E-Commerce Fraud Attack Rates Hit New Highs in 2017

by Traci Krepper 5 min read April 10, 2018

e-commerce attacksWith 16.7 million reported victims of identity fraud in 2017 (that’s 6.64 percent of the U.S. population), it was another record year for the number of fraud victims. And as online and mobile transaction growth continued to significantly outpace brick-and-mortar growth, criminal attacks also grew rapidly. This past year, we saw an increase of more than 30 percent in e-commerce fraud attacks compared with 2016.

As we’ve done over the past three years, Experian® analyzed millions of online transactions to identify fraud attack rates for both shipping and billing locations across the United States. We looked at several data points, including geography and IP address, to help businesses better understand how and where fraud is being perpetrated so they can better protect against it.

The 2017 e-commerce fraud attack rate analysis shows:

  • Delaware and Oregon continue to be the riskiest states for both billing and shipping fraud.
  • Delaware; Oregon; Washington, D.C.; Florida; and Georgia are the top five riskiest states for billing fraud.
  • Delaware, Oregon, Florida, New York and California are the top five riskiest states for shipping fraud, accounting for 50 percent of total fraud attacks.
  • South El Monte, Calif., is the riskiest city overall, with an increase in shipping fraud of approximately 230 percent.
  • Shipping fraud most often occurs near major airports and seaports due to reshippers and freight forwarders that receive domestic goods and often send them overseas.
  • When a transaction originates from an international IP address, shipping fraud is 6.7 times likelier than the average, while billing fraud becomes 7.1 times likelier.

Where is e-commerce fraud happening?

Typically, the highest-risk areas for fraud are in ZIP™ codes and cities near large ports of entry or airports. These are ideal locations to reship fraudulent merchandise, enabling criminals to move stolen goods more effectively.

Top 10 riskiest billing ZIP™ codes   Top 10 riskiest shipping ZIP™ codes
97252 Portland, OR 97079 Beaverton, OR
33198 Miami, FL 33122 Miami, FL
33166 Miami, FL 91733 South El Monte, CA
33122 Miami, FL 97251 Portland, OR
77060 Houston, TX 97250 Portland, OR
33195 Miami, FL 33166 Miami, FL
97250 Portland, OR 97252 Portland, OR
97251 Portland, OR 33198 Miami, FL
33191 Miami, FL 33195 Miami, FL
97253 Portland, OR 33192 Miami, FL
Source: Experian.com Source: Experian.com

What’s more, many of the riskiest ZIP™ codes and cities experience a high volume of transactions originating from international IP addresses. In fact, the top 10 riskiest ZIP codes overall tend to experience fraudulent activity from numerous countries overseas, including China, Venezuela, Taiwan and Hong Kong, and Argentina. These fraudsters tend to implement complex fraud schemes that can cost businesses millions of dollars in fraud losses. Additionally, the analysis shows that traffic coming from a proxy server — which could originate from domestic and international IP addresses — is 74 times riskier than the average transaction.

The problem

The increase in e-commerce fraud attacks shouldn’t come as a huge surprise. The uptick in data breaches, merchants’ continued adoption of EMV-enabled terminals to protect against counterfeit card fraud and the abundance of consumer data on the dark web means that information is even more accessible to criminals. This enables them to open fraudulent accounts, take over legitimate accounts and submit fraudulent transactions. Another reason for the increase is automation. In the past, criminals needed a strong understanding of fraud methods and technology, but they can now bring down an entire organization by simply downloading a file and automating the submission of thousands of applications or transactions simultaneously.

Since fraudsters need to make these transactions appear as normal as possible, they often leverage the cardholder’s actual billing details with slight differences, such as e-mail address or shipping location. Unfortunately, the mass availability of compromised data and the abundance of fraudsters makes it increasingly challenging to identify and separate legitimate customers from attackers across the country. Because of the widespread prevalence of fraud and data compromises, we don’t see billing fraud concentrated in just one region of the country. In fact, the top five states for billing fraud make up only about 18 percent of overall fraud attacks.

Top 5 riskiest billing fraud states   Top 5 riskiest shipping fraud states
State Fraud attack rate State Fraud attack rate
Delaware 93.4 Delaware 195.9
Oregon 86.1 Oregon 170.1
Washington, D.C. 46.5 Florida 45.1
Florida 39.2 New York 37.3
Georgia 31.5 California 32.6
Source: Experian.com Source: Experian.com

Prevention and protection need to be the priority

As businesses get a better understanding of how and where fraud is perpetrated, they can implement proactive strategies to detect and prevent attacks, as well as protect payment information. While no one single strategy can address the entire scope of fraud, there are advanced data sets and technology — such as device intelligence, behavioral and physical biometrics, document verification and entity resolution — that can help businesses make better fraud decisions.

Fortunately, consumers can also play a major role in safeguarding their information. In addition to regularly checking their credit reports and bank/credit card statements for fraudulent activity, consumers can limit the data they share on social networking sites, where attackers often begin when perpetrating identity fraud.

While we continue to help both organizations and consumers limit their exposure to e-commerce fraud, we anticipate that criminals will attempt more sophisticated fraud schemes. But businesses can stay ahead of the curve. This comes down to having a keen understanding of how fraud is being perpetrated, as well as leveraging data, technology and multiple layered strategies to better recognize legitimate customers and make more precise fraud decisions.

View our e-commerce fraud heat map and download the top 100 riskiest ZIP codes in the United States.

Experian is a nonexclusive full-service provider licensee of the United States Postal Service®. The following trademark is owned by the United States Postal Service®: ZIP. The price for Experian’s services is not established, controlled or approved by the United States Postal Service.

Related Posts

2026 Fintech Identity and Fraud Report

Explore the Fintech Identity and Fraud Report for insights on AI-driven fraud threats, identity protection and the evolving fraud landscape.

September 28, 2026 by Laura Davis
Who’s Driving What? How Fuel Loyalty and Generational Preferences are Shaping the Vehicle Market

Take a look around at any road, parking lot, or highway, and you’ll see just how diverse today’s vehicle landscape has become. Within that evolving mix, electric vehicles (EVs) have seen years of rapid growth, and while the market is seemingly entering a new phase, interest remains. So, with several vehicles and fuel types to choose from, what keeps drivers coming back to electrified vehicles? Experian Automotive’s Automotive Market Trends Report: Q2 2026 found that among EV owners who returned to the market in the last 12 months, majority (72.2%) replaced their EV with another EV, while 18.5% switched to a gasoline vehicle. Hybrid buyers also showed considerable loyalty to electrification, with 55.7% of gas-hybrid owners staying with the same fuel type when replacing their vehicle, and 32.7% swapping for a gasoline vehicle. Consumers are seemingly remaining loyal to EVs and hybrids because they are attracted to the benefits that fit their everyday lifestyle, such as lower fuel or charging costs amid the elevated gas prices. For some, it could also be tied to convenience, as drivers who have found a reliable charging routine or appreciate the efficiency of a hybrid may have little reason to switch back to a traditional gasoline vehicle. Generations are taking different paths to electrification Generational differences also influence hybrid and EV loyalty, with younger consumers generally showing greater openness to alternative fuel types. While older generations tend to have greater familiarity with traditional gasoline vehicles, hybrid and EV adoption is increasing across all age groups as these options become more accessible and mainstream. Millennials, in particular, showed the strongest inclination toward electrified vehicles. Through Q2 2026, they accounted for the highest EV share at 8.2%, compared with Gen X at 5.5%, Gen Z (4.7%), and Baby Boomers (4.7%). The difference becomes even more pronounced when hybrids are in the mix, as 23.1% of Millennial registrations were gas-electric hybrids or plug-in hybrids, versus 16.7% for Gen X, 16.8% for Gen Z, and 18.0% for Baby Boomers. For automotive professionals, these differences make understanding who is driving what, and what they may choose next, increasingly important. The future of the automotive market may be less about consumers choosing one vehicle type over the other and more about understanding the distinct patterns and preferences of each generation. As the market continues to evolve, those insights can help automotive professionals better meet consumers where they are. To learn more about vehicle market trends, view the full Automotive Market Trends Report: Q2 2026 presentation on demand.

September 24, 2026 by John Howard
New Data Available for MBS Investors: Current Credit Score 

In a previous post, we described how every mortgage borrower’s financial situation and credit profile evolve over time.  After a borrower opens a loan, their financial status evolves—jobs are gained and lost; incomes can rise or fall, and financially stressful situations or windfalls can occur. These effects are often reflected in the consumer’s evolving credit score, which changes with the consumer’s payment behavior on open loans, credit inquiry activity, credit card utilization, and other revolving lines, among other things.    Even though MBS, whole loan, and MSR investors ultimately bear borrower credit risk, they may have access to less current borrower credit information than other participants in the mortgage ecosystem.   In securitized markets (both agency MBS and private-label MBS), updated scores are not provided in disclosure to bondholders, even as loans age year over year.  In whole loan and MSR markets, a single origination credit score is often provided at the time of bid, and after a successful bid, the investor may have a permissible purpose to pull individual scores on an owned portfolio. But until recently, there was no single loan-level dataset that included continuously refreshed credit scores across the U.S. mortgage market—the type of foundational dataset needed to build and tune credit and prepayment models.  A monthly-refreshed Current Credit Score field meets our three-pronged materiality standard for new data delivery to MBS markets:  New: Provides information not available in existing datasets (i.e., orthogonal to currently available data). Neither private-label MBS nor agency MBS standard market data includes a monthly-refreshed borrower credit score.  Material: Impacts a sizeable portion of the MBS universe. For the vast majority of loans in MBS, borrowers credit scores are available.  Significant: Differentiates collateral performance by a large enough margin to influence trading and risk management decisions.  A current credit score wraps all of a borrower’s credit-related behaviors into a single numerical value and has historically been associated with a borrower’s likelihood of becoming 60+ days past due on any obligation within the subsequent 24 months.    In fact, a current credit score is among the most informative indicators of near-term mortgage default risk, as shown in the image below, which depicts 30+ DPD rates by current credit score bands for the entire U.S. mortgage market, controlling for origination score <=650.    Without access to current credit scores, investors are limited to the score at origination—causing the four distinct performance trends shown here to appear as a single averaged line. In reality, score migration since origination reveals significant divergence in credit risk, with the lowest current-score bucket exhibiting a nearly 10 times higher 30+ DPD rate than the highest-score bucket in the latest period shown.  Source:  Experian Mortgage Loan Performance (MLP) dataset hosted on IVolatility DataDriven Platform  In this article, we’ll take a quick look at how score migration acts as an early predictor of a performing loan’s first roll into 30-day delinquent status.    MBS Investors’ Current Credit Score Blindspot: Solved   An MBS investor relying on standard market data and securitization remittance reports sees no sign of borrower stress until the subject mortgage loan in the securitization misses a payment and is reported at 30 days delinquent. Of course, in the vast majority of cases, a borrower begins struggling financially well before missing a mortgage payment:  The borrower may miss payments on other types of loans (credit card, auto loan, personal unsecured, or payday loans) as they prioritize their home and mortgage.  Outstanding balances on credit cards may grow as the borrower begins to make only minimum payments on revolvers.  The borrower may apply for additional credit cards, personal or payday loans   The borrower may apply to increase limits on existing credit cards as outstanding balance nears spending limit  All these stress-indicative behaviors result in a decreasing credit score, many months before the borrower misses their first mortgage payment. An MBS investor with access to each borrower’s current credit score, refreshed each month, can predict increased likelihood of default many months before the first missed mortgage payment—and is therefore at a major information advantage relative to the market generally.  Experian’s Mortgage Loan Performance (MLP) dataset contains thousands of fields describing mortgage performance from each borrower, loan, and property perspective, all refreshed monthly (including, amongst other things, new credit scores and refinance inquiry activity, loan performance on all types of debt, filed junior liens, and AVM values).   MLP is much more comprehensive than loan-level data provided by Freddie Mac, Fannie Mae, Ginnie Mae, and PLS data vendors in several ways:   Standard market datasets may not contain certain data elements that some market participants consider useful when evaluating mortgage prepayment or credit performance. Basic, critical fields such as the borrower’s current credit score and the current junior lien balance on the property are missing.    MLP contains borrower, loan, and property data fields spanning a broad portion of the mortgage universe, including Agency, Non-Agency, and Esoteric mortgage products (CES, HELOC, Reverse), including both securitized and non-securitized loans.   MLP enables full three-dimensional (borrower + loan + property) tracking with persistent keys for borrower (before and after refinancing), loan (in securities/deals even after exit due to payoffs or buyouts, including before and after MSR sales), and property.  This enables end-to-end analysis of each borrower’s (and property’s) mortgage experience throughout their credit lifecycle.  Is Downward-Trending Credit Score a Signal for Impending Delinquency?  MLP contains thousands of fields describing each loan, borrower, and property across all U.S. mortgages.  It allows for virtually unlimited segmentation and granular analysis.   For purposes of this illustrative article, we’ll take a high-level look at the entire U.S. mortgage market and perform a quick analysis to confirm intuition that a declining credit score provides a signal for higher likelihood of near-term mortgage delinquency.  Figure 1 illustrates the current pay status (as of 6/30) for the entire U.S. mortgage market, as contained in the MLP dataset, along with count, UPB and UPB-weighted Vantage 4.0 credit score for each bucket.  Figure 1  Source:  Experian Mortgage Loan Performance dataset  As illustrated in Figure 1, approximately 772,000 individual mortgage loans were reported to Experian as 30 days delinquent as of 6/30/2026.  Of the 772,000 30d delinquent loans in the June snapshot, approximately 426,000 were current in the prior (May) snapshot.  Some of these 426,000 loans were reperformers which had been bouncing from 30 DPD to current over the prior few snapshots. To remove reperformance score noise, we further parsed out the population which: 1) had rolled from current to 30 DPD from May to June; and 2) was consistently current for a full year prior to the 6/30 missed payment.  The population meeting both conditions totaled approximately 123,000 loans.  Figure 2 below shows, for this population of 123,000 “clean current” loans, the UPB-weighted average Vantage4 credit score for each of the 12 months leading up to the June missed payment, as well as the impact of the missed payment on the 6/30 score.  Figure 2  Source:  Experian Mortgage Loan Performance Dataset  Figure 2 reveals a rather slow and steady ~20-point deterioration of score in the 12 months prior to first missed payment – as well as the 80-point drop once the missed payment hits.  When we compare this cohort’s Vantage 4.0 score trend to the broader Current population across the entire dataset in Figure 3, we see a marked difference in both absolute value and trend:  Figure 3  Source:  Experian Mortgage Loan Performance Dataset  Not only is the cohort’s starting Vantage 4.0 score lower than the broader current population, but it also displays a dropping trend (with a notable 2 to 3x acceleration in monthly score drop the month before the first missed mortgage payment) while the broader Current population’s score (of which the isolated cohort is a subset) remains rock steady.  Lastly, we present Figure 4, a histogram comparing the distribution of at-origination and as-of 5/30 (i.e., the period just before the missed June mortgage payment) credit scores for the clean current population. The distribution appears to shift toward lower credit scores. To the extent credit scores are correlated with credit risk, this shift may indicate elevated credit risk relative to origination. Since this degradation occurs during a period of perfect mortgage pay performance, it is invisible to MBS investors who lack access to current borrower credit scores. Experian MLP provides monthly refreshed credit scores for mortgage borrowers contained within the MLP database.  Figure 4  Source:  Experian Mortgage Loan Performance Dataset 

September 22, 2026 by Michael Pyatski, Perry DeFelice

Subscribe to our Newsletter

Enter your name and email for the latest updates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Subscribe to our Newsletter

Don't miss out on the latest industry trends and insights!
Subscribe