E-Commerce Fraud Attack Rates Hit New Highs in 2017

by Traci Krepper 5 min read April 10, 2018

e-commerce attacksWith 16.7 million reported victims of identity fraud in 2017 (that’s 6.64 percent of the U.S. population), it was another record year for the number of fraud victims. And as online and mobile transaction growth continued to significantly outpace brick-and-mortar growth, criminal attacks also grew rapidly. This past year, we saw an increase of more than 30 percent in e-commerce fraud attacks compared with 2016.

As we’ve done over the past three years, Experian® analyzed millions of online transactions to identify fraud attack rates for both shipping and billing locations across the United States. We looked at several data points, including geography and IP address, to help businesses better understand how and where fraud is being perpetrated so they can better protect against it.

The 2017 e-commerce fraud attack rate analysis shows:

  • Delaware and Oregon continue to be the riskiest states for both billing and shipping fraud.
  • Delaware; Oregon; Washington, D.C.; Florida; and Georgia are the top five riskiest states for billing fraud.
  • Delaware, Oregon, Florida, New York and California are the top five riskiest states for shipping fraud, accounting for 50 percent of total fraud attacks.
  • South El Monte, Calif., is the riskiest city overall, with an increase in shipping fraud of approximately 230 percent.
  • Shipping fraud most often occurs near major airports and seaports due to reshippers and freight forwarders that receive domestic goods and often send them overseas.
  • When a transaction originates from an international IP address, shipping fraud is 6.7 times likelier than the average, while billing fraud becomes 7.1 times likelier.

Where is e-commerce fraud happening?

Typically, the highest-risk areas for fraud are in ZIP™ codes and cities near large ports of entry or airports. These are ideal locations to reship fraudulent merchandise, enabling criminals to move stolen goods more effectively.

Top 10 riskiest billing ZIP™ codes   Top 10 riskiest shipping ZIP™ codes
97252 Portland, OR 97079 Beaverton, OR
33198 Miami, FL 33122 Miami, FL
33166 Miami, FL 91733 South El Monte, CA
33122 Miami, FL 97251 Portland, OR
77060 Houston, TX 97250 Portland, OR
33195 Miami, FL 33166 Miami, FL
97250 Portland, OR 97252 Portland, OR
97251 Portland, OR 33198 Miami, FL
33191 Miami, FL 33195 Miami, FL
97253 Portland, OR 33192 Miami, FL
Source: Experian.com Source: Experian.com

What’s more, many of the riskiest ZIP™ codes and cities experience a high volume of transactions originating from international IP addresses. In fact, the top 10 riskiest ZIP codes overall tend to experience fraudulent activity from numerous countries overseas, including China, Venezuela, Taiwan and Hong Kong, and Argentina. These fraudsters tend to implement complex fraud schemes that can cost businesses millions of dollars in fraud losses. Additionally, the analysis shows that traffic coming from a proxy server — which could originate from domestic and international IP addresses — is 74 times riskier than the average transaction.

The problem

The increase in e-commerce fraud attacks shouldn’t come as a huge surprise. The uptick in data breaches, merchants’ continued adoption of EMV-enabled terminals to protect against counterfeit card fraud and the abundance of consumer data on the dark web means that information is even more accessible to criminals. This enables them to open fraudulent accounts, take over legitimate accounts and submit fraudulent transactions. Another reason for the increase is automation. In the past, criminals needed a strong understanding of fraud methods and technology, but they can now bring down an entire organization by simply downloading a file and automating the submission of thousands of applications or transactions simultaneously.

Since fraudsters need to make these transactions appear as normal as possible, they often leverage the cardholder’s actual billing details with slight differences, such as e-mail address or shipping location. Unfortunately, the mass availability of compromised data and the abundance of fraudsters makes it increasingly challenging to identify and separate legitimate customers from attackers across the country. Because of the widespread prevalence of fraud and data compromises, we don’t see billing fraud concentrated in just one region of the country. In fact, the top five states for billing fraud make up only about 18 percent of overall fraud attacks.

Top 5 riskiest billing fraud states   Top 5 riskiest shipping fraud states
State Fraud attack rate State Fraud attack rate
Delaware 93.4 Delaware 195.9
Oregon 86.1 Oregon 170.1
Washington, D.C. 46.5 Florida 45.1
Florida 39.2 New York 37.3
Georgia 31.5 California 32.6
Source: Experian.com Source: Experian.com

Prevention and protection need to be the priority

As businesses get a better understanding of how and where fraud is perpetrated, they can implement proactive strategies to detect and prevent attacks, as well as protect payment information. While no one single strategy can address the entire scope of fraud, there are advanced data sets and technology — such as device intelligence, behavioral and physical biometrics, document verification and entity resolution — that can help businesses make better fraud decisions.

Fortunately, consumers can also play a major role in safeguarding their information. In addition to regularly checking their credit reports and bank/credit card statements for fraudulent activity, consumers can limit the data they share on social networking sites, where attackers often begin when perpetrating identity fraud.

While we continue to help both organizations and consumers limit their exposure to e-commerce fraud, we anticipate that criminals will attempt more sophisticated fraud schemes. But businesses can stay ahead of the curve. This comes down to having a keen understanding of how fraud is being perpetrated, as well as leveraging data, technology and multiple layered strategies to better recognize legitimate customers and make more precise fraud decisions.

View our e-commerce fraud heat map and download the top 100 riskiest ZIP codes in the United States.

Experian is a nonexclusive full-service provider licensee of the United States Postal Service®. The following trademark is owned by the United States Postal Service®: ZIP. The price for Experian’s services is not established, controlled or approved by the United States Postal Service.

Related Posts

2026 Retail Banking Identity and Fraud Report 

Learn how banks can convert rising fraud investment into protection customers recognize, value and feel in our recent report. Read more!

October 28, 2026 by Laura Burrows
One Platform, Fewer Handoffs, Faster Decisions

The average credit union manages between 100-300 vendor relationships, and nearly a third have no dedicated staff managing them. What was supposed to drive efficiency is stunting growth and compromising the member experience. Application volume is continuing to rise, and consumers expect a loan decision at digital speed. But for credit unions, meeting that expectation isn't the only goal. They must also continue to make the right lending decisions while also prioritizing risk management. The institutions pulling ahead aren't the ones with the most tools. They're the ones that have turned credit, fraud and decisioning into a single, coordinated system. A single loan decision touches: Credit data Identity verification Fraud signals Decisioning logic Reporting Rarely does all of that live in one place. More often, it’s stitched together across separate platforms, each with its own contract and its own support line. When a credit view and a fraud view are generated separately, they must be reconciled instead of read together in the same instant. Every handoff is a place where a decision slows down and a signal gets missed. It's why a fraud pattern that would be obvious next to the credit file often surfaces only after the funds are already gone. Fragmentation also makes it harder to optimize lending strategies over time. When data, analytics and decisioning are disconnected, credit unions have less visibility into what's working, what's changing and where strategies need to be adjusted. An integrated decisioning ecosystem closes those seams by design, with credit, fraud and lending strategy running on one platform and accessed through a single Application Programming Interface (API). Identity and compliance capabilities can be an integrated decisioning flow. The data doesn't need to be reconciled after the fact because it was never separated in the first place. Stop overengineering, start removing friction When decisioning underperforms, the instinct is to build something more custom: a proprietary model, tighter segmentation, more configuration.  Custom modeling has its place for institutions with the scale and data to justify it. But often, for small or mid-sized credit unions, the bigger opportunity is a flexible decisioning strategy that uses a strong, continuously refreshed model. This shouldn't be either/or. The right approach gives credit unions a strong decisioning strategy today, with the ability to introduce more customized analytics and modeling as their needs evolve.  The same principle applies to strategy management: credit unions can gain greater control through self-service capabilities as they build a more sophisticated data science team.   That kind of flexibility is important as credit unions modernize their decisioning infrastructure. Research surveying more than 2,000 senior credit risk and fraud decision-makers across 11 countries found that organizations investing in unified platforms and modern infrastructure are moving faster and realizing the greatest Return on Investment (ROI).   As their needs evolve, credit unions can adjust decisioning strategies without introducing another layer of technology or relying on third parties to make every change. Until self-service is the right fit, choose a partner that understands what makes your credit union’s membership and risk appetite different from others.  Same member, same afternoon, faster answer Consider a credit union growing its auto and personal loan originations.  A member applies for an auto loan on Saturday afternoon. Credit data, identity and fraud signals are read together in a single real-time pass instead of separate reviews:  Most applications resolve immediately, approved or declined based on a more comprehensive view of the applicant. A smaller number are flagged for quick step-up verification and cleared within minutes. Only genuinely ambiguous cases reach an underwriter, who is working from one complete picture instead of reconciling multiple signals. The member has an answer before the weekend is over. The credit union books the loan before competitors even open on Monday. Built to scale This kind of process holds up today. However, the better test is whether it holds up eighteen months from now when application volume has grown, new products are live and the data flowing through the system looks nothing like it does right now. Future-proofing isn't only about handling more volume. It's about having room to be nimbler and make adjustments as quickly as the market changes. A credit union that relies on standard models within a decisioning strategy may want more customized analytics and greater control over its strategies tomorrow. Connect with us With more than three decades of credit expertise and one of the industry's largest data footprints, Experian helps credit unions do more than solve this year's friction. We're helping to build a decisioning foundation that scales, so growth becomes something the system absorbs, rather than something it must be rebuilt around. Explore More

October 21, 2026 by Zohreen Ismail
Cash Flow Insights: Powering the Next Evolution in Lending

For decades, credit data has given lenders a trusted foundation for assessing risk. Now, consumer-permissioned cash flow data is adding another layer of insight into consumers’ financial lives, including income, spending, liquidity and changing financial obligations. The opportunity is significant. Nearly one in five consumers lacks access to or has damaged credit. New Experian research also shows that 60% of consumers who have previously been denied credit or received less favorable terms than expected believe the outcome would have been different if lenders had considered their recent income and banking activity alongside their credit history. 1,2 For lenders, cash flow insights can provide additional context about a consumer’s financial capacity and support more informed underwriting decisions. The next challenge is making those insights easier to use consistently and responsibly at scale. What are cash flow insights? Cash flow insights are derived from consumer-permissioned banking data and provide visibility into how money moves into and out of a consumer’s accounts. Depending on the information available, cash flow data can provide insight into financial behaviors such as: Income and income stability: Regular and irregular income streams and changes over time Spending and recurring expenses: Everyday spending patterns and ongoing financial obligations Account balances and liquidity: Available funds and changes in account balances Debt obligations: Loan payments and other recurring debt commitments Cash flow patterns: How money moves into and out of accounts over time Traditional credit information provides a rich history of how consumers have managed credit. Cash flow insights add context about their current financial activity and capacity, providing lenders with a more complete view of financial health. Cash flow insights can also add predictive value to risk assessment. Experian analysis shows Cashflow Score can deliver up to a 25% lift in predictive performance over conventional credit scores when tailored to targeted risk tiers.3 Cash flow data is having its moment In this Forbes article, Sandy Anderson, Experian's Executive Vice President of the Data Office and Operations, explains why more data alone isn’t enough — and what it takes to turn cash flow insights into trusted, actionable intelligence. Read the article How lenders can put cash flow insights to work at scale As interest in cash flow insights grows, the conversation is moving beyond what the data can reveal to how financial institutions can use it consistently and responsibly. That requires standardized consumer reporting, clear governance and decision-ready insights that can work within established lending processes. The launch of Experian Cashflow Data Bureau at Vision 2026 reflects this shift from access to adoption. The new consumer reporting agency operates under the Fair Credit Reporting Act (FCRA) and is designed to help financial institutions adopt consumer-permissioned cash flow insights at scale. A key part of that foundation is the cash flow consumer report, which organizes consumer-permissioned banking information into a standardized consumer report regulated under the FCRA. This gives lenders a consistent foundation for incorporating cash flow information into lending decisions while providing consumers with access to the information in their report. Watch this video to see how Experian Cashflow Solutions turns consumer-permissioned cash flow data into decision-ready attributes, scores and custom analytics, backed by bureau-grade governance. Turning greater visibility into better decisions The next evolution in credit isn’t about choosing between traditional credit and cash flow data. Each provides a different perspective. Traditional credit information offers deep insight into how consumers have managed credit over time. Cash flow insights can add context about financial activity and capacity. Bringing those perspectives together can give lenders greater visibility into consumers’ financial health and help them better distinguish between risk and resilience, support more informed decisions and identify opportunities to responsibly expand access to credit. As cash flow adoption continues to grow, its value will come from how effectively it complements the information lenders already use. The opportunity isn't simply to see more data. It's to turn that additional visibility into smarter, more informed decisions. Explore how Experian Cashflow Data Bureau is helping financial institutions put consumer-permissioned cash flow insights into practice at scale. Learn more [1] Federal Reserve Bank of New York, The Market for Credit Building: Demand, Product Characteristics and Consumer Uses, 2026. [2] Experian commissioned Atomik Research to conduct an online survey of 2,000 U.S. adults age 18+. Fieldwork took place July 16–21, 2026. Margin of error: +/- 2.2 percentage points at a 95% confidence level. [3] Based on Experian analysis when Cashflow Score is compared with conventional credit scores, tailored to targeted risk tiers. Predictability based on KS.

October 14, 2026 by Julie Lee

Subscribe to our Newsletter

Enter your name and email for the latest updates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Subscribe to our Newsletter

Don't miss out on the latest industry trends and insights!
Subscribe