TL;DR: Application fraud now begins with manufactured identity evidence, Feedzai explains, rather than just stolen personal data. Onboarding controls need behavioural, device and AI signals to judge whether an applicant stays coherent over time.
Editorial analysis by NHI Mgmt Group, based on content published by Feedzai: “What Is Application Fraud? Detection, Prevention & Real-World Examples”.
By the numbers:
- Identity theft-related crimes, including application fraud, have resulted in $10.2 billion in losses.
Key questions
A: Digital onboarding reduces risk because it can verify identity continuously and at scale, while manual KYC depends on office visits, human review, and slower decision cycles.
Q: What signs show a fraud operation is becoming industrialised?
A: Look for reusable domains, phishing kits, scripted support flows, repeated wallet patterns, and laundering through the same service providers or DeFi paths.
Q: What breaks when banks rely on static PII for identity verification?
A: Static PII breaks when the same personal data can be stolen, bought, or assembled from breaches and used to pass checks that were designed to prove uniqueness.
Practitioner guidance
- Strengthen onboarding decision orchestration Route applicants through risk-based flows that combine identity data, behavioural signals and device reputation before account creation is approved.
- Correlate behavioural and device signals Look for copy-paste speed, navigation anomalies, emulators, virtual machines and repeated device fingerprints across separate applications.
- Add explicit synthetic identity review rules Flag combinations of partial real data, inconsistent address history and repeated relationship links that indicate a manufactured persona.
Bottom line: Application fraud now begins with manufactured identity evidence, not just stolen personal data, which makes traditional static checks insufficient.
Glossary terms: Application Fraud Signals, Synthetic Identity Fraud, Behavioral Biometrics, Explainable AI
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Application fraud is now an identity-governance problem, not just a fraud-engine problem. Banks are no longer deciding whether a name, document or selfie is real in isolation. They are deciding whether the applicant’s behaviour, device and identity trail make sense across time, channels and counterparties. That means the control model has to move from static verification to governed identity evidence, with fraud, AML and onboarding all participating in the same decision.
A few things that frame the scale:
- Nearly 60% of companies reported that fraud losses were still increasing in 2025.
A question worth separating out:
Q: How should teams balance fraud prevention with low-friction customer onboarding?
A: Use risk-based orchestration. Low-risk users should move through the shortest safe path, while higher-risk cases trigger stronger checks such as liveness, document validation, or manual review. The goal is not maximum friction, but proportional assurance. Teams should measure abandonment, false matches, and fraud capture together so they can tune policy without degrading the customer journey.
👉 Read our full editorial: Application fraud now blends synthetic identity, bots and GenAI