July 2025 Summaries

Socure describes dispute abuse as a cross-industry form of first-party fraud in which individuals file false debit-card, refund, delivery, or gambling claims across multiple organizations before their patterns can be detected. To address this problem, which it estimates costs U.S. financial institutions $28 billion annually in Regulation E abuse alone, the company has launched a Dispute Abuse Score within its Sigma First-Party Fraud solution. Using predictive signals such as transaction velocity, digital intelligence, identity graph data, and confirmed abuse histories from Socure’s cross-industry consortium, the real-time score is designed to identify legitimate identities likely to submit fraudulent disputes before or during a claim. Socure says its consortium, launched in 2023, includes more than 20 billion transactions and 350 million active accounts, enabling members to recognize repeat abusers across sectors. The new score complements an Identity Manipulation Score and deterministic identity signals, aiming to help fraud teams reduce losses, investigation workloads, and customer friction while making faster risk decisions.

FinCEN has allowed certain OCC-regulated banks, FDIC-insured banks, and NCUA-supervised credit unions to obtain customer Taxpayer Identification Numbers from third parties before account opening, provided they use documented, risk-based controls and maintain reasonable confidence in customer identity without increasing illicit-finance risk. The change does not directly apply to fintechs, money services businesses, or other non-bank financial institutions, which remain subject to their own Customer Identification Program and IRS reporting obligations. Fintechs using sponsor or FBO banks may nevertheless be affected if their banking partners adopt the alternative process, particularly where third-party-sourced TINs conflict with customer-reported information and create audit, 1099 reporting, or backup-withholding risks. Firms are advised to retain existing workflows unless directed otherwise by a regulated bank partner, clarify responsibility for tax compliance and authoritative TIN records, document data lineage, and plan for resolving mismatches.

Socure has launched Workforce Verification, an AI-driven identity verification solution within its RiskOS orchestration platform designed to detect fake job applicants before they enter hiring workflows. The product addresses fraud involving AI-generated resumes, stolen or synthetic identities, and deepfake interviews by analyzing real-time device, behavioral, digital, and identity signals, with enhanced checks such as document, biometric, sanctions, and watchlist screening for higher-risk applicants. Socure says the system can block more than 70% of fraudulent applicants before recruiter review, helping organizations reduce exposure to payroll fraud, data theft, regulatory violations, and other risks. Available through hosted interfaces, APIs, or SDKs, Workforce Verification can be integrated with applicant tracking systems, payroll platforms, job boards, HR tools, and digital workforce marketplaces to automate fraud filtering while minimizing friction for legitimate candidates.

Disposable and low-cost domains are described as a key tool for digital fraud, enabling phishing, synthetic identity schemes, falsified employment or income verification, government-benefit fraud, and mass account applications. Fraud rings may exploit registrars with limited identity verification, bulk-registration options, privacy features, and slow abuse responses to create large numbers of short-lived or lookalike domains, often without building substantive websites. Rather than treating any particular international or budget registrar as inherently fraudulent, the account emphasizes behavioral indicators such as sudden spikes in domain use, rapid domain rotation, shared devices, IP addresses, phone numbers, and metadata across applications. It cites registrars including Namecheap, NameSilo, and PublicDomainRegistry as having been associated in external reporting with malicious-domain activity, while noting growing regulatory pressure through ICANN requirements, the EU’s NIS2 Directive, and U.S. policy actions. Socure presents its own digital-intelligence platform as a way to correlate domain, device, document, location, and network signals to identify coordinated fraud while minimizing friction for legitimate users.