20.9K bot checkouts and 11.3M scraping visits show adversaries are scaling faster and cheaper. The control problem is no longer whether bots exist, but whether fraud and identity defences can keep pace with AI-assisted operator economics.

Editorial analysis by NHI Mgmt Group, based on content published by Kasada: “Threat Intelligence Report T h r e a t I n t e l l i g e n c e R e p o r t”.

By the numbers:

• 11.7M+ stolen accounts were for sale on criminal marketplaces, from 6K sellers.
• 20.9K+ checkouts were completed by bots instead of real shoppers, across 32+ brands.
• 11.3M+ site visits came from just 2 AI companies scraping content, in a single month.

Key questions

Q: How should security teams respond when AI lowers the cost of fraud operations?

A: They should move from static fraud rules to adaptive controls that combine identity assurance, bot detection and transaction risk.

Q: Why do stolen accounts and bot abuse need to be governed together?

A: Because they are often different stages of the same abuse chain.

Q: What are the signs that bot defenses are failing?

A: A common sign is when account creation, login, or recovery traffic looks healthy in aggregate but hidden abuse keeps increasing.

Practitioner guidance

• Tighten step-up checks on high-risk sessions Increase friction when logins come from new devices, impossible travel paths, unusual checkout behaviour or account recovery flows that resemble bot-assisted abuse.
• Correlate credential abuse with downstream transaction risk Join identity telemetry, bot signals and payment or checkout anomalies so compromised accounts can be blocked before they convert into fraud.
• Treat scraping as reconnaissance, not noise Track recurring scraping sources, content extraction patterns and session reuse as indicators that the same data may be feeding wider abuse campaigns.

Bottom line: AI is lowering the cost of fraud, but it is also making existing abuse patterns faster, cheaper and easier to scale.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →