First-Party Fraud

First-party fraud is fraud committed by a customer using their own true identity, or an identity they control, against a bank, lender, insurer or merchant. Typical cases are lying about income on a loan application, running up credit with no intention of repaying, falsely claiming a purchase never arrived, or letting a criminal use one's account for a fee. The person deceiving the firm is the account holder, not an outsider.

The term is used to separate these cases from third-party fraud, where a criminal impersonates a victim through identity theft or account takeover. That difference matters because there is no innocent customer to refund, and because losses are often booked as bad debt rather than fraud. First-party fraud is one family within a wider fraud typology and includes narrower patterns such as friendly fraud and bust-out fraud.

Imagine a library that lends books to anyone with a membership card. Most of the time, a missing book means someone stole a card and borrowed under another name. First-party fraud is the other case: the real member borrows a stack of books with no plan to bring them back, or returns one and later swears they never took it out.

Because the member is who they say they are, the library's ID checks all pass. The problem is not a fake person but a real person acting in bad faith. That makes it harder to spot early, harder to prove later and awkward to discuss, since the firm is accusing its own customer rather than an unknown criminal.

First-party fraud covers a range of behaviour, from opportunistic to organised:

• Application fraud. A customer overstates income, hides debts or supplies forged payslips to obtain a loan, mortgage or credit card they would not otherwise get.
• Bust-out. A customer builds a good record, raises limits across several lenders, then draws everything down and disappears. This is treated as its own pattern because of its planned, staged nature.
• False disputes. A cardholder makes a genuine purchase and then files a chargeback claiming it was unauthorised or never delivered.
• Account renting. A customer lets criminals route money through their account, which turns the person into part of a money mule network.
• Insurance and refund claims. Inflated or invented claims, and false "item not received" refund requests to online sellers.

Some of these overlap with synthetic identity fraud. When a fabricated identity is controlled by the fraudster, the "customer" and the criminal are the same party, so many firms classify those losses as first-party.

First-party fraud is widely believed to be under-reported. A borrower who never repays looks, on the ledger, much like a borrower who lost their job, so the loss usually ends up as a credit write-off or default. Proving intent is difficult, and firms are cautious about labelling customers as fraudsters without strong evidence, since a wrong label can harm a person's access to credit.

The result is that the same pattern can appear in three places: credit losses, chargeback losses and fraud losses. Analysts who want a true picture usually re-classify charged-off accounts that show tell-tale signs, such as no payment ever made or a sudden spike in spending just before default.

Because identity checks pass, detection relies on behaviour and history rather than on whether a person is real. Common tools include:

• Bureau and consortium data. Lenders compare applications with credit bureau files and shared industry fraud databases, such as the UK's Cifas National Fraud Database, to find inconsistencies and repeat behaviour.
• Income and document verification. Open banking data, payroll checks and tax records test whether stated income is real.
• Behavioural signals. Behavioral analytics flag rapid credit-seeking, cash-like spending and first-payment default.
• Dispute history. Merchants and issuers track customers who file repeated chargebacks against purchases they appear to have made.

Strong know your customer (KYC) checks at onboarding confirm who someone is, but they do not reveal intent. Most programmes therefore treat first-party fraud as a joint problem for credit risk and fraud risk management teams.

In most countries first-party fraud is a crime under general fraud law, such as the UK Fraud Act 2006 or US federal statutes on bank fraud and false statements to lenders. In practice, prosecutions are rare unless the amounts are large or the conduct is organised. Banks in the US may file a suspicious activity report (SAR) when the pattern meets reporting thresholds, and lending to people who later default can raise questions about affordability checks.

The label also matters in consumer-protection regimes. Where rules require firms to refund victims, as with reimbursement for authorized push payment (APP) fraud in the UK, firms may decline claims they can show are first-party, for example where the customer was complicit rather than deceived.

• Cifas
• Financial Crimes Enforcement Network (FinCEN)