The Growing Threat of Familiar Fraud

In our hyper-connected world, familiar fraud is rising—a type of fraud where the victim knows the perpetrator. It's also known as "affinity fraud" and "intra-community fraud."

The emotional betrayal makes it especially harmful. These fraudsters use their close relationship to access sensitive information—passwords, answers to security questions, or even physical devices. What makes it worse? These attacks often go unnoticed because the fraudster understands the victim’s habits and behaviours.

Even advanced technologies, like document verification, struggle to detect such scams. This highlights the need for stronger tools such as liveness detection and biometric authentication.

Manipulating Human Emotions in Cybercrime

Fraudsters excel at exploiting emotions like fear, curiosity, and sympathy to trick their victims. Donna Mattingly, a corporate security education expert at Mastercard, aptly puts it: “Cybercriminals often rely on human emotions to trick their victims.”

Example: COVID-19 Scams

During the pandemic, scammers posed as hospital staff and demanded urgent payments for medical bills of relatives supposedly in critical condition. Driven by fear and confusion, many victims complied without verifying the claims.

The integration of generative AI has made this manipulation even more convincing. Fraudsters now create deep-fakes that mimic the voices and appearances of trusted individuals—friends, family members, or colleagues.

Example: $25.6 Million Deep-fake Scam

In Hong Kong, a multinational company lost $25.6 million. A video call that appeared to feature the CFO and colleagues turned out to be AI-generated deep-fakes. The employee believed it was legitimate and authorised a massive fund transfer.

How Fraudsters Research Their Targets

Many fraudsters today are not opportunistic—they are strategic. They meticulously research their targets for weeks or months, analysing social media, business websites and other publicly available information.

Example: The Case of Nikki

Nikki, an investment banker, fell victim to a phishing scam. A fraudster used her LinkedIn activity and industry newsletters to craft a convincing email that appeared to be from a client. Without hesitation, Nikki shared sensitive financial details, unknowingly handing her credentials to the attacker.

This kind of preparation allows fraudsters to create personalised attacks that are hard to spot.

Tactics Behind Fraudulent Attacks

Every attack follows three key phases:

1. Research: Gathering detailed information from social media, public records, and company data.

2. Profiling: Creating tailored attacks based on the target’s vulnerabilities.

3. Execution: Launching phishing emails, fake calls, or SMS messages to gain access.

Example: Spear-Phishing a Healthcare Organization

Fraudsters studied a healthcare company’s email patterns. Posing as the CEO, they emailed the finance team, requesting a large payment to a “new vendor.” Believing it to be genuine, the team approved the transfer, resulting in significant losses.

How Fraudsters Hide Their Tracks

Once fraudsters execute their plans, they work quickly to cover their tracks. Techniques include:

• Using VPNs or proxies to mask locations.
• Employing money mules to launder stolen funds through multiple accounts.
• Leveraging cryptocurrency to make transactions untraceable.

Example: Global Retail Brand Fraud

A global retailer was defrauded when attackers used offshore accounts and cryptocurrencies to obscure the trail. By the time the fraud was discovered, the digital evidence was lost.

Some attackers even delete emails or reroute notifications to their own devices, buying time before victims realise what’s happened.

The Rise of AI-Powered Fraud

AI has taken fraud to a terrifying new level. Fraudsters now automate:

• Researching potential victims.
• Creating convincing phishing emails.
• Cloning voices for scams.

Example: CEO Voice Cloning

In one case, fraudsters used AI to clone a CEO’s voice and tricked a finance department into authorizing a transfer. The voice was so realistic, the team didn’t suspect a thing.

Protecting Yourself: Practical Strategies

Here are actionable steps to safeguard against familiar fraud:

1. Minimise Your Digital Footprint: Share less on social media and be mindful of what’s publicly available.

2. Enable Multi-Factor Authentication (MFA): Adds an extra layer of security to your accounts.

3. Verify Communication Sources: Always confirm the authenticity of calls, emails, or messages through official channels.

Real-life examples from India

Familiar fraud, where trusted individuals exploit personal relationships to commit financial deceit, is an escalating issue in India. In 2022, a Bengaluru man discovered his sibling had drained his bank account using shared banking details. Similarly, a Kolkata woman fell victim to her partner, who used her credentials to secure loans. In another instance, a Surat family was duped of INR89 hundred thousand by a fraudulent investment firm, highlighting the pervasive nature of such scams. Earlier this month, four employees of a prominent solicitors' firm in Mumbai, including the CFO and Head Accountant, were arrested for criminal breach of trust, forgery, and cheating the company of approximately INR49.7 hundred thousand. Investigations suggest the misappropriated amount could exceed INR30-40 million.

These cases underscore the urgent need for advanced safeguards like biometric authentication and liveness detection to combat this growing menace.

The Role of Financial Institutions

Banks and financial service providers play a pivotal role in fighting fraud. By adopting AI-driven algorithms and behavioural biometrics, they can analyse transactions in real-time and flag unusual activity.

Equally important is education. Financial institutions must train customers to recognise scams. For instance, JP Morgan Chase’s cybersecurity awareness programs equip clients with tools to identify phishing attempts.

The Future of Fraud Prevention

To counter sophisticated scams, financial institutions and individuals must embrace advanced security measures:

• Biometric Authentication: Adds an irreplaceable layer of identity verification.
• Behavioural Biometrics: Analyses user behaviour to detect anomalies in real time.
• Blockchain Technology: Offers a secure, decentralised ledger that resists tampering.

Combined with AI-powered monitoring, these tools represent the future of fraud prevention.

Conclusion

Familiar fraud—where the attacker is someone you know - is a growing threat fuelled by trust and advanced AI tools. These scams are no longer random; they are strategic and highly sophisticated.

The good news? Vigilance, some amount of scepticism, and proactive security measures can keep you safe. So minimise your digital footprint, enable multi-factor authentication, and verify every request for sensitive information. Financial institutions must stay ahead by adopting cutting-edge technology to counter these threats.

Ultimately, awareness, scepticism and proactive security practices remain the most effective defences against fraud of all types. Staying informed and cautious helps so that even as fraudsters evolve, we might one step ahead.