Notifications
Clear all
Topic starter
12/06/2026 9:37 pm
TL;DR: Lloyds Bank says 68% of reported customer fraud cases began on Facebook, Instagram, or WhatsApp, with victims sending around £66 million a year to scammers after engaging with scam adverts, according to SumSub’s reporting. The pattern shows consumer fraud now depends as much on platform exposure and ad abuse as on user error.
NHIMG editorial — based on content published by SumSub covering Lloyds Bank's platform-origin fraud findings: Major British bank says 68% of customer fraud cases start on Meta platforms
By the numbers:
- Lloyds Bank said 68% of customer fraud reports began on Facebook, Instagram, or WhatsApp.
- Consumers were sending around £66 million a year to fraudsters after engaging with scam adverts published on Meta platforms.
- The average claim for fraud submitted to the bank has now surpassed £500.
Questions worth separating out
Q: What should fraud and identity teams do when scams start on social platforms?
A: They should treat the platform as part of the fraud control surface, not just the place where the scam was discovered.
Q: Why do social-platform scams bypass traditional IAM controls?
A: Because many of the decisive fraud steps happen before a protected identity session exists.
Q: How can organisations measure whether scam prevention is working?
A: Track where fraud begins, how quickly suspicious content is removed, how often victims complete the scam journey, and how much loss is prevented before payment.
Practitioner guidance
- Map pre-authentication fraud exposure Identify where victims first encounter scams, including adverts, marketplaces, direct messages, and referral links.
- Tighten customer verification for high-risk interactions Use step-up checks for payment changes, first-time transfers, and unusual contact-path changes, but align them with the earliest scam touchpoint rather than waiting for account compromise signals.
- Share fraud telemetry across banking and platform teams Feed platform-originated scam patterns into fraud operations, customer support, and law enforcement escalation paths so takedown and blocking decisions happen closer to the source.
What's in the full analysis
SumSub's full article covers the operational detail this post intentionally leaves for the source:
- The specific fraud categories reported by Lloyds customers, including ticket scams and marketplace impersonation cases.
- The bank's full year-over-year loss comparison, which helps teams benchmark whether their own fraud trends are moving in the same direction.
- Meta's response details on scam-ad removal volume and detection timing, which matter if you are assessing platform-side mitigation.
- The legal context around the group action claim against Meta and why consumer-loss attribution may shape future accountability discussions.
👉 Read SumSub's analysis of Lloyds Bank's platform fraud findings →
Meta platform fraud exposure: what fraud teams need to act on?
Explore further
12/06/2026 11:50 pm
Platform trust has become a fraud surface, not a neutral distribution channel. When 68% of reported fraud begins on social platforms, the security problem is no longer confined to login controls or payment authentication. The attacker is abusing the place where trust is first established, which means fraud teams have to think about identity, content, and channel governance together. The practical conclusion is that platform-originated fraud must be treated as an identity-adjacent risk, not a downstream banking exception.
A few things that frame the scale:
- 72% of organisations have experienced or suspect they have experienced a breach of non-human identities, according to The 2024 ESG Report: Managing Non-Human Identities.
- Two-thirds of enterprises have endured a successful cyberattack resulting from compromised non-human identities, with a quarter encountering multiple attacks.
A question worth separating out:
Q: Who is accountable when fraud begins on a third-party platform?
A: Accountability is shared across the platform, the financial institution, and the response teams that govern warnings, detection, and customer intervention. The practical question is not who owns the whole scam, but who owns each control point where the scam can still be stopped before money leaves the customer.
👉 Read our full editorial: Meta platform fraud exposure is reshaping consumer scam risk
