--- title: AI Enabled Fraud: When Growth Comes Before Guardrails source_page: https://www.sardine.ai/media/fraudology/episodes/ai-enabled-fraud canonical: https://www.sardine.ai/media/fraudology/episodes/ai-enabled-fraud format: text/markdown date: 2026-10-01T04:01:00.000Z description: AI enabled fraud is scaling. Fraud news breaks down the Polymarket fraud scandal, agentic commerce chargeback liability, and AI cloning scams… --- **Quick links:** [Human page](https://www.sardine.ai/media/fraudology/episodes/ai-enabled-fraud) · [Home](https://www.sardine.ai) · [Customers](https://www.sardine.ai/customers) · [Blog](https://www.sardine.ai/blog) · [Demo](https://www.sardine.ai/demo) --- # AI Enabled Fraud: When Growth Comes Before Guardrails **Published:** 2026-10-01T04:01:00.000Z AI enabled fraud is scaling. Fraud news breaks down the Polymarket fraud scandal, agentic commerce chargeback liability, and AI cloning scams… Welcome back to Fraudology. AI is here, and it’s making every kind of fraud we already know cheaper, faster, and harder to catch. We are going to walk through a handful of stories that show exactly how AI enabled fraud is showing up right now. From card testing at scale to one very messy fraud story. That story is Polymarket, and I spend some real time on it. It’s rare that we get this much visibility into a company’s actual fraud details. A Wall Street Journal investigation lays out the stolen debit cards linked to thousands of new accounts and a fraudulent deposit rate that hit 80%. I also get into AI-generated deepfake delivery orders, a bank coalition’s new warning about agentic commerce fraud, and a warning about AI voice cloning scams. We aren’t eliminating fraud, we never can, but we can get the information to be as fast or slightly faster than the fraudsters. What you’ll hear in this episode: Why AI-enabled BIN attack fraud and card testing are up over 75% according to at least one fraud vendor, and how fraudsters are now optimizing payment authorization the same way legitimate payment teams do A full breakdown of the Polymarket fraud scandal, including the prediction market fraud risk baked into its business model and the leadership decisions that made things worse Why Polymarket scrapped its same-source withdrawal rule to speed up payouts, and how that decision opened the door to real money laundering prevention failures A serious account takeover fraud exploit where a new account created with someone's stolen SSN could inherit their existing balance and linked cards, no password needed Why compliance staffing fraud programs need people with actual prevention experience, not just investigators brought in after the fact How growth at all costs fraud risk plays out when a CEO's response to an 80% fraud rate is reportedly "just keep growing and pay a fine" A new bank coalition report on agentic commerce fraud, and why AI shopping agent chargeback liability still has no real framework under current Visa and Mastercard rules An AI-generated fake delivery order used to attempt a retail theft at Walmart, and a Georgia police chief's warning What a real chargeback monitoring program actually looks like from the inside, and why Polymarket landing a fraud vendor like Riskified says a lot about how serious this problem became You should listen to this episode if you: Work in payments, card fraud, or retail fraud prevention and want a grounded look at how AI is scaling attacks you already know Are building or evaluating a chargeback monitoring program and want a real, public example of what happens when fraud rates spiral Care about prediction market fraud risk or are watching the regulatory and legal fallout at companies like Polymarket Are responsible for compliance staffing fraud programs and want language for why prevention expertise matters as much as investigative expertise Are tracking agentic commerce fraud and want to understand the AI shopping agent chargeback liability gap that still hasn't been solved Want practical, real-world examples of AI-generated fake delivery orders and AI phishing scams to bring back to your own fraud team ### Episode notes AI enabled card fraud starts with faster, smarter card testing Card testing used to mean someone manually entering card numbers one at a time. Now it's a spreadsheet upload and a script, which is a big part of why one fraud vendor reports card testing up over 75%. Fraudsters aren't just checking which cards are valid anymore. They're using payment authorization optimization the same way legitimate payments teams do, studying BIN data and transaction details to increase their own approval rates and make future purchases look more legitimate. Inside the Polymarket fraud scandal A Wall Street Journal investigation lays out just how bad things got at Polymarket, a prediction market platform now facing an IPO. Fraudsters linked stolen debit cards to thousands of new accounts, attempting to steal at least $10 million, with fraudulent deposits at one point hitting 80% of all transactions the payment processor was handling. According to the report, employees who raised concerns were reportedly told by leadership to keep growing and pay a fine if regulators ever noticed, a level of growth at all costs fraud risk that's rare to see documented this clearly. Why the same-source withdrawal rule matters more than it sounds One of the more useful fraud fundamentals in this story is a rule most people have never heard named directly. Requiring withdrawals to go back to the same payment source they came from is a simple, effective money laundering prevention control. Polymarket dropped that rule to speed up customer payouts, and predictably, fraud rates climbed right alongside it. An account takeover fraud exploit that should concern every risk team Later in the year, Polymarket users were hit with a different kind of account takeover fraud. If someone created a new account using another person's stolen personal information, including their Social Security number, they could gain instant access to that person's existing account, along with any linked bank accounts and cards, no password or username required. That's not a fraud problem so much as an engineering one, and it's worth remembering that fraud and security failures are often the same failure wearing different labels. The chargeback gap in agentic commerce still hasn't closed A coalition of banks recently published a report on agentic commerce fraud, flagging real concerns about AI shopping agents entering card details directly or steering people toward weaker payment protections. I still think the more urgent problem is AI shopping agent chargeback liability. If an AI agent makes a mistake or a purchase a customer didn't intend, there's currently no framework under Visa or Mastercard rules that holds the AI platform responsible instead of the merchant. AI-generated fake delivery orders and voice cloning scams are already here A Georgia arrest involved someone using an AI-generated fake delivery order to try to walk out of a Walmart with electronics, posing as a Spark driver fulfilling a fake pickup. The same police chief warned about a much more personal version of this problem, AI voice cloning scams that replicate a family member's voice convincingly enough to fake an emergency and demand money, alongside more familiar AI phishing scams impersonating brands people already trust. ### Key takeaways AI-enabled BIN attack fraud and card testing are up over 75% at some merchants, driven by automation that removes the old manual bottleneck. The Polymarket fraud scandal shows what growth at all costs fraud risk actually looks like when leadership prioritizes speed over fraud controls. Dropping a same-source withdrawal rule for faster payouts directly undermines money laundering prevention, even when other controls remain in place. Account takeover fraud can now exploit new account creation flows, not just existing login credentials. Compliance staffing fraud programs need genuine fraud prevention expertise, not just investigators experienced in after-the-fact enforcement. Agentic commerce fraud is a real and growing concern, but AI shopping agent chargeback liability remains unresolved under current card network rules. AI-generated fake delivery orders and AI voice cloning scams are already being used in real, documented crimes, not hypothetical ones. A strong chargeback monitoring program and the right fraud vendor can bring fraud rates back to industry norms, but only once leadership takes the problem seriously. ### Final takeaway If there's one thread connecting every story in this episode, it's that AI enabled card fraud doesn't need a new playbook to be dangerous. It just makes the old playbook faster, cheaper, and easier to run at scale. Whether that's a fraud ring testing thousands of stolen cards in seconds, a company choosing growth over guardrails, or a scammer cloning a voice to fake a family emergency, the fundamentals we've always relied on, segregation of duties, same-source withdrawal rules, real compliance expertise, matter more now, not less. Episode resources & links Connect with Karisse Hendrick | LinkedIn Host of the Fraudology Podcast Award-Winning Cyberfraud Expert Ecommerce Fraud Prevention Consultant Startup Advisor, Keynote Speaker, and Consultant to Fortune 500 merchants