E-commerce fraud continues to be an area of concern — just look to the West and the South

by Guest Contributor 5 min read September 6, 2017

e-commerce fraud

Since the advent of the internet, our lives have changed drastically for the better. We can perform many of life’s daily activities from the comfort of our own home. According to Aite, in 2016 alone 36 million Americans made some form of mobile payment — paying a bill, purchasing something online, paying for fast food or making a mobile wallet purchase at a retailer. Simply put, the internet has made our lives easier. But with the good also comes the bad. While most consumers have moved to the digital world, so have fraudsters. With minimal risk and high reward at stake, e-commerce fraud attacks have increased dramatically over the last few years, with no signs of slowing down.

We recently analyzed millions of transactions from the first half of 2017 to identify fraud attack rates based on billing and shipping addresses and broke down the findings into various geographic trends. Fraud attack rates represent the attempted fraudulent e-commerce transactions against the population of overall e-commerce orders.

Consumers living out West and in the South have experienced more than their fair share of fraud. During the first half of 2017, the West and the South were the top two regions for both billing and shipping attacks. While both regions were at the top during the same time last year, the attacks themselves have increased substantially. Given the proximity to seaports and major international airports, this is somewhat unsurprising — particularly for shipping fraud — as many fraudsters will leverage reshippers to transport goods soon after delivery.

.dataTb{margin:20px auto;width:100%}.dataTb:after{clear:both}.dataTb table{}.dataTb td,.dataTb th{border:1px solid #ddd;padding:.8em}.dataTb th{background:#F4F4F4}.tbL{float:left;width:49%}.tbR{float:right;width:49%;margin:0 0 0 2%}

Shipping: Riskiest Regions
Region Attack rate
West 38.1
South 32.1
Northeast 27.0
North Central 20.7
Billing: Riskiest Regions
Region Attack rate
West 37.2
South 32.9
Northeast 27.3
North Central 24.0

At the state level, the top three shipping fraud states remained the same as 2016 — Delaware, Oregon and Florida — but the order changed. Oregon was the most targeted, with a fraud rate of 135.2 basis points, more than triple its rate at in the end of 2016.

Though no longer in the top spot, Delaware saw alarming spikes as well, with shipping attack rates nearly triple last year’s rate at 128.6 basis points and billing attacks at 79.6 basis points.

.dataTb{margin:20px auto;width:100%}.dataTb:after{clear:both}.dataTb table{}.dataTb td,.dataTb th{border:1px solid #ddd;padding:.8em}.dataTb th{background:#F4F4F4}.tbL{float:left;width:49%}.tbR{float:right;width:49%;margin:0 0 0 2%}

Shipping: Riskiest States
State Attack rate
Oregon 135.2
Delaware 128.2
Florida 57.4
New York 45.0
Nevada 36.9
California 36.9
Georgia 33.5
Washington, D.C 30.8
Texas 29.6
Illinois 29.4
Billing: Riskiest States
Region Attack rate
Oregon 87.5
Delaware 79.6
Washington, D.C. 63.0
Florida 47.4
Nevada 38.8
California 36.9
Arkansas 36.6
New York 35.5
Vermont 34.2
Georgia 33.4

Diving a bit deeper, ZIPTM codes in Miami, Fla., make up a significant portion of the top 10 ZIP CodeTM lists for shipping and billing attacks — in fact, many of the same ZIP codes appear on both lists. The other ZIP Code that appears on both lists is South El Monte, Calif., which has a high percentage of industrial properties — common targets for fraudsters to ship packages, then reship overseas. You can download the top 100 riskiest Zip Codes in the U.S. for H1 2017.

.dataTb{margin:20px auto;width:100%}.dataTb:after{clear:both}.dataTb table{}.dataTb td,.dataTb th{border:1px solid #ddd;padding:.8em}.dataTb th{background:#F4F4F4}.tbL{float:left;width:49%}.tbR{float:right;width:49%;margin:0 0 0 2%}

Shipping: Top 10 riskiest ZIP™ Codes
ZIP Code Attack rate
33122 [Miami, Fla.] 2409.4
91733 [South El Monte, Calif.] 1655.5
33198 [Miami, Fla.] 1295.2
33166 [Miami, Fla.] 1266.0
33195 [Miami, Fla.] 1037.3
33192 [Miami, Fla.] 893.9
97251 [Portland, Ore.] 890.6
07064 [Port Reading, NJ] 808.9
89423 [Minden, Nev.] 685.5
77072 [Houston, Tex.] 629.3
Billing: Top 10 riskiest ZIP™ Codes
ZIP Code Attack rate
77060 [Houston, Tex.] 1337.6
33198 [Miami, Fla.] 1215.6
33122 [Miami, Fla.] 1106.2
33166 [Miami, Fla.] 1037.4
91733 [South El Monte, Calif.] 780.1
33195 [Miami, Fla.] 713.7
97252 [Portland, Ore.] 670.8
33191 [Miami, Fla.] 598.8
33708 [St. Petersburg, Fla.] 563.6
33792 [Miami, Fla.] 493.0

As e-commerce fraud continues to grow, businesses need to be proactive to keep themselves and their customers safe. That means incorporating multiple, layered fraud prevention strategies that work together seamlessly — for example, understanding details about users and their devices, knowing how users interact with the business and evaluating previous transaction history. This level of insight can help businesses distinguish real customers from nefarious ones without impacting the customer experience.

While businesses are ultimately responsible for the safety of customers and their data, the onus doesn’t rest solely with them. Consumers should also be vigilant when it comes to protecting their digital identities and payment information. That means creating strong, unique passwords; actively monitoring online accounts; and using two-factor authentication to secure account access.

At the end of the day, e-commerce fraud is a challenge that businesses and consumers will experience for the foreseeable future. But rising attack rates don’t have to spell doom and gloom for the industry. E-commerce growth is still extremely strong, as consumers interact through multiple channels (in-store, mobile and web) and expect a personalized experience. Establishing trust and verifying digital identities are key to meeting these latest expectations, which provide new opportunities for businesses and consumers to interact seamlessly and transact securely. With multiple safeguards in place, businesses have a variety of options to protect their customers and their brand reputation.

Experian is a nonexclusive full-service provider licensee of the United States Postal Service®. The following trademarks are owned by the United States Postal Service®: ZIP and ZIP Code. The price for Experian’s services is not established, controlled or approved by the United States Postal Service.

Related Posts

Ask the Expert: The Future of Lending Starts With Identity With Shawn Rife and Brian Cardona

Identity intelligence and alternative data can help lenders validate consumers and support more informed decisions across the customer lifecycle.

September 16, 2026 by Julie Lee
Financial Institutions Are Rethinking Customer Acqusition

Customer acquisition strategies are constantly evolving toward more precise targeting. From a marketing lens, you can track every step, optimize communication channels and still miss the person most likely to convert. Attribution can tell us which channels work and automation can make marketing spend more efficient. But both assume we know who is actually on the other end. Financial institutions are learning that finding audiences and targeting them is no longer the biggest challenge. As acquisition optimization marketing becomes more sophisticated, teams can measure and act on more signals than before. What they can't always know is whether the person on the receiving end is real. Customer acquisition has evolved into an identity problem. The challenge is not that every questionable signal represents malicious activity. It's that acquisition systems must make increasingly intelligent decisions with an imperfect understanding of who they're actually engaging. When identities are fragmented, duplicated, temporary or synthetic, optimization becomes a question of trust as much as targeting. When your signals don't reliably identify customers The customer journey often includes searching, filling out a form, creating an account, requesting a quote and subscribing. All of these signals work well when identity is relatively stable.  However, financial institutions are finding that these signals are becoming less reliable. A single person can operate across multiple personas, devices, browsers, aliases, accounts and intermediaries while several apparent “people” may actually represent one underlying actor. Financial instituions are finding: Fragmented customer signals Difficulty distinguishing an old account from a new one Different digital pathways associated with the same individual Signals that are generated by automation Real customers getting flagged because signals are too thin to evaluate confidently Legacy signals continue to be challenged Marketing has historically treated intent as a valuable signal because intent was relatively difficult to produce. A search required human intent. A form required someone to fill it out. An inquiry implied a meaningful amount of human effort. Financial institutions are already combating AI-enabled fraud, and now marketing teams are starting to face it on a massive scale. AI can mimic human behavior by researching products, comparing prices, filling out forms, creating accounts and signing up for services. A valid email address is no longer enough. Marketers need to know: How long has it existed? How recently has it been active? Does its activity appear consistent or suddenly anomalous? Has it gone dormant and returned? Is it associated with patterns that suggest stability or unusual behavior? How to build on your strongest signal Email remains one of the most persistent identifiers in digital commerce, following people across devices, platforms, transactions, subscriptions, accounts and years of activity. For over two decades, this has shaped how AtData thinks about identity. Now, as part of Experian, it’s shaping how an entire platform and team approach identity. A marketer doesn’t need every prospect to have existed online for twenty years. But understanding whether a newly acquired prospect has meaningful identity context can dramatically improve the quality of the decision being made around it. Better identity intelligence can help organizations reduce unnecessary friction by improving their ability to recognize legitimate customers. With a strong identity foundation, marketing teams can better address: Which audiences are more likely to convert? Which leads are high quality? Which channels are driving incremental growth? What do the best prospects look like? The value isn't simply having an email address. It's understanding the history and behavioral context associated with it. That context can provide a stronger digital identity signal, helping marketers understand how long they have been active, whether its behavior is consistent with that of a real person and whether current activity aligns with past patterns. It continues to be one of the most persistent identifiers in digital commerce. An infrastructure built for what's coming The acquisition of AtData by Experian reflects a fundamental shift in how identity infrastructure needs to work. Experian's scale and decisioning capabilities, combined with AtData's real-time email intelligence, create a strong platform. Read more about the why behind the acquisition and see how email works as an identity anchor for fraud prevention. Contact us to learn about our customer acquisition solutions

September 15, 2026 by Zohreen Ismail
As Electric Vehicle Adoption Eases, Dealers Can Find New Opportunities To Reach Consumers

After years of rapid growth, new electric vehicle (EV) registrations have moderated, and the EV market has entered a new chapter. But slower growth shouldn’t be mistaken for disappearing demand, with data suggesting the reality is much more nuanced. According to Experian Automotive’s Automotive Consumer Trends Report: Q2 2026, battery EVs accounted for 8.21% of new retail registrations in the last 12 months, down from 9.23% a year earlier. However, consumers aren’t simply walking away from electrification. In fact, more than one million new EVs were registered during the past 12 months and the used EV market recorded more than 540,000 registrations over the same period. The opportunity may be less about waiting for the EV market to grow and more about understanding where EV demand is present, who is driving them, and how to reach those consumers more effectively. Who is likely to purchase an EV and what vehicle types are they interested in? Understanding who’s in the market for an EV can allow dealers to position themselves around consumers’ needs as they choose a vehicle that fits their everyday lifestyle. In the second quarter of 2026, Millennials and Gen X accounted for 67.83% of new EV registrations, nearly 10 percentage points above their combined share of all new, retail registrations. Millennials were also the largest generational audience across both new and used EV market share, coming in at 35.76% and 38.42%, respectively. It’s important to consider that the EV shopper isn’t necessarily looking for an unfamiliar or new type of vehicle. In many cases, they’re seemingly looking for an electric version of the practical vehicle they already know. For instance, SUVs accounted for 77.47% of new EV registrations in Q2 2026, which was similar to SUVs’ 63.49% share of all new retail registrations. For these shoppers, creating messaging around value, practicality, and available choices may resonate differently than premium technology messaging aimed at some new-EV prospects. The more precisely dealers can identify those audiences, the less they need to depend on broad EV market momentum to generate demand. To learn more about EV insights, view the full Automotive Consumer Trends Report: Q2 2026 presentation.

September 15, 2026 by Kirsten Von Busch

Subscribe to our Newsletter

Enter your name and email for the latest updates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Subscribe to our Newsletter

Don't miss out on the latest industry trends and insights!
Subscribe