Stripe Uses FT3 to Standardize Financial Fraud Intelligence
Summary
Stripe’s Vincent Passaro describes FT3, a framework modeled on MITRE ATT&CK that gives fraud teams a shared language, and explains how infrastructure targeting and law-enforcement collaboration support efforts to disrupt fraud.
Key points
- Stripe’s FT3 (Fraud Tools, Tactics, and Techniques) framework was modeled on MITRE ATT&CK to classify fraud activity more precisely.
- Examples of methods FT3 distinguishes include account takeover, key leaks, and card testing.
- The framework is intended to help teams describe incidents consistently, connect downstream fraud to patterns, and collaborate across teams and with law enforcement.
- Passaro says traditional fraud teams needed education to adopt FT3, while teams familiar with MITRE ATT&CK found it easier to use.
- Stripe uses infrastructure-targeting packages to trace activity and decide whether to block or monitor infrastructure.
- The article says Stripe’s partnership with Team Cymru supports infrastructure tracking, and that Stripe’s team has completed targeting and takedown operations.
Article Details
- Topic
- Stripe's FT3 (Fraud Tools, Tactics, and Techniques) framework for standardizing fraud intelligence, infrastructure targeting, and law-enforcement collaboration.