Guest: Gil Rosenthal
Welcome back to Fraudology, and honestly, this episode is a bit of a fraud news recap and a bit of a reality check. I’m joined by Gil Rosenthal, and we’re looking at several threads that stood out to me at the end of 2021 and heading into 2022\. On the surface, these may seem like separate stories. PPP fraud fallout. Gift card money laundering. One-time password bots. Return fraud trends. But when you step back, they point to the same bigger issue.
The fraud landscape is shifting fast.
And not just in one channel or one vertical. I’m seeing more overlap between financial crime, ecommerce abuse, digital payment abuse, and the kinds of attacks that used to feel more isolated. That matters because fraud teams cannot afford to look at these issues one at a time anymore. The connective tissue is the story.
A lot of this comes down to scale, monetization, and how criminals reuse what works. Money stolen in one scheme can fund the next one. Stored value becomes a vehicle, not just a product feature. Bots get better at bypassing controls that used to hold up. And older abuse types like return fraud are still here, still expensive, and still evolving.
Here is what that fraud shift means in practice:
- Gift card money laundering is not just a payments issue, it is a broader stored value fraud problem
- PPP fraud fallout is likely to finance future attacks, not just sit idle
- One-time password bots show how quickly criminals adapt to common authentication controls
- Return fraud trends continue to create losses even while newer threats get more attention
What you’ll hear in this episode:
- Why gift card money laundering deserves more attention from fraud and risk teams
- How PPP fraud fallout may act as a fraud war chest for future criminal activity
- What one-time password bots tell me about bot-enabled fraud and online fraud shifts
- Why stored value fraud and consumer wallet fraud are still growing concerns
- How return fraud trends fit into the larger fraud trends 2022 picture
You should listen to this episode if you:
- Work in fraud, risk, payments, or trust and safety and want a practical fraud news recap
- Need to understand money laundering with gift cards and other stored value fraud patterns
- Are tracking emerging fraud threats tied to digital payment abuse and bot-enabled fraud
- Want a better read on how PPP fraud fallout could affect fraud in 2022
- Care about return fraud trends and how they fit into a much bigger fraud story
If you liked this episode, be sure to subscribe and review the podcast on iTunes, Spotify, YouTube, or wherever you listen to podcasts. It really helps with getting the word out.
Episode notes & key takeaways
This episode is really about pattern recognition. I’m looking at several stories and asking the question fraud teams should always ask, which is not just “what happened?” but “what does this tell us about what is coming next?” Because that is usually where the useful part is.
Why gift card money laundering is more than just a gift card problem
Let’s break this down.
Gift card money laundering tends to get underestimated because gift cards can sound small, familiar, and almost boring compared to some of the flashier fraud stories out there. But that is exactly why they work so well. They are easy to move, easy to spend, and in many cases easy to convert into something else of value.
That is a problem.
In this episode, I talk about the huge amount of value sitting in consumer wallets, including the example of Starbucks wallet balances, and why that should get the attention of fraud teams. Because the more money sits in stored value systems, the more attractive those systems become. Not just for direct theft, but for laundering, layering, and moving stolen funds in a way that can look deceptively normal.
At first glance, it may seem like a niche issue. But when you look closer, gift card money laundering is really part of a broader stored value fraud story.
- Gift card money laundering gives criminals a flexible way to move and disguise stolen value
- Money laundering with gift cards often overlaps with consumer wallet fraud and gift card abuse
- Stored value fraud becomes more attractive as more money sits in digital wallets and branded accounts
- Starbucks wallet risk is a useful example of how scale alone can create a fraud incentive
Why PPP fraud fallout could fuel the next wave of fraud
Here’s what’s actually happening.
One of the more important points in this episode is that PPP fraud fallout is not just about past losses. It is also about future capability. When criminals walk away with large amounts of money from fraud, they do not usually treat it like a retirement plan. They use it to fund more fraud. Better tools. More accounts. More infrastructure. More people. More testing.
We’ve seen this playbook before.
Fraud creates capital. Capital creates scale. And scale creates new pressure on everyone else in the ecosystem. So when I talk about PPP fraud fallout as a fraud war chest, that is not dramatic language. It is just a practical way to think about how stolen funds can fuel future attacks.
And that matters for merchants, fintechs, and banks alike.
- PPP fraud fallout may fund future schemes across ecommerce, fintech, and payments
- A fraud war chest gives criminals more room to experiment and scale
- Online fraud shifts often accelerate when bad actors have more resources behind them
- Emerging fraud threats are easier to understand when you follow the money, not just the tactic
Why one-time password bots matter more than people think
This is where things get interesting.
A lot of teams still treat one-time passwords like a fairly reliable layer of protection. And to be clear, they can help. But criminals have spent plenty of time figuring out how to work around them. One-time password bots are a good example of that. They automate or assist the process of getting victims to hand over codes that were supposed to prove legitimacy.
Right.
So the issue is not the code itself. The issue is what happens when a control assumes that a successful code entry means the person behind it should be trusted. That assumption breaks down pretty quickly when a bot, a relay, or a social engineering flow is involved.
This is why I keep saying fraud teams have to look beyond whether a control exists and ask how it is actually being defeated in practice.
- One-time password bots turn a familiar security step into a usable attack path
- Bot-enabled fraud keeps evolving because attackers study the friction points closely
- Digital payment abuse often succeeds when authentication is treated as the finish line
- Fraud teams need to connect authentication events to behavior, device, and intent
Why return fraud trends still belong in the same conversation
Return fraud does not always get grouped with stories about laundering, wallets, or authentication bots. I think that is a mistake.
Because return fraud trends tell us a lot about how criminals and opportunists think. They look for operational blind spots. They test policies. They find places where customer experience goals are not matched with enough control. And once they find an opening, they repeat it. That logic is not unique to returns. It shows up all over fraud.
So even though return fraud may feel less flashy than some of the other topics in this episode, it belongs here. It is part of the same broader pattern of businesses trying to create convenience while bad actors look for the easiest way to turn that convenience into money.
That usually does not end well if nobody is paying attention.
- Return fraud trends still represent meaningful losses for merchants
- Fraud patterns in returns often mirror the same logic seen in other abuse channels
- Online fraud shifts are easier to understand when policy abuse is part of the picture
- Fraud trends 2022 are not just about new attacks, they are also about older attacks getting smarter
What this fraud news recap says about 2022
If I had to boil this episode down, it would be this: 2022 is not starting with one dominant fraud story. It is starting with several connected ones. Gift card money laundering, PPP fraud fallout, one-time password bots, stored value fraud, and return fraud trends all point to a fraud environment that is more connected, better funded, and more adaptive than a lot of teams want to admit.
Honestly, that is the part I want fraud teams to sit with.
Because the right response is not panic. It is clarity. Look at how money moves. Look at how controls fail. Look at how older fraud types connect to newer ones. And look at where criminals are building leverage. That is where the useful signal usually is.
The big takeaway from this episode is pretty straightforward. Gift card money laundering may be the focus keyword here, but the bigger theme is that fraud is becoming more interconnected. If you want to prepare for what is next, you need to understand not just each tactic, but how they reinforce each other.
