Auto industry fraud: Andrew Austin on identity risk and targeted friction
Guest: Andrew Austin
Today I’m talking about auto industry fraud with someone who brings a really thoughtful perspective to a complicated space. I sat down with Andrew Austin, Senior Manager of Fraud Technology at CarMax, to talk about his career journey, how he thinks about fraud product strategy, and what makes fraud in the automotive space different from a lot of other ecommerce and financial services environments.
What I like about this conversation is that it is not just about fraud tactics. It is also about alignment. Andrew talks about building a mission statement for his role and making sure it connects back to the company’s broader goal of creating an iconic customer experience. And honestly, that matters a lot. Because fraud teams do not work in isolation. The strongest fraud programs are the ones that understand how to reduce risk without losing sight of the customer they are there to protect.
This episode also gives a really useful overview of the most common fraud issues affecting the auto space, especially around identity. We get into synthetic identity fraud, identity theft prevention, the challenges of identity fraud detection in the U.S., and why targeted friction almost always works better than blanketed friction.
And that matters.
Because auto industry fraud is one of those areas where the transaction value is high, the identity pressure is real, and the customer journey is too important to treat every buyer the same way. If you want a stronger fraud strategy in a space like this, you need nuance. Not just more controls. Better ones.
Here is what that means in practice:
- Auto industry fraud often centers on identity, account trust, and higher-value transactions where mistakes get expensive quickly
- Targeted friction is usually far more effective than blanketed friction when customer experience still matters
- Identity fraud detection in the U.S. remains difficult because foundational identity systems are easier to exploit than many teams want to admit
- Mission-driven fraud leadership helps teams build strategies that support both protection and customer trust
What you’ll hear in this episode:
- How Andrew Austin’s career path prepared him for fraud technology leadership at CarMax
- Why auto industry fraud looks different in an omnichannel environment than it does in many other verticals
- How synthetic identity fraud and identity theft prevention show up in auto finance fraud and automotive ecommerce fraud
- Why targeted friction and customer persona risk matter so much in modern fraud product strategy
- How mission-driven fraud leadership can help align fraud work with a stronger customer experience
You should listen to this episode if you:
- Work in auto, fintech, ecommerce, fraud, or identity and want a better understanding of auto industry fraud
- Care about synthetic identity fraud, identity theft prevention, and stronger identity fraud detection
- Are trying to build a CarMax-style fraud strategy that supports both growth and customer trust
- Want to think more clearly about targeted friction, customer persona risk, and auto dealer fraud prevention
- Value practical lessons on fraud product strategy and fraud technology leadership from someone doing the work
If you liked this episode, be sure to subscribe and review the podcast on iTunes, Spotify, YouTube, or wherever you listen to podcasts. It really helps with getting the word out.
Episode notes & key takeaways
This episode is a strong example of what happens when a fraud leader thinks beyond just stopping bad actors and starts designing around customer reality too. I talk with Andrew about identity fraud, omnichannel complexity, targeted friction, and what it looks like to build a fraud mission that actually supports the broader company mission instead of competing with it.
Why auto industry fraud creates a very specific kind of pressure
Let’s break this down.
Auto industry fraud is not just high stakes because the transactions are large. It is high stakes because the customer journey is layered, the identity expectations are complex, and the business often is trying to balance digital speed with real-world trust. That creates a very different environment than lower-risk ecommerce.
And that matters.
Because when fraud hits in automotive ecommerce fraud or auto finance fraud, the downstream impact can be much bigger. The dollar amounts are higher. The operational follow-up is heavier. The documentation matters more. And the customer experience can get damaged fast if the team overcorrects with too much friction or underreacts with too little.
That is one of the reasons Andrew’s perspective is so useful here. He understands that fraud strategy in this environment has to be thoughtful. Not generic. Not one-size-fits-all. The same move that protects one part of the journey can create a lot of pain somewhere else if it is not designed carefully.
- Auto industry fraud requires more precision because the value and complexity of transactions are both high
- Omnichannel auto fraud creates more moving parts for both customers and fraud teams
- Auto dealer fraud prevention works best when controls reflect how customers actually move through the journey
- Fraud product strategy in auto has to balance trust, verification, and usability at the same time
Why identity is at the center of so much auto fraud
Here’s what’s actually happening.
A lot of the most important fraud issues in the automotive space come back to identity. That includes synthetic identity fraud, identity theft, and the broader challenge of figuring out whether the person in front of you is who they say they are, and whether that identity has been built, borrowed, or stolen in a way that will not become obvious until later.
That is the part fraud teams should care about.
Because identity fraud in this space is not a small nuisance. It can sit at the core of financing, onboarding, account trust, and downstream payment risk. And when the identity question is wrong at the beginning, a lot of the rest of the process can still look legitimate for longer than it should.
Andrew talks about the two different types of synthetic fraud, and that is especially useful because it reminds people that synthetic identity fraud is not one simple category. There are variations. Different structures. Different intent patterns. Different ways bad actors build credibility before they cash it in.
- Synthetic identity fraud is one of the biggest ongoing challenges in auto industry fraud
- Identity theft prevention matters because stolen and manipulated identities can drive larger downstream losses
- Identity fraud detection gets harder when the identity looks plausible enough to pass surface checks
- Auto finance fraud often begins with identity confidence that was never truly earned
Why the U.S. makes identity fraud detection harder than it should be
This is one of the most important realities in the whole conversation.
A lot of companies want identity verification to work like a final answer. Check the right documents, confirm the right details, and move on. But the truth is that the U.S. identity environment creates more room for exploitation than many people realize. That does not make good fraud controls useless. It just means they are operating inside a weaker system than they should be.
That is a problem.
Because if foundational identity signals are easier to fake, manipulate, or reuse, then private companies are left trying to solve a much bigger problem with only part of the picture. That is why identity fraud detection feels so frustrating at times. The challenge is not only the fraudster. It is the environment that makes the fraudster harder to separate from a legitimate customer.
And that matters.
Because teams can easily end up blaming themselves for missing fraud patterns that are structurally harder to catch than they should be.
- Identity fraud detection in the U.S. is more difficult because the underlying identity ecosystem is easier to exploit
- Synthetic identity fraud thrives when foundational signals are treated as stronger than they really are
- Identity theft prevention requires more than one verification step when the system itself has weak points
- Fraud technology leadership has to stay realistic about what private-sector tools can and cannot solve alone
Why targeted friction is smarter than blanketed friction
This is the part of the conversation I think a lot of fraud teams will really appreciate.
Andrew makes a strong point about targeted friction, and honestly, I agree with him. Too many businesses fall into the trap of thinking that if some friction helps, then more friction must help more. That usually is not true. More often, it just creates more pain for good customers and more noise for internal teams.
That usually does not end well.
Targeted friction works better because it recognizes that not every customer should go through the same exact experience. Some journeys need more verification. Some need less. Some behaviors deserve closer review. Others do not. That is how you protect the business without treating every legitimate buyer like a suspect.
This is exactly why customer persona risk matters.
If you understand who your customers are, how they behave, and where the real risk indicators sit, then you can apply friction in a much smarter way. That creates better outcomes on both sides. Better fraud prevention. Better customer experience in fraud.
- Targeted friction helps companies reduce risk without punishing every good customer equally
- Blanketed friction often creates unnecessary loss in trust, conversion, and customer experience
- Customer persona risk should shape how fraud teams think about review and verification
- Fraud product strategy is stronger when friction is applied based on context instead of fear
Why mission-driven fraud leadership makes a real difference
Honestly, this may be the biggest takeaway for me.
Andrew talks about creating a mission statement for his role and making sure it aligns with the broader mission of the company. That may sound simple, but I think it is a really important leadership move. It forces clarity. It keeps the fraud team from drifting into a mindset where stopping fraud becomes disconnected from the actual business and customer it is meant to serve.
That is the part that holds up.
Mission-driven fraud leadership does not mean being soft on fraud. It means being clear about why the work matters and how it should support the larger customer promise. In a company like CarMax, that means thinking carefully about what trust looks like, what protection looks like, and what an iconic customer experience looks like when fraud controls are part of the journey.
The big takeaway from this episode is pretty straightforward. Auto industry fraud is complex because identity, customer trust, and transaction value all intersect in ways that make generic fraud strategies fall apart quickly. Andrew Austin’s perspective is useful because it stays grounded in the real work: understand identity risk, use targeted friction, align fraud goals with the customer mission, and build smarter experiences instead of heavier ones. That is the part I would pay attention to.
