Fraud Prevention

Amsterdam – November 03, 2026 -- Fourthline and Veridas closed their merger on 3 November 2026, creating an identity verification group with forecast 2026 combined revenue above EUR 50 million and financing of up to EUR 65 million. The deal was first announced on 16 July 2026 and completed after all closing conditions were met.

Finch Capital, Seaya Andromeda and Ashgrove Capital supply up to EUR 65 million

Existing shareholder Finch Capital, new equity investor Seaya Andromeda and debt provider Ashgrove Capital are funding the transaction. The money will go toward product innovation, strategic M&A, debt refinancing and a reorganized shareholding structure. That structure includes partial liquidity for Veridas shareholders.

Europe – October 31, 2026 -- The EU's Council Permanent Representatives Committee (COREPER) endorsed the trilogue texts of the Payment Services Directive 3 (PSD3) and Payment Services Regulation (PSR) in April 2026, with implementation targeted for 2028.

Adoption expected in late 2026, with 18-24 months to comply

The European Commission proposed both measures in June 2023. The agreed compromise texts have since been published. Formal adoption and publication in the Official Journal are expected in late 2026, and the legislation is set to enter into force 20 days after publication.

Payment providers are expected to receive a transition period of 18 to 24 months before the rules become fully applicable.

Toronto – October 29, 2026 -- Crown Capital, a management company for roofing-related businesses, reports 15% overall savings and $150,000 in potential fraudulent fuel spending identified over 90 days after adopting Element Pay, a cardless fuel payment solution launched by Element Fleet Management Corp. (TSX: EFN).

Crown Capital also cut the time spent helping crews resolve fuel-payment issues by 25%. Element Pay is run by the company's Element Mobility unit and is designed to replace physical fuel cards.

Vehicle authorizes each fuel transaction instead of a card

Element Pay uses the vehicle to initiate and authorize direct-pay transactions. A driver cannot independently authorize a payment unless the associated vehicle is authenticated. Drivers pay through the Element Pay app using direct pay, or use tap to pay at supported stations where direct pay is unavailable.

Hamburg – October 29, 2026 -- DERMALOG Identification Systems GmbH's face recognition technology and TF60 fingerprint scanner detected all 1,500 presentation attacks in independent testing by certification provider Fime, producing an Attack Presentation Classification Error Rate (APCER) of 0.00% for both.

Both technologies meet Fime Level 2 PAD requirements under ISO/IEC 30107

The Presentation Attack Detection (PAD) evaluations followed the ISO/IEC 30107 standards series. Both the face recognition software and the TF60 satisfied Fime's Level 2 PAD requirements. The 1,500 attacks were counted across the two evaluations combined.

Brazil – October 27, 2026 -- Snowflake has made its Online Feature Store generally available, serving machine learning features in under 10 ms for real-time fraud detection. Two financial-sector customers, Neon and VALID Systems, report lower latency and lower fraud losses after moving to the platform.

Neon halves P99 feature latency to 72 ms after vendor discontinuation

Neon, a Brazilian digital financial institution with over 27 million customers, routes every login, card payment, transfer and loan request through Viper, its in-house fraud engine. Its previous feature store vendor, Tecton, was being discontinued, which set a hard deadline.

In three months, Neon's team rebuilt almost 300 features across eight fraud workflows on Snowflake Feature Store. P99 feature latency fell from 140 ms to 72 ms, almost twice as fast. Viper's service availability rose from 99.7% to 99.9%.

Italy – October 19, 2026 -- A newer wave of the NFCShare Android banking trojan, active since 14 May 2026, ships APKs with malformed ZIP paths that can break automated extraction tools, D3 Labs researchers reported.

Campaign shifts from Deutsche Bank lure to Italian and European brands

NFCShare first spread as a malicious APK through a phishing flow impersonating Deutsche Bank. The newer wave impersonates Italian and European banking brands and originates from a phishing site mimicking Intesa Sanpaolo. The malware shows a fake card-verification screen, asks victims to hold a payment card near the phone, collects the card PIN and sends NFC-derived card data to a WebSocket endpoint.

Core NFC logic unchanged, operations hardened

D3 Labs found the NFC and exfiltration logic largely unchanged. The changes are operational: more frequent APK rebuilds, brand rotation, URL shorteners, a new C2 endpoint and a 10-DEX layout.

Global – October 18, 2026 -- Coalition Incident Response (CIR) has documented rival Business Email Compromise (BEC) attackers using the names of inbox rules as a chat channel inside the same compromised mailbox, and says the exchanges expose gaps in default email platform security.

Two intruders negotiate and fight through rule names

Abusing inbox rules to evade detection (MITRE ATT&CK T1564.008) is a widespread tactic. Attackers use it to hide, redirect or forward emails containing keywords such as "invoice" or "confidential." In one CIR investigation, an attacker aware of a second intruder appeared willing to cooperate so that neither ruined the payout. In another incident, two actors fought over an inbox in a prolonged argument recorded as a sequence of rule names.

San Francisco – October 15, 2026 -- Forty percent of U.S. hiring managers have interviewed a candidate later found to be using a fake identity, up from 31% in 2025, according to a new survey from verification platform Checkr.

The report, The Hiring Hoax 2026: Fraud Doesn't End at the Offer, is based on responses from 3,000 U.S. managers involved in hiring within the previous 12 months. The online survey ran Sept. 11-16, 2026, through a third-party platform.

Fraud training jumps to 71% of HR teams, but confidence stays at 23%

Formal fraud training among HR teams has risen from 17% to 71%. Only 23% of managers are extremely confident their hiring process would catch a fraudulent candidate.

Washington – October 15, 2026 -- The American Land Title Association (ALTA) has inducted Craig Haskins, a title insurance executive with more than 30 years of industry experience, as president for the 2026-2027 association year.

Haskins runs Knight Barry Title across four states

Haskins is president and CEO of Milwaukee-based Knight Barry Title, where he oversees operations and growth across Wisconsin, Minnesota, Michigan and Florida.

Within ALTA, he has served on the Board of Governors and as vice chair of the Best Practices Work Group, as well as on numerous committees and engagement groups. He currently sits on the board of directors of the Florida Land Title Association and previously served as president of the Wisconsin Land Title Association.

United States – October 14, 2026 -- CrowdStrike's Counter Adversary Operations team and the FBI disrupted several U.S.-based laptop farms run by the DPRK-nexus adversary FAMOUS CHOLLIMA in late September 2026. The farms let North Korean operatives pose as remote workers at American companies while hiding their location and identity.

CrowdStrike says dozens of victim organizations were identified across the disrupted clusters. They span aerospace, energy, financial services, healthcare, cybersecurity, defense engineering, government technology and consumer technology. The company describes the targeting as sector-agnostic: any employer offering remote work is a revenue opportunity.