Join our Newsletter — 33% off our NHI Course

Retail fraud with AI: what changes for controls and detection?

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 19129
Topic starter  

TL;DR: Retail fraud is being reshaped by AI-enabled attacks that mimic normal customer behaviour, with a 56% month-over-month increase in non-live fraud among retail customers in November and a 69% drop in live fraud, according to Pindrop. Legacy checks such as passwords, KBAs and OTPs are struggling against automated return fraud at scale.

Editorial analysis by NHI Mgmt Group, based on content published by Pindrop: “Retail saw a 330% increase in AI fraud in 60 days”.

By the numbers:

  • Among Pindrop customers in retail, there was a 56% month-over-month increase in non-live fraud in November.
  • Live fraud dropped by 69% in the same period among Pindrop retail customers.

Key questions

Q: What breaks when retail fraud becomes automated and AI-assisted?

A: Manual review, threshold-based approval and one-time verification all become easier to game when attackers can vary requests and repeat them at machine speed.

Q: Why do passwords, KBAs and OTPs struggle against synthetic customer behaviour?

A: Those controls answer a narrow question about proof at a single moment.

Q: How can teams tell whether AI-assisted fraud is becoming a practical problem?

A: Look for faster campaign iteration, more personalised impersonation, and higher retry volume across email, chat, and support channels.

Practitioner guidance

  • Tighten return-workflow controls Add velocity limits, anomaly scoring and step-up review on refund and return flows that can be scripted at scale.
  • Instrument behavioural fraud signals Correlate device reputation, request timing, session reuse and customer journey deviations to spot AI-generated abuse earlier.
  • Revisit low-friction verification points Review where passwords, KBAs and OTPs are being treated as sufficient proof in high-risk retail journeys.

Bottom line: AI-driven retail fraud now scales through normal-looking workflows, which makes behavioural verification as important as credential checks.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →



   
Quote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.