Topic starter
14/08/2026 6:33 pm
TL;DR: Agentic AI is making fraud run at software scale, with Incode citing 66 cross-checked AI-fraud cases, reported losses approaching 900 million dollars, and a 20.4 billion dollar US loss total in 2025. The core issue is that fraud is no longer constrained by human labor, so identity verification becomes the last reliable checkpoint.
Editorial analysis by NHI Mgmt Group, based on content published by Incode: “How AI agents are fueling a record surge in fraud losses”.
By the numbers:
- The report's incident database tracks 66 independently sourced, cross-checked AI-fraud cases in the US.
- The report says 44 cases were confirmed through documented methods.
- Reported losses across the catalogued cases approach 900 million dollars.
Key questions
Q: What breaks when fraud can be run by agentic AI instead of people?
A: The main failure is labour-based security assumptions.
Q: Why do synthetic voice and video scams defeat conventional fraud controls?
A: Because conventional controls often score each channel separately.
Q: How should identity teams reduce risk in high-value customer journeys?
A: Use step-up verification at the point of highest consequence, such as account recovery, payout changes, and beneficiary edits.
Practitioner guidance
- Strengthen high-risk identity verification Require step-up verification for account recovery, payout changes, and other high-value journeys where synthetic actors can impersonate trust.
- Correlate signals across channels Fuse text, voice, video, device, and behavioural signals so one plausible channel cannot override weak evidence in another.
- Harden fraud workflows for machine-speed attacks Assume a single operator can run many simultaneous interactions and tune queueing, review, and escalation thresholds accordingly.
Bottom line: Agentic AI is removing the labour ceiling that once limited fraud, so scams can now run and adapt at software scale rather than human scale.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
14/08/2026 6:41 pm
Agentic fraud is no longer a volume problem, it is a governance problem. Once fraud can be run by software, the old assumption that attack throughput is limited by human labour stops holding. That changes how identity, fraud, and customer protection teams should think about control ownership. The practical conclusion is that fraud governance now has to cover machine-speed orchestration, not just suspicious behaviour.
A few things that frame the scale:
- 53% of security leaders expect AI to run major portions of their infrastructure autonomously within the next three years, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: What should organisations measure if they want to know fraud controls are working?
A: Organisations should measure whether controls are increasing attacker cost, reducing campaign success rates, and forcing repeated abuse to become uneconomic. A control can reduce one attempt and still fail strategically if attackers can immediately retry at low cost. The right metric is not only detection, but deterrence.
👉 Read our full editorial: Agentic AI is accelerating fraud into a software-scale threat