TL;DR: Retail fraud losses reached just over $56 billion in 2024 and are projected to hit $131 billion by 2030, while Signifyd says 13% of shoppers will not return after one false decline and 82% will not tolerate more than two bad experiences. Precision, context and identity-aware decisioning now matter as much as fraud blocking.
Editorial analysis by NHI Mgmt Group, based on content published by Signifyd: “Retail Fraud Prevention: 2026 Guide to Stop Ecommerce Losses”.
By the numbers:
- Global ecommerce fraud losses hit just over $56 billion at the end of last year.
- Those losses are expected to reach $131 billion by 2030.
- U.S. merchants lose an average of $4.61 for every $1 of fraud.
Key questions
Q: What breaks when retail fraud controls ignore identity context?
A: Controls become too blunt to separate genuine shoppers from fraudsters, so merchants either over-decline real orders or miss sophisticated abuse.
Q: Why do account takeover and AI agent takeover fraud create similar retail risk?
A: Both abuse a trusted identity relationship rather than forcing a new one.
Q: What is the difference between false declines and legitimate fraud prevention in ecommerce?
A: False declines happen when a real customer is rejected as if the order were fraudulent, while legitimate fraud prevention blocks genuinely risky transactions.
Practitioner guidance
- Map retail decisions to identity and intent signals Correlate login context, account age, shipping changes, device behaviour, SKU risk and purchase history before assigning fraud scores.
- Build a separate control path for AI shopping agents Require explicit delegated purchase authority, limit payment scope and log which agent acted, under which permissions and for which order.
- Extend fraud analytics beyond checkout Feed returns, refunds, chargebacks, delivery changes and account recovery events back into the risk engine so post-purchase abuse can influence future decisions.
Bottom line: Retail fraud now spans account access, checkout, fulfilment and disputes, so merchants need controls that understand the full buyer journey rather than a single transaction.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Identity-aware fraud decisioning is now a governance problem, not just a modelling problem. Retailers are no longer deciding only whether an order is suspicious; they are deciding whether an actor, account or delegated agent is acting within expected trust boundaries. That pushes retail fraud prevention into the same governance territory as identity assurance, because the wrong answer can either block a real customer or legitimise abuse. Practitioners should treat fraud policy as a control over trust, not merely a filter on transactions.
A few things that frame the scale:
- Nearly 60% of companies reported that fraud losses were still increasing in 2025.
A question worth separating out:
Q: When should merchants prioritise retail-specific data over generic fraud rules?
A: Whenever product mix, seasonality, loyalty behaviour or post-purchase abuse materially affects the transaction. Generic rules are useful for obvious patterns, but they degrade quickly in ecommerce because risk is shaped by SKU, customer history and fulfilment signals. Retail-specific data should lead when the business depends on precision, not just suppression.
👉 Read our full editorial: Retail fraud prevention needs identity-aware context, not blunt rules