Test

Dormant fraud, sleeper fraud, trojan horse fraud . . . whatever you call it, it’s an especially insidious form of account takeover fraud (ATO) that fraud teams often can’t detect until it’s too late. Fraudsters create accounts with stolen credentials or gain access to existing ones, onboard under the fake identity, then lie low, waiting for an opportunity to attack.   It takes a strategic approach to defeat the enemy from within, and fraudsters assume you won’t have the tools in place to even know where to start.   Dormant fraud uncovered: A case study  NeuroID, a part of Experian, has seen the dangers of dormant fraud play out in real time.  As a new customer to NeuroID, this payment processor wanted to backtest their user base for potential signs of fraud. Upon analyzing their customer base’s onboarding behavioral data, we discovered more than 100K accounts were likely to be dormant fraud. The payment processor hadn’t considered these accounts suspicious and didn’t see any risk in letting them remain active, despite the fact that none of them had completed a transaction since onboarding.  Why did we flag these as risky?  Low familiarity: Our testing revealed behavioral red flags, such as copying and pasting into fields or constant tab switching. These are high indicators that the applicant is applying with personally identifiable information (PII) that isn’t their own.  Fraud clusters: Many of these accounts used the same web browser, device, and IP address during sign-up, suggesting that one fraudster was signing up for multiple accounts. We found hundreds of clusters like these, many with 50 or more accounts belonging to the same device and IP address within our customer’s user base.  It was clear that this payment processor’s fraud stack had gaps that left them vulnerable. These dormant accounts could have caused significant damage once mobilized: receiving or transferring stolen funds, misrepresenting their financial position, or building toward a bust-out.   Dormant fraud thrives in the shadows beyond onboarding. These fraudsters keep accounts “dormant” until they’re long past onboarding detection measures. And once they’re in, they can often easily transition to a higher-risk account — after all, they’ve already confirmed they’re trustworthy. This type of attack can involve fraudulent accounts remaining inactive for months, allowing them to bypass standard fraud detection methods that focus on immediate indicators.   Dormant fraud gets even more dangerous when a hijacked account has built trust just by existing. For example, some banks provide a higher credit line just for current customers, no matter their activities to date. The more accounts an identity has in good standing, the greater the chance that they’ll be mistaken for a good customer and given even more opportunities to commit higher-level fraud.  This is why we often talk to our customers about the idea of progressive onboarding as a way to overcome both dormant fraud risks and the onboarding friction caused by asking for too much information, too soon.   Progressive onboarding, dormant fraud, and the friction balance  Progressive onboarding shifts from the one-size-fits-all model by gathering only truly essential information initially and asking for more as customers engage more. This is a direct counterbalance to the approach that sometimes turns customers off by asking for too much too soon, and adding too much friction at initial onboarding. It also helps ensure ongoing checks that fight dormant fraud. We’ve seen this approach (already growing popular in payment processing) be especially useful in every type of financial business. Here’s how it works:  A prospect visits your site to explore options. They may just want to understand fees and get a feel for your offerings. At this stage, you might ask for minimal information — just a name and email — without requiring a full fraud check or credit score. It’s a low commitment ask that keeps things simple for casual prospects who are just browsing, while also keeping your costs low so you don’t spend a full fraud check on an uncommitted visitor.   As the prospect becomes a true customer and begins making small transactions, say a $50 transfer, you request additional details like their date of birth, physical address, or phone number. This minor step-up in information allows for a basic behavioral analytics fraud check while maintaining a low barrier of time and PII-requested for a low-risk activity.  With each new level of engagement and transaction value, the information requested increases accordingly. If the customer wants to transfer larger amounts, like $5,000, they’ll understand the need to provide more details — it aligns with the idea of a privacy trade-off, where the customer’s willingness to share information grows as their trust and need for services increase. Meanwhile, your business allocates resources to those who are fully engaged, rather than to one-time visitors or casual sign-ups, and keeps an eye on dormant fraudsters who might have expected no barrier to additional transactions.  Progressive onboarding is not just an effective approach for dormant fraud and onboarding friction, but also in fighting fraudsters who sneak in through unseen gaps. In another case, we worked with a consumer finance platform to help identify gaps in their fraud stack. In one attack, fraudsters probed until they found the product with the easiest barrier of entry: once inside they went on to immediately commit a full-force bot attack on higher value returns. The attack wasn’t based on dormancy, but on complacency. The fraudsters assumed this consumer finance platform wouldn’t realize that a low controls onboarding for one solution could lead to ease of access to much more. And they were right.  After closing that vulnerability, we helped this customer work to create progressive onboarding that includes behavior-based fraud controls for every single user, including those already with accounts, who had built that assumed trust, and for low-risk entry-points. This weeded out any dormant fraudsters already onboarded who were trying to take advantage of that trust, as they had to go through behavioral analytics and other new controls based on the risk-level of the product.   Behavioral analytics gives you confidence that every customer is trustworthy, from the moment they enter the front door to even after they’ve kicked off their shoes to stay a while.  Behavioral analytics shines a light on shadowy corners  Behavioral analytics are proven beyond just onboarding — within any part of a user interaction, our signals detect low familiarity, high-risk behavior and likely fraud clusters. In our experience, building a progressive onboarding approach with just these two signal points alone would provide significant results — and would help stop sophisticated fraudsters from perpetrating dormant fraud, including large-scale bust outs.  Want to find out how progressive onboarding might work for you? Contact us for a free demo and deep dive into how behavioral analytics can help throughout your user journey.  Contact us for a free demo

Generative AI (GenAI) is transforming the financial services industry, driving innovation, efficiency and cost savings across various domains. By integrating GenAI into their operations, financial institutions can better respond to rapidly changing environments. GenAI is reshaping financial services from customer engagement to compliance, leading to streamlined operations and enhanced decision-making. The strategic role of GenAI in financial services Adopting GenAI in financial services is now a strategic imperative. A 2024 McKinsey report (The State of AI in 2024) notes more than a 10% revenue increase for companies using GenAI. As institutions strive to stay competitive, GenAI provides powerful tools to enhance customer experiences, optimize operations, accelerate regulatory compliance, and expedite coding and software development. Key areas where GenAI is making an impact Enhanced customer engagement Financial institutions use GenAI to offer personalized products and services. By analyzing real-time customer data, GenAI enables tailored recommendations, boosting satisfaction and retention. Streamlining and optimizing operations GenAI automates tasks like data entry and transaction monitoring, freeing up resources for strategic activities. This accelerates workflows and reduces errors. Further, GenAI-driven efficiency directly cuts costs. By automating processes and optimizing resources, institutions can lower overhead and invest more in innovation. Deloitte’s Q2 2024 study found AI automation reduced processing times by up to 60% and operational costs by 25%. Accelerating regulatory compliance GenAI simplifies compliance by automating data collection, analysis and reporting. This ensures regulatory adherence while minimizing risks and penalties. According to a 2024 Thomson Reuters survey, AI-driven compliance reduced reporting times by 40% and costs by 15%. Developer coding support for efficiencies GenAI is an invaluable tool for programmers. It aids in code generation, task automation and debugging, boosting development speed and allowing focus on innovation. Gartner’s 2024 research highlights a 30% improvement in coding efficiency and a 25% reduction in development timeframes due to GenAI. Accelerating credit analytics with Experian Assistant Within the credit risk management space, GenAI offers a powerful solution that addresses some known pain points. These relate to mining vast amounts of data for insight generation and coding support for attribute selection and creation, model development, and expedited deployment. Experian Assistant is a game-changer in modernizing analytics workflows across the data science lifecycle. Integrated into the Experian Ascend™ platform, it’s specifically designed for analytics and data science teams to tackle the challenges of data analysis, model deployment and operational efficiency head-on. Capabilities and skills of Experian Assistant Data tutor: Offers comprehensive insights into Experian’s data assets, enabling users to make informed decisions and optimize workflows Analytics expert: Provides tailored recommendations for various use cases, helping users identify the most predictive metrics and enhance model accuracy Code advisor (data prep): Automatically generates code for tasks like data merging and sampling, streamlining the data preparation process Code advisor (analysis): Generates code for risk analytics and modeling tasks, including scorecard development and regulatory analyses Tech specialist: Facilitates model deployment and documentation, minimizing delays and ensuring a seamless transition from development to production Driving more-informed decisions Adopting GenAI will be key to maintaining competitiveness as the financial services industry evolves. With projections showing significant growth in GenAI investments by 2025, the potential for enhanced efficiencies, streamlined operations and cost savings is immense. Experian Assistant is at the forefront of this transformation, addressing the bottlenecks that slow down analytical processes and enabling financial institutions to move faster, more informed and with greater precision. By integrating the capabilities of the Experian Assistant, financial institutions can leverage GenAI in credit risk management, automate data processes, and develop customized analytics for business decision-making. This alignment with GenAI’s broader benefits—like operational streamlining and improved customer experience—ensures better risk identification, workflow optimization, and more informed decisions. To learn more about how Experian Assistant can transform your data analytics capabilities, watch our recent tech showcase and book a demo with your local Experian sales team. Watch tech showcase Learn more

A tale of synthetic ID fraud Synthetic ID fraud is an increasing issue and affects everyone, including high-profile individuals. A notable case from Ohio involved Warren Hayes, who managed to get an official ID card in the name of “Santa Claus” from the Ohio Bureau of Motor Vehicles. He also registered a vehicle, opened a bank account, and secured an AAA membership under this name, listing his address as 1 Noel Drive, North Pole, USA. This elaborate ruse unraveled after Hayes, disguised as Santa, got into a minor car accident. When the police requested identification, Hayes presented his Santa Claus ID. He was subsequently charged under an Ohio law prohibiting the use of fictitious names. However, the court—presided over by Judge Thomas Gysegem—dismissed the charge, arguing that because Hayes had used the ID for over 20 years, "Santa Claus" was effectively a "real person" in the eyes of the law. The judge’s ruling raised eyebrows and left one glaring question unanswered: how could official documents in such a blatantly fictitious name go undetected for two decades? From Santa Claus to synthetic IDs: the modern-day threat The Hayes case might sound like a holiday comedy, but it highlights a significant issue that organizations face today: synthetic identity fraud. Unlike traditional identity theft, synthetic ID fraud does not rely on stealing an existing identity. Instead, fraudsters combine real and fictitious details to create a new “person.” Think of it as an elaborate game of make-believe, where the stakes are millions of dollars. These synthetic identities can remain under the radar for years, building credit profiles, obtaining loans, and committing large-scale fraud before detection. Just as Hayes tricked the Bureau of Motor Vehicles, fraudsters exploit weak verification processes to pass as legitimate individuals. According to KPMG, synthetic identity fraud bears a staggering $6 billion cost to banks.To perpetrate the crime, malicious actors leverage a combination of real and fake information to fabricate a synthetic identity, also known as a “Frankenstein ID.” The financial industry classifies various types of synthetic identity fraud. Manipulated Synthetics – A real person’s data is modified to create variations of that identity. Frankenstein Synthetics – The data represents a combination of multiple real people. Manufactured Synthetics – The identity is completely synthetic. How organizations can combat synthetic ID fraud A multifaceted approach to detecting synthetic identities that integrates advanced technologies can form the foundation of a sound fraud prevention strategy: Advanced identity verification tools: Use AI-powered tools that cross-check identity attributes across multiple data points to flag inconsistencies. Behavioral analytics: Monitor user behaviors to detect anomalies that may indicate synthetic identities. For instance, a newly created account applying for a large loan with perfect credit is a red flag. Digital identity verification: Implement digital onboarding processes that include online identity verification with real-time document verification. Users can upload government-issued IDs and take selfies to confirm their identity. Collaboration and data sharing: Organizations can share insights about suspected synthetic identities to prevent fraudsters from exploiting gaps between industries. Ongoing employee training: Ensure frontline staff can identify suspicious applications and escalate potential fraud cases. Regulatory support: Governments and regulators can help by standardizing ID issuance processes and requiring more stringent checks. Closing thoughts The tale of Santa Claus’ stolen identity may be entertaining, but it underscores the need for vigilance against synthetic ID fraud. As we move into an increasingly digital age, organizations must stay ahead of fraudsters by leveraging technology, training, and collaboration. Because while the idea of Spiderman or Catwoman walking into your branch may seem amusing, the financial and reputational cost of synthetic ID fraud is no laughing matter. Learn more