Legacy Systems Were Built For A Different Risk Model

Many traditional fraud and risk management systems were built for a different payment world that only accounted for card-based transactions, ATM activity and cash-dispensing environments.

Instant payments are different. They are account-oriented, but they also borrow behaviors from card systems, making them almost a hybrid of card-based and account-based transactions. Instead of starting with a card token, the transaction may begin with an alias, such as a mobile number, a name or another identifier mapped to an account number.

That alias layer creates convenience, but it also creates new risks. Someone can impersonate another person. A fraudster can use a mule account to route funds. A bad actor can move money through accounts that appear legitimate on the surface. Traditional systems that were made for card fraud are not always structured to understand these patterns.

This is why the industry cannot simply take yesterday’s fraud controls and apply them to current payment rails. The technology has progressed. The fraud management systems have to evolve with it.

Real-Time Prevention Requires More Than Faster Alerts

When people hear “real-time fraud prevention,” they often think it means faster alerts. But faster alerts are only part of the answer.

The real goal is to identify the actual point of compromise, such as where the data is being misused, who the rogue actor is, which account is the victim, which account is the mule and where the money is really going.

That is not always obvious. In an account-based payment environment, accounts may have gone through proper know-your-customer checks. On paper, they look valid. But those same accounts can still be used by a rogue actor to route funds to another destination.

The account you see in the transaction may not be the real fraudster. It may be part of a chain used to move funds toward another destination.

Finding that actual point of compromise can be like finding a needle in a haystack. But in instant payments, that is exactly what platforms need to do. They cannot only ask, “Is this transaction suspicious?” They have to ask, “What pattern does this transaction belong to?”

The Right Friction Has To Happen Before The Transaction

Instant payments succeed because they are instant, so customer experience is not a side issue. That creates a difficult balance.

If every transaction is challenged, delayed or blocked, the platform undermines the experience customers came for. But if suspicious transactions move without friction, the platform exposes customers, businesses and the broader ecosystem to real harm.

Financial platforms need a middle ground between consumer experience and fraud prevention: when to challenge the customer, when to require a second factor and when to let the transaction proceed.

The key is that these decisions should be made before the transaction is completed, not after. Once an instant payment has moved, prevention becomes recovery. And recovery is often harder, slower and less certain.

The future of fraud prevention will depend on applying the right friction at the right moment.

Fraud Is Local, So Detection Must Be Adaptable

One of the most important things leaders should understand is that every payment environment is unique.

A fraud pattern that is relevant in Africa may not be relevant in North America, and vice versa. There may be similarities between environments, but rules, models and detection logic still need to reflect local realities.

In Africa, for example, mobile money is much more prevalent. In North America, the landscape may be shaped more by app-based money movement, bank-linked payment tools and companies that look like technology platforms but operate within money-transfer licensing structures.

These differences matter. Fraud does not appear in the same form everywhere. The risks around a mobile money platform may differ from the risks around a bank-led instant payment system, a fintech app, a regional bank or a large merchant that accepts payments from businesses and individuals.

That is why a one-size-fits-all fraud model is not enough. Leaders need rules, models and algorithms that are relevant to their own environment. They need systems that can adapt to local fraud patterns, local regulatory expectations and local customer behavior.

Fraud Prevention Is An Ecosystem Responsibility

Fraud prevention cannot sit with one participant alone. Anyone who is part of the payment ecosystem has a role to play.

That may include fintechs, regional banks, state banks, payment apps, merchants and large businesses that accept payments. If someone compromises an account and uses it to shop at a merchant, the merchant may become part of the dispute. If a platform enables money movement, it also carries some responsibility for detecting suspicious activity.

As payments become more embedded, the perimeter of fraud prevention expands. It is no longer only a bank problem. It is an ecosystem problem.

Instant payments are not going away. The volume of these transactions continues to grow because customers value speed, convenience and immediacy.

But speed cannot come at the expense of trust. If people do not believe their money can move safely, adoption will suffer.

The next generation of fraud prevention must be real-time, pre-transaction and adaptable. It must identify not only suspicious transactions but also the broader pattern and true point of compromise behind them.

Payments have evolved. Fraud has evolved with them. Fraud prevention has to do the same.​

Forbes Technology Council is an invitation-only community for world-class CIOs, CTOs and technology executives. Do I qualify?