SardineCon SF/2026

Learn More
Fraudology

BNPL provider fraud: What buy now pay later companies need to watch

Today I’m digging into BNPL provider fraud, because last week I talked about the fraud risks merchants face when they offer buy now pay later. This week, I wanted to flip the lens around and talk about what it looks like from the provider side. And honestly, that is where some of the bigger structural problems start to show up.

Because BNPL fraud risks do not stop at checkout.

They move upstream into onboarding, underwriting, account creation, merchant relationships, repayment behavior, and the broader marketplace dynamics around who is being targeted and how. And if you are a BNPL provider, or a fintech building anything close to installment payment fraud exposure, you really cannot afford to think about this as just another payments issue.

That matters.

Because BNPL provider fraud sits right at the intersection of digital lending fraud, alternative payment fraud, and fraud in embedded finance. It is attractive to bad actors for a reason. Fast approvals, distributed merchant relationships, digital onboarding, and a business model that was built for growth first. That usually creates openings. Especially when the market starts expecting sustainability after the easy capital phase.

Here is what that means in practice:

  • BNPL provider fraud often starts before the purchase and keeps creating risk long after it
  • Buy now pay later fraud works because speed, convenience, and digital access can all be exploited
  • Marketplace-enabled fraud gives criminals an easy way to test which merchants and providers are easiest to abuse
  • BNPL risk management becomes much harder when growth pressure and fraud pressure hit at the same time

What you’ll hear in this episode:

  • How bad actors are using marketplaces to identify new BNPL fraud targets
  • Which types of fraud are hitting BNPL providers the hardest right now
  • Why fraudulent BNPL applications and repayment abuse create outsized risk
  • What BNPL provider challenges look like in a more mature and less forgiving market
  • Why fraud against BNPL lenders is a much broader issue than just one bad purchase

You should listen to this episode if you:

  • Work in fraud, risk, fintech, lending, or payments and want a better view of BNPL provider fraud
  • Need a clearer understanding of buy now pay later fraud and installment payment fraud
  • Care about fraud in embedded finance, digital lending fraud, or alternative payment fraud
  • Want a more practical view of BNPL risk management and provider-side exposure
  • Are trying to understand how post-VC fraud pressure changes the equation for BNPL companies

If you liked this episode, be sure to subscribe and review the podcast on iTunes, Spotify, YouTube, or wherever you listen to podcasts. It really helps with getting the word out.

Episode notes & key takeaways

In this episode, I’m looking at BNPL provider fraud from the side that often carries more hidden exposure than people realize. Not the merchant deciding whether to offer the payment method, but the provider trying to make the whole model work while bad actors test every weakness in it.

Why BNPL provider fraud is different from merchant-side BNPL risk

Let’s break this down.

When merchants think about buy now pay later fraud, they are usually focused on transaction risk, fulfillment loss, and whether the provider is taking enough of the liability. Fair enough. But from the provider side, the risk stack is wider. Much wider.

Because a BNPL provider is not just approving a payment.

It is taking on credit exposure, identity risk, account behavior risk, merchant quality risk, repayment risk, and in some cases marketplace-enabled fraud that can scale fast before the full pattern is obvious. That is what makes BNPL provider fraud such a different category from ordinary ecommerce fraud.

And that matters.

  • BNPL provider fraud includes much more than checkout abuse
  • Buy now pay later fraud affects identity, lending, repayment, and merchant exposure all at once
  • BNPL fraud risks grow when providers treat the issue too narrowly
  • Fraud against BNPL lenders often reveals weaknesses beyond the transaction itself

How marketplaces are helping criminals find new BNPL targets

Here’s what’s actually happening.

One of the more important points in this episode is that bad actors are using marketplaces to identify where BNPL is easiest to exploit. That should not surprise anyone, honestly. Criminals go where the signal is clearest and the abuse is easiest to repeat.

Marketplaces make that easier.

They surface merchants, products, approval patterns, fulfillment signals, and sometimes enough operational clues for criminals to figure out which targets are worth testing next. That turns the marketplace into more than a shopping destination. It becomes a discovery layer for fraud.

Right.

And once attackers figure out which combinations of merchant, product, and provider are easiest to abuse, they keep coming back.

  • Marketplace fraud targets are often identified by looking for weak controls and easy monetization
  • Marketplace-enabled fraud helps attackers test BNPL abuse across multiple merchants quickly
  • BNPL scam trends often spread faster when marketplaces provide easy discovery and comparison
  • Fraud against BNPL lenders becomes harder to contain once criminals can scale testing efficiently

Which fraud types are hitting BNPL providers the hardest

This is where things get interesting.

BNPL provider fraud is not one tactic. It is a mix of behaviors that can look separate at first but usually connect underneath. Fraudulent BNPL applications. Identity misuse. Account abuse. Synthetic or manipulated borrower information. Repayment gaming. Merchant abuse. Sometimes straight-up first-party behavior that does not always get labeled correctly at the start.

That is part of the challenge.

Because installment payment fraud does not always show up in a neat, obvious pattern. Some of it looks like ordinary customer activity until repayment breaks down. Some of it looks like a credit issue until you dig into the identity side. Some of it looks like merchant-side noise until enough cases connect.

We’ve seen this playbook before.

  • Fraudulent BNPL applications are often the front door to larger provider losses
  • Installment payment fraud can involve both identity abuse and repayment abuse
  • Digital lending fraud often gets misread when teams separate fraud and credit too cleanly
  • BNPL fraud risks are harder to manage when the attack pattern unfolds over time

Why post-VC pressure changes the fraud equation

This part matters a lot.

When a payment model is in high-growth mode and capital is abundant, there is often more tolerance for risk, inefficiency, or losses that can be framed as the cost of scaling. But once that environment changes, the same fraud issues start to look a lot more serious. That is one reason BNPL provider challenges feel different now.

Because now the questions get sharper.

Can this model hold up?

Can the fraud controls scale with it?

Can the provider sustain itself without hiding behind growth narratives?

Can the business survive if fraud losses stay elevated while capital gets more selective?

That usually changes the tone very quickly.

  • Post-VC fraud pressure exposes whether the fraud model was actually sustainable
  • BNPL provider challenges become more visible when growth is no longer enough to offset weak controls
  • BNPL risk management matters more when the business is expected to prove durability
  • Payment provider fraud issues get harder to ignore when market conditions get less forgiving

What BNPL providers should be doing now

So what should providers take from this?

First, stop treating BNPL provider fraud like a niche version of ecommerce fraud. It is broader than that. Second, look carefully at how identity, underwriting, merchant risk, and repayment behavior connect in your environment. Third, pay attention to how attackers are using marketplaces and merchant ecosystems to test your model. And fourth, get honest about whether your fraud controls were built for scale or just for speed.

That is the part I want teams to sit with.

Because buy now pay later fraud is not going away just because the market matures. If anything, the pressure to manage it well is getting higher. And providers that want to last are going to need stronger discipline around fraud in embedded finance, better visibility into fraud patterns, and a more realistic view of where the business is easiest to exploit.

The big takeaway from this episode is pretty straightforward. BNPL provider fraud is a broader and more structural problem than many teams want to admit. It touches identity, lending, repayment, marketplace discovery, and business sustainability all at once. And that is exactly why BNPL providers need to take the risk far more seriously than a simple payment fraud problem.

Host
A smiling woman with short brown hair and glasses, wearing a black and white striped blazer.
Karisse Hendrick
Ecommerce Fraud Prevention Consultant