Topic starter
15/08/2026 6:13 pm
TL;DR: AI-powered attacks now account for 41% of attacks targeting organisations, and Fingerprint’s survey of more than 300 leaders in SaaS, fintech, payment platforms, and banking shows average annual losses of $414,000, with more than a third reporting losses above $1 million. Privacy-first tools and regulations are also making legitimate users harder to distinguish from fraudsters, so fraud teams need stronger device intelligence and faster risk-based decisioning.
Editorial analysis by NHI Mgmt Group, based on content published by Fingerprint: “AI fraud & privacy regulations are rewriting the rules”.
By the numbers:
- 41% of attacks targeting organisations are now AI-powered.
- The survey of more than 300 leaders spans B2B SaaS, fintech, payment platforms and banking.
Key questions
Q: How should fraud teams handle AI-powered attacks that look legitimate at first glance?
A: Treat the first decision as a trust decision, not a post-login investigation.
Q: Why do privacy-first browsers and VPNs make fraud detection harder?
A: They remove or blur identifiers that fraud teams used to tie activity to a known device or session.
Q: What are the signs that AI-fueled fraud is starting to affect fraud operations?
A: Common warning signs include a noticeable rise in spam, scam attempts, and account takeover activity, especially when the volume increases soon after a new AI tool becomes widely available.
Practitioner guidance
- Strengthen pre-login trust scoring Move risk assessment earlier in the journey so suspicious sessions are scored before authentication or account creation, not after the fact.
- Reduce reliance on brittle identifiers Review which signals fail when cookies are cleared, IPs shift or VPNs are used, then replace them with more durable device and session context.
- Measure manual triage as a control bottleneck Track queue depth, investigation time and false-positive volume together so rising workload is treated as a security degradation, not just an ops issue.
Bottom line: AI-powered fraud is increasing both the scale and the realism of attacks, which makes trust decisions harder to automate safely.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
15/08/2026 6:20 pm
AI-powered fraud is now an identity governance problem, not only a fraud-scoring problem. Once attack generation becomes cheaper and more adaptive, the real control question shifts to how trust is established before a user or session is accepted. That makes device context, behavioural consistency and policy thresholds part of identity governance, not just fraud operations. Practitioners should treat the trust decision as a governance control, not a purely analytical output.
A few things that frame the scale:
- U.S. fraud losses are projected to reach $40 billion by 2027.
A question worth separating out:
Q: When should organisations prioritise device intelligence over more manual review?
A: When privacy controls, cookie loss or session churn make legacy identifiers unreliable, device intelligence should take priority because it preserves continuity without depending on invasive data collection. Manual review should remain the exception for ambiguous high-risk cases, not the default.
👉 Read our full editorial: AI-powered fraud is driving higher losses and heavier manual triage