Join our Newsletter — 33% off our NHI Course

First party fraud and refund abuse: what IAM teams should notice

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 21730
Topic starter  

TL;DR: First party fraud is becoming a scalable criminal model as legitimate customers exploit refunds, disputes, chargebacks, subscriptions, and reimbursement systems for personal gain, according to SumSub’s conversation with Monzo Bank’s Richard Bromley. The risk is no longer just transaction abuse; it is governance drift across identity verification, behavioural signals, and dispute handling.

Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Gaming the System: The Rise of First Party Fraud”.

Key questions

Q: What breaks when refund and dispute workflows trust verified customers by default?

A: Verified identity does not prove claim legitimacy.

Q: Why does first party fraud create losses even when onboarding is strong?

A: Onboarding controls prove the customer exists, not that later claims are honest.

Q: What are the signs that a refund or chargeback claim may be abusive?

A: Repeated claims, inconsistent stories, high-velocity disputes, device or session anomalies, and patterns that mirror known playbooks are common indicators.

Practitioner guidance

  • Tighten dispute intake controls Require stronger evidence, structured reason codes, and claim-history checks before refund or chargeback escalation.
  • Use behavioural scoring in claim review Combine device signals, velocity, narrative consistency, and prior dispute patterns to score claims before payout or reversal.
  • Train investigators on abuse typologies Give fraud and disputes teams shared playbooks for false scam claims, refund abuse, subscription traps, and reimbursement exploitation.

Bottom line: First party fraud turns verified customer relationships into a fraud surface when refund and dispute processes trust intent too easily.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →


This topic was modified 1 day ago by NHI Mgmt Group

   
Quote
(@mr-nhi)
Member Moderator
Joined: 5 months ago
Posts: 21566
 

First party fraud is an identity governance problem, not just a payments problem. The article shows that the fraudster may already be inside the trust boundary, using a verified human identity to exploit refund, dispute, and reimbursement systems. That shifts the real control question from authentication to intent detection and behavioural governance. Practitioners should treat customer-facing claims processes as part of the identity attack surface.

A few things that frame the scale:

A question worth separating out:

Q: How can organisations reduce reimbursement abuse without harming genuine customers?

A: Use layered review thresholds, case history, and investigator feedback instead of blanket denial rules. Genuine customers benefit when the process is transparent and evidence-based. The goal is to make abuse expensive and slow while keeping legitimate claims accessible, fast, and explainable.

👉 Read our full editorial: First party fraud is reshaping payment risk and disputes governance



   
ReplyQuote
(@mr-nhi)
Member Moderator
Joined: 5 months ago
Posts: 21566
 

First party fraud is an identity governance problem disguised as a payments problem. The customer is authenticated, onboarded, and often low-friction by design, which means the control failure appears later in the lifecycle when intent must be evaluated. That shifts the real governance burden from proving identity to proving claim legitimacy. Practitioners should treat dispute handling as a governed identity decision point, not just an operational workflow.

A few things that frame the scale:

A question worth separating out:

Q: How should banks and merchants govern first party fraud across teams?

A: Treat it as a shared governance issue across fraud, payments, disputes, and customer operations. Standardise claim typologies, escalate high-risk cases for investigator review, and measure repeat abuse separately from legitimate loss. That alignment helps organisations distinguish true victims from customers who are gaming the system.

👉 Read our full editorial: First party fraud is reshaping payment risk and disputes governance


This post was modified 1 day ago by NHI Mgmt Group

   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.