E-commerce is entering a new phase of fraud, where transactions that appear legitimate — valid accounts, correct details, even routine behavior — can mask coordinated attacks powered by synthetic identities and AI.

From account takeovers (ATOs) to loyalty abuse, fraud now targets identity rather than the point of sale, warned Dany Naigeboren, senior director of risk at fraud prevention company Forter.

Fraud is no longer breaking into systems — it’s operating inside them.

These attacks are becoming easier to execute, allowing smaller actors to operate with capabilities once limited to organized fraud rings.

“It’s a huge game changer. Until now, online fraud has mostly involved sophisticated fraud syndicates with vast engineering resources,” Naigeboren told the E-Commerce Times.