Socure Risk Insights Alert: Ongoing Fraud Attack Targeting Financial Institutions Using Stolen Massachusetts Identities

Socure reports detecting more than 9,100 fraudulent checking-account and credit-card applications using stolen Massachusetts identities, which it says likely originated from a China-based actor. The applications showed coordinated indicators including randomly generated Outlook, Hotmail, and Luuinet.com email addresses unconnected to applicants’ identities, unusually high overnight U.S. application volumes that aligned with Chinese business hours, IP locations often far from claimed Massachusetts addresses, and inactive or recently reassigned Massachusetts phone numbers with weak identity links. Socure suggests the activity may be enabled by widespread data breaches affecting Massachusetts residents and believes the attackers use automated email creation, U.S. proxies, and locally coded phone numbers to evade detection. The company recommends that financial institutions monitor unusual patterns in application volume, domains, devices, IPs, and identity-contact correlations, and it highlights its own risk-scoring products, including an email “perplexity” model that it says identified the attack’s gibberish email addresses.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.