Topic starter
25/06/2026 12:24 am
TL;DR: eCommerce fraud now spans account takeover, synthetic identities, bot abuse and policy manipulation, Transmit Security says in KuppingerCole's FRIP for eCommerce Leadership Compass. CIAM and fraud controls now share a trust boundary that has to govern abuse decisions without adding friction.
Editorial analysis by NHI Mgmt Group, based on content published by Transmit Security: “Transmit Security Recognized as a Market Leader in Fraud Reduction Intelligence Platforms for eCommerce”.
Key questions
Q: Why do bad bots create an identity governance problem for retailers?
A: Because bots can create accounts, test credentials, and complete sessions at scale while looking operationally similar to real users.
Q: What are the signs that holiday eCommerce fraud controls are failing?
A: Warning signs include unexpected payment prompts, fake support messages, mismatched website domains, suspicious gift card requests, and unexplained account or card activity.
Q: How should security teams handle fraud and identity abuse in eCommerce journeys?
A: They should treat fraud as an identity governance problem that spans onboarding, login, recovery, and transaction approval.
Practitioner guidance
- Align fraud and CIAM policy Treat onboarding, authentication, and fraud scoring as one decision flow so that step-up checks, denies, and review paths use the same identity signals.
- Instrument policy abuse cases Create explicit detection and response logic for coupon stacking, loyalty manipulation, fake reviews, and hoarding bots, because these are identity abuse patterns, not only marketing losses.
- Separate bot signals from customer experience metrics Track credential stuffing, automated account creation, and replay-style behaviour as governance signals with their own thresholds, escalation paths, and audit evidence.
Bottom line: eCommerce fraud is becoming an identity governance problem because the same controls that manage customer trust now also decide whether abusive activity is allowed to continue.
Glossary terms: Identity-first fraud prevention, Policy Abuse, Synthetic Identity, Fraud Reduction Intelligence Platform
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 18 hours ago by NHI Mgmt Group
25/06/2026 9:18 am
eCommerce fraud governance now sits inside identity architecture, not beside it. The article shows that customer identity, fraud detection, and policy enforcement now share the same trust boundary. That makes fraud an IAM and CIAM governance issue because the business is deciding, in real time, which interactions are legitimate enough to allow. Practitioners should treat fraud controls as part of identity policy, not as an after-the-fact analytics layer.
A few things that frame the scale:
- Only 5.7% of organisations have full visibility into their service accounts, according to the Ultimate Guide to NHIs.
- U.S. fraud losses are projected to reach $40 billion by 2027.
A question worth separating out:
Q: How do teams know if identity proofing is actually helping fraud operations?
A: Teams can measure whether disputes are classified consistently, whether collections cases are being reopened as fraud, and whether high-risk account changes trigger step-up checks. If the same identity evidence supports onboarding, dispute handling, and recovery, proofing is doing real operational work rather than just adding friction.
👉 Read our full editorial: eCommerce fraud is becoming an identity governance problem