Post-transaction investigations that recovered millions from a fraud ring

Guest: Eric Boles
Let’s break this down.
Most fraud teams spend a lot of time thinking about prevention. And that makes sense. The goal is always to stop fraud before the transaction ever happens.
But sometimes the most important work happens after the fraud is discovered.
That’s where post-transaction investigations come in.
In this episode, I sit down with Eric Boles, a former US Secret Service special agent and someone who has spent years leading cybercrime investigations at companies like StubHub, Yahoo, and AOL.
Eric has worked some of the kinds of cases fraud fighters rarely get to hear about in detail. The kind that start with suspicious transactions and eventually uncover large-scale fraud rings operating across dozens or even hundreds of accounts.
And in one case we talk about here, those investigations ultimately helped recover more than seven figures in financial restitution.
Which, honestly, doesn’t happen nearly often enough in fraud.
Because here’s the reality.
Too many companies treat fraud as something that ends once the chargeback happens or the transaction is written off.
Eric and I both believe that approach leaves a lot on the table.
Here is what post-transaction investigations look like in practice:
- linking related fraudulent accounts across a larger fraud network
- gathering evidence strong enough for law enforcement involvement
- working with federal investigators and prosecutors
- recovering funds through asset seizure and restitution
What you’ll hear in this episode:
- How post-transaction investigations uncover organized fraud rings
- Why companies should invest in dedicated investigations teams
- How investigators build cases that lead to fraud restitution recovery
- The role of law enforcement partnerships in prosecuting fraud
- Why fraud pattern recognition still requires human investigators
You should listen to this episode if you:
- run fraud prevention or risk teams at an online company
- investigate ecommerce fraud or payment abuse cases
- want to understand how fraud investigations lead to prosecution
- are exploring ways to recover losses from organized fraud
If you liked this episode, be sure to subscribe and review the podcast on iTunes, Spotify, YouTube, or wherever you listen to podcasts. It really helps with getting the word out.
Episode notes & key takeaways
One thing Eric and I both talk about in this conversation is how different fraud investigations look once you move beyond individual transactions.
Fraud rings rarely operate through a single account.
More often, investigators start seeing patterns across multiple accounts, devices, payment instruments, and infrastructure.
That’s where dedicated investigations teams become incredibly valuable.
Because investigators who spend their time connecting those dots often uncover fraud networks that automated systems miss.
Why post-transaction investigations uncover larger fraud networks
Fraud often appears isolated at first.
A single disputed transaction. A suspicious order. A chargeback that doesn’t quite make sense.
But when investigators start looking across accounts, devices, and behavioral signals, those events often connect to something much bigger.
This is exactly the kind of pattern Eric spent years uncovering.
Operational indicators may include:
- clusters of related accounts sharing similar fraud behaviors
- payment instruments reused across multiple fraudulent orders
- device fingerprints connected to large fraud networks
- account takeover patterns across multiple customer profiles
Building cases that law enforcement can act on
One of the biggest challenges companies face when investigating fraud is translating internal fraud signals into evidence that law enforcement can actually use.
That means documentation.
Investigators need to build a clear timeline showing how the fraud occurred, who was involved, and how financial losses were generated.
Operational steps may include:
- collecting transaction records tied to fraudulent activity
- linking accounts to common infrastructure or payment methods
- documenting account activity across fraud events
- coordinating evidence with law enforcement agencies
Why fraud investigations require human expertise
Automation plays a huge role in fraud detection.
But investigators still bring something machines struggle to replicate: pattern recognition developed through experience.
Investigators can often recognize subtle relationships across accounts, payment methods, and activity patterns that automated systems overlook.
Operational benefits may include:
- identifying fraud patterns across large account clusters
- recognizing emerging fraud tactics early
- uncovering infrastructure used by fraud rings
- supporting prosecution through detailed case analysis
Law enforcement partnerships help recover stolen funds
One of the most encouraging parts of Eric’s story involves financial restitution.
After investigators uncovered a fraud ring, law enforcement was able to seize assets connected to the perpetrators.
Those assets were eventually sold, allowing the company to recover millions of dollars in losses.
That outcome doesn’t happen in every case.
But it shows what can happen when companies take fraud investigations seriously and build strong relationships with law enforcement agencies.
Because when fraud investigators, companies, and prosecutors work together, it becomes much harder for fraud rings to operate without consequences.

