Listen to this Post
Rising Threat of APP Fraud in the UK
A new report by the Royal United Services Institute (RUSI) warns that Authorized Push Payment (APP) fraud in the UK has escalated to such scale and sophistication that it should now be treated as a national security risk. This threat is being fueled by the rapid growth of smaller payment service providers (PSPs) — including digital banks, payment platforms, and Banking-as-a-Service (BaaS) companies — which are increasingly targeted by organized criminals. Alarmingly, these smaller PSPs handle a disproportionate number of fraudulent transactions, largely due to weaker onboarding controls and a focus on rapid customer growth over compliance.
The report emphasizes that while preventing fraud at the source is vital, authorities and the financial sector must also focus on removing the profit incentive for criminals. If organized crime groups cannot easily convert stolen funds into usable assets, the motivation to commit fraud diminishes.
The Scale of the Problem
APP fraud happens when victims are tricked into sending money to fraudsters who appear to be legitimate payees. UK Finance data shows that in 2024, APP fraud cost victims over £450 million (\$609 million). While this figure is smaller than losses from card fraud, its emotional and financial impact on individuals is far more severe.
Social media platforms remain the primary breeding ground for such scams, which include tactics like business email compromise, romance scams, and investment fraud. Criminals are now leveraging artificial intelligence to personalize and automate these scams at scale, making them more convincing than ever.
The Money Mule Pipeline
At the heart of this crisis are money mule accounts — bank accounts used to launder stolen funds before they disappear into the financial system. In 2024, the UK’s Financial Conduct Authority (FCA) shut down nearly 227,000 mule accounts, marking a 23% increase from 2023. Funds often stay in mule accounts for mere minutes before being transferred or withdrawn in cash.
A significant proportion of these funds pass through the UK’s Faster Payment System, which allows instant transfers of up to £1 million. Despite smaller PSPs accounting for just 8% of all Faster Payments in 2023, they received 53% of fraudulent transactions, underscoring their vulnerability.
Weaknesses in Digital Banking Controls
RUSI’s interviews with industry experts reveal that many digital financial institutions lack strong compliance mechanisms. Their priority on customer acquisition often results in weaker anti-fraud safeguards. The FCA’s recent £21.09 million fine against Monzo Bank for inadequate anti-financial crime controls between 2018 and 2020 serves as a stark reminder of the stakes involved.
Large UK banks have implemented stronger systems, making them less attractive to money mules. As a result, fraudsters shift toward smaller PSPs with weaker defenses, creating an asymmetrical threat landscape.
Strategic Recommendations to Fight APP Fraud
RUSI proposes several measures to combat the threat:
Enforce stricter regulatory requirements on new payment market entrants.
Conduct deeper research into fraudsters’ evolving tactics.
Foster real-time data-sharing partnerships between banks, PSPs, BaaS providers, and cryptocurrency platforms.
Adopt models similar to Australia, where payment intent is checked in real time to identify and block high-risk transactions before they happen.
Industry experts like Jonathan Frost argue that real-time collaboration is key. If banks could share information instantly when suspicious payments are initiated, many fraudulent transactions could be stopped in their tracks.
What Undercode Say:
The RUSI report paints a picture of a rapidly evolving fraud ecosystem where speed, technology, and regulatory gaps are the criminals’ greatest allies. APP fraud is no longer just a financial crime; it is a systemic risk that could undermine public trust in the UK’s financial infrastructure.
Several patterns emerge:
- Shift to Smaller PSPs – Fraudsters are deliberately bypassing major banks due to their enhanced anti-fraud measures, targeting smaller providers whose compliance programs are still maturing.
- The AI Advantage for Criminals – AI enables scams to be more believable, precise, and scalable, meaning even vigilant individuals can be deceived.
- Money Mules as a Bottleneck – While many prevention strategies focus on stopping scams at the customer end, disrupting mule networks could yield faster results.
The UK’s Faster Payment System, while beneficial for legitimate commerce, creates a time pressure that works in the fraudster’s favor. Once the money is gone, the chances of recovery drop sharply. This makes real-time detection and interdiction the holy grail of APP fraud prevention.
RUSI’s emphasis on removing the incentive to commit fraud is crucial. If criminals face more obstacles to cashing out — whether through stricter debit card controls, delayed settlement times, or better account screening — the overall appeal of APP scams will decline.
However, this requires a whole-of-system approach. Regulatory pressure must be balanced with innovation, ensuring new PSPs are not crushed under compliance costs but still meet security standards. The risk is that too much regulation could stifle financial technology innovation, while too little creates a haven for criminals.
International models, like Australia’s pre-payment risk checks, show promise. They demonstrate that proactive fraud detection before funds leave a victim’s account is more effective than trying to claw back money afterward. If implemented in the UK, such systems could dramatically reduce losses and deter fraudsters.
Another underexplored dimension is public awareness. While the report focuses on systemic fixes, empowering consumers through education could reduce susceptibility to scams. This would require sustained campaigns, possibly leveraging the same social media platforms fraudsters use to recruit victims.
In conclusion, APP fraud in the UK is evolving faster than the regulatory and technological countermeasures currently in place. Without decisive action — including real-time data sharing, stricter onboarding checks for smaller PSPs, and disruption of mule account networks — the problem risks spiraling into a persistent and costly national crisis.
🔍 Fact Checker Results:
✅ RUSI did publish a report on August 14 highlighting APP fraud as a national security risk.
✅ UK Finance figures confirm £450m in APP fraud losses in 2024.
✅ FCA data verifies the 23% year-on-year rise in money mule account closures.
📊 Prediction:
Given the trajectory of APP fraud, expect UK regulations on smaller PSPs and BaaS providers to tighten significantly over the next two years. Real-time payment intent checks, similar to Australia’s system, are likely to be piloted by 2026, with the aim of slashing fraud losses by at least 30%. Criminals will respond by diversifying into cryptocurrency and cross-border mule networks, forcing constant adaptation in anti-fraud strategies.
🕵️📝✔️Let’s dive deep and fact‑check.
References:
Reported By: www.infosecurity-magazine.com
Extra Source Hub:
https://www.medium.com
Wikipedia
OpenAi & Undercode AI
Image Source:
Unsplash
Undercode AI DI v2
🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]
📢 Follow UndercodeNews & Stay Tuned:
𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky | 🐘Mastodon
