Topic starter
12/06/2026 9:55 pm
TL;DR: AI-powered bots made up 40% of enterprise attack types in the last year and 88% of organisations reported more bot activity over two years, according to Arkose Labs research with KS&R. The security gap is now less about awareness than about whether identity, fraud, and account controls can adapt fast enough to adversarial AI.
Editorial analysis by NHI Mgmt Group, based on content published by Arkose Labs: “Resilience in Action: The Intersection of AI, Digital Fraud and Cyber Defenses”.
By the numbers:
- 40% of enterprise attacks over the last year were AI-powered bots, according to Arkose Labs research with KS&R.
- 88% of enterprises saw an increase in AI-powered bot attacks in the last two years, according to Arkose Labs research with KS&R.
- 51% of all respondents do not have enough talent with both AI and cybersecurity skills, according to Arkose Labs research with KS&R.
Key questions
Q: What breaks when fraud systems are tuned only for human shopping behaviour?
A: Fraud systems that expect human cadence often misread legitimate AI agent activity as suspicious automation.
Q: Why do AI-powered fraud campaigns outpace enterprise defensive AI programmes?
A: Attackers can iterate immediately, while enterprises often need approvals, governance review, and budget cycles before changing controls.
Q: What are the signs that chatbot security controls are failing?
A: Warning signs include unusual requests for secrets, sudden shifts in topic or tone, repeated attempts to override system instructions, and responses that reveal private data or produce unsafe actions.
Practitioner guidance
- Map account-abuse flows to their control points Identify where credential stuffing, fake account creation, and takeover attempts are currently stopped, then check whether those points rely on static rules, slow review, or manual escalation.
- Shorten the approval path for defensive AI changes Define an emergency path for tuning bot detection, challenge logic, and risk scoring so that governance review does not trail attacker iteration by weeks.
- Unify IAM and fraud operations around shared signals Connect account risk, behavioural telemetry, and authentication events so the teams responsible for identity assurance and fraud response are acting on the same evidence.
Bottom line: AI-powered fraud is now a scaled operational reality, not a future-facing threat model, and it is pressuring account, session, and fraud controls at the same time.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 3 days ago by NHI Mgmt Group
13/06/2026 12:20 am
AI-powered fraud creates an identity governance problem, not just a fraud problem. The article shows that account takeover, credential stuffing, and fake account creation are now industrialised by adversarial AI. That shifts the centre of gravity from single-control fraud blocking to account trust governance across identity, session, and recovery flows. The practical conclusion is that IAM and fraud teams need a shared operating model, not separate control silos.
A few things that frame the scale:
- U.S. fraud losses are projected to reach $40 billion by 2027.
A question worth separating out:
Q: How should compliance and fraud teams respond when AI-assisted identity fraud increases?
A: They should update risk appetite, escalation paths, and review thresholds together rather than treating fraud as a back-office exception. When AI-enabled deception becomes common, faster approvals must be balanced against loss limits, stronger monitoring, and clearer ownership for suspected synthetic identities.
👉 Read our full editorial: AI-powered fraud is outpacing enterprise defensive AI readiness
This post was modified 3 days ago by NHI Mgmt Group