APP fraud: what real-time monitoring teams need to change

TL;DR: APP fraud is increasing on real-time payment rails because authorised transfers settle instantly and are irreversible, while fraudsters exploit impersonation and social engineering to make payments look legitimate, according to Unit21. Effective detection depends on low-latency real-time monitoring, behavioural rules, and onboarding data that can spot anomalies before funds leave.

Editorial analysis by NHI Mgmt Group, based on content published by Unit21: “Common Authorized Push Payment Fraud & Rules to Detect”.

By the numbers:

• Real-time payments are predicted to reach 511.7B global transactions by 2027, up from 195.0B in 2022.
• The CAGR of APP scams value is 9% versus 41% for real-time transactions value from 2022 to 2027.

Key questions

Q: How can security teams detect real-time payments fraud?

A: Security teams detect real-time payments fraud by looking for unusual payee changes, first-time recipients, abnormal transfer timing, and transactions that diverge from a customer’s normal behaviour.

Q: Why is real-time payment fraud harder to stop than card fraud?

A: Real-time payment fraud is harder to stop because settlement is immediate and usually irreversible.

Q: What are the warning signs that a payment may be part of APP fraud?

A: Common indicators include an unfamiliar payee, an unusual transfer amount, a sudden change in transaction frequency, a new device or IP address, and behaviour that diverges from the customer’s normal pattern.

Practitioner guidance

• Strengthen real-time decisioning for payment events Evaluate transactions and related action events in the same workflow so risk scoring can intervene before settlement completes.
• Build behavioural rules around customer baselines Detect unusual amount, timing, device, IP address, and payee combinations by comparing each event to historical customer patterns.
• Add fraud signals to customer onboarding Use onboarding data to improve expectations for normal behaviour, account ownership, and payee legitimacy before transfers begin.

Bottom line: APP fraud succeeds because a customer can authorise a payment to a fraudulent recipient, which makes the transfer look legitimate unless context is monitored.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →