A first-payment default is a new loan or account where the borrower never makes the very first scheduled payment. On a fresh account that pattern is a strong signal of fraud or a bust-out, not ordinary credit stress, because a genuine borrower rarely stops paying before they have paid anything at all.
What is a first-payment default?
A first-payment default, or FPD, happens when a borrower takes out a loan or opens a credit account and then misses the first payment that was ever due on it. The account goes delinquent immediately, without a single successful payment in its history. Lenders track this as a distinct metric precisely because it behaves so differently from a normal delinquency.
Most people who fall behind on credit do so after months or years of paying: they lose a job, hit a medical bill, or overextend. An FPD skips all of that. When someone never pays even once, the most likely explanation is not sudden hardship but that they never intended to pay, or the account was opened by someone who was not the real borrower at all.
That is why fraud and AML teams treat FPD as a leading fraud indicator rather than a pure credit metric. It shows up in the aftermath of application fraud, loan stacking, synthetic identities, and bust-outs, and a rising FPD rate is often the first portfolio-level sign that a fraud ring has found a way in.
How an FPD case unfolds
From the lender's side, a fraud-driven first-payment default usually plays out like this:
- OpenAccount is approved An application passes underwriting and the loan funds or the credit line goes live, looking like a normal new account.
- ExtractValue is pulled immediately The borrower draws the full loan or maxes the line fast, often moving funds out to another account.
- Go quietFirst payment never lands The first due date passes with no payment, no partial payment, and often no working contact details.
- ChaseCollections hits a dead end Outreach bounces, the identity may be synthetic or stolen, and the balance is charged off as a likely fraud loss.
What it looks like in practice
A lender approves a batch of new personal loans over the same two weeks. Most perform normally, but a cluster of them share a handful of devices and a similar income profile, and every loan in that cluster draws its full balance within a day of funding.
When the first payment dates arrive, none of the cluster pays. Phone numbers ring out, emails bounce, and two of the identities turn out to have no history before the loan application. The accounts roll straight to charge-off, and the shared attributes confirm it was one coordinated push rather than a run of bad luck.
Why it is dangerous for operators
FPD is one of the cleanest early-warning signals a lender has, but it is also a lagging confirmation: by the time the first payment is missed, the money is already gone. Its value is in what it teaches. A spike in first-payment defaults, especially clustered by device, product, channel, or acquisition date, tells you a control failed upstream and points you to the cohort that got through.
The danger is treating FPD as a collections problem instead of a fraud problem. Routed to normal collections, these accounts burn effort chasing people who do not exist and quietly hide a fraud pattern in the general delinquency numbers. Tagged and investigated as potential fraud, the same accounts become a map back to the ring, the weak underwriting rule, or the leaky channel that let them in.
What to watch in the data
- Never-paid accounts. A brand new loan or line that reaches delinquency with zero successful payments is the defining FPD signal.
- Immediate full drawdown. Maxing the balance right after funding, then moving money out, points to intent to default rather than to use.
- Clustering. FPDs bunched by device, IP, channel, income band, or origination week suggest one coordinated ring, not scattered hardship.
- Dead contact details. Phones, emails, and addresses that stop working right after funding are a strong fraud tell.
- Thin or synthetic files. First-payment defaults on identities with almost no credit history before the application often trace back to synthetic or stolen identities.
Quick questions
Is every first-payment default fraud?
No. Some are genuine, from borrowers who misjudge a due date or hit immediate hardship. But the FPD rate runs far higher in fraud than in normal lending, so it is treated as a strong indicator that warrants a look, not automatic proof.
How is FPD different from a normal default?
A normal default follows a history of payments and usually reflects credit stress that built up over time. An FPD has no payment history at all, which is much harder to explain as hardship and much more consistent with intent to defraud.
Why do fraud teams track it so closely?
Because it is an objective, portfolio-wide signal that surfaces after the fact. Watching where FPDs cluster lets a team find the cohort, channel, or rule that let fraud through and tighten it before the next wave.
What fraud types show up as FPD?
Application fraud, loan stacking, synthetic identity fraud, and bust-outs all tend to end in first-payment default, because in each case the borrower is extracting value with no plan to repay.
Can you prevent FPD, or only measure it?
You cannot prevent the missed payment once the account is open, but you can prevent the accounts that cause it. Feeding FPD patterns back into underwriting, device signals, and identity checks stops similar applications from being approved next time.
What should happen to an account flagged as FPD fraud?
Route it out of standard collections into fraud review, link it to shared devices, accounts, and identities, and use those links to find related accounts. If the identity is synthetic or stolen, it may also warrant a suspicious activity report.
First-payment default (FPD)と併せて知っておきたい用語
2026年 不正・AMLレポート
予測は不要です。このレポートは、不正・AMLチームが実際に直面していることと、その対応方法を分解して解説します。