Skip to content

Topic

Payment Fraud and Merchant Account Abuse

A category of financial crime involving stolen merchant payment credentials, fraudulent transactions, or manipulated refunds and webhooks.

Current stories

securityOne report1 publisher

Apple's iOS 27 gives opted-in apps an on-device scam risk level to flag possible impersonation

Impersonation Risk Detection in iOS 27 returns one of three risk levels to an app when a customer makes a payment or changes account security settings, and the scoring runs on the device only after the customer switches it on.

Reality

Evidence54
Adoption20
Hype gap+12
Incentives68
Confidence58
productOne report1 publisher

Polymarket's signup flow treated a stolen SSN as a password

According to the Wall Street Journal, nearly 500 Polymarket US accounts were entered by people who typed in someone else's Social Security number. The flow's duplicate-identity check opened the account it matched instead of blocking the attempt.

Publishers:gizmodo.com

Reality

Evidence55
Adoption72
Hype gap−15
Incentives70
Confidence55
securityOne report1 publisher

Fake bpost customs email escalates a EUR4.95 duty into a request for card and bank details

A phishing email impersonating Belgium's bpost asks for EUR4.95 in unpaid customs duty. Malwarebytes says the pages behind the demand are built to harvest bank and card credentials, and the fee is the pretext.

Publishers:malwarebytes.com

Reality

Evidence55
Adoption30
Hype gap+12
Incentives65
Confidence50
securityOne report1 publisher

Fake support accounts are answering airline complaints under the brand's verified posts

Check Point followed the chain from a reply under a verified airline post to a WhatsApp thread to a half-finished $500 transfer, and counted thousands of impersonation accounts with hundreds more appearing daily.

Reality

Evidence55
Adoption35
Hype gap+20
Incentives70
Confidence45
productOne report1 publisher

Piston raises $15M Series A for cardless fuel payments to fight trucking fraud

Piston sells loss prevention, priced off a single Wex estimate. The number a fleet can actually verify before signing is whether the stations on Piston's network sit on the routes its trucks already drive.

Publishers:siliconangle.com

Reality

Evidence28
Adoption35
Hype gap+32
Incentives78
Confidence42