Spot emerging customer risk, before money moves
Continuous customer monitoring that helps Payment Service Providers identify emerging mule, compromised-account and synthetic-identity risk before APP reimbursement exposure builds.
Take control over post-onboarding risk, without overloading your teams. Real-time monitoring, custom alerts, and adaptive controls that let you act early and prioritise by risk appetite.
The evidence for ongoing monitoring
80 %
of high-risk accounts detected with a 1.25 FPR
75 %
more mules detected with post-onboarding screening
44 %
serious fraud cases show early warning signals before losses occur
Defend against risk that develops after onboarding
Application checks are the first line of defence, but risk develops across the customer lifecycle - from fraud to scams and laundering. Without continuous oversight, critical signals get missed. But constant monitoring without focus can also create operational strains. Effective intervention depends on the quality of the intelligence behind it.
Built on the trusted National SIRA fraud intelligence consortium, Sonar combines cross-sector intelligence with your own customer outcomes and selected third-party signals to identify emerging customer risk earlier. This helps teams spot mule, compromised-account and synthetic-identity risk before losses occur and intervene before money moves.

Benefits
Spot emerging threats in real-time and track behaviour change over time.
Identify emerging customer risk earlier
Detect new signals linked to mule activity, compromised accounts and synthetic identities before they become costly fraud events.
Trigger faster reviews and intervention
Convert emerging risk into alerts, reviews, case creation or automated actions, helping teams act before losses escalate.
Reduce APP reimbursement exposure
Surface higher-risk customers earlier in the lifecycle, creating opportunities to intervene before fraud losses and reimbursement costs increase.
Match risk appetite and capacity
Choose who to monitor, which intelligence sources to use, and the thresholds that trigger action, keeping teams in control of workload while maintaining effective coverage.
Risk extends beyond onboarding
Highly effective onboarding controls have made it increasingly difficult for criminals to operate through newly opened accounts. As a result, organised crime groups are increasingly targeting existing customers and dormant accounts, where risk can develop gradually and remain hidden within normal customer behaviour. Research conducted with major UK financial institutions found that many mule accounts remain dormant for months before becoming active, creating a growing blind spot between onboarding and transaction monitoring.
More monitoring doesn't mean better monitoring
Monitoring more customers more frequently can increase operational burden without improving outcomes. Effective ongoing monitoring relies on context. By combining cross-sector intelligence, customer behaviour and configurable risk rules, organisations can focus on the signals that matter most and intervene earlier with confidence.
The goal isn't more alerts. It's better visibility of emerging customer risk.
Want to explore the research behind this shift?
Got a challenge or a question?
Get in touch to see how we can work together to prevent fraud and reinforce your defences against emerging threats.
We’d love to hear from you.