A guide to application fraud prevention in 2026: Think like a fraudster

Written by  Jordan Roberts, Solutions Consultant at Synectics Solutions 

Application fraud is often overshadowed by scams and authorised push payment (APP) fraud, yet it remains one of the most significant challenges facing customer onboarding in financial services. Last year alone, almost 685,000 fraudulent financial services applications were reported through National SIRA, the UK's largest fraud intelligence consortium. Although public attention tends to focus on these more visible forms of fraud, many offences begin much earlier, with criminals using fraudulent applications to establish accounts, identities or access to financial products.

Financial institutions have invested heavily in identity verification, Know Your Customer (KYC) processes, document authentication and increasingly sophisticated fraud detection technologies. Yet application fraud continues to evolve. AI-enabled document manipulation, synthetic identity elements and multi-stage fraud strategies are making fraudulent applications more difficult to detect using traditional approaches alone.

Rather than simply introducing new fraud typologies, many offenders are combining multiple techniques and exploiting weaknesses across organisations throughout the customer lifecycle. As a result, preventing application fraud is becoming less about identifying individual fraud types and more about understanding how fraudsters operate.

This guide explores how application fraud is changing, why traditional approaches are becoming less effective in isolation, and what financial institutions should consider when developing fraud strategies for 2026.

How has application fraud changed?

Application fraud is typically defined as the use of false, stolen or manipulated information to obtain financial products or services. While that definition remains accurate, it no longer captures the full complexity of the threat facing financial institutions today.

1) The methods have evolved

Historically, application fraud often depended on information that was clearly inaccurate. Forged documents, fictitious addresses or fabricated employment histories were all strong indicators that an application warranted further investigation.

Increasingly, however, fraudsters focus on reducing detectable anomalies rather than fabricating entire applications. Genuine identities may be combined with manipulated financial information, while compromised personal data from breaches is enriched with publicly available information to create highly plausible applicant profiles. Where a genuine identity is compromised, fraudsters will often try to “rinse and repeat” quickly, applying for multiple products before the victim or organisation spots the impersonation.

Genuine documents are increasingly altered rather than fabricated, using sophisticated digital editing and AI-assisted document generation to preserve authentic formatting and security features.

Synthetic identities are also developed over extended periods, gradually establishing credit histories and digital footprints before being used fraudulently. The scale of this shift is becoming increasingly visible. National SIRA now contains around 350,000 synthetic identity signals, with synthetic identities accounting for around half of all identity fraud, and one in three synthetic identities linked to repeat offending.

In some cases, the first product may be deliberately low risk – such as a savings account – simply as a foot in the door before moving on to higher-risk products.

Perhaps the most significant change is that fraudsters increasingly combine multiple techniques within a single application. Rather than fitting neatly into traditional fraud categories, today's cases often blend identity theft, synthetic identities, manipulated documents and coordinated digital behaviour to reduce detectable risk.

A case may combine first-party fraud, identity theft, synthetic identity elements, manipulated documents, and coordinated digital behaviour to achieve a specific objective. As a result, traditional fraud typologies are becoming less useful as the primary basis for detection than approaches that build a fuller picture of risk – at application and every other stage of the customer journey.

2) The motives have evolved

The objectives behind application fraud have also changed. Where fraudsters once sought immediate financial gain from a single successful application, many now view onboarding as the beginning of a much longer journey. A successfully opened account can establish trust, build transaction history and create opportunities to access additional products or facilitate wider organised criminal activity.

Today, the application is increasingly the entry point to a much longer play – not the end goal.

Increasingly, these ‘long-play’ objectives also extend beyond the boundaries of a single organisation. Fraudsters establish credibility wherever they encounter the least resistance before exploiting that trusted position more widely. They routinely move between banks, lenders, insurers and other financial services providers, adapting their methods wherever onboarding processes appear most vulnerable.

Across National SIRA intelligence, 22% of fraud encountered by an organisation is already visible elsewhere, demonstrating that fraud increasingly spans multiple organisations rather than remaining isolated within one application.

What appears to be an isolated application within one organisation may, in reality, form part of a much broader criminal strategy spanning multiple institutions, products and sectors.

What does effective application fraud prevention look like in 2026?

If fraudsters increasingly operate across organisations, combine techniques and pursue longer-term objectives, application fraud prevention needs to assess more than the application itself.

Identity verification, perpetual KYC and document authentication remain the foundation of effective customer onboarding. However, they are most effective when combined with broader intelligence that helps organisations understand not only the application itself, but the wider environment in which it sits.

Effective application fraud prevention should enable organisations to:

No single control is sufficient on its own. Effective application fraud prevention comes from combining these layers of intelligence to build a broader understanding of risk and support better-informed onboarding decisions.

Signals data shows organisations using cross-sector intelligence complete fraud investigations 31% faster on average, with reductions of up to 75% in some product areas.

Why is application fraud prevention about more that minimising financial loss?

Effective application fraud prevention does more than reduce fraud losses. It limits the wider operational, regulatory and reputational risks that arise when fraudulent applications succeed.

Increasingly, the greatest impact isn't the initial fraud loss. It's the opportunity a successful application gives fraudsters to establish trust, build credibility and facilitate wider criminal activity across products, organisations and sectors. For financial services organisations, this creates risks that extend far beyond the onboarding journey.

• Direct financial losses: bad debt, charge-offs and fraud write-offs.
• Operational pressure: increased investigations, case management and remediation activity.
• Regulatory scrutiny: greater expectations to demonstrate effective fraud controls and customer protection.
• Customer trust erosion: reputational damage and reduced confidence following fraud incidents.
• Future fraud exposure: fraudsters exploiting trusted accounts or identities to facilitate further criminal activity.

Does better fraud prevention mean more customer friction?

Building a broader understanding of risk raises an important question. Does more intelligence mean more work for fraud teams and more friction for customers? Not necessarily.

The objective isn't to introduce more checks or more investigations. It is to apply both with greater precision. When organisations have greater confidence in the intelligence surrounding an application, they can make more informed decisions about where additional scrutiny is genuinely needed - and where it isn't. The combined intelligence approach outlined above will help:

Fraud teams: Reduce false positives, focus investigations on genuinely high-risk applications and automate more low-risk decisions with confidence.

Customers: Experience faster onboarding where risk is low, with additional verification applied only where intelligence supports it.

This is especially important in the grey middle: cases that are not clearly low risk, but not clear enough to decline automatically. Better intelligence allows organisations to apply proportionate controls – such as lower limits, additional monitoring or staged access – rather than losing potentially good customers to competitors.

For many years, financial services organisations have focused on reducing friction within digital onboarding. That ambition remains. However, as application fraud and scams have become more sophisticated, the conversation has shifted from removing friction to applying it proportionately.

Increasingly, consumers recognise that additional verification has an important role to play in protecting them from financial harm. In fact, 83% of UK adults are happy to accept slight payment delays if it means they are better protected from fraud, suggesting consumers increasingly value security over absolute speed.

This suggests that eliminating friction altogether should no longer be the objective. Ensuring it appears only where there is sufficient intelligence to justify it, should be.

This "friction-right" approach allows organisations to protect genuine customers, strengthen fraud controls and maintain efficient onboarding journeys without applying unnecessary checks to every applicant.

What’s more, this approach avoids the need for difficult pay-off decisions when it comes to growth objectives. For example, for fast-growing organisations, regulatory fines can sometimes be treated as an inevitable cost of scale. But with the right intelligence and controls in place, growth and stronger fraud prevention do not need to be competing priorities.

Is your application fraud strategy fit for what’s next?

Application fraud will continue to evolve. Fraudsters will adopt new technologies, combine techniques in different ways and continue to exploit opportunities across products, organisations and sectors.

The challenge for financial services organisations is not simply to respond to each new fraud typology as it emerges. It is to continually assess whether their application fraud strategy is evolving at the same pace.

As a useful sense check, fraud leaders should be able to answer "yes" to the following questions:

Ultimately, the strongest application fraud strategies are not defined by how many fraud typologies they can identify. They are defined by how effectively organisations understand, anticipate and disrupt the behaviours that sit behind them.