Topic starter
11/07/2026 8:28 pm
TL;DR: A stable 3.1% payment fraud rate, a 21% drop in manual review to 2.2%, a 110% surge in cryptocurrency fraud, and a 55% decline in account takeovers as 2FA adoption rose 10% are reported in Q3 2025 Fraud Industry Benchmarking Resource, according to Sift. The operational lesson is that fraud teams are shifting from broad review toward sharper identity and behavioral controls.
Editorial analysis by NHI Mgmt Group, based on content published by Sift: “New Q3 2025 Data Available in Sift’s Fraud Industry Benchmarking Resource (FIBR)”.
By the numbers:
- Payment fraud attack rate remained stable at 3.1% overall in Q3 2025.
- Manual review rate dropped 21% year over year to 2.2% in Q3 2025.
- Cryptocurrency fraud surged 110% year over year, reaching a 6.7% fraud rate.
Key questions
Q: What should fraud teams do first when payment fraud stays flat but attack methods change?
A: Start by splitting reporting and controls by payment rail, user journey, and dispute type.
Q: Why does stronger 2FA reduce account takeover but not eliminate account abuse?
A: Because 2FA mainly raises the cost of credential reuse and stuffing, while attackers can still exploit recovery flows, stolen sessions, social engineering, or compromised devices.
Q: How do fraud teams know if automation is replacing manual review safely?
A: Look for stable or improving false-negative rates, not just fewer analyst queues.
Practitioner guidance
- Segment fraud controls by payment rail Separate monitoring, thresholds, and escalation rules for cards, crypto, and other payment methods so high-risk channels are not hidden inside blended averages.
- Recalibrate manual review thresholds Use the drop in review volume to test whether automation is absorbing too much uncertainty or simply removing low-value cases from analyst queues.
- Strengthen step-up authentication on sensitive actions Apply stronger authentication and recovery checks to payout changes, account recovery, and other high-risk account events instead of relying on login 2FA alone.
Bottom line: The benchmark data shows that fraud risk is changing shape rather than disappearing, with stable payment fraud masking sharp movement across channels and attack types.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/07/2026 8:58 pm
Fraud benchmarks now function as identity governance telemetry: the main value of this update is not the headline rate, but the way it separates channel risk from control effectiveness. A stable overall payment fraud rate can coexist with sharply different outcomes across cards, crypto, and account takeover because the attack surface is governed differently in each path. For practitioners, that means control design must follow the journey, not the aggregate metric.
A few things that frame the scale:
- Nearly 60% of companies reported that fraud losses were still increasing in 2025.
A question worth separating out:
Q: When should teams prioritise crypto fraud controls over card fraud controls?
A: When the crypto channel is growing faster than your ability to validate identity, dispute behaviour, and transaction intent. Newer rails with weaker guardrails can become the path of least resistance, so prioritise them when their abuse rate or growth outpaces the rest of the portfolio.
👉 Read our full editorial: Fraud benchmarks show crypto risk surging while ATO falls