Topic starter
11/07/2026 8:31 pm
TL;DR: Fraud operations now resemble SaaS businesses, with modular kits, on-demand botnets, and AI-enhanced social engineering compressing the time from compromise to extraction by 30% in 2024, according to AU10TIX. Static verification and batch controls are no longer enough when attackers can scale, adapt, and monetise within minutes.
Editorial analysis by NHI Mgmt Group, based on content published by AU10TIX: “Top Fraud Trends for 2025-2026”.
By the numbers:
- 2024 saw a 30% reduction in dwell time between account compromise and monetary extraction.
Key questions
Q: What breaks when customer verification still relies on static KYC checks?
A: Static KYC checks break down when identity data is stale, publicly exposed, or easy to replay.
Q: Why does AI-driven fraud increase risk for phishing, account takeover, and payment abuse?
A: AI lowers the effort needed to create believable messages, fake identities, and mass campaigns, so attackers can target more people with less skill.
Q: How can security and fraud teams tell whether their controls are failing?
A: Look for two signals at once: rising false positives that push real customers away and rising fraud leakage that appears only after chargeback analysis.
Practitioner guidance
- Strengthen identity proofing with liveness and behavioural checks Add passive liveness, challenge-response testing, and behavioural biometrics to the onboarding path so synthetic or impersonated identities face multiple independent hurdles before approval.
- Move high-risk decisions to real-time risk scoring Connect device signals, transaction context, and behavioural anomalies to a live scoring engine so the system can step up, pause, or quarantine in the same session.
- Test fraud controls against deepfake and synthetic-ID scenarios Run exercises that simulate deepfake calls, AI-written phishing, and synthetic identity onboarding to measure whether reviewers and automation can still detect coordinated abuse.
Bottom line: AI-assisted fraud now behaves like an industrialised identity abuse market rather than a collection of isolated scams.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/07/2026 9:00 pm
Fraud has become an identity governance problem, not just a fraud detection problem. The article shows that attackers now combine AI-assisted impersonation, credential abuse, and automation into repeatable identity abuse chains. That moves fraud out of a narrow operations lane and into IAM, KYC, and risk governance. The practitioner conclusion is that identity assurance must be treated as a live control surface, not a one-time checkpoint.
A few things that frame the scale:
- Sophisticated multi-step fraud rose 180%, according to Sumsub's Identity Fraud Report 2025-2026.
A question worth separating out:
Q: How do IAM and fraud teams work better together on identity proofing?
A: They need shared policy for evidence quality, risk scoring and escalation. IAM controls decide what access is granted, while fraud controls surface suspicious patterns before or after issuance. When those teams operate separately, weak proofing can look compliant even while fraud risk is increasing.
👉 Read our full editorial: AI-driven fraud is industrialising identity risk in 2025