TL;DR: Bots and generative AI are industrialising marketplace abuse by creating synthetic identities, mimicking human behaviour, and adapting in real time, with Prove Identity citing a 300% rise in deepfake identity attacks and 85% of identity fraud involving GenAI. Point-in-time verification is no longer enough when trust is being attacked across the entire user lifecycle.
Editorial analysis by NHI Mgmt Group, based on content published by Prove Identity: “How Digital Marketplaces Are Preparing for the Growing Threats of Bots and Identity Fraud”.
Key questions
Q: What breaks when marketplace identity checks stop at onboarding?
A: Point-in-time verification breaks because attackers do not stay still after signup.
Q: Why do synthetic identities make traditional fraud controls less effective?
A: Synthetic identities reduce the value of controls that rely on spotting obviously fake profiles at signup.
Q: How can security teams tell whether marketplace trust controls are failing?
A: Watch for rapid account replacement after enforcement, repeated abuse from seemingly separate identities, and rising friction without a matching drop in fraud.
Practitioner guidance
- Map trust checks across the full user lifecycle Identify where your marketplace verifies identity at onboarding, authentication, checkout, and post-registration activity, then look for gaps between those steps where abuse can hide.
- Correlate identity, device, and behaviour signals Require cross-signal validation before accepting a user as legitimate, especially when document checks or basic behavioural biometrics are the only current gates.
- Treat disposable accounts as a governance problem Track account reuse, rapid replacement after enforcement, and clustered activity patterns so you can detect when one actor is operating many identities at once.
Bottom line: AI-powered bots and synthetic identities are turning marketplace fraud into a persistent trust problem that static checks cannot contain on their own.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Static verification is the wrong control plane for marketplace trust: The article shows that onboarding checks and login-time authentication do not match the way bot-driven fraud actually operates. Attackers now distribute abuse across identity creation, session behaviour, and transaction manipulation, so the decisive control point shifts from a single verification event to continuous trust evaluation. For practitioners, that means fraud and IAM cannot remain separate disciplines.
A few things that frame the scale:
- Nearly 60% of companies reported that fraud losses were still increasing in 2025.
A question worth separating out:
Q: Should marketplaces prioritise friction reduction or stronger identity assurance?
A: They need both, but not as a trade-off that ignores risk. If friction is reduced without stronger identity assurance, attackers gain easier entry; if assurance is added blindly, legitimate users leave. The practical goal is risk-based trust that changes with context rather than fixed verification for every step.
👉 Read our full editorial: Bot-driven identity fraud is forcing marketplaces beyond static checks