Topic starter
12/07/2026 12:24 pm
TL;DR: Sift says account creation fraud now relies on bots, synthetic identities, rotating infrastructure, and other techniques that bypass CAPTCHA, phone checks, and document verification, while Javelin Strategy’s 2024 Identity Fraud Study puts victim losses at $5.3 billion in 2023. Registration-time controls alone do not close the post-signup lifecycle gap that fraudsters exploit.
Editorial analysis by NHI Mgmt Group, based on content published by Sift: “How to Detect and Prevent Account Creation Fraud”.
By the numbers:
- The overall cost to victims of account creation fraud reached $5.3 billion in 2023, according to Javelin Strategy’s 2024 Identity Fraud Study cited by Sift.
- Fraud resolution time increased from six hours to 10 hours per incident, according to Javelin Strategy’s 2024 Identity Fraud Study cited by Sift.
Key questions
Q: What breaks when account creation controls only look at signup-time signals?
A: Fraudsters can pass the front door with synthetic identities, temporary infrastructure, or automated form completion, then activate the account later for abuse.
Q: Why do synthetic identities and identity theft create such high risk in new account origination?
A: They defeat traditional checks because the profile can look consistent across multiple data sources while still being fabricated.
Q: What are the signs that account creation fraud is already happening?
A: Look for abnormal registration spikes, many new accounts with little organic activity, rapid referral or promo abuse, and repeated device or IP patterns across signups.
Practitioner guidance
- Tighten risk scoring at registration Combine behavioural, device, and network signals before allowing an account to activate, and reserve hard blocks for high-confidence fraud patterns.
- Correlate signup with early post-registration activity Flag accounts that immediately hit referral programmes, add payment methods, or generate content at abnormal volume, because those actions often reveal born bad accounts.
- Detect infrastructure reuse across accounts Look for repeated browser fingerprints, shared IP ranges, and recurring email patterns across registrations to identify coordinated fraud rings.
Bottom line: Account creation fraud is a lifecycle problem, not just a signup problem, because fake accounts can pass entry checks and later convert into abuse.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
12/07/2026 12:38 pm
Registration-time controls are necessary, but they are not a complete trust model. CAPTCHA, phone checks, and document verification only measure what the registrant can present at signup. Fraud operations now route around those checks with automation, synthetic identities, and disposable infrastructure, so the control boundary is too narrow. The practitioner conclusion is that account creation must be governed as a lifecycle, not as a one-time verification event.
A few things that frame the scale:
- Nearly 60% of companies reported that fraud losses were still increasing in 2025.
A question worth separating out:
Q: How should teams balance friction against legitimate signups?
A: Use risk-based controls rather than universal friction. Trusted devices, known network patterns, and consistent behavioural signals should pass with minimal interruption, while suspicious signups get step-up verification or review. That approach preserves conversion for legitimate users while concentrating scrutiny where the fraud signal is strongest.
👉 Read our full editorial: Account creation fraud exposes the limits of registration-time controls