E-commerce fraud continues to be an area of concern — just look to the West and the South

by Guest Contributor 5 min read September 6, 2017

e-commerce fraud

Since the advent of the internet, our lives have changed drastically for the better. We can perform many of life’s daily activities from the comfort of our own home. According to Aite, in 2016 alone 36 million Americans made some form of mobile payment — paying a bill, purchasing something online, paying for fast food or making a mobile wallet purchase at a retailer. Simply put, the internet has made our lives easier. But with the good also comes the bad. While most consumers have moved to the digital world, so have fraudsters. With minimal risk and high reward at stake, e-commerce fraud attacks have increased dramatically over the last few years, with no signs of slowing down.

We recently analyzed millions of transactions from the first half of 2017 to identify fraud attack rates based on billing and shipping addresses and broke down the findings into various geographic trends. Fraud attack rates represent the attempted fraudulent e-commerce transactions against the population of overall e-commerce orders.

Consumers living out West and in the South have experienced more than their fair share of fraud. During the first half of 2017, the West and the South were the top two regions for both billing and shipping attacks. While both regions were at the top during the same time last year, the attacks themselves have increased substantially. Given the proximity to seaports and major international airports, this is somewhat unsurprising — particularly for shipping fraud — as many fraudsters will leverage reshippers to transport goods soon after delivery.

.dataTb{margin:20px auto;width:100%}.dataTb:after{clear:both}.dataTb table{}.dataTb td,.dataTb th{border:1px solid #ddd;padding:.8em}.dataTb th{background:#F4F4F4}.tbL{float:left;width:49%}.tbR{float:right;width:49%;margin:0 0 0 2%}

Shipping: Riskiest Regions
Region Attack rate
West 38.1
South 32.1
Northeast 27.0
North Central 20.7
Billing: Riskiest Regions
Region Attack rate
West 37.2
South 32.9
Northeast 27.3
North Central 24.0

At the state level, the top three shipping fraud states remained the same as 2016 — Delaware, Oregon and Florida — but the order changed. Oregon was the most targeted, with a fraud rate of 135.2 basis points, more than triple its rate at in the end of 2016.

Though no longer in the top spot, Delaware saw alarming spikes as well, with shipping attack rates nearly triple last year’s rate at 128.6 basis points and billing attacks at 79.6 basis points.

.dataTb{margin:20px auto;width:100%}.dataTb:after{clear:both}.dataTb table{}.dataTb td,.dataTb th{border:1px solid #ddd;padding:.8em}.dataTb th{background:#F4F4F4}.tbL{float:left;width:49%}.tbR{float:right;width:49%;margin:0 0 0 2%}

Shipping: Riskiest States
State Attack rate
Oregon 135.2
Delaware 128.2
Florida 57.4
New York 45.0
Nevada 36.9
California 36.9
Georgia 33.5
Washington, D.C 30.8
Texas 29.6
Illinois 29.4
Billing: Riskiest States
Region Attack rate
Oregon 87.5
Delaware 79.6
Washington, D.C. 63.0
Florida 47.4
Nevada 38.8
California 36.9
Arkansas 36.6
New York 35.5
Vermont 34.2
Georgia 33.4

Diving a bit deeper, ZIPTM codes in Miami, Fla., make up a significant portion of the top 10 ZIP CodeTM lists for shipping and billing attacks — in fact, many of the same ZIP codes appear on both lists. The other ZIP Code that appears on both lists is South El Monte, Calif., which has a high percentage of industrial properties — common targets for fraudsters to ship packages, then reship overseas. You can download the top 100 riskiest Zip Codes in the U.S. for H1 2017.

.dataTb{margin:20px auto;width:100%}.dataTb:after{clear:both}.dataTb table{}.dataTb td,.dataTb th{border:1px solid #ddd;padding:.8em}.dataTb th{background:#F4F4F4}.tbL{float:left;width:49%}.tbR{float:right;width:49%;margin:0 0 0 2%}

Shipping: Top 10 riskiest ZIP™ Codes
ZIP Code Attack rate
33122 [Miami, Fla.] 2409.4
91733 [South El Monte, Calif.] 1655.5
33198 [Miami, Fla.] 1295.2
33166 [Miami, Fla.] 1266.0
33195 [Miami, Fla.] 1037.3
33192 [Miami, Fla.] 893.9
97251 [Portland, Ore.] 890.6
07064 [Port Reading, NJ] 808.9
89423 [Minden, Nev.] 685.5
77072 [Houston, Tex.] 629.3
Billing: Top 10 riskiest ZIP™ Codes
ZIP Code Attack rate
77060 [Houston, Tex.] 1337.6
33198 [Miami, Fla.] 1215.6
33122 [Miami, Fla.] 1106.2
33166 [Miami, Fla.] 1037.4
91733 [South El Monte, Calif.] 780.1
33195 [Miami, Fla.] 713.7
97252 [Portland, Ore.] 670.8
33191 [Miami, Fla.] 598.8
33708 [St. Petersburg, Fla.] 563.6
33792 [Miami, Fla.] 493.0

As e-commerce fraud continues to grow, businesses need to be proactive to keep themselves and their customers safe. That means incorporating multiple, layered fraud prevention strategies that work together seamlessly — for example, understanding details about users and their devices, knowing how users interact with the business and evaluating previous transaction history. This level of insight can help businesses distinguish real customers from nefarious ones without impacting the customer experience.

While businesses are ultimately responsible for the safety of customers and their data, the onus doesn’t rest solely with them. Consumers should also be vigilant when it comes to protecting their digital identities and payment information. That means creating strong, unique passwords; actively monitoring online accounts; and using two-factor authentication to secure account access.

At the end of the day, e-commerce fraud is a challenge that businesses and consumers will experience for the foreseeable future. But rising attack rates don’t have to spell doom and gloom for the industry. E-commerce growth is still extremely strong, as consumers interact through multiple channels (in-store, mobile and web) and expect a personalized experience. Establishing trust and verifying digital identities are key to meeting these latest expectations, which provide new opportunities for businesses and consumers to interact seamlessly and transact securely. With multiple safeguards in place, businesses have a variety of options to protect their customers and their brand reputation.

Experian is a nonexclusive full-service provider licensee of the United States Postal Service®. The following trademarks are owned by the United States Postal Service®: ZIP and ZIP Code. The price for Experian’s services is not established, controlled or approved by the United States Postal Service.

Related Posts

Building for Bots in the AI Age: Separating Legitimate Agents From Fraudsters

See how NeuroID helps businesses distinguish legitimate AI agents from fraud bots, while Agent Trust verifies agent-initiated transactions.

October 29, 2026 by Laura Burrows
2026 Retail Banking Identity and Fraud Report 

Learn how banks can convert rising fraud investment into protection customers recognize, value and feel in our recent report. Read more!

October 28, 2026 by Laura Burrows
One Platform, Fewer Handoffs, Faster Decisions

The average credit union manages between 100-300 vendor relationships, and nearly a third have no dedicated staff managing them. What was supposed to drive efficiency is stunting growth and compromising the member experience. Application volume is continuing to rise, and consumers expect a loan decision at digital speed. But for credit unions, meeting that expectation isn't the only goal. They must also continue to make the right lending decisions while also prioritizing risk management. The institutions pulling ahead aren't the ones with the most tools. They're the ones that have turned credit, fraud and decisioning into a single, coordinated system. A single loan decision touches: Credit data Identity verification Fraud signals Decisioning logic Reporting Rarely does all of that live in one place. More often, it’s stitched together across separate platforms, each with its own contract and its own support line. When a credit view and a fraud view are generated separately, they must be reconciled instead of read together in the same instant. Every handoff is a place where a decision slows down and a signal gets missed. It's why a fraud pattern that would be obvious next to the credit file often surfaces only after the funds are already gone. Fragmentation also makes it harder to optimize lending strategies over time. When data, analytics and decisioning are disconnected, credit unions have less visibility into what's working, what's changing and where strategies need to be adjusted. An integrated decisioning ecosystem closes those seams by design, with credit, fraud and lending strategy running on one platform and accessed through a single Application Programming Interface (API). Identity and compliance capabilities can be an integrated decisioning flow. The data doesn't need to be reconciled after the fact because it was never separated in the first place. Stop overengineering, start removing friction When decisioning underperforms, the instinct is to build something more custom: a proprietary model, tighter segmentation, more configuration.  Custom modeling has its place for institutions with the scale and data to justify it. But often, for small or mid-sized credit unions, the bigger opportunity is a flexible decisioning strategy that uses a strong, continuously refreshed model. This shouldn't be either/or. The right approach gives credit unions a strong decisioning strategy today, with the ability to introduce more customized analytics and modeling as their needs evolve.  The same principle applies to strategy management: credit unions can gain greater control through self-service capabilities as they build a more sophisticated data science team.   That kind of flexibility is important as credit unions modernize their decisioning infrastructure. Research surveying more than 2,000 senior credit risk and fraud decision-makers across 11 countries found that organizations investing in unified platforms and modern infrastructure are moving faster and realizing the greatest Return on Investment (ROI).   As their needs evolve, credit unions can adjust decisioning strategies without introducing another layer of technology or relying on third parties to make every change. Until self-service is the right fit, choose a partner that understands what makes your credit union’s membership and risk appetite different from others.  Same member, same afternoon, faster answer Consider a credit union growing its auto and personal loan originations.  A member applies for an auto loan on Saturday afternoon. Credit data, identity and fraud signals are read together in a single real-time pass instead of separate reviews:  Most applications resolve immediately, approved or declined based on a more comprehensive view of the applicant. A smaller number are flagged for quick step-up verification and cleared within minutes. Only genuinely ambiguous cases reach an underwriter, who is working from one complete picture instead of reconciling multiple signals. The member has an answer before the weekend is over. The credit union books the loan before competitors even open on Monday. Built to scale This kind of process holds up today. However, the better test is whether it holds up eighteen months from now when application volume has grown, new products are live and the data flowing through the system looks nothing like it does right now. Future-proofing isn't only about handling more volume. It's about having room to be nimbler and make adjustments as quickly as the market changes. A credit union that relies on standard models within a decisioning strategy may want more customized analytics and greater control over its strategies tomorrow. Connect with us With more than three decades of credit expertise and one of the industry's largest data footprints, Experian helps credit unions do more than solve this year's friction. We're helping to build a decisioning foundation that scales, so growth becomes something the system absorbs, rather than something it must be rebuilt around. Explore More

October 21, 2026 by Zohreen Ismail

Subscribe to our Newsletter

Enter your name and email for the latest updates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Subscribe to our Newsletter

Don't miss out on the latest industry trends and insights!
Subscribe