Join our Newsletter — 33% off our NHI Course

Borderless fraud controls in fintech: what should teams change?

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 21730
Topic starter  

TL;DR: Fintech leaders at Money20/20 Europe say borderless fraud now demands early control design, continuous cross-team coordination, and AI-driven risk governance to preserve customer experience, according to SumSub. The governance gap is no longer detection alone, but whether fraud controls are embedded early enough to keep pace with partner risk and evolving attack patterns.

Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Keeping Payments Safe at Scale – Money20/20 Special Part 2”.

Key questions

Q: How should fintech teams design fraud controls for borderless payment ecosystems?

A: They should place controls at onboarding, partner approval, and change management, not only at detection time.

Q: Why does AI change fraud governance in fintech?

A: AI changes fraud governance because it influences live decisions, not just after-the-fact analysis.

Q: What breaks when fraud ownership stays siloed across teams?

A: Controls break at the handoff points.

Practitioner guidance

  • Embed fraud controls at design time Require fraud, IAM, and risk review before launch approvals for new payment flows, onboarding journeys, and partner integrations so control gaps are not inherited later.
  • Define AI oversight for fraud decisions Document who can tune models, approve thresholds, and override automated decisions when AI is used in real-time fraud detection.
  • Formalise partner risk ownership Assign a named owner for delegated trust, shared telemetry, and escalation paths with external payment or identity partners.

Bottom line: Borderless fintech fraud is increasingly a governance issue because attack paths cross product, partner, and geography boundaries faster than single-team controls can respond.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →


This topic was modified 14 hours ago by NHI Mgmt Group

   
Quote
(@mr-nhi)
Member Moderator
Joined: 5 months ago
Posts: 21566
 

Fraud governance now sits at the intersection of identity, data, and partner trust. The article shows that the fraud problem is no longer confined to one channel or one control stack. When attackers move across borders, partners, and payment journeys, the real weakness is fragmented governance rather than a single missing tool. Practitioners should treat fraud as a distributed identity problem that crosses organisational boundaries.

A few things that frame the scale:

  • 1 in 4 organisations are already investing in dedicated NHI security capabilities, with an additional 60% planning to do so within the next twelve months, according to The State of Non-Human Identity Security.
  • 45% of organisations cite lack of credential rotation as the top cause of NHI-related attacks, ahead of inadequate monitoring and logging at 37%.

A question worth separating out:

Q: Who should own fraud governance when partner ecosystems are involved?

A: Ownership should be shared across fraud, risk, security, compliance, and the business teams that manage the partner relationship. External dependencies change the control surface, so no single function can govern borderless fraud alone. Clear accountability for partner-risk signals is essential.

👉 Read our full editorial: Fintech fraud governance depends on early controls and AI oversight



   
ReplyQuote
(@mr-nhi)
Member Moderator
Joined: 5 months ago
Posts: 21566
 

Early fraud control placement is the real governance test: fraud controls that arrive after product launch or partner integration are already behind the threat. The article shows that fintech leaders are treating control design as an operating-model issue, not a tooling issue. The practitioner conclusion is simple: if the control only exists at detection time, the fraud surface has already expanded.

A few things that frame the scale:

  • 52% of respondents see AI security decision-making power shifting toward platform and infrastructure teams rather than the executive suite, according to the 2026 Infrastructure Identity Survey.
  • Only 44% of organisations have implemented any policies to manage their AI agents, despite 92% agreeing that governing AI agents is critical to enterprise security, according to the 2026 Infrastructure Identity Survey.

A question worth separating out:

Q: What is the difference between partner trust and delegated fraud risk?

A: Partner trust is the business relationship, while delegated fraud risk is the security exposure created by giving that partner access, data, or decision influence. In fintech, the relationship may be sound while the controls remain weak. Teams need to govern the delegated access path explicitly, not assume the contract covers the threat.

👉 Read our full editorial: Fintech fraud governance depends on early controls and AI oversight


This post was modified 14 hours ago by NHI Mgmt Group

   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.