Topic starter
25/10/2026 11:10 am
TL;DR: APP fraud succeeds because the customer authorises the transfer, so banks have to detect manipulation and abnormal intent before funds leave the regulated system, according to Feedzai. Real-time payment flows make prevention, behavioural signals and mule-network monitoring more important than post-transfer recovery.
Editorial analysis by NHI Mgmt Group, based on content published by Feedzai: “What Is APP Fraud? A Simple Guide to Authorized Push Payment Scams”.
By the numbers:
- Consumers worldwide lost a staggering $442 billion to APP fraud and scams in 2025, according to the Global Anti-Scam Alliance.
- The UK Payment Systems Regulator requires reimbursement for most APP victims who lost money over Faster Payments, with losses split 50-50 between sending and receiving organizations.
- More than half of consumers surveyed by GASA, 54%, experienced a shopping scam in 2024.
Key questions
Q: Why do real-time payments increase APP fraud risk?
A: Real-time payments compress the window between authorisation and settlement, which gives defenders less time to detect manipulation or reverse the transfer.
Q: What are the signs that APP fraud controls are failing in real payment flows?
A: Common warning signs include unusual payment urgency, new or altered payee details, repeated pressure to bypass normal checks, and transaction patterns that differ from the customer’s normal behaviour.
Q: What breaks when banks rely on unauthorized-fraud controls for APP scams?
A: Those controls assume the payment was initiated by an attacker or by stolen payment credentials.
Practitioner guidance
- Implement pre-transfer decisioning for outbound payments Score the transaction before the funds leave the account, using customer behaviour, recipient context, and scam indicators rather than waiting for post-payment review.
- Build inbound monitoring for mule activity Track receiving-account patterns, onboarding anomalies, and incoming fund behaviour so you can spot mule accounts that serve as exit ramps for scam proceeds.
- Add behavioural and device intelligence to fraud triage Use typing cadence, mouse movement, touchscreen pressure, and device signals to detect when a customer’s actions diverge sharply from their normal profile.
Bottom line: APP fraud succeeds because the customer authorises the payment, which means the bank must govern intent and manipulation rather than only unauthorised access.
Glossary terms: Authorised Push Payment Fraud, Money mule, Behavioral Biometrics, Real-Time Fraud Decisioning
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 5 hours ago by NHI Mgmt Group
27/10/2026 7:15 pm
APP fraud is an identity-trust failure before it is a payment problem. The core weakness is that the bank receives a legitimate payment instruction from a real customer, so conventional fraud logic is already one step behind. That forces practitioners to treat intent, behaviour, and counterparty risk as governance inputs, not optional enrichments. The control objective is to identify manipulated authorisation before funds leave the account.
A few things that frame the scale:
- Authorised push payment (APP) fraud is projected to cause global losses of US$331 billion by 2027.
A question worth separating out:
Q: How should banks balance reimbursement pressure with prevention controls?
A: Banks should treat reimbursement as a financial outcome, not a substitute for prevention. The stronger posture is to reduce loss before transfer by combining behavioural analytics, customer education and transaction friction, while maintaining a clear policy for recovery and customer support. If the institution only debates liability after the fact, it has already lost the prevention battle.
👉 Read our full editorial: APP fraud turns authorised payments into a trust and liability test
This post was modified 5 hours ago by NHI Mgmt Group