Authorized Push Payment (APP) Fraud

What is Authorized Push Payment Fraud?

Authorized Push Payment fraud exploits real-time payment systems and the trust victims place in seemingly legitimate requests. Unlike traditional fraud where criminals steal credentials or forge transactions, APP fraud convinces victims to willingly send money—often through urgent scenarios involving impersonation of banks, government agencies, romantic partners, or business contacts. Common APP fraud types include investment scams (fake trading platforms promising high returns), imposter scams (criminals posing as trusted entities), romance scams (fake relationships cultivated over weeks or months), and invoice fraud (redirecting legitimate business payments). The real-time, irrevocable nature of modern payment systems—including wire transfers, peer-to-peer apps, and cryptocurrency—makes APP fraud particularly devastating since transactions cannot be reversed once authorized.

Business Impact

Deloitte estimates U.S. losses from APP fraud could reach $15 billion by 2028. Financial institutions face mounting pressure from regulators to reimburse victims, with the UK mandating reimbursement from payment service providers starting in 2024. Beyond direct losses, organizations face reputational damage when their brand is used in impersonation schemes, customer service costs from fraud reports, and potential liability when customers are targeted through compromised business communications. The psychological sophistication of APP fraud means even security-aware individuals fall victim, making prevention particularly challenging.

Allure Security's Approach

Preventing APP fraud requires disrupting the impersonation infrastructure attackers use to build trust with victims. By detecting fake websites impersonating financial institutions, identifying social media profiles used in romance and investment scams, and monitoring for brand abuse in fraudulent schemes, organizations can protect both their customers and reputation. Rapid takedown of impersonation assets reduces the window attackers have to cultivate and defraud victims.

See the threats targeting your brand right now

Get a customized assessment showing active impersonation, phishing infrastructure, and exposed credentials specific to your organization. No commitment required.