Holiday fraud windows: what retailers and fraud teams should prepare for

TL;DR: Holiday fraud starts with scraping and fake account creation on October 1, peaks in the week of November 16 to 23, and extends into refund fraud through January as marketplace churn, account takeover and synthetic identities intensify, according to Kasada's Q3 2026 Threat Intelligence Report. The control problem is no longer event-day defence but sequencing identity, bot and checkout protections ahead of the run-in.

Editorial analysis by NHI Mgmt Group, based on content published by Kasada: “Threat Intelligence Report T h r e a t I n t e l l i g e n c e R e p o r t”.

By the numbers:

• 924K+ automated checkouts were claimed in monitored communities this quarter, across 710+ retailers.
• KasadaIQ tracked a 3.5x rise in Telegram refund fraud signals in 2026.

Key questions

Q: How should security teams prepare for holiday fraud before the sale period starts?

A: Start before the sale window opens.

Q: Why does a clean KYC check not stop synthetic identity fraud?

A: Because KYC confirms evidence, not intent.

Q: What are the signs that seasonal bot abuse is moving earlier in the cycle?

A: Watch for rising account creation, scraping, password reset activity, abnormal checkout volume and marketplace chatter before the main shopping dates.

Practitioner guidance

• Move monitoring into the run-in window Raise bot and account-creation controls before November 1 so the environment is hardened before aged accounts and fake registrations accumulate.
• Gate checkout and recovery by account confidence Apply stronger friction to checkout, password reset and account recovery when the session, device or identity history suggests bot-assisted behaviour.
• Coordinate IAM and fraud policy for onboarding Use shared decision rules for KYC, step-up verification and account trust so a clean document match does not automatically grant full account confidence.

Bottom line: Holiday fraud now unfolds in phases, with attackers building account trust before the main shopping dates and cashing out after purchases settle.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →