24 March 2026 - Pause... Protect your business from scams today

Escalating Fraud Landscape

Scams targeting businesses have intensified in early 2026, propelled by advances in artificial intelligence that allow fraudsters to create convincing deepfakes and automated attacks. Losses from consumer fraud alone hit $12.5 billion in 2025, a 25% jump from the prior year, with business-specific schemes like email compromise and push payment fraud contributing significantly. This surge coincides with economic pressures, including over 1.17 million layoffs in 2025, making desperate job seekers and strained companies prime targets for impersonation and investment cons.

Small and medium enterprises bear the brunt, lacking robust cybersecurity resources to counter tactics such as QR code tampering or SIM-swap fraud, known as smooshing. Phishing remains the top vector, evolving into multi-channel assaults that blend emails, texts, and voice cloning to extract credentials or funds. Cryptocurrency-related 'pig butchering' schemes, where fraudsters build false relationships before pushing bogus investments, drained $672 million from victims in 2024, a trend accelerating with AI's ability to scale personalized deception.

Regulatory responses add urgency, with Nacha's new rules mandating risk-based monitoring for unauthorized and false-pretenses payments effective March 20 for larger institutions and June 19 for others. Non-compliance could trigger audits, fines, or halted transactions, potentially costing non-adopters millions in operational disruptions. The SCAM Act, introduced in February, aims to hold online platforms accountable for fraudulent ads, while broader enforcement from the FTC and DOJ targets customs and trade fraud amid rising tariffs.

Less visible tensions arise in balancing security with user experience: stricter authentication slows onboarding, potentially driving customers away, while over-reliance on AI detection risks false positives that alienate legitimate users. First-party fraud, where individuals misuse their own accounts, blurs lines between victim and perpetrator, complicating recovery efforts. Stakeholder conflicts emerge too, as banks push for consortium data-sharing to spot patterns, but privacy concerns and competitive interests slow adoption.