Join our Newsletter — 33% off our NHI Course

Marketplace fraud and ATO: what risk teams need to watch now

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 16626
Topic starter  

TL;DR: E-commerce marketplace payment fraud fell to 1.6% in Q1 2025, according to Sift, while account takeover remained 3.2% overall and marketplace ATO sat at 3.8%, showing fraud is shifting across payment, identity, and abuse vectors rather than simply declining. That means fraud teams need identity-centric decisioning, not card-only controls, to keep pace.

Editorial analysis by NHI Mgmt Group, based on content published by Sift: “Economic Shifts are Reshaping Marketplaces—and Fraudsters are Paying Attention”.

By the numbers:

  • Payment fraud in e-commerce marketplaces dropped to 1.6% in Q1 2025.
  • The overall account takeover rate sits at 3.2%, while marketplace ATO is 3.8%.
  • Financing tools and crypto follow closely at 5.4%.

Key questions

Q: What should marketplace teams do first when account takeover starts affecting payouts and listings?

A: Start with the highest-value account actions, not the login event itself.

Q: Why does lower card fraud not always mean lower marketplace fraud?

A: Because attackers move to the easiest monetization path, not necessarily the card rail.

Q: What do security teams get wrong about marketplace fraud controls?

A: They often treat fraud prevention as a separate function from identity governance.

Practitioner guidance

  • Strengthen account takeover controls on high-value marketplace accounts Increase step-up verification for payout changes, new device sign-ins, seller profile edits, and loyalty redemptions.
  • Separate controls by payment method and fraud rail Create distinct review logic for cards, points, financing, and crypto because each rail has a different abuse pattern and cash-out speed.
  • Correlate refund, listing, and chargeback behaviour Connect dispute outcomes, seller behaviour, account age, and listing activity in one decision view so first-party fraud and promotion abuse are not treated as isolated events.

Bottom line: Marketplace fraud is no longer bounded by card testing because attackers now target accounts, payouts, loyalty balances, and listings as monetization paths.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →



   
Quote
(@mr-nhi)
Member Moderator
Joined: 5 months ago
Posts: 17057
 

Marketplace fraud is becoming an identity governance problem, not just a payments problem. Once an account stores payout rights, loyalty value, seller privileges, and identity history, the control plane has expanded beyond card verification. That means fraud teams must govern who can act, what they can change, and which trust signals justify higher-risk actions. The practitioner conclusion is simple: the marketplace account is now a high-value identity, not just a login.

A question worth separating out:

Q: How do identity and fraud teams share accountability for delivery-platform abuse?

A: Identity teams own assurance at onboarding, recovery, and merchant access points, while fraud teams own detection and response across the transaction flow. The governance gap appears when those responsibilities are separated, because abuse then moves into the handoff between identity verification and transaction approval.

👉 Read our full editorial: Marketplace fraud is shifting beyond cards as economic pressure builds



   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.