Largely driven by bad actors using fabricated or stolen identities, the newly released TransUnion (NYSE: TRU) 2024 State of Omnichannel Fraud Report, based on proprietary insights from TransUnion’s global intelligence network, found that nearly one in seven newly created accounts is suspected to be Digital Fraud.
This may represent a shift in tactics by fraudsters hoping “to engage earlier in the transactional process.”
The study showed that 13.5% of transactions “associated with online account creation were suspected to be digital fraud globally in 2023.”
Examples of the types of transactions that take place “during the account creation process include account signup, registration and loan origination.”
Among the industries that saw “the highest percentage of digital account creation transactions suspected to be digital fraud globally in 2023 were retail (44.7%), travel and leisure (36.0%) and video gaming (31.5%).”
Similarly, in the U.S., the highest percentage of digital fraud in the online customer journey occurred “at account creation, at 4.8%, varying widely by industry.”
This early phase new account digital fraud “may represent a paradigm shift of sorts among fraudsters.”
In lieu of using traditional tactics to gain access to and ultimately compromise existing accounts, they are “increasingly choosing to create new accounts that they can control themselves.”
These fraudsters leverage synthetic identities “assembled in large part through the use of credentials gathered as a result of one or multiple data breaches.”
The study also examined the volume and severity of data breaches “over the course of 2023 and compared them to previous years.”
TransUnion determined that “the number of data breaches in the U.S. increased by 157% from 2020 to 2023 and 15% year-over-year (YoY) in 2023 to a level never seen before.”
In addition, the average breach risk severity (the ability of a breach to enable identity fraud), as measured by TransUnion “increased 11% YoY to 4.1 in 2023, the highest ever measured.”
This rise may have played “a key role in this explosion in suspected fraudulent accounts and the record-high lender exposure associated with synthetic identities in 2023.”
In addition, the study found lender exposure “to these suspected synthetic identities for U.S. auto loans, bank credit cards, retail credit cards, and unsecured personal loans had soared by 63%, from $1.9 billion since the end of 2020 to $3.1 billion as of the end of 2023. This aligned with TransUnion’s digital fraud findings, which determined synthetic identity fraud was the fastest-growing type of digital fraud globally from 2022 to 2023. Lender exposure is defined as the total credit amount synthetic identities have access to for U.S. auto loans, bank credit cards, retail credit cards and unsecured personal loans.”
Overall, the study found that 5% of “all global digital transactions were suspected to be digital fraud in 2023, with the volume of risky transactions up 14% YoY and 105% from 2019 to 2023. This growth continues to outpace the growth in overall digital transactions, which rose 90% from 2019 to 2023.”
Globally, retail surpassed gaming (online gambling, poker, etc.) as the industry saw the highest rate of suspected digital fraud “in 2023 at 8.7%, up 21% YoY.”
In addition, the telecommunications industry “saw a 111% YoY increase in suspected digital fraud rate, up to 4.5%.”
Cecilia Seiden, vice president of TransUnion’s retail business, said:
“In recent years, the global retail industry has consistently been among those with the highest suspected fraud attempt rates. However, in 2023, we saw it climbed to the top of the list. As a result of credentials stolen in data breaches, often in industries other than retail, it has become increasingly easy for fraudsters to perpetrate attacks that leave retailers vulnerable to account takeover.”
For transactions where the consumer or fraudster “was located in the U.S., however, gaming continues to see the highest digital fraud rate, up to 10.9% in 2023 from 10.0% in 2022.”
This is followed by retail, which sits “at 6.1% for 2023, with its suspected digital fraud rate down 7% YoY.”
For transactions where the consumer was in the U.S., as is the case globally, the telecommunications industry “saw the greatest increase in the suspected digital fraud rate, up 54% YoY.”
This is followed closely by communities “like online forums and dating sites where the suspected digital fraud rate is up 52% YoY in the U.S.”