Ownership Authentication: Fighting Fraud Losses and First-Party Risk

Fraudsters no longer need to reinvent their tactics from scratch. With artificial intelligence and increasingly sophisticated access to consumer data, they can test new approaches quickly, learn what works, and adapt before financial institutions have time to catch up.

That speed is forcing banks and other financial institutions to rethink how they authenticate customers. One approach gaining traction is ownership authentication, a process that looks beyond whether an application’s information matches a particular account. During a PaymentsJournal Podcast, John Gordon, CEO of ValidiFi, and Suzanne Sando, Lead Analyst of Fraud Management at Javelin Strategy & Research, explored how this approach can help financial institutions connect seemingly minor signals, identify emerging risks, and stay ahead of the adaptive fraud schemes.

A New Generation of Fraud

Artificial intelligence has made it possible for criminals to create new schemes and fraudulent identities in a matter of minutes. AI has fueled the rise of several types of scams, including account takeovers and bank impersonation. Some fraudsters use AI to submit account applications across multiple institutions, while others use it to gather information about existing customers, allowing them to mimic typical behavior and evade detection.

One way financial institutions are responding to those evolving threats is through ownership authentication. Rather than focusing solely on a new account or one that appears to be involved in fraud, this approach seeks to understand the consumer across their broader financial relationships. It incorporates factors such as ownership, payment history, account stability, and behavioral changes that can reveal emerging risk.

Verified accounts generally outperform better than the broader population in terms of fraud outcomes, but those results can improve further when institutions add an additional layer of authentication. Simply verifying that account details match the person opening the account is no longer enough.

“Just because an account is open and valid and it belongs to a particular consumer, there are still aspects that drive different decisions for the financial services provider based on fraud and risk connotations,” said Gordon. “If an account is open, valid and belongs to the applicant, if that applicant has an email address that’s less than 30 days old, the increase in risk is skyrocketing.”

Taking the Holistic View

It’s no longer enough to examine a singl