Topic starter
25/06/2026 12:24 am
TL;DR: Fraud in eCommerce now spans account takeovers, synthetic identities, bot-driven abuse, and policy manipulation, while merchants are still being asked to keep onboarding fast and friction low, according to Transmit Security’s summary of KuppingerCole’s FRIP for eCommerce Leadership Compass. The real issue is that fraud controls, CIAM, and identity governance are converging on the same trust boundary, and that boundary is being tested continuously.
Editorial analysis by NHI Mgmt Group, based on content published by Transmit Security: “Transmit Security Recognized as a Market Leader in Fraud Reduction Intelligence Platforms for eCommerce”.
Key questions
Q: How should security teams handle fraud and identity abuse in eCommerce journeys?
A: They should treat fraud as an identity governance problem that spans onboarding, login, recovery, and transaction approval.
Q: Why do bad bots create an identity governance problem for retailers?
A: Because bots can create accounts, test credentials, and complete sessions at scale while looking operationally similar to real users.
Q: What are the signs that holiday eCommerce fraud controls are failing?
A: Warning signs include unexpected payment prompts, fake support messages, mismatched website domains, suspicious gift card requests, and unexplained account or card activity.
Practitioner guidance
- Align fraud and CIAM policy Treat onboarding, authentication, and fraud scoring as one decision flow so that step-up checks, denies, and review paths use the same identity signals.
- Instrument policy abuse cases Create explicit detection and response logic for coupon stacking, loyalty manipulation, fake reviews, and hoarding bots, because these are identity abuse patterns, not only marketing losses.
- Separate bot signals from customer experience metrics Track credential stuffing, automated account creation, and replay-style behaviour as governance signals with their own thresholds, escalation paths, and audit evidence.
Bottom line: eCommerce fraud is becoming an identity governance problem because the same controls that manage customer trust now also decide whether abusive activity is allowed to continue.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 9:18 am
eCommerce fraud governance now sits inside identity architecture, not beside it. The article shows that customer identity, fraud detection, and policy enforcement now share the same trust boundary. That makes fraud an IAM and CIAM governance issue because the business is deciding, in real time, which interactions are legitimate enough to allow. Practitioners should treat fraud controls as part of identity policy, not as an after-the-fact analytics layer.
A few things that frame the scale:
- Only 5.7% of organisations have full visibility into their service accounts, according to the Ultimate Guide to NHIs.
- U.S. fraud losses are projected to reach $40 billion by 2027.
A question worth separating out:
Q: How do teams know if identity proofing is actually helping fraud operations?
A: Teams can measure whether disputes are classified consistently, whether collections cases are being reopened as fraud, and whether high-risk account changes trigger step-up checks. If the same identity evidence supports onboarding, dispute handling, and recovery, proofing is doing real operational work rather than just adding friction.
👉 Read our full editorial: eCommerce fraud is becoming an identity governance problem