2016 E-commerce fraud attacks on pace to surpass 2015 totals

by Guest Contributor 4 min read September 21, 2016

e-commerce attacks

Miami ranked as an overall top city for both shipping and billing e-commerce fraud
Houston, Texas is the top ZIP Code for billing fraud and Eudora, Kansas ranked as top ZIP Code for shipping fraud

The question of whether we’re in Kansas anymore is appropriate with the latest release of Experian® fraud attack data from across the United States. Eudora, Kan., is home to the highest e-commerce billing fraud ZIP CodeTM. Accounting for 5 percent of the total billing fraud so far in 2016, the town is among the top 25 riskiest ZIPTM codes, illustrating that fraud is not confined to larger cities.

Download Experian’s bi-annual 2016 Top 100 riskiest billing ZIPTM codes rankings

Experian analyzed millions of e-commerce transactions from the first six months of 2016 to identify the latest fraud attack rates for shipping and billing locations across the United States. Fraud attack rates are calculated using bad transactions in relation to the total number of transactions. Billing fraud rates are associated with the address of the purchaser, typically the fraud victims. Shipping fraud rates are associated with the address where purchased goods are sent.

The one-year anniversary of the EMV chip technology rollout for consumers and merchants in the United States is approaching. The rollout utilizes chip technology on credit cards to protect in-store payments making it harder to counterfeit cards, and helping eliminate in-store fraud. However, the 2016 e-commerce fraud attack rates appear to be at least 15 percent higher than last year’s total. This suggests that card-not-present fraud is increasing as e-commerce fraud is often an indicator that other fraud activities have already happened — a credit card has been stolen, identity fraud has occurred or personal credentials have been compromised.

The increase in e-commerce fraud is not surprising as e-commerce sales in the U.S. during the second quarter of 2016 increased nearly 16 percent year-over-year (YoY) according to the U.S. Department of Commerce. This was the greatest YoY increase since Q3 2014. At the same time, the Federal Trade Commission stated earlier this year that credit card fraud complaints had the highest reported numbers in 10 years, with a 41 percent increase in 2015 versus 2014.

“Fraudsters continue to exploit new vulnerabilities, and perpetrate card-not-present fraud against businesses using stolen consumer identity and payment data,” said Adam Fingersh, Experian general manager and senior vice president of Fraud and Identity Solutions. “This reinforces the need for aggressive fraud prevention strategies and adoption of open technology platforms to prepare for the latest emerging cyber security threats. Fraudsters have what they need to quickly capitalize on compromised data, so businesses need to be prepared.”

According to Experian’s rankings of top 100 riskiest billing ZIP codes , e-commerce fraud attack rates for the first half of 2016 show:

  • 44% of e-commerce billing fraud came from three states among the top 100 riskiest billing fraud ZIP codes – Florida, California and New York – based on the sum of fraud attacks.
  • Florida is the top-ranked state for billing fraud, with Miami home to 12 of the riskiest ZIP codes. New York ranked second, with Brooklyn home to six of the riskiest ZIP codes.
  • Houston, Texas, (77036) has the riskiest ZIP Code for billing fraud as ranked by fraud attack rate.
  • Eudora, Kan. (66025) has the next riskiest ZIP Code for billing fraud as ranked by fraud attack rate, followed by two ZIP codes in Miami (33192 and 33166) and one in Homer, Alaska (99603).
  • 52% of e-commerce shipping fraud came from three states among the top 100 riskiest shipping fraud zip codes – Florida, New York, and California – based on the sum of attacks.
  • Florida is home to 26 of the riskiest 100 shipping fraud ZIP codes, with 17 from Miami.
  • Eudora, Kan., has the overall riskiest shipping ZIP Code (66025 as ranked by fraud attack rate.
  • The next four riskiest shipping ZIP codes as ranked by fraud attack rate are located in Miami (33195, 33192 and 33116) and Nettleton, Miss. (38858).

Many of the higher-risk ZIP codes and cities are located near a large port-of-entry city or airport, making them ideal locations for reshipping fraudulent goods. This includes Miami, Houston, New York City, and Los Angeles, perhaps allowing criminals to move stolen goods more effectively. All those cities are ranked among the riskiest cities for both measures of fraud attacks.

Download the 2016 Experian top 100 fraud attack rate ZIP Code rankings.

Related Posts

The Email Address as Your Most Powerful Identity Signal

The why behind Experian's acquisition of AtData What happens when a comprehensive email intelligence database joins a global leader in data, analytics and fraud prevention? The acquisition of AtData adds 25+ years of building a complete view of email as an identity signal. Financial institutions can recognize, engage and protect customers unlocking a new standard for the way their teams work and the customer experience. That's what Experian's acquisition of AtData delivers. How we got here Not all email addresses tell the same story. Some are newly created. Some exhibit bot-like patterns. Some are inconsistent with every other signal you have about that person. Imagine a real customer. You have a job. You shop online. You have a primary email from your employer, a personal Gmail you've used for 15 years, and an old Yahoo address you still use for shopping because you've been using it since college. You're an engaged customer who interacts with brands, makes purchases and pays bills on time. But each system sees a different version of you. When you apply for credit, the lender sees one email. When you shop, the retailer sees another. When you sign up for a service, you might use the third. For financial institutions: You slow down the approval process to manually verify identity or approve applicants without the full picture. For retailers: You can't tell which version of "customer" is the most engaged, so you either over-mail or under-serve. For fraud systems: Sees a new account created under one email and flags it as suspicious because it doesn't have the history. This was the original problem AtData was built to solve in 1999. Twenty-five years later, that problem didn’t go away, it became more complex. Email fragmentation and device sharing are more common, and identity theft is more sophisticated. Capabilities that now work together Experian has built sophisticated identity and fraud solutions backed by consumer data resources and decades of expertise in credit and risk. AtData brought the ability to assess whether an email address is trustworthy, reachable and consistent—at scale, in real time. Experian is now making email intelligence foundational, not optional. This matters for: Fraud prevention and risk management: Distinguishing a returning customer from a new threat. Knowing whether an email is newly created, exhibiting bot-like patterns or inconsistent with other identities is crucial. Compliance: Building audit trails that can explain identity decisions. Email data history and behavioral signals create the documentation needed to defend your decisions. Credit: Verifying identity in a world where traditional signals are shifting. Email signals provide a persistent, durable identifier that confirms who someone actually is. Marketing: Reaching the right person across email, mail and digital channels. Email intelligence reveals which addresses are actively engaged and reachable. Research shows email remains one of the highest-ROI marketing channels outperforming paid search and social advertising1. The problem every marketer faces: You end up burning budget on addresses that bounce, are unmonitored or are associated with users who never open mail. For credit marketing specifically, email enables faster, more targeted delivery of firm offers across channels, something that's increasingly important in a post-cookie world. "Email is a persistent identifier in a fragmented world. It's what connects a person's postal address, phones, devices, behaviors—the full picture of who they are. By embedding that into our infrastructure, we're not just adding another data point. We're fundamentally improving how businesses understand who their customers are."- Ashley Knight, Senior Vice President, Financial Services and Data Why now? AI is reshaping how decisions are made in every industry. Models are getting faster, more automated and more embedded in core workflows. But AI is only as effective as the data behind it. Fragmented data + fast models = faster, larger-scale misclassifications. In an era of synthetic identities, AI agents, deepfakes and AI-generated activity, the value of durable, persistent, real-world data signals has increased dramatically. Deloitte’s Center for Financial Services projects that generative AI could drive fraud losses in the U.S. up to $40 billion by 2027, a 32% growth rate since 2023. And email sits at the center of it with business email compromise already being one of the most common and costly fraud types. People change phones, move homes and swap devices, but they often hold onto their email for years. That's the signal that protects your business, and the one we've built into the core of how we help you make decisions with confidence. View the press release here

August 6, 2026 by Zohreen Ismail
Building Financial Opportunity Through Purpose-Driven Partnership

Discover how the National Urban League and Experian partner to expand financial literacy and create economic opportunity.

August 6, 2026 by Scarlet Nickel
2026 U.S. Identity and Fraud Report 

Explore key findings and insights from our newly released 2026 U.S. Identity and Fraud Report. Read more now!

August 5, 2026 by Laura Burrows

Subscribe to our Newsletter

Enter your name and email for the latest updates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Subscribe to our Newsletter

Don't miss out on the latest industry trends and insights!
Subscribe