Thursday, June 4, 2026

Security Boulevard Logo

Security Boulevard

The Home of the Security Bloggers Network

Community Chats Webinars Library
  • Home
    • Cybersecurity News
    • Features
    • Industry Spotlight
    • News Releases
  • Security Creators Network
    • Latest Posts
    • Syndicate Your Blog
    • Write for Security Boulevard
  • Webinars
    • Upcoming Webinars
    • Calendar View
    • On-Demand Webinars
  • Events
    • Upcoming Events
    • On-Demand Events
  • Sponsored Content
  • Chat
    • Security Boulevard Chat
    • Marketing InSecurity Podcast
    • Techstrong.tv Podcast
    • TechstrongTV - Twitch
  • Library
  • Related Sites
    • Techstrong Group
    • Cloud Native Now
    • DevOps.com
    • Security Boulevard
    • Techstrong Research
    • Techstrong TV
    • Techstrong.tv Podcast
    • Techstrong.tv - Twitch
    • Devops Chat
    • DevOps Dozen
    • DevOps TV
  • Media Kit
  • About
    • Sponsor

  • Analytics
  • AppSec
  • CISO
  • Cloud
  • DevOps
  • GRC
  • Identity
  • Incident Response
  • IoT / ICS
  • Threats / Breaches
  • More
    • Blockchain / Digital Currencies
    • Careers
    • Cyberlaw
    • Mobile
    • Social Engineering
  • Humor
Security Bloggers Network 

Home » Security Bloggers Network » Digital Trust & Safety Roundup: ATO surges and BNPL fraud on the rise this holiday season

SBN

Digital Trust & Safety Roundup: ATO surges and BNPL fraud on the rise this holiday season

by Sift Trust and Safety Team on December 22, 2022

December is a busy month for most people, filled with travel, time with family, and gift-giving. This December, however, was a challenging one for many consumers and merchants, not only because rising costs and a shaky economy impacted consumer behavior, but also because of rapidly accelerating fraud. As we close out this holiday season and say goodbye to 2022, our Trust and Safety Architects examine the fraud activity that surged during this period and what to expect in the new year. 

Fraud trends this holiday season

While various types of fraud run rampant during the holiday season, some tactics have been especially prevalent this year. Our data shows a concerning spike in account takeover attacks (ATO) as well as a continuing threat to buy now pay later (BNPL), as usage of this alternative payment method grows. 

What’s more, automation and online collaboration on the dark and deep web has made it easier than ever for fraudsters to plan and execute their schemes at scale. 

“Online fraud is no longer the purview of a few technologically gifted hackers,” says Trust and Safety Architect Jeff Sakasegawa. “Today’s digital capabilities have made fraud accessible to increasing numbers of people around the globe. With the proliferation of Deep and Dark Web marketplaces, fraudsters can communicate, collaborate, and sell their services more easily than ever before.”

Sakasegawa outlines why these fraud attacks are so damaging and how merchants should prepare now and into the new year in PaymentsJournal.

ATO skyrockets during Black Friday/Cyber Monday 

As predicted by Sift fraud experts, account takeover attacks proved to be a significant threat during this shopping season, surging over 94% in November alone. The popular shopping weekend between Black Friday and Cyber Monday also saw a 71% spike in ATO, with loyalty programs and crypto bearing the brunt.

Explore more of the latest holiday fraud data in our infographic. 

Buy now, pay later fraud on the rise

Buy now, pay later (BNPL) has become a fraud target since it soared in popularity among consumers in recent years, but this season brought increased attacks, as the rate of BNPL payment fraud attacks rose 109% in November alone. Rising costs have led even more consumers to turn to BNPL during this time to ease the burden of paying for holiday gifts. Fraudsters have also been taking advantage of BNPL providers’ marketing tactics, targeting publicly announced retail partners.

“We find that fraudsters can specialize in certain merchants, and they know how to hit them to get purchases through successfully,” says Sift Trust and Safety Architect Brittany Allen. “That’s another use of materials these providers have created for good to help legitimate consumers that are being increasingly spun as a marketing tactic on the deep and dark web.”

See what else Allen had to say about rising BNPL fraud and what merchants can do to protect themselves in Fintech Nexus.

Sift’s final Digital Trust & Safety Index report of 2022 is live—download to see the latest fraud data and insights.

The post Digital Trust & Safety Roundup: ATO surges and BNPL fraud on the rise this holiday season appeared first on Sift Blog.

*** This is a Security Bloggers Network syndicated blog from Sift Blog authored by Sift Trust and Safety Team. Read the original post at: https://blog.sift.com/digital-trust-safety-roundup-ato-surges-and-bnpl-fraud-on-the-rise-this-holiday-season/?utm_source=rss&utm_medium=rss&utm_campaign=digital-trust-safety-roundup-ato-surges-and-bnpl-fraud-on-the-rise-this-holiday-season

December 22, 2022December 22, 2022 Sift Trust and Safety Team Account Fraud, account takeover, ATO, black friday, bnpl, buy now pay later, Chargebacks, cyber monday, Digital Trust & Safety, First-party fraud, fraud prevention, Holiday Fraud, payment fraud, trust and safety
  • ← How to Implement FinOps and Increase Your Kubernetes Cost Avoidance
  • 6 Examples of Discretionary Access Control (DAC) →

Techstrong TV

Click full-screen to enable volume control
Watch latest episodes and shows

Tech Field Day Events

Upcoming Webinars

Toxic Flows: When Your Agent Skill Becomes a Supply Chain Attack
The Cost of Exposure: Managing the Operational Risks of Executive Security Incidents
The Future of Agentic Software Delivery: Unifying Source & Binaries
35 Million Lines, Zero Build-Breakers: How Adyen Scaled DevSecOps
Zero Trust for Agentic AI: Managing Non‑Human Identities at Scale

Podcast

Listen to all of our podcasts

Secure by Design

20 hours ago | Jack Poller

Senator Sanders Wants to Own AI Companies — and Hand America’s Adversaries the Keys

1 week ago | Jack Poller

NIST’s Nine: The PQC Signature Race Moves to Round Three

1 week ago | Jack Poller

The Quantum Arms Race: Why Washington Just Wrote a $2 Billion Check to Nine Companies

2 weeks ago | Jack Poller

Beyond Moore’s Law: The Hyper-Acceleration of Autonomous AI Cyber Capabilities

3 weeks ago | Jack Poller

The Exception Economy: When Security Teams Stop Protecting and Start Negotiating

Press Releases

GoPlus's Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

Subscribe to our Newsletters

Most Read on the Boulevard

Threat Actors Abuse ChatGPT Chats to Host Fake Outage Page, Deliver Malware
Sumo Logic Brings SIEM Platform to AWS European Sovereign Cloud
MazeBolt Adds AI Module to Simulate DDoS Attack
Let’s Coordinate Before We Raise Another Billion Dollars
Anxious Security Pros Watch as Anthropic, OpenAI Expand Access to Frontier AI Models
5 Essential Pillars of Post-Quantum Security for Modern AI Infrastructure
No Longer Invisible: When Cyber Attacks Go Physical
AI Governance for Startups: Pass Enterprise Reviews
Miasma: Red Hat Cloud Services npm Packages Hit by a Mini Shai-Hulud-Style Campaign
Red Hat Cloud Services npm Packages Hijacked

Industry Spotlight

Anthropic Mythos AI Model Strikes Fear in Trump Administration, U.S. Banks
Cloud Security Cybersecurity Data Privacy Data Security Featured Incident Response Industry Spotlight Malware Mobile Security Network Security News Security Awareness Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight Threats & Breaches Vulnerabilities 

Anthropic Mythos AI Model Strikes Fear in Trump Administration, U.S. Banks

April 12, 2026 Jeffrey Burt | Apr 12 Comments Off on Anthropic Mythos AI Model Strikes Fear in Trump Administration, U.S. Banks
The Day the Security Music Died
AI and Machine Learning in Security Cybersecurity Featured Industry Spotlight Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight 

The Day the Security Music Died

April 8, 2026 Alan Shimel | Apr 08 Comments Off on The Day the Security Music Died
The Lock, Not the Alarm: How Palo Alto’s Koi Acquisition Rewrites Endpoint Security
Featured Industry Spotlight Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight Uncategorized 

The Lock, Not the Alarm: How Palo Alto’s Koi Acquisition Rewrites Endpoint Security

February 18, 2026 Jack Poller | Feb 18 Comments Off on The Lock, Not the Alarm: How Palo Alto’s Koi Acquisition Rewrites Endpoint Security

Top Stories

Meta, Microsoft, DOJ, and Others Disrupt Southeast Asia Scam Compounds
Cloud Security Cyberlaw Cybersecurity Data Privacy Data Security Featured Incident Response Mobile Security Network Security News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight Threat Intelligence Threats & Breaches 

Meta, Microsoft, DOJ, and Others Disrupt Southeast Asia Scam Compounds

June 4, 2026 Jeffrey Burt | 2 hours ago 0
Anxious Security Pros Watch as Anthropic, OpenAI Expand Access to Frontier AI Models
Cloud Security Cyberlaw Cybersecurity Data Privacy Data Security Endpoint Featured Governance, Risk & Compliance Mobile Security Network Security News Security Awareness Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight Threat Intelligence 

Anxious Security Pros Watch as Anthropic, OpenAI Expand Access to Frontier AI Models

June 3, 2026 Jeffrey Burt | Yesterday 0
Sumo Logic Brings SIEM Platform to AWS European Sovereign Cloud
Cloud Security Cybersecurity Featured News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight 

Sumo Logic Brings SIEM Platform to AWS European Sovereign Cloud

June 2, 2026 Michael Vizard | 2 days ago 0

Security Humor

Randall Munroe’s XKCD 'Europa Missions'

Randall Munroe’s XKCD ‘Europa Missions’

Download Free eBook

[su_panel border="0px solid #ddd" radius="0" text_align="center" padding-top="0px" padding-bottom="0px"]
The State of Cloud Native Security 2020
[/su_panel]

Security Boulevard Logo White

DMCA

Join the Community

  • Add your blog to Security Creators Network
  • Write for Security Boulevard
  • Bloggers Meetup and Awards
  • Ask a Question
  • Email: [email protected]

Useful Links

  • About
  • Media Kit
  • Sponsor Info
  • Copyright
  • TOS
  • DMCA Compliance Statement
  • Privacy Policy

Related Sites

  • Techstrong Group
  • Cloud Native Now
  • DevOps.com
  • Digital CxO
  • Techstrong Research
  • Techstrong TV
  • Techstrong.tv Podcast
  • DevOps Chat
  • DevOps Dozen
  • DevOps TV
Powered by Techstrong Group
Copyright © 2026 Techstrong Group Inc. All rights reserved.
×

Insert/edit link

Enter the destination URL

Or link to existing content

    No search term specified. Showing recent items. Search or use up and down arrow keys to select an item.