Topic starter
06/11/2026 6:39 pm
TL;DR: Fraud losses keep rising because verified identities, recovery paths, and cross-channel signals still sit in silos, according to Daon, allowing persistent actors to reuse trusted identity fragments and return after being stopped. The control problem is no longer initial verification; it is preserving actor memory across the full lifecycle.
Editorial analysis by NHI Mgmt Group, based on content published by Daon: “Fraud Has Memory. Does your Identity System?”.
Key questions
Q: How should fraud teams recognise repeat actors across the customer lifecycle?
A: Fraud teams should recognise repeat actors by linking accounts, devices, payment instruments, behavioural patterns and recovery events into a persistent actor view.
Q: Why do recovery flows create more fraud risk than onboarding in many systems?
A: Recovery flows often carry more fraud risk because they are built to restore access after a weaker proofing event, so attackers target password reset, account takeover recovery and SIM swap paths.
Q: How does identity continuity improve fraud detection?
A: Identity continuity improves fraud detection by preserving the relationship between a person, device, credential and account across sessions and lifecycle events.
Practitioner guidance
- Build a persistent actor graph Link onboarding, authentication, recovery, device, behavioural, and fraud-event data into one governed identity continuity model so repeat actors can be recognised across journeys.
- Treat recovery as a high-risk re-entry point Apply stronger proofing, historical signal checks, and step-up review to recovery flows so they inherit prior fraud context instead of resetting trust.
- Retain confirmed fraud signals with governance Keep watchlists, device fingerprints, and confirmed fraud attributes durable, access-controlled, and separated from legitimate customer records.
Bottom line: Fraud prevention fails when organisations treat each interaction as isolated instead of preserving actor memory across the lifecycle.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
06/11/2026 6:41 pm
Identity continuity is the missing control plane in modern fraud defence. Organisations have invested heavily in proving identity at the front door, but fraud persists because the same actor can reappear through recovery, device reuse, or slightly altered credentials. The decisive issue is not whether a single verification step works, but whether the system recognises repeated behaviour as the same risk over time. Practitioners should treat continuity as a governance layer, not an analytics afterthought.
A few things that frame the scale:
- U.S. fraud losses are projected to reach $40 billion by 2027.
A question worth separating out:
Q: What is the best way to govern retained fraud signals?
A: Retained fraud signals should be governed as sensitive security data with clear purpose limits, retention periods, access controls and audit logging. Keep only the features needed for risk scoring, casework and model training, then expire or pseudonymise stale records so old flags do not distort decisions or expose customer activity beyond their intended use.
👉 Read our full editorial: Identity continuity is now the control gap in fraud prevention