TrustSphere
 

Generative AI has done for fraud what cloud computing did for legitimate business: it has industrialised what used to be artisanal. Voice cloning, synthetic video, LLM-driven phishing and persona-as-a-service offerings are now stitched together into end-to-end attack stacks that no individual fraud control was designed to detect.

Synthetic identity fraud has crossed the threshold from niche typology to systemic risk in 2026. Generative AI has industrialised every step of the synthetic identity supply chain — from inventing plausible biographies to producing photorealistic ID documents and animated liveness footage — and the cost of producing a 'good' synthetic now sits well below the value of a single approved retail credit line.

Visa Compelling Evidence 3.0 was the most consequential change to the card-not-present dispute regime in a decade. A year on, the rebalancing of issuer and acquirer liability is producing a clear pattern of winners and losers — and quietly reshaping how merchants, processors and banks invest in dispute defence.

The 2024 Hong Kong incident, in which a finance employee was tricked into wiring USD 25 million after a fully synthetic video conference with what appeared to be the CFO and several senior colleagues, was treated at the time as a cautionary one-off. Two years later it looks more like an opening shot. Generative AI has industrialised the production cost of executive impersonation, and treasury and accounts-payable functions are now squarely in the crosshairs. Regulators have n

Agentic commerce has moved past the demonstration phase. AI agents now research products, negotiate terms, and complete checkout on behalf of human principals at meaningful daily volumes. The fraud and identity controls built for human-driven e-commerce assume a single, attentive customer in front of every transaction. That assumption no longer holds, and the implications for issuers, merchants, and payment networks are still being worked out.

Romance fraud has been the quietest billion-dollar problem in financial services for a decade. In 2026 it has stopped being quiet. The combination of cheap multimodal generative AI, off-the-shelf "persona farms" sold openly in dark-web marketplaces and the maturation of pig-butchering playbooks has industrialised a crime category that used to be artisan. The FBI's 2025 IC3 report logged $4.3bn in confirmed romance and investment-impersonation losses in the United States alone

AI agents are now placing orders, comparing prices and completing checkouts on behalf of consumers and businesses, and the volume of agent-initiated commerce is compounding faster than the trust frameworks that are supposed to govern it. The fraud surface looks unfamiliar because the buyer is not a person — and most of the industry's authentication, mandate and recourse models assume that it is.

Quishing — phishing via malicious QR code — has graduated from a niche social-engineering technique to a mainstream payments attack. The combination of post-pandemic QR ubiquity, account-to-account payment rails activated by camera scan and the ease with which a printed sticker can overlay a legitimate code has produced a year-on-year growth rate that few internal fraud teams budgeted for. The UK's Action Fraud reported a 587% rise in QR-code phishing reports between 2023 and

Agentic commerce — where AI agents browse, compare, and complete purchases on behalf of their human principal — is moving from research demonstration to live deployment. Major platforms and payment providers are publishing protocols, identity frameworks, and merchant onboarding specifications designed to let autonomous agents transact at scale.

Agentic commerce — autonomous AI agents researching, negotiating and transacting on behalf of consumers and businesses — has crossed from novelty to measurable share of e-commerce volume in 2026. Visa Intelligent Commerce, Mastercard Agent Pay and the OpenAI Operator and Anthropic Claude integrations now collectively process meaningful daily transaction volumes. The merchant-side and issuer-side fraud frameworks for these flows are still catching up. The harder problem, incre

As AI agents move from research demonstrations to live transactions, the question is no longer whether they will buy on a consumer's behalf — it is who is liable when they buy the wrong thing. The 2026 work on agent identity, payment mandates, and audit trail is rapidly becoming the load-bearing infrastructure of agentic commerce.