The fraud prevention industry has traditionally focused on external threats — criminals using stolen or synthetic identities to exploit financial institutions. But a growing share of fraud losses comes from a source that is much harder to detect and much more uncomfortable to address: the institution's own customers.

First-party fraud occurs when a person uses their own real identity to obtain credit, goods, or services with no intention of paying. They apply for a credit card under their real name, make purchases, and then dispute the charges or default on the balance. They take out a loan using their genuine identity and declared income, spend the funds, and declare bankruptcy. They purchase goods online, receive them, and then claim the package never arrived to obtain a refund. In each case, the identity is real, the application is genuine, and the fraud is in the intent — which is invisible at the point of transaction.

The scale is significant. Industry estimates suggest first-party fraud accounts for between 10 and 20 percent of all credit losses at major financial institutions, and the share is growing. The normalisation of "friendly fraud" — particularly chargeback abuse in e-commerce — has created a population of consumers who do not consider these actions to be fraud at all, even when they clearly meet the legal definition.

Detection is inherently more difficult than for third-party fraud because the identity signals are all legitimate. The name matches the ID. The address is real. The credit history belongs to the applicant. Traditional fraud detection systems, which are designed to identify anomalies and impersonation, see nothing wrong because nothing about the identity is wrong. The fraud is in the behaviour, not the identity.

Effective first-party fraud detection requires combining identity verification with behavioural analytics. At the identity level, rigorous biometric verification at onboarding creates an irrefutable link between the real person and their account. This eliminates the common first-party fraud defence of claiming that someone else used their identity — a defence that is far more difficult to sustain when the account creation was authenticated with a live biometric match against a government-issued ID.

At the behavioural level, monitoring for patterns associated with first-party fraud — rapid credit utilisation after account opening, purchase patterns inconsistent with declared income, chargeback rates that exceed normal thresholds — allows institutions to intervene before losses accumulate.

The combination of strong identity verification and behavioural monitoring creates accountability. When a customer knows that their account is biometrically linked to them and that their activity is monitored for consistency, the calculus of first-party fraud changes. The anonymity and deniability that enable friendly fraud are removed.

For financial institutions and e-commerce platforms dealing with rising first-party fraud losses, deepidv offers identity verification that creates the biometric accountability link at onboarding, combined with agentic monitoring that flags behavioural patterns indicative of first-party fraud before losses mount.