Fraud Prevention

CARY — November 13, 2026 -- Only 7% of anti-fraud professionals say their organizations are more than moderately prepared for AI-driven fraud, according to research by the Association of Certified Fraud Examiners (ACFE) and SAS. That is roughly one in 14 respondents, and the same study found that just 25% of organizations use AI or machine learning to fight fraud.

In the study, 77% of surveyed anti-fraud professionals reported rising deepfake social engineering. ACFE President and CEO John Warren says fraudsters have adopted AI faster than most of the teams trying to stop them. The findings are published ahead of International Fraud Awareness Week, Nov. 15-21.

CHICAGO – November 06, 2026 -- StrongestLayer has launched Intent Workflows, a capability that holds high-risk emails before delivery and routes them to a designated person or security team, targeting attacks that carry no malware or suspicious links and pass standard security checks.

Few attacks drive nearly all losses, and most pass authentication

According to StrongestLayer's Q2 2026 Phishing Genome research, 3.6% of attacks accounted for 98% to 99.7% of financial losses. Of those attacks, 94% passed SPF, DKIM and DMARC authentication checks, and every one cleared the victim organization's secure email gateway.

"Some of the most expensive attacks look completely legitimate," said Alan LeFort, CEO and Co-founder of StrongestLayer.

Amsterdam – November 03, 2026 -- Fourthline and Veridas closed their merger on 3 November 2026, creating an identity verification group with forecast 2026 combined revenue above EUR 50 million and financing of up to EUR 65 million. The deal was first announced on 16 July 2026 and completed after all closing conditions were met.

Finch Capital, Seaya Andromeda and Ashgrove Capital supply up to EUR 65 million

Existing shareholder Finch Capital, new equity investor Seaya Andromeda and debt provider Ashgrove Capital are funding the transaction. The money will go toward product innovation, strategic M&A, debt refinancing and a reorganized shareholding structure. That structure includes partial liquidity for Veridas shareholders.

Europe – October 31, 2026 -- The EU's Council Permanent Representatives Committee (COREPER) endorsed the trilogue texts of the Payment Services Directive 3 (PSD3) and Payment Services Regulation (PSR) in April 2026, with implementation targeted for 2028.

Adoption expected in late 2026, with 18-24 months to comply

The European Commission proposed both measures in June 2023. The agreed compromise texts have since been published. Formal adoption and publication in the Official Journal are expected in late 2026, and the legislation is set to enter into force 20 days after publication.

Payment providers are expected to receive a transition period of 18 to 24 months before the rules become fully applicable.

Toronto – October 29, 2026 -- Crown Capital, a management company for roofing-related businesses, reports 15% overall savings and $150,000 in potential fraudulent fuel spending identified over 90 days after adopting Element Pay, a cardless fuel payment solution launched by Element Fleet Management Corp. (TSX: EFN).

Crown Capital also cut the time spent helping crews resolve fuel-payment issues by 25%. Element Pay is run by the company's Element Mobility unit and is designed to replace physical fuel cards.

Vehicle authorizes each fuel transaction instead of a card

Element Pay uses the vehicle to initiate and authorize direct-pay transactions. A driver cannot independently authorize a payment unless the associated vehicle is authenticated. Drivers pay through the Element Pay app using direct pay, or use tap to pay at supported stations where direct pay is unavailable.

Hamburg – October 29, 2026 -- DERMALOG Identification Systems GmbH's face recognition technology and TF60 fingerprint scanner detected all 1,500 presentation attacks in independent testing by certification provider Fime, producing an Attack Presentation Classification Error Rate (APCER) of 0.00% for both.

Both technologies meet Fime Level 2 PAD requirements under ISO/IEC 30107

The Presentation Attack Detection (PAD) evaluations followed the ISO/IEC 30107 standards series. Both the face recognition software and the TF60 satisfied Fime's Level 2 PAD requirements. The 1,500 attacks were counted across the two evaluations combined.

Brazil – October 27, 2026 -- Snowflake has made its Online Feature Store generally available, serving machine learning features in under 10 ms for real-time fraud detection. Two financial-sector customers, Neon and VALID Systems, report lower latency and lower fraud losses after moving to the platform.

Neon halves P99 feature latency to 72 ms after vendor discontinuation

Neon, a Brazilian digital financial institution with over 27 million customers, routes every login, card payment, transfer and loan request through Viper, its in-house fraud engine. Its previous feature store vendor, Tecton, was being discontinued, which set a hard deadline.

In three months, Neon's team rebuilt almost 300 features across eight fraud workflows on Snowflake Feature Store. P99 feature latency fell from 140 ms to 72 ms, almost twice as fast. Viper's service availability rose from 99.7% to 99.9%.

Italy – October 19, 2026 -- A newer wave of the NFCShare Android banking trojan, active since 14 May 2026, ships APKs with malformed ZIP paths that can break automated extraction tools, D3 Labs researchers reported.

Campaign shifts from Deutsche Bank lure to Italian and European brands

NFCShare first spread as a malicious APK through a phishing flow impersonating Deutsche Bank. The newer wave impersonates Italian and European banking brands and originates from a phishing site mimicking Intesa Sanpaolo. The malware shows a fake card-verification screen, asks victims to hold a payment card near the phone, collects the card PIN and sends NFC-derived card data to a WebSocket endpoint.

Core NFC logic unchanged, operations hardened

D3 Labs found the NFC and exfiltration logic largely unchanged. The changes are operational: more frequent APK rebuilds, brand rotation, URL shorteners, a new C2 endpoint and a 10-DEX layout.

Global – October 18, 2026 -- Coalition Incident Response (CIR) has documented rival Business Email Compromise (BEC) attackers using the names of inbox rules as a chat channel inside the same compromised mailbox, and says the exchanges expose gaps in default email platform security.

Two intruders negotiate and fight through rule names

Abusing inbox rules to evade detection (MITRE ATT&CK T1564.008) is a widespread tactic. Attackers use it to hide, redirect or forward emails containing keywords such as "invoice" or "confidential." In one CIR investigation, an attacker aware of a second intruder appeared willing to cooperate so that neither ruined the payout. In another incident, two actors fought over an inbox in a prolonged argument recorded as a sequence of rule names.

San Francisco – October 15, 2026 -- Forty percent of U.S. hiring managers have interviewed a candidate later found to be using a fake identity, up from 31% in 2025, according to a new survey from verification platform Checkr.

The report, The Hiring Hoax 2026: Fraud Doesn't End at the Offer, is based on responses from 3,000 U.S. managers involved in hiring within the previous 12 months. The online survey ran Sept. 11-16, 2026, through a third-party platform.

Fraud training jumps to 71% of HR teams, but confidence stays at 23%

Formal fraud training among HR teams has risen from 17% to 71%. Only 23% of managers are extremely confident their hiring process would catch a fraudulent candidate.