PaymentsJournal

PaymentsJournal
  • 5.0 (1)
  • BUSINESS NEWS

Focused Content, Expert Insights and Timely News

Episodes

  1. 2D AGO

    From a Checkbox to a Differentiator: Redefining ACH Fraud Monitoring

    Last year, the treasurer’s office in Warren County, New York sent $3.3 million to what it believed was the county’s roadwork and maintenance contractor. It was not—the payments were instead routed to a fraudulent account. Because the county had recently switched from paper checks to ACH, the treasurer’s office had no account verification policies in place to prevent what turned out to be a textbook case of fraud. While the damage in Warren County represents the upper end of the spectrum, this incident is far from an outlier. It underscores the importance of implementing ACH protections, which many organizations already have in place. Too often, however, these measures are treated as a set-it-and-forget-it solution or merely a compliance checkbox. In a recent PaymentsJournal podcast, John Gordon, CEO of ValidiFI, and Suzanne Sando, Lead Fraud Management Analyst at Javelin Strategy & Research, discussed how robust ACH fraud monitoring controls can do more than satisfy regulatory obligations—they can act as a proactive risk prevention mechanism. This is essential to combat the growing prevalence and complexity of fraud. The Importance of Trust The compliance aspect of ACH fraud monitoring is partly driven by the latest version of the WEB debit rule, instituted by Nacha—the organization that governs the ACH network. Nacha’s enhanced fraud monitoring requirements raise expectations for all participants in the ACH ecosystem. “It increases the bar to say that we’re not just checking the validity of the account, but we’re also doing fraud checks,” Gordon said. “It creates an opportunity for financial service providers to identify fraud and to look at the potential risk associated with a consumer.” “It moves beyond compliance for compliance’s sake, which creates a lot of opportunities for financial service providers to not only identify and reduce fraud, but to put consumers in the right products that create mutually beneficial paths for them,” he said. Finding the right fit with customers has become more challenging in the digital era, where consumers have more options than ever and increasingly expect efficiency in every interaction. As a result, consumers often choose the path of least resistance when selecting a financial institution. These factors place institutions in a precarious position: they must balance security with customer expectations, both of which significantly impact retention. “The importance of consumer trust cannot be overstated,” Sando said. “We’re finding that when consumers have experiences with fraud or scams on a particular account—whether it’s a traditional financial account like your checking or savings or a merchant account—if they’ve experienced any sort of suspicious activity or fraud and scams, they’re much more likely these days to close an account where the fraud occurred and move somewhere else.” Stepping Up Authentication Given the risk of attrition, account onboarding and authentication have become critical stages in the customer experience. One key challenge arises from misapplied friction, where every user is forced to undergo the same verification process regardless of risk profile. “Our belief is there’s enough value in customer data that it can be managed through step-up authentication, that you are injecting friction where friction is warranted based on the risk signals that consumers have in concert with their profiles—whether that be their bank account, their payment transactions, or their credit scores,” Gordon said. “There are a number of different ways to end up at the right answer so that you’re facilitating a flow where the consumers stay in the process and you are fast tracking your low-risk consumers and putting obstacles in place where they should be,” he said. This process can be optimized by leveraging the richer data available in a validated account. Institutions can go further by authenticating the account, confirming that the applicant’s name matches the account owner’s—allowing for a more targeted, efficient approach. Implementing these measures early in the process is critical for fraud prevention and enables a customized experience, reducing the verification burden on the institution. For example, if a consumer opts out during onboarding due to friction triggered by their financial profile, the institution avoids a potentially difficult credit decision. Conversely, highly qualified consumers can be fast-tracked, improving both the experience and conversion rates. Scouring Alternative Data Although authentication is vital, it is increasingly challenging under the current credit scoring system. Last year, traditional scoring methodologies eliminated medical debt—a significant portion of consumer credit—from scores. While this change reshapes scoring, it does not remove the underlying debt burden. Additionally, consumers now maintain more financial relationships than ever, including accounts at traditional banks, digital-first banks, and fintechs. Many of these relationships are undisclosed, complicating accurate assessments of creditworthiness. “It becomes incumbent upon financial service providers to look at alternative data in a way that they can derive value out of it,” Gordon said. “We believe the consumers’ bank behavior, their payment success rates, and the velocity with which their PII elements change are all clues that will lead you to have a more accurate picture of that consumer—what they can afford and their creditworthiness.” “When we factor in the way that consumers acquire credit today versus the way they did in 1989 when the FICO score was created, they’re wildly different,” he said. “The traditional scoring methodologies haven’t kept pace with the way consumers are acquiring credit now. We see scenarios where consumers apply with a clean bank account only to subsequently change to a neobank account or some other bank account that they’re utilizing to enact what equates to first party fraud.” Palatable to All Parties These challenges have driven the emergence of data-driven treatment strategies, where financial service providers leverage shared industry data. This intelligence provides critical insights into connections between consumers, accounts, identities, and performance metrics. Such knowledge enhances underwriting, creating a scenario where a consumer’s application experience is guided by both their inputs and industry knowledge of past activity. However, these strategies must always be aligned with the institution’s broader objectives. “We have a client that we work with that does account-to-account payments tied to loyalty cards,” Gordon said. “Their exposure in that scenario is fairly limited, they want as much acceptance as they can possibly get. Conversely, we have some clients who are doing large dollar distributions, and it is not too much to ask for someone to credential into a bank account and we’re talking about the potential for five- and six-figure disbursements.” “It’s difficult to ensure that you’re keeping down the cost of doing business, the fraud losses, and ultimately the cost of credit,” he said. “When you marry the authentication process to the use case, you end up with a lot better solution that’s more palatable to all parties.” Confidently and Compliantly Developing strategies and implementing fraud management measures is imperative, as new and potent fraud variant emerge daily. The most effective defense is sharing information and leveraging a risk intelligence provider to help chart the way forward. “It’s finding a solutions provider that is flexible and can adjust and be agile in the same way that we find fraudsters are agile with technology and how they can use it against consumers,” Sando said. “It’s also about recognizing the fact that consumers are not all the same, it’s not one-size-fits-all. It’s about having that solution provider that can help you figure out how we navigate each individual case to make sure that it’s optimized for every single customer that comes through the system.” These solutions help organizations stay ahead of escalating fraud threats and maintain compliance with regulations like Nacha’s rule enhancements. But that’s just the beginning. “There is a lot of opportunity beyond compliance in account verification and authentication,” Gordon said. “What we see is that not only will more of your payments clear, but there are certain attributes and thresholds that , when crossed, significantly improve performance. Meaning, you’ve verified the account, the account has a certain history, and it doesn’t indicate any of the negative attribution that we often see compounded by a name match. You have the ability to operate confidently and compliantly in a way that you probably aren’t enjoying at present.”

    22 min

  2. 6D AGO

    The Emotional Toll of Financial Fraud

    As financial fraud continues to accelerate, its impact on victims goes far beyond monetary loss. The emotional and behavioral effects are long-lasting, shaping future decisions and sometimes undermining trust in their financial institutions. Substantial progress has been made in strengthening fraud detection and prevention, but much work remains—especially in the age of AI. In a PaymentsJournal podcast, Dal Sahota, Global Director of Trusted Payments at LSEG Risk Intelligence, and Suzanne Sando, Lead Analyst of Fraud Management at Javelin Strategy & Research, discussed how fraud affects different generations and what banks can do to stay ahead of the problem. Fraud Comes from Everywhere It’s hard to go a single day without encountering a scam attempt or hearing about someone who has been targeted. This constant exposure underscores how sophisticated and pervasive fraudsters have become. LSEG’s latest global research shows that most consumers believe scams are on the rise. As more aspects of life move online—opening new avenues for fraud—it is clear that everyone is at risk. “This morning, I got an email from a car rental company about a supposed upcoming trip from Orland Park, Illinois,” said Sando. “As someone who lives in Milwaukee, about an hour and a half outside of Orland Park, I’m not picking up a rental car there. But you stop and think, ‘hey, I do find myself randomly researching trips. Could this have been something that I looked up and maybe I’m getting a prompt from their website?’ That’s how people end up clicking on phishing links or providing details they didn’t intend to reveal to a fraudster.” Across the Generations Because scammers have become highly skilled in targeting, each generation experiences fraud differently. Scams exploit areas where specific groups are more vulnerable. Older generations expressed the highest concern about fraud in the LSEG study, while younger groups reported greater exposure to emerging threats such as deepfakes and “quishing” attacks. Reactions also vary by age. Some 97% of victims reported changing their behavior after being scammed, becoming more cautious online, sharing fewer financial details, and avoiding certain channels. Some may feel so insecure about certain payment types that they abandon them  entirely. Older adults, however, tend to experience the greatest loss of trust compared with other groups. “There are deep levels of distrust in any and all communication, which can be really devastating when you’re trying to maintain a relationship with your financial institution,” said Sando. “If you don’t even know that you can believe what’s being sent to you from your bank, what can you believe? Once that security feels like it’s just an afterthought and that trust has been violated, it’s really hard to go back to business as usual.” The Information Gap The effects of scams extend beyond individual victims—they ripple throughout the financial services ecosystem. “That really comes out in the research, how that’s impacting consumers and the lack of trust when they’re interacting in digital channels,” said Sahota. “We found that 32% of respondents reference shame as an emotional impact. And this is very devastating in the market.” A significant information gap exists regarding accessibility and the warning signs of potential fraud. Less than a quarter of LSEG’s survey respondents described themselves as well-informed  in this area. Separate data from Javelin indicates that many consumers are unaware of the educational resources their financial institutions offers, even when these resources are available online or via mobile apps. These programs are only effective if consumers can locate and act on them. “We can think about this in terms of vulnerabilities that they’re under and how those are targeted,” said Sahota. “Don’t assume that the consumer’s first language is English, for example. Those are nuances to work within, but the fraudsters really take advantage of those exposed vulnerabilities.” Sando added: “A lot of financial institutions post really text-heavy articles. Frankly, you’re seeking out education when you need it the most. You’re not sitting around on your couch on the weekend reading education on your bank’s website. You’re going to it in that moment. So it has to be hitting the consumer right at the part where it’s most critical.” A More Personalized Experience Financial institutions could benefit from delivering a more personalized experience, tailoring education based on demographics and customer behavior. Understanding what resonates—by geographic location, generation, or product ownership—helps identify who is most vulnerable to specific scams and how to reach them. “You’re not going to hit older generations with a lot of pop-up notifications on their phone,” said Sando. “That’s not the typical way that they consume information.” Once someone has fallen victim to a scam, they often struggle to focus on available resources or their rights. This is when financial institutions must guide them through the recovery process. “A scam victim shouldn’t have to be the most well-informed person on the process of reimbursement and resolution for your scam,” said Sando. “You want to have a highly trained investigator or case worker from your financial institution that’s there to walk you through because you’re already having to bear the burden of the financial loss.” Playing on Offense With money moving faster than ever, applying the right level of friction to the right type of payment reassure consumers. A small verification step can provide certainty that the beneficiary is legitimate. Friction that ensures validation is not a barrier—it’s a protective measure. Too many institutions wait until validation occurs too late. In the era of real-time payments, once a transaction is submitted, the money is gone. Prevention must come before the payment, not after. “We are focusing earlier on in building a full picture of ‘Who is this person I’m paying? What’s their historical account information?’” said Sahota. “Building a full picture and using the data that we have access to as financial services can make the difference in detecting suspicious activity before it’s too late. There are a number of vulnerabilities that the fraudsters and the scammers are exploiting. They continuously evolve. The leveraging of AI in that regard has really scaled the scams up. We need continuous risk assessment of all the aspects across the value chain.” “We continue to play from behind,” he said. “We’re always on defense, we’re never on offense. We’re always being reactive when we should be proactive.” To explore the full breadth of consumer insights referenced in this discussion you can review the complete survey findings in LSEG’s After the Scam research.

    22 min

  3. MAR 19

    What Should Credit Unions Be Doing with Crypto?

    Many credit unions are grappling with the differences between cryptocurrency, stablecoins and tokenized deposits—and whether these innovations fit into their business model. It’s important to take a step back and allow strategic evaluation, rather than urgency, to drive decisions around digital assets. Velera and its Digital Asset Lab are helping credit unions overcome the “fear of missing out” that often accompanies emerging technologies like crypto. In a PaymentsJournal Podcast, Velera’s Vlad Jovanovic, Vice President of Innovation, and Nathan Meyer, Senior Innovation Strategist, as well as James Wester, Director of Cryptocurrency at Javelin Strategy & Research, discussed what credit unions are doing—and should be doing—in the digital assets space. Three Primary Categories of Crypto The concept of digital assets now encompasses stablecoins, tokenized deposits and a range of cryptocurrencies such as Bitcoin, Ethereum and Solana. Cryptocurrency itself has evolved into a speculative asset class that consumers can buy, sell, trade and hold. Its volatility makes it risky, but people are using it to grow wealth, diversify portfolios and explore the broader digital assets landscape. Regulatory guidance on crypto is still incomplete. The CLARITY Act, which aims to provide a clear regulatory framework for digital assets, is still progressing through Congress. For these reasons, most credit unions are approaching crypto cautiously. “Do you want to create a connection point that allows your members to be able to transact with Bitcoin or Ethereum or Solana?” said Meyer. “That creates more risk exposure for the member, as well as concerns around what type and level of trading you’re allowing them to do. Because there is volatility, it can have significant impacts on them—both positive and negative.” Stablecoins and Tokenized Deposits Stablecoins function primarily as a payment instrument, designed to provide liquidity and trading within the crypto market. They are typically backed by secure assets, most often U.S. dollar-backed assets, such as short-term Treasurys. Stablecoins can be thought of as a new payment rail—just as FedNow and RTP provide speed for real-time payments, stablecoins offer similar capabilities. The first step for a credit union considering stablecoins is to assess whether member demand exists. Without demand, creating additional infrastructure is unnecessary. But for organizations with members engaged in remittance, stablecoins can move money more efficiently and at lower cost than traditional wires. Another important type of digital asset is tokenized deposits. This infrastructure enables credit unions and banks to tokenize existing balance sheets and bring them into the digital realm. Tokenized deposits can remain internal to a credit union’s ecosystem, but some institutions are exploring them for intraday settlement or liquidity pools. “We’ve seen a lot of VC dollars enter the space and a lot of start-ups are creating hype around their technology,” said Jovanovic. “That in itself is going to create a bit of a FOMO effect within the credit union industry. Am I doing enough? Should I be doing more?” The Coming Regulatory Impact Rules governing digital assets are still evolving. The GENIUS Act, passed in July 2025, provides a framework for exploring use cases and applications of this technology. NCUA has issued proposals outlining constraints related to crypto, which credit unions should review carefully before moving forward. Credit unions should also monitor the CLARITY Act as it moves through Congress to inform decisions around partnerships and exposure to digital assets. One immediate opportunity is engaging with regulators to help them understand credit unions’ needs—shaping regulations in a way that benefits both institutions and their members. “Stablecoins and crypto to some extent have been wrapped up politically in ways I haven’t seen with other technology,” said Meyer. “I never had to worry about thinking through cloud migrations and worrying that as soon as an administration changed, the dynamic around that technology was going to deflate or inflate. There is a lot related to crypto that has tie-ins politically, and that is feeding some of this movement versus the actual problem it solves or demand.” “It’s important for credit unions to understand both the CLARITY and GENIUS Act, but also understand if you get out over your skis in this space and a different administration comes in, regardless if it’s Republican or Democrat, you could see a very different perspective on privatization of stablecoins and money in general,” he said. What Should Credit Unions Do Now? For most credit unions, the first step is education—learning both the technology and the regulatory landscape of stablecoins. Bringing in digital assets experts, participating in industry consortiums, and collaborating with peers can accelerate this process. Ultimately, the most important questions revolve around members’ needs and the organization’s strategic objectives. “One of the best ways to cut through hype is to ask why,” said Wester. “How does that support the mission of my bank, my credit union, my product? That’s a really important question, because if you have somebody coming to you from either the vendor side or the crypto and digital asset space, it feels like hype.” Meyer added: “If you truly know who you are and what role you play in the community for your members, it allows you to avoid false signals. You can point to that strategic structure of who you are and very clearly articulate where this fits within that umbrella.”

    29 min

  4. MAR 18

    The Fate of Agentic Commerce Hinges on an Elusive Resource: Trust

    In the past, banks and businesses could build rapport by delighting customers over several interactions. That window has largely disappeared amid the impersonal nature of today’s digital ecosystem—and the growing sophistication of fraud. The surge in fraud and money laundering has prompted many experts to advocate for a return to a zero-trust framework, where every party must be verified before a transaction proceeds. That mandate will only grow more complex as agentic commerce gains traction and AI agents—and their intentions—must also be validated. In a recent PaymentsJournal podcast, FinScan’s Chris Ostrowski, Head of Product Management, and Kieran Holland, Global Head of Solutions Engineering, along with Christopher Miller, Lead Emerging Payments Analyst at Javelin Strategy & Research, discussed how these factors have placed a premium on trust. There are tangible ways organizations can build trust in a real-time, agentic environment. Increasingly, however, those efforts must take place long before a transaction is ever executed. Accelerating Social Change Many artificial intelligence enhancements have been implemented behind the scenes, from workflow optimization to cybersecurity. While customer-facing tools like chatbots have been successful, asking consumers to entrust shopping and payments to AI agents requires a far greater leap of faith. That leap comes at a time when many consumers are experiencing a crisis of confidence. Fraud attempts have become both relentless and highly convincing—and too many individuals have fallen victim. “I always give the example of what I would say to any member of my family who says, ‘I’ve received an e-mail offering me this deal or a massive bargain,’” Holland said. “If someone came up to you in the street and said, ‘I’m a Nigerian prince who wants to give you $5,000 if you could cash that for me,’ would you trust them?” “There’s still that social change needed, because when something is not face-to-face, I have to have certain controls and mechanisms to make me feel confident,” he said. “Maybe that change will eventually become ingrained; maybe it just won’t. Maybe us humans need a certain amount of confidence that we used to get from face-to-face interactions.” To rebuild confidence in a digital-first environment, organizations must establish effective risk controls around payments. That task has grown more complicated amid the rapid expansion of payment types, now spanning cards, crypto, and real-time payment rails. This proliferation has elevated payments orchestration platforms to the forefront. These platforms not only operate across multiple payments rails, but also enable businesses to intelligently route transactions to optimize authorization rates, timing, and cost. Such optimization is no longer just a matter of efficiency. It’s foundational to establishing trust before a transaction ever occurs. It’s also a prerequisite for agentic commerce to scale meaningfully. “With those true agentic payments, you’re trusting that individual to act on your behalf with that vendor, potentially for the first time, or even a network of vendors,” Ostrowski said. “You have to trust through interaction, but also within access and being able to facilitate enabling the right credentialing and set of controls within it. So you don’t have your agentic AI go out and buy you 10,000 rolls of toilet paper because it was more efficient to do it that way,” he said. “You’re having to put a lot of that trust up front.” Given the potential volume and velocity of agent-driven transactions, trust must rest on a firm foundation. Achieving that will require broad industry alignment—a necessary, though potentially challenging, step. “One of the interesting things here is that trust means something different for each participant in a transaction like this,” Miller said. “There is what a merchant needs to trust, there’s what an issuer needs to trust, there’s what a processor needs to trust, and there’s what consumers need to trust. There’s just a lot here to think about in terms of how we can get all the participants to agree to do the transaction.” Driving the Next Generation of E-Commerce This industry-wide agreement between merchants and financial services firms will be paramount because the roles and responsibilities within agentic transactions remain fluid. “You’re setting conditions around more of an event-driven architecture,” Holland said. “When something happens on this system, then do something else for me without me having to initiate it. But who defines what the criteria for that is? Who designs the guardrails around that and who—I suppose legally and philosophically—holds the responsibility for saying, ‘I want this?’ And now the AI has translated that into a set of conditions that it’s going to use.” “It’s the same concept in fraud prevention as in retail banking,” he said. “We don’t expect the end consumer to be the perfect guardian of their own financial health. We accept a certain level of responsibility across the injury to help them in that regard. I think the same is going to be true of agentic AI.” Like modern payments infrastructure, agentic commerce will likely include baseline controls. However, banks will still need to implement their own safeguards, policies, and compliance frameworks to protect customers and their institutions. Larger financial institutions may need to take the lead, gradually introducing customers to agentic commerce through limited, well-defined use cases that build familiarity and confidence over time. “You’ll probably see something similar to the use of Zelle in the U.S. where you have banks coming together and putting those safeguards around it at a common level,” Ostrowski said. “It can drive the growth of agentic AI usage within various financial services, within payments, and within retail itself.” “You’re also going to continue to see the growth of trust registries, where you go through verification processes to be placed on the registry to show that I have proven my ability to be trusted, and that information can follow along with the agents,” he said, “especially within the blockchain space of being able to cryptographically assign transactions and agents with certain rights. All of that can be facilitated at these larger institutions that are already learning it in other areas, to help drive this next generation of e-commerce.” The Messaging Standard A consortium-driven approach to agentic commerce will hinge on clear, standardized communication. Although the ISO 20022 messaging protocol was not developed specifically with agentic commerce in mind, its rich, structured data model is well suited to this paradigm. “ISO 20022 has been designed deliberately so that much clearer information is available about what this transaction is and who’s involved,” Holland said. “Whether you need to identify the name and location of the ultimate debtor, the ultimate creditor intermediaries and so on, that new standard was designed from the ground up to do that.” “It’s important because when you look at how AI within compliance is starting to take off, data is the foundation to that,” he said. “If you haven’t got good foundational, reliable data about who’s involved and who the counterparties are, making a good, accurate, and certainly more automated decision comes with significant risk.” A common messaging standard becomes even more critical as transactions accelerate towards real time. For example, stablecoins and agentic commerce share significant synergy: both are real-time, highly efficient, and capable of leveraging ISO 20022’s enhanced data capabilities. For stablecoins to integrate fully into mainstream financial systems, however, transactions must embed sufficient data to distinguish them from other cryptocurrency transfers. They must also incorporate compliance-related information, including support for travel rule requirements. “That whole sphere comes back to the standard ISO 20022 fields and that consistency we’re starting to get to be able to go forward in these various ways,” Ostrowski said. Making the Final Decision More advanced communication standards, efficient infrastructure, and stronger safeguards are all critical to fostering trust in an agentic commerce ecosystem. Yet none of these solutions can replace distinctly human qualities—creativity, empathy, curiosity, and judgment. “It’s a true saying that if you design a very fixed, very structured, automated system, us humans will always find a new scenario, a new circumstance that is all of a sudden going to break it,” Holland said. “Introducing humans into it is that creativity buffer where I can see that Chris has bought 10,000 rolls of toilet paper, I can see that it meets his preferences, but I as a human know that’s unlikely.” “That curiosity whereby humans can still intervene and say 99.9% of the time this might be right, but with my insightfulness, with my creativity, I can introduce that human factor back into this overall very tightly structured process,” he said. “I become that level of flexibility that’s not going to break the system.” The human element won’t disappear, because AI agents are ultimately designed to act on behalf of individuals. Preferences differ widely and evolve constantly. An AI agent may learn a consumer’s favorite restaurants, events, or airlines. But human priorities shift. Tastes change. Context matters. In the end, even in an agent-driven economy, trust will remain deeply human. “Maybe that day you feel like a window seat instead of an aisle seat, and your agent would say, ‘No, that’s not your typical pattern, you normally do this,’” Ostrowski said. “There’s still that level of independence that the human wants

    26 min

  5. MAR 10

    Tokenization: From Security Tool to Future-Ready Payments

    High-profile data breaches at major retailers exposed thousands of consumers’ personal account numbers (PANs), spurring the adoption of tokenization—a solution that replaces sensitive account data with surrogate values, protecting both consumers and merchants. As tokenization scaled, its benefits proved to extend well beyond fraud prevention. Merchants often saw meaningful lifts in authorization rates. But the rise of competing token types, the emergence of agentic commerce, and evolving policies from industry leaders have made tokenization strategy more complex than ever. In a recent PaymentsJournal podcast, Kiel Cook, Principal Product Manager at IXOPAY, and Don Apgar, Director of Merchant Payments at Javelin Strategy & Research, explored tokenization’s performance advantages—and why the next phase of change represents an opportunity for merchants to take the reins of their payments destiny. Avenues to Authorization As demand for tokenization increased, card networks introduced network tokens, payment service providers (PSPs) issued proprietary tokens, and third parties developed universal tokens to bridge ecosystems. For a time, the industry speculated about which format would ultimately prevail. “The different forms of tokenization were pitted against each other as a this-or-that scenario in the beginning,” Cook said. “But over time, especially in 2025, what I realized was these are actually a better-together play. Ultimately, when we’re talking about payment credentials, we’re talking about authorization rates. Network tokens are a trusted source and typically increase the likelihood of avoiding soft declines.” “But there are still scenarios where the network token may fail or may not be the most apt payment credential to use,” he said. “Those who are positioned to pivot back to the PAN when needed are the ones that are going to win. The more avenues you have to obtain authorization rates, the better.” Beyond security and authorization benefits, tokens are persistent. They stay current even when underlying cards expire or are replaced. This reduces unnecessary declines in card-on-file and recurring payment scenarios. Tokens can also serve as a common denominator across P2Ps, acquirers, and regions. When paired with payments orchestration platforms, they unlock operational flexibility and significant efficiency gains. Together, these advantages make tokenization foundational to modern payments infrastructure. Yet rapid adoption has also surfaced new pain points for merchants. “As the merchant landscape and consumer shopping started to evolve into omnichannel and then mobile, merchants would go with best-of-breed providers and sometimes wind up with multiple tokenization stacks,” Apgar said. “When you now want to change PSPs or you want to make a change to a sales channel or bolt on another vendor, it becomes a real issue if you don’t have control over the token.” The Question of Ownership For small businesses just getting off the ground, token ownership is rarely top of mind. Payments services are often lumped into the broader cost of doing business. “It’s usually not until an issue arises with their PSP, such as downtime or some new technology gets launched into the market and their PSP doesn’t have that,” Cook said. “Then they’re looking to move and they realize they don’t have the authority to make those decisions; they need the permission of their provider in order to take their data and put it somewhere else.” “In that moment, the question is, ‘Do you own your data? Do you have control? Can you do what you need to do to drive efficiency, to increase your bottom line with your customers, to increase your brand recognition, to have a robust payment connectivity layer?’” He said. That calculus changes as merchants expand and integrate multiple PSPs. At that stage, token ownership directly impacts portability, routing flexibility, and negotiating leverage. In short, whoever controls the token controls critical aspects of the payment relationship.   “How much autonomy would you like to have in your payments decision?” Cook said. “That’s going to help you understand how important ownership of your own data is going to be for you. Those who own their payment credentials own their own destiny.” The Tokenization Mandate Payment credentials remain incredibly powerful and increasingly difficult to safeguard amid rising fraud sophistication. To strengthen protections, Mastercard has committed to tokenizing all e-commerce transactions by 2030. While many support the spirit of this mandate, merchants are struggling with its practical implications. Credit cards will still be widely used in 2030, and issuers will continue to provide PANs to consumers. However, PANs will likely play a diminished role in the transaction lifecycle. That shift makes universal, merchant-driven tokenization essential—not only for protecting customers, but also for maintaining PCI compliance. “The 2030 mandate is more of a requirement to convert a PAN to a network token because I don’t see PANs being completely removed from the ecosystem by then,” Cook said. “Digital wallets will continue to expand because merchants will start to receive more network tokens through avenues or rails that are out of their control.” “But there will still be times where someone who’s on the other side of the digital divide that hasn’t adopted a digital wallet and is still coming in trying to process with their PAN,” he said. “The onus will be on the merchant in those scenarios to have the avenues to convert PANs, when they do receive them, to network tokens.” Developing Agentic Trust A more proactive tokenization strategy is becoming critical as the payment ecosystem approaches another inflection point: the rise of agentic AI. These autonomous agents are poised to become a mainstream shopping interface. “We’re going from one payment credential—historically the PAN—to now a proliferation of payment credentials and line of sight to where these are coming from,” Cook said. “How do you know what to trust and what not to trust? How do you know the difference between an agentic agent that has permission versus a bot hitting your website?” “One of the big things is making sure that you as a merchant have your data stored in a way so that the agent can pick it up and share it with the consumer on the other side of that search,” he said. “Not having your data in the correct format or being able to be picked up in a certain way is going to be a big challenge for your company to maintain line of sight to your consumer, as they have a new middle layer managing the interaction.” This highlights a new core challenge—trust. Merchants must verify not only the consumer, but also the AI agent acting on their behalf, along with permissions and intent behind each transaction. Meeting this need will require new infrastructure capable of assessing and managing agentic risk. Tokens can play a pivotal role by creating guardrails around agent-driven activity. Merchants should begin preparing now to support agentic-ready token frameworks. “Keep in mind, it’s just a different version of a network token, which are just payment credentials,” Cook said. “Universal tokenization should be looked at as, ‘I’m about to get bombarded with payment credentials that are scheme-persisted. I don’t control the usage; I don’t control the relationship; these things weren’t built with me in mind. What was built with me in mind? What is my tool to anchor myself?’ That’s universal tokenization.” “That’s the playbook that I would put out there for merchants to leverage to protect themselves,” he said. “It’s making sure that they have line of sight to who is who and having something that they can drop directly into their ecosystem without having to re-architect their entire payment stack in order to be relevant in the agentic commerce world.” The Tactics Are Changing The rapid evolution of payments—especially the acceleration of generative and agentic AI—has created urgency for many merchants to modernize. While adopting new technologies is important, strategy must remain grounded. “If you go back 10 years ago, we were in the same place with tokenization and everybody rushed to tokenize as a stopgap security measure—only to find out down the road that I now need a more holistic strategy around how I use tokens and what benefits they give me beyond security,” Apgar said. “That’s where we are with AI, too,” he said. “My advice to merchants would be slow down the conversation and understand what AI means for your business, for your customers and your data security—and try to put a strategy around all of this.” At its core, any tokenization roadmap should be a natural extension of a company’s broader mission: protecting customers, optimizing performance, and maintaining control in a dynamic ecosystem. “We’re talking about consumers making a purchase and merchants receiving a payment credential and maintaining line-of-sight to their customer for loyalty plays, security plays and so on,” Cook said. “This is what we’ve always been doing; the tactics are just changing. This is change management. Are you paying attention to the things that are changing? Do you see the incremental adjustments that are occurring and are you adjusting as you go?” “If you have a rigid approach to your processing stack, that’s when things will become detrimental,” he said. “At the end of the day, no one can see what’s on the other side of the 2030 line. The best thing that you can do is put yourself in a flexible, future-proof payment stack so you’re prepared for whatever payment credential that comes on the other side.” Learn more about how agentic commerce shifts risk to merchants and breaks tradi

    20 min

  6. MAR 9

    Despite Fintech Encroachment, Banks Can Remain the Go-To for SMBs

    For many small business owners, the workday doesn’t end when customers leave. It continues late into the evening—logging into multiple dashboards, exporting spreadsheets, reconciling transactions, and trying to make sense of scattered financial data. In the absence of a centralized solution, many have been forced to stitch together a patchwork of banks, fintech apps, payment processors, and accounting tools just to keep their business running. Reconciling these fragmented systems has become a drain on merchants who are already stretched thin. This growing complexity has implications beyond the merchants themselves. As small businesses expand their financial relationships across multiple providers—and as physical banking touchpoints become less frequent—financial institutions are finding it harder to cultivate meaningful connections with this segment. What was once a relationship-driven business risks becoming transactional. In a recent PaymentsJournal podcast, Eleanor Bontrager, VP of Product Management at Fiserv, and Don Apgar, Director of Merchant Payments at Javelin Strategy & Research, discussed how banks still hold an advantage in small business financial services. However, many financial institutions will need to shift their strategies to become the centralized financial hub that SMBs increasingly expect. Eliminating the Spreadsheets While financial management is critical to any business, it is only one facet of running an organization. The more time business owners devote to managing finances, the less time they can spend on other key tasks. As digital payments have evolved, merchants have adopted a growing array of tools to deliver the payment experiences and financial services customers expect. As a result, small business owners often cobble together fragmented solutions that were never designed to work in concert. “They’re having to look at the disparate data that comes from those tools and try to imagine what their cash flow position might be,” Bontrager said. “Many aren’t even really using tools; they’re using Excel spreadsheets. They’re literally sitting down with a pen and paper trying to figure out what money they expect to be coming in and what money they expect to be going out and trying to figure out what that means for their business.” Amid these challenges, merchants don’t want more tools to bolt on. Instead, they are seeking a streamlined solution that enables seamless, transparent transactions and provides a holistic view of their cash flow. Cost remains an important consideration. Yet many merchants would willingly invest in a unified platform that reduces administrative burden and minimizes the errors common in manual processes. “We’ve seen research recently where small businesses will spend an average of 25 hours per week just trying to manage data between various financial applications,” Apgar said. “They’re not doing that when the store is open, that time is family time—after hours and on weekends—where people are constructing spreadsheets and poring over paper statements.” “The data from their point of sale has to be reconciled back to their bank statement,” he said. “You have payroll to manage, vendors have to get paid, and those invoices have to get reconciled to inventory. There are so many moving parts.” All Their Financial Eggs in One Basket These variables have led SMBs to increasingly seek a single financial home. Ironically, this desire often stems from the complexity created by maintaining multiple financial relationships—business owners now need a centralized cash flow hub that aggregates their various accounts and functions. While such a solution may not eliminate every external relationship, it provides merchants with a critical anchor. Once engaged on a centralized platform, banks are well positioned to differentiate themselves and deepen relationships with their SMB clients. “All in all, money moves faster within the financial institution environment, so the FIs have a clear advantage here,” Bontrager said. “That’s what small businesses want and need, to be able to make those payments easily and quickly. They’re also looking to have that secure, trusted relationship. Within the bank environment, those fraud and risk protections are very much built into that experience.” “As we think about the ideal solution, it’s taking some aspects of the fintech solution and making those available in the FI channel,” she said. “For example, many small businesses have a strong preference for putting all of their spends on a credit card. Being able to make that available within a payment application and not just relying on DDA accounts. That can be important to package all of that up together, just for the convenience of the small business.” Consolidating banking and fintech relationships into a single hub may seem counterintuitive, given the adage warning against putting all one’s eggs in one basket. However, diversifying an investment portfolio to mitigate risk is fundamentally different from streamlining a small business’s banking infrastructure for efficiency and clarity. “When we say having all their eggs in one basket, it not suggesting that the way for FIs to win in small business is to be a one-stop shop and provide every single financial service that a business could want,” Apgar said. “It’s really about having all the financial data in one basket to the extent that data can be exchanged.” “Even if businesses are using some fintech services, API architecture that’s common today facilitates that kind of data exchange, so the FI can come to the forefront with a complete snapshot of the small business’s financial health and cash flow—and really become the primary partner,” he said. From Data Harvester to Trusted Advisor Data has become central to modern financial services because it helps organizations personalize their offerings in a digital environment. “There can be so much data; it’s being able to take that data and translate that into timely, accurate advisory nudges to the small business that help them anticipate when they’re at risk or see that there’s an opportunity,” Bontrager said. “That’s becoming more of an expectation. It’s, “Hey, you might go cash flow negative next week’ or ‘Looks like your revenues are increasing, are you looking to open a second location? Can we help you with that?’” Yet solutions that deliver these types of actionable insights to small businesses have been limited. Historically, many financial institutions didn’t treat the SMB segment as a strategic priority. Smaller merchants were often funneled into consumer products or served by commercial and treasury solutions built for much larger enterprises. The traditional small business strategy—such as it was—centered largely on branch-based relationship building and small business lending. “There’s so much more that they can be doing,” Bontrager said. “Being able to meet small businesses where they are and provide solutions that allow them to make payments, receive payments, reconciliation, automated workflows. Providing those solutions is key to being able to continue having the small business relationships that they have today.” “That relationship aspect is always going to be super important, but you need to be able to have an excellent digital solution from a payments and receivables perspective in order to keep fostering that relationship,” she said. “As they do that, they’re going to have more data about that small business and that’s going to help them better serve their small business customers.” Becoming the Central Financial Hub While holistic SMB platforms are quickly becoming a market expectation, many financial institutions lack the infrastructure or resources to build and deliver them in-house. This moment represents a tipping point. To stand out in a crowded market, banks must rethink and modernize their small business banking strategies. “The reality is that the customers are already filling in those gaps on their own today,” Apgar said. “Rather than wait until you can build everything internally to provide 100% of your customer needs, it makes sense to embrace relationships strategically with the right partners to be able to create that end-to-end digital solution—both from service delivery and also from a data perspective—to deliver those key insights that businesses are looking for.” The first step is simple: listen. By engaging small business customers and understanding their pain points, banks will uncover common themes—such as the need for intuitive workflows that simplify payments, receivables, and cash flow management. The ultimate objective is to provide a solution that helps small business owners focus on growing their business rather than managing its financial complexity. For many banks, achieving this vision will require strategic partnerships and external support. “Think about where those partnerships can come from that will help them be able to deliver a solution like that and have some speed to market that will allow them to quickly meet the needs of small businesses,” Bontrager said. “In doing so, if they’re able to provide the key insights that the small business is looking for, the upside for the financial institution is they have that data, and they can also benefit from those insights and make better risk or underwriting decisions.” “There’s a lot of potential in the solutions that are available,” she said. “It comes down to evaluating the problem, figuring out who their small business customers are and what their needs are, and then being able to provide them with solutions that meet their needs.”

    21 min

  7. MAR 5

    From Reaction to Prevention: Rethinking Payment Fraud

    With the advent of faster payments, many financial organizations have prioritized speed over fraud detection. Consumers expect instant transactions, but banks must still protect themselves and their customers from fraud. Running fraud detection in the background—analyzing contextual signals and historical data—helps strike the right balance between speed and security. In a PaymentsJournal Podcast, Diarmuid Thoma, Head of Fraud & Data Strategy at AtData, and Jennifer Pitt, Senior Analyst of Fraud Management at Javelin Strategy & Research, discussed how traditional fraud detection methods have fallen short in the era of real-time payments. The key today is to stop fraud before it occurs. Moving Protections Upstream For customers, speed is paramount—but that speed is only required at the transaction or decision phase. Banks can conduct much of the pre-authorization and risk assessment before a transaction ever happens, without the pressure of real-time execution. By the time a customer reaches the transaction stage, the bank should not be scrambling to complete all fraud checks instantly. Many institutions focus on where the financial loss occurs. When a transaction results in a chargeback, they look to fix the transaction itself. In most cases, however, that wasn’t the customer’s first interaction. The initial touchpoint often occurred much earlier, well upstream of the chargeback. “With account takeover, you can see a lot of behavioral signs before payments even happen,” said Pitt. “If the information is changed in something like an account profile, that’s a clue. Logins from different areas at different times can be a clue. If that is flagged first, then essentially the suspicious payment doesn’t happen, and there’s no loss to either the consumer or the financial institution.” Building an Identity In the traditional brick-and-mortar world, banks might have asked for a driver’s license or passport to open an account, perhaps along with a utility bill to verify an address. While those documents could be forged, such cases were relatively uncommon. Today, verification relies on digital identity. Devices, IP addresses, and email accounts form the foundation of an identity profile. That profile extends across consortium networks containing prior transaction data, creating a clearer picture of how a consumer behaves. For example, is this person likely to buy $1,000 sneakers? “It’s building an identity,” said Thoma. “Even in the physical world, who we are is defined by liking a certain bar, or shopping at a certain store. All of those together, that’s you. All we’re doing now is taking that and translating it into a digital concept. From a fraud perspective, that builds consistency. The nice thing about good people, from a fraud profiling point of view, is they’re very consistent.” Modern fraud professionals build dynamic profiles rather than relying on static identifiers. They can construct timelines spanning five or 10 years—whatever data is available—representing a big leap forward from traditional methods. “When I was in the banking world, part of my role was to evaluate investigations to see if the investigations were done correctly,” said Pitt. “I would frequently listen to different calls from customer service reps and call centers. Several times I listened to calls where the fraudster themself was trying to make a wire transfer. “The call center rep just asked for basic information like name, date of birth, normal knowledge base questions. Information that you can get pretty much anywhere, from leaked data breaches to background check websites,” she said. “That wire was able to go through. And when the customers called in to say there’s fraud, the customer service representative said, well, no, you verified the information.” Bringing the Information Together Many financial institutions still conduct manual reviews one transaction at a time. This approach yields insight only into those specific transactions and fails to reveal broader fraud patterns or emerging tactics. “I still see small financial institutions operating as if there were no internet,” said Pitt. “They’re essentially verifying physical documents, especially in branches with human detection only. That is not good enough anymore with the AI tools that are out there for fraudsters. It is so easy to fake or forge some of these documents. You can’t rely on a human detection for that.” Compounding the issue, criminals understand reporting thresholds. They deliberately stay below those limits, spreading activity across multiple accounts and institutions. That is why consortium data-sharing is essential for identifying coordinated patterns that would otherwise go undetected. The Best Quality Data In the early days of social media, companies could look up a profile to confirm a person’s existence. Today, AI can easily generate convincing social profiles across multiple contexts and geographies. Fabricating digital footprints isn’t only simple, it’s scalable. The challenge for banks is no longer finding data, but finding data that can’t be easily manipulated. “Ideally, the best quality data is immune to automated generation,” Thoma said. “Sources that are unconnected to each other are independent of each other. An email is unrelated to a device from a data perspective. When you take in all this data from unconnected data sources—if they all agree that something’s good—generally you have better decision quality.” Investing in advanced fraud prevention tools may seem costly upfront, but the expense is inevitable. Institutions will either pay on the front end by strengthening their defenses—or on the back end through fines, consent orders, reputational damage, and customer attrition. “We have to stop looking at payments fraud from the point of the transaction,” said Pitt. “That’s the last possible point to prevent fraud. We talk about defense in depth and a layered approach where if some security measure does not catch the fraud, then another one will. We still need to look at the payment itself, but we also need to look at everything before that so that we can catch the fraud earlier.”

    26 min

  8. MAR 2

    ACH and the Path Toward Future-Ready Payments

    ACH is a critical part of the U.S. payment infrastructure, driving a significant portion of transaction volumes and supporting important use cases such as supplier payments, payroll, and many others. Despite competition from newer rails that serve similar purposes, ACH continues to grow at a remarkable pace. In a PaymentsJournal Podcast, Radha Suvarna, Chief Product Officer of Payments at Finastra, and James Wester, Co-Head of Payments at Javelin Strategy & Research, examined why ACH payments have remained so resilient and valuable, and highlighted the benefits for financial institutions considering offering ACH payments to their customers. Old Is New Again When fintech is discussed in the context of modernizing financial services, there is often the assumption that “old” means outdated and “new” means superior. Even though ACH is considered a legacy rail, it’s still highly reliable. It was designed for a specific type of payment: high-volume, predictable transactions that need to be scheduled, such as payroll or bill payments. “One reason ACH continues to grow is because we can do the planning for those predictable payments,” said Wester. “If you can plan for all of that beforehand, it becomes a great rail for handling those types of payments.” A Modern ACH Payments Engine Looking ahead, ACH must become forward compatible alongside other payment rails. Enabling forward compatibility allows the industry to leverage new technologies such as artificial intelligence and integrate them seamlessly with ACH driving improvements in areas such as fraud detection and automation. So what does a modern ACH payments engine look like from an operational perspective? First and foremost, it must be cloud-native and modular. It should leverage modern technologies such as microservices and API-based capabilities to connect seamlessly with both upstream and downstream systems. The platform should also be architected to scale volumes up or down as needed, recognizing that ACH doesn’t necessarily need to run continuously throughout the day and has peaks in volumes. “If we can scale the infrastructure up and down as necessary to drive more efficient total cost of ownership, that would be a significant value add,” said Suvarna. “It would be particularly effective in high volume throughput windows.” Another important component of forward compatibility is the ability to test new use cases and enable fast experimentation. Smart routing between batch payments and real-time payments, for example, could be offered as a value-added service. To determine whether such capabilities create meaningful impact, organizations need platforms that allow quick testing, with the ability to fail fast or scale successful outcomes. Financial institutions can rely on a modern ACH solution to integrate with cloud-native and API-driven systems, enabling faster and more efficient launches for new offerings. It’s also important to note that while the ACH clearing itself has not yet transitioned to ISO 20022, many corporates are already using this for their submissions. A modern ACH platform needs to be able to both handle this, and the eventual migration of the clearing system, seamlessly while accommodating the complex workflows already built around ACH today. Seeking ROI: Cost The ROI from ACH can be viewed through two primary lenses: cost and revenue. On the cost side, the first consideration is infrastructure. Platforms built on open-source technologies and modern software stacks are typically less expensive than legacy systems. The second cost driver is software maintenance and enhancement. As new use cases come up across corporate and retail segments, and as specifications continue to evolve, keeping pace with business-driven and standards-driven changes can be very expensive for legacy platforms. “There are fewer software developers available to code in some of the older technologies like COBOL,” said Suvarna. “Which means there aren’t that many developers around to make the necessary changes for the foreseeable future. The specialized infrastructure roles where you have a person who really knows the system, those obviously become more expensive.” The third cost area is operations. Today, exception handling and returns for ACH are often managed separately from other clearing systems. Consolidating these processes into a unified stack—and leveraging technologies like AI—can streamline operations. “I’m not saying today you can’t deploy AI technologies and machine learning to identify payment repairs, based on the data coming from the legacy ACH capabilities,” said Suvarna. “But the more open modern stack makes it easier and faster.” Seeking ROI: Revenue On the revenue side, the primary opportunity for banks lies in differentiation through an enhanced user experience. Examples include offerings such as smart routing between ACH and real-time payments. A second opportunity comes from innovative use cases, where banks create differentiated value propositions around ACH that set them apart from competing institutions. “When people start talking about ROI, I often hear them talk about revenue first,” said Wester. “But you have to be careful when you talk about system upgrades from a revenue standpoint. To sell it to your leadership, start with the inevitable things that need to be sunsetted and where you can find cost avoidance.” Finding a Partner Financial institutions embarking on this modernization journey need partners with experience across multiple implementation domains. A broad perspective helps identify dependencies, eliminate blind spots, and apply best practices. An experienced vendor understands the optimal path forward, knows where common pitfalls exist, and can guide institutions toward scalable, future-ready solutions. “I like to use the phrase “fish don’t know water is wet,”’ said Wester. “Oftentimes, financial institutions have been running their systems a certain way for so long that they no longer look inefficient, just because they still work. A good partner can come in and say, here are the best practices, here are things where you might be blind to your own issues.” Finastra, for instance, serves both large enterprise and mid-market client segments. They have built out Global PAYplus for large enterprises and Payments to Go for mid-market clients—both delivered on cloud-native platforms supporting modern ACH  clearing. This single, modern payment hub architecture supports multiple clearing types with a common user experience across all rails, and enables forward compatibility, positioning the platform to support future use cases as they emerge. “At the end of the day, ACH isn’t about just technology modernization,” said Suvarna. “It’s a transformation of business processes around very critical infrastructure that serves many corporate and retail customer needs.”

    20 min

  9. FEB 25

    Not Just Another Bank: How Credit Unions Can Reach Younger Members

    Credit unions have distinct hallmarks: they are not-for-profit and member-owned. Yet amid the flood of financial services companies in today’s digital landscape, these differentiators can be difficult to convey. While many younger consumers are actively seeking the kind of guidance credit unions excel at providing, they often perceive credit unions as just another bank. In a recent PaymentsJournal podcast, Velera’s Tom Pierce, Chief Marketing and Communications Officer, and Carrie Stapp, Vice President of Marketing, along with Brian Riley, Director of Credit and Co-Head of Payments at Javelin Strategy & Research, analyzed two Velera studies—Eye on Payments and CU Growth Outlook—to distill critical insights into how credit unions can reclaim their brands and stand out in a crowded field. From Emerging to Standard Several of the most compelling insights center on how consumers pay. While debit and credit cards have jockeyed for dominance in recent years, usage was nearly evenly split last year. Despite this balance, the two methods tend to serve different purposes. Consumers typically use debit cards for everyday purchases—such as convenience stores, pharmacies and grocery stores—while credit cards are more often reserved for larger purchases at big-box retailers or entertainment venues. Another notable trend is the continued momentum behind digital wallets and contactless payments. Roughly seven in 10 consumers now use a mobile wallet at least a few times per year, and about a third use wallets multiple times per week. “Another key finding is about other areas that have moved from emerging payments into payment standards, including buy now, pay later and P2P payments,” Pierce said. “With BNPL, we’ve got 38% of credit union members saying they would be likely to use that type of program if it was offered by their credit union.” “On the P2P side, three-quarters of consumers say they use these payments at least periodically, and some of the younger generations are using them as a primary payment method,” he said. As Gen Z ages into adulthood, the preferences of younger consumers are coming into sharper focus. When it comes to payments, digital is—unsurprisingly—the default. Still, this makes it even more critical for credit unions to keep digital capabilities top of mind. “It calls out the big trio within payments right now, which are digital wallets, BNPL and contactless cards, and those are very important high-growth areas,” Riley said. “They also appeal to younger generations, which feeds right into the significance of Gen Z. One of the common problems with credit unions is the aging level of their members. Making sure that you’re building the business for decades to come is the reason you want to engage the younger age cohorts.” The Growing Identity Crisis To establish meaningful engagement, organizations must look beyond payments and understand how younger consumers learn about financial services. For Gen Z, guidance frequently comes from non-traditional sources, rather than established FIs. “Social media, for the first time across all of our generations, showed up in the top three as most trusted for financial advice,” Stapp said. “Understanding the role that social media plays, understanding where younger generations are getting their information, and how they’re trusting that information is incredibly important for the financial services industry to understand, absorb and adapt to.” At the same time, younger consumers are experiencing heightened financial stress. Social media can exacerbate this anxiety by encouraging constant comparison, while the growing number of apps, cards and digital payment options can make it difficult to track spending and stick to a budget. Although digital financial management tools exist, many consumers are increasingly looking to their financial institution for support and guidance. Credit unions thrive in delivering this personal touch, yet many younger consumers remain unaware that this lifeline exists. “Only 16% of respondents from the Gen Z category said that credit unions are focused on community, and they equally felt that they were profit-driven,” Stapp said. “They’re not understanding what the basis of a credit union is, and that it’s people helping people. It’s creating an identity crisis and an opportunity for the credit union industry to re-educate, and I would go so far as to say rebrand itself.” The Embedded Opportunities As part of broader rebranding efforts, credit unions have several key opportunities to consider. First, economic uncertainty in recent years has driven strong interest in credit cards, making competitive credit card offerings an important area of focus. “I’ve seen some numbers out there that only about 20% of credit union members have a credit card with their credit union, so there is a lot of white space there,” Pierce said. “This year, we had nearly four in 10 credit members apply for a new credit card in the last year and over 50% of Gen Z said that they would look to apply for one in the next year. So, a lot of growth opportunity is there in the credit card space.” “We also saw nine in 10 folks saying they received real-time approval or denial following application for a credit card, so having that real-time response through origination solutions is critical for engaging that member quickly,” he said. Outside of card offerings, credit unions should also rethink how they engage with members. In the Velera Eye on Payments study, consumers across all generations expressed a strong preference for online interactions, especially for tasks such as paying bills, adjusting card controls or applying for new accounts or products. This digital preference is reshaping traditional definitions of financial solutions. Embedded finance, once understood simply as financial products accessible within a website or app, is rapidly expanding into a more comprehensive and integrated experience. “We’re seeing a lot of the big banks, as well as the fintechs, embedding themselves in the lives of consumers at the point of sale,” Stapp said. “I was buying a birthday card over the weekend and the birthday card aisle had an entire section where you can add a Venmo code inside of the card.” “This is what we’re talking about when we’re talking about embedded. I’m watching Netflix or Amazon Prime and I can buy whatever’s on that ad right there from my phone or from my TV,” she said. “The definition of embedded goes further than just, ‘Can I access a product or service on a website or my mobile app?’ That’s important to understand, on top of understanding how they’re preferring to pay.” Bringing Members Along These shifts in expectations and technology underscore the need for credit unions to revisit the overall member journey and experience. “What is it that we’re creating that makes their lives easier?” Stapp said. “We now have to meet them where they are instead of them coming to us for a product or solution. When you’re thinking through your digital strategy, when you’re thinking through the products and solutions that you are going to invest in for your financial institution, map out that digital strategy and  experience that your member is going to get with the lens of, ‘Is this enticing to all of the generations, particularly those generations where I’m going to get my growth?’” As they develop this roadmap, financial institutions must also plan for fraud, which is increasing in both scale and sophistication. Instead of relying on physical tactics like gas pump skimmers, bad actors now deploy advanced impersonation scams to trick consumers into sharing personal data or sending money. Artificial intelligence has made these fraud attempts more effective, but it also offers powerful tools for detection and prevention. Equally important, consumers themselves are embracing AI. Velera’s Eye on Payments report found that one in three consumers uses AI several times per week, and over half use it for financial planning or budgeting. While shifting preferences, emerging threats and rapidly evolving technologies present challenges, they also create significant opportunities. “From an innovation perspective, account card origination is a critical investment area,” Pierce said. “Making sure your members are protected from the evolving fraud and then laying the future for AI are all great areas of focus for investments. On this innovation journey, credit unions have a wonderful opportunity to bring their members along.” “In Eye on Payments, 85% of respondents—especially the younger generation—said that they would trust their credit union for financial and innovation-related advice,” he said. “As these innovations are coming to market, bringing your members along and being a trusted advisor is key to your success.”

    21 min

  10. FEB 24

    Escalating Scams Demand a Dedicated Response

    Scams have become universal, affecting all types of consumers and every kind of organization. This has placed tremendous pressure on financial services firms, which often bear the brunt of the financial losses, to develop strong fraud prevention strategies to protect their customers. In a recent PaymentsJournal podcast, Raj Dasgupta, Vice President of Product Marketing at BioCatch, and Suzanne Sando, Lead Fraud Analyst at Javelin Strategy & Research, discussed the evolving forms of scams, the varying global approaches to fraud prevention, and how financial institutions can develop a blueprint to combat these threats. Inundated at Every Turn One of the most impactful trends in recent years is that cybercriminals can now more accurately target their victims. For example, someone interested in investing may receive messages about cryptocurrency scams, while a job seeker might be targeted with fake job offers. Even with this precision targeting, cybercriminals continue to cast a wide net. “The target for these kinds of scams could be just about anybody,” Dasgupta said. “Usually, we are led to think that they would have been elderly people who are less tech savvy or who can be gullible, but not quite. It could have been anybody. What we are seeing romance scam-wise is it’s skewed towards the elderly. The scammers target lonely individuals who are looking to get into a relationship.” “Or it could be an investment scam where it can target practically anybody, mostly the elderly, but then the younger demographic is also not immune to those kinds of scams,” he said. “If you are less averse to financial risk, you might end up investing in cryptocurrency  in the hope of great returns, ultimately to realize that you’ve been scammed.” These diverse scam variants are driving a widespread problem. In a recent survey conducted by BioCatch, respondents reported a 65% year-over-year increase in the total number of scams between 2024 and 2025. This included a 14% rise in purchase scams, the most common type worldwide. Phishing scams via both voice and texting— oftenknown as smishing—also increased last year, along with significant upticks in romance and investment scams. The lone bright spot in the study was a 15% decrease in impersonation scams, where criminals pose as legitimate agencies. This decline is likely due to increased awareness and more effective controls implemented by organizations. “We saw minuscule drops in scam losses in the number of affected victims, but it’s not enough to throw the confetti and pop the champagne,” Sando said. “We’re still talking about a $20 billion problem for scams across 22 million victims, according to Javelin data. Scams feel so prevalent at this point. It feels like we can’t trust anybody or anything—we can’t trust any text that comes in, or emails, DMs, or social media.” “Everything that we get is met with this air of distrust, and from a consumer perspective, rightfully so,” she said. “We’re inundated with these messages all the time, at every single turn. I don’t feel like I can trust that this voicemail that I got from my mom is really from my mom.” A Changing Answer In addition to rising volumes, scam messages have become more convincing and harder to detect. A major driver of this trend is new technology, particularly artificial intelligence. “There are AI technologies which are easily adoptable, like writing out a grammatically correct email or a text message and making it look  very real,” Dasgupta said. “Those are easily accessible technologies. Now it’s hard for our customers to detect if a victim was in fact receiving an email or a text which was constructed by  AI.” “The more sophisticated forms are not happening at scale so we can’t call them mainstream just yet, but that is not to say that things can’t change in about six months, because this is a space which is moving very fast,” he said. “Technology itself is changing very fast. I wouldn’t be surprised if I have to give you a different answer six months from now.” AI has also enabled the creation of highly realistic deepfake audio and video. For example, a deep fake audio clip could be used in a call to convince someone that a family member is in distress and needs urgent help. As retailers deploy AI in the shopping experience, such as through agentic commerce, cybercriminals are finding ways to exploit this technology. For instance, they could create counterfeit agent services or attempt to manipulate AI agents themselves. Unfortunately, these examples represent just a few of the many ways cybercriminals are leveraging AI for scams. “We have not seen all that AI is capable of at this point,” Sando said. “That can go for how it can help financial institutions better mitigate scams, but it also stands true for criminals. They aren’t bound by regulatory bodies or compliance or governance teams or data privacy restrictions.” “They can do whatever they want, so they can move a lot faster and more freely in adopting AI,” she said. “They’re more agile and they can do what they need to get it to fit their needs for their schemes.” Not Just a Fraud Problem The scale and sophistication of scams have imposed both direct and indirect costs on financial institutions. These include authorized losses, where customers are manipulated into approving transactions, and unauthorized losses, such as account takeovers or stolen cards. Unfortunately, the impact of scams extends far beyond immediate financial losses. They can cause operational strain and reputational damage. “Something that is not immediately apparent is that victims can leave the bank, so there is a real cost of attrition and related is the cost of acquisition,” Dasgupta said. “When one customer leaves, to get another customer to have the same level of profitability, your acquisition cost may be double what you normally have to acquire new customers.” “Bear in mind also when the customers are leaving, in a lot of cases they’re seniors and they’ve had their life savings with the financial institution,” he said. “When they choose to leave, they’re leaving with all that money, so it’s a big deposit loss. It impacts the overall portfolio.” In addition to driving customer attrition, scams consume substantial resources. Many institutions rely on staff to investigate incidents, and these teams are often quickly overwhelmed by the sheer volume of cases. What’s more, the increasing effectiveness of scams has led to a rise in authorized losses, and the resources required to investigate and respond to these incidents are often substantial. “All the associated costs mean that the profitability of your deposit portfolio is taking a hit,” Dasgupta said. “It’s not only the reimbursement losses, but everything else: investigative effort, regulatory exposure, regulatory requirements, compliance requirements, legal exposure, deposit loss, acquisition costs of new customers, and the profitability of the deposit base.” “All of those things have to be taken into consideration when thinking of scams as a problem rather than just a fraud problem,” he said. Getting It Right Due to this combination of factors, scams have become a global scourge. However, some regions have made strides in developing effective scam prevention mechanisms. “Two countries are top of mind when it comes to getting it right,” Dasgupta said. “One is Australia, and I would give a shout out to Australia because they’re not doing it because of regulatory pressure, but they’re doing it because they feel like they need to protect their customers. They’ve taken a variety of actions—be it technology related, be it process related—to make sure that their end users are not going to be victims of scams and lose money.” “The UK is a bit different than Australia because there is regulation that came into effect not too long ago, where the losses will have to be divided out between the sending bank and the receiving bank so that the victim who’s a customer of one of those banks is not left holding the bag,” he said. “That’s a step forward.” Conversely, the U.S. has lagged behind in this area. One reason is the sheer number of financial institutions operating in the United States; another is the country’s more market-driven regulatory approach. While some leading U.S. banks have invested in scam prevention, significant progress remains to be made. The strategies adopted by other countries can provide useful guidance, but U.S. institutions will ultimately need to forge their own path. “The important part to me is not taking exactly what some other country is doing and doing a copy-paste into the U.S.,” Sando said. “We know that’s not going to work. Everybody has their own regulations and things that are going to work for them. It’s about taking what strides other countries have taken, figuring out what’s feasible for the U.S. and taking action on that.” “That is where I feel like we’re missing the boat,” she said. “We’re missing the take-action part in a big way. We’ve got a lot of good things going for us. We’ve got task forces and scam groups that are popping up that are sharing critical information and encouraging more industry-level information sharing. That’s a huge step forward. We now have to get to the point where we’re taking concrete action to stop those scams.” Combating the Typologies The most impactful action financial institutions can take is to acknowledge the scam threat and begin developing proactive solutions. Given the unlikelihood of regulatory mandate on scam prevention in the near term, organizations will need to lay the groundwork themselves. Although this is a significant undertaking, the first step is to develop a dedicated strategy to mitigate the devasting impacts of scams

    30 min
  • 10 Episodes

About

Focused Content, Expert Insights and Timely News

Information

  • Creator
    PaymentsJournal
  • Years Active
    2023 - 2026
  • Episodes
    10
  • Rating
    Clean
  • Show Website
    PaymentsJournal

You Might Also Like