How Fraudsters Target Credit Unions With Stolen Identities

Summary
Flare researchers describe an underground loan-fraud method using stolen identities and prepared KBA answers to target small and midsize credit unions, secure loan approvals, and move funds before detection.
Key points
- Flare researchers describe a method shared in an underground group; the article does not establish that specific loans were fraudulently obtained.
- The described workflow uses stolen personal and financial information to impersonate legitimate borrowers and prepare answers for knowledge-based authentication checks.
- The method reportedly favors small and midsize credit unions based on attackers’ perception that their verification and fraud-detection controls are weaker.
- After loan approval, funds may be moved through intermediary accounts and withdrawn or converted to reduce traceability.
- The article recommends monitoring for exposed personal data and using controls beyond traditional knowledge-based authentication.
Article Details
- Topic
- Structured identity-based loan fraud targeting small- to mid-sized credit unions through stolen identities, KBA preparation, and rapid cash-out.
