Payment fraud has evolved into an industrialized ecosystem with purpose-built toolkits, Malware-as-a-Service offerings, and professionalized services. Key findings from Recorded Future's 2025 Annual Payment Fraud Intelligence Report include: the 'Sniffer by Fleras' e-skimmer kit accounted for 26% of all infections, likely compromising 23M+ transactions; scam merchant accounts grew 2.5x year-over-year to 3,600+; and Telegram-based card testing services validated 27M+ card records. The industrialization of fraud creates standardized, detectable patterns upstream of the actual fraudulent transaction. Traditional transaction monitoring is blind to these pre-monetization stages, making proactive intelligence-informed defenses increasingly necessary. Recorded Future's Payment Fraud Intelligence product claims 75% of compromised cards are identified before fraud occurs.

5m read timeFrom recordedfuture.com
Post cover image
Table of contents
The Ecosystem Is Concentrated UpstreamTransaction Monitoring Looks at the Wrong End of the LifecycleHow Recorded Future Payment Fraud Intelligence Addresses This