E-commerce fraud rates spike 33% in 2016

by Guest Contributor 6 min read March 28, 2017

Florida, Delaware, Oregon and New York were the riskiest states for e-commerce fraud

e-commerce fraudMiami accounted for the most ZIP Codes ranked across shipping and billing fraud.

Where is e-commerce fraud taking place? Everywhere.

Last year we reported that 2016 e-commerce fraud attack rates were on pace to surpass the 2015 totals. At the time, the fraud attack rates for the first half of 2016 appeared to be at least 15% higher than the 2015 total. That percentage turned out to be much higher as e-commerce fraud increased to 33% in 2016 compared to 2015 according to Experian data.

View our e-commerce fraud heat map
See the top 100 riskiest cities in the United States.
Download the list today

Experian analyzed millions of e-commerce transactions from our 2016 client data to identify fraud attack rates for both shipping and billing locations across the United States. The data reveals the increase of e-commerce attacks in 2016, the geographical differences, and whether a credit card has been stolen or personal credentials have been compromised. Fraud attack rates represent the attempted fraudulent e-commerce transactions against the population of overall e-commerce orders.

The 2016 e-commerce fraud attack rate data shows:

  • Miami, FL., is where the riskiest ZIP™ Code comes from for both shipping and billing e-commerce fraud. Miami accounted for 17 of the top 100 ZIP™ Codes for shipping fraud and 20 of the top 100 for billing fraud.
  • 70% of e-commerce billing fraud came from three states – Florida, California and New York – based on the sum of fraud attacks
  • Delaware, Oregon, and Florida were the top-ranked states for billing and shipping e-commerce fraud in 2016
  • Oregon and Delaware saw an increase in e-commerce billing fraud attacks of over 200%.

Many of the higher-risk ZIP™ codes and cities are located near a large port-of-entry city or airport, making them ideal locations for reshipping fraudulent goods. This includes Miami, Houston, New York City, and Los Angeles, perhaps allowing criminals to move stolen goods more effectively. All those cities are ranked among the riskiest cities for both measures of fraud attacks.

Top 10 riskiest Billing ZIP™ Codes for 2016
33198 Miami, FL
33192 Miami, FL
33195 Miami, FL
33166 Miami, FL
91733 South El Monte, CA
33191 Miami, FL
91746 La Puente, CA
17064 Port Reading, NJ
66025 Eudora, KS
89423 Minden, NV
Source: Experian.com
Top 10 riskiest Shipping ZIP™ Codes for 2016
33198 Miami, FL
33166 Miami, FL
33191 Miami, FL
33195 Miami, FL
77036 Houston, TX
33192 Miami, FL
91733 South El Monte, CA
91746 La Puente, CA
66025 Eudora, KS
62694 Winchester, IL
Source: Experian.com


What is driving credit card fraud trends?

The biggest component of this trend is the fact that 2016 was a record year for data breaches. There were 1,093 data breaches last year, a 40% increase from 2015, according to the Identity Theft Resource Center. The recent Federal Trade Commission (FTC) 2016 Consumer Sentinel Network Data Book, announced a jump in consumers who reported that their stolen data was used for credit card fraud, from 16% in 2015 to more than 32% in 2016. The record number of data breaches is a signal that future fraudulent activities will take place. This is further reflected by the increase of consumers reporting credit card fraud to the FTC in 2016. So far in 2017, that same trend continues as the total number of breaches has increased 56% compared to the same time in 2016.

See our 2016 e-commerce fraud infographic
Compare fraud attack rates — and more — from 2015 to 2016 in our latest infographic.
Download today

Why are there geographical differences in ecommerce fraud?

Most e-commerce merchants have basic controls in place to validate that transaction billing information matches a particular account holder using things like the address verification service. So from a billing or victim perspective, attackers typically leverage the legitimate cardholder billing details in a fraudulent order. In order to maximize successful fraud attacks, they need to make the transaction appear as normal as possible. But from a shipping perspective, those same fraudsters often can’t rely on shipping to the cardholder’s address and trying to intercept the package. To acquire the proceeds of their fraudulent transactions, this is where attackers get creative, often using re-shippers or shipping “mules”, freight forwarders, or delivery addresses that do not raise suspicion but are nearby international ports or airports so the fraudulent order can be quickly picked up and shipped to its final destination (often overseas). That’s why we see such a big disparity between attacks by a victim or billing address being mostly evenly spread across the country vs. shipping attacks, which are mostly concentrated in coastal states with major port cities and airports. Delaware and Oregon are two exceptions to this flattening of victim attacks, as both states saw a more than 200% increase in billing attacks with only modest increases in shipping attacks. From a shipping perspective, 10 states saw at least a 100% increase in fraudulent orders, having a significant impact on the overall population attack rate.

Top 5 riskiest Billing fraud States
State Fraud Attack Rate
Delaware 69.0
Oregon 65.7
Florida 41.1
New York 28.0
Nevada 27.0
Source: Experian.com
Top 5 riskiest Shipping  fraud States
State Fraud Attack Rate
Delaware 44.8
Oregon 43.2
Florida 34.2
Alaska 26.2
Washington, D.C. 25.8
Source: Experian.com

Has the EMV switch affected fraud ecommerce rates at all?

The increase in e-commerce fraud follows a similar trend pattern from countries that previously rolled out EMV cards – UK, France, Australia, and Canada – that also saw gradual increases in card-not-present fraud. We suspect that the EMV liability switch and increased adoption by merchants of chip-and-pin enabled terminals have had a profound impact on driving up e-commerce attacks. Fraudsters that typically relied on committing counterfeit fraud have shifted their focus to the digital channels where they could have more success.  As more fraud attackers enter a rapidly growing mobile and online commerce space, that makes it even more difficult for merchants to differentiate their good customers from the sophisticated fraud attackers.

Our annual fraud attack rate data brings to light the increase of e-commerce attacks over the last year across the US. This latest data is a strong indicator that other types of fraud have already occurred and can help businesses understand how to better protect themselves and their customers. Whether a credit card has been stolen or personal credentials have been compromised.  Businesses need to expect an increase of e-commerce fraud over time and to be prepared.

If I run an ecommerce business what should I do to prevent fraud attacks like this?

Businesses need to anticipate an increase of e-commerce fraud over time and to be prepared.  The value of employing a multi-layered approach to fraud prevention especially when it comes to authenticating consumers to validate transactions cannot be understated. By looking at all the points of the customer journey, businesses can better protect themselves from fraud, while maintaining a good consumer experience.  Most importantly, having the right fraud solution in place can help businesses prevent losses both in dollars and reputation.

That layered fraud solution should pair transactional data elements with details about the user (and their previous history and behaviors), the device (and how they typically interact with the business and even understanding what the customers are purchasing and how it relates to the overall population of orders. Machine learning and automation are great complements in a holistic hybrid approach that pairs human intelligence and business rules with machine-based recommendations. We highly recommend that organizations partner with fraud experts who have visibility across peer organizations, the challenges facing the industry, and have been instrumental in solving those problems alongside merchants.

Related Posts

Rewriting the Road Ahead with Longer Loan Terms and Increased Refinancing Options

The automotive market is entering a new phase defined not just by what consumers are buying, but by how they’re choosing to finance it. According to Experian Automotive’s State of the Automotive Finance Market Report: Q1 2026, nearly one-third (35.55%) of all new vehicle loans now stretch more than six years, up from 30.83% in Q1 2025. Similarly on the used side, 31.54% of loans extended more than six years, an increase from 28.60% last year. The shift highlights why affordability is reshaping how consumers are financing their vehicles, particularly in larger and higher-priced vehicles. Refinancing gains traction as interest rates stabilize In addition to longer-term loans, consumers are becoming increasingly deliberate with their financing decisions and managing monthly payments as refinancing activity has gained momentum. For instance, consumers who refinanced this quarter lowered their interest rate by 2.2% and saved an average of $81 on their monthly payment. Credit unions, in particular, continued to play a major role in helping consumers secure more affordable payment options. In Q1 2025, credit unions accounted for the lion’s share of automotive refinancing at 63.43%, from 62.31% a year ago. By comparison, banks went from 23.51% to 22.59% year-over-year. Furthermore, those who refinanced with a credit union saved an average of $101 this quarter, whereas those who refinanced with banks saved $60. Expanding credit access through flexible financing Another notable trend this quarter was the incessant growth in subprime financing as credit accessibility across the market continues to increase. In the first quarter of this year, subprime borrowers made up 15.75% of total vehicle financing, from 14.40% last year. For new vehicles in particular, the subprime market went from 5.61% to 6.88% year-over-year, while subprime in used vehicle financing grew to 20.60% this quarter, from 19.36% a year ago. Increased activity in the subprime segment highlights continued confidence in the automotive market and underscores the importance of expanded financing options. As consumers seek greater flexibility with financing decisions that fit their lifestyle, lenders and dealers have the opportunity to approach them with more personalized solutions. These trends are helping keep both new and used vehicle markets moving forward, while creating new opportunities for consumers to manage payments and purchase confidently. To learn more about automotive finance trends, view the full State of the Automotive Finance Market Report: Q1 2026 presentation on demand.

Published: June 2, 2026 by Melinda Zabritski
Staying Competitive After Trigger Leads Evolve: A Roadmap For Lenders

Trigger leads have long been the preferred solution for identifying high-intent mortgage borrowers. But with the implementation of the Homebuyers Privacy Protection Act (HPPA), which introduces new limitations and consumer protections around trigger leads, that playbook will need to shift. Now, lenders are quickly facing a pivotal shift in how they discover, engage, and convert prospective borrowers into customers. The industry now stands at a crossroads. Lenders who adapt early—leaning into predictive tools, consent-based engagement, and smarter prescreening—will redefine borrower acquisition in a more privacy-centric era.  HPPA: A structural change to mortgage marketing  The HPPA amends the Fair Credit Reporting Act by significantly restricting the use of mortgage inquiries for prescreen purposes. As of March 5, 2026, credit bureaus may only provide or utilize mortgage inquiries to:  End users with explicit borrower consent  The originator of the consumer’s current mortgage  The servicer of the consumer’s current mortgage  An insured depository institution or credit union where the consumer has an existing account  While these exemptions may provide continuity for banks and credit unions, many mortgage brokers and nonbank lenders will need to overhaul their prescreen practices—or risk being cut off entirely from a previously high-performing acquisition channel.  Why this isn’t just a compliance shift—It’s a strategic recalibration  Mortgage triggers in prescreen allow lenders to react instantly to consumer intent. Lenders rely on a prompt and convincing narrative to entice applicants to switch lenders. Mortgage inquiry triggers are effective and were, therefore, a prospecting strategy for many lenders. Recent legislative changes significantly restrict the availability of these inquiry triggers, and impacted lenders are focusing on a more intentional prospecting strategy to compete.   Without these mortgage triggers in prescreen, lenders need to ask:  Who are we trying to reach?  What early signals can we act on?  How do we earn permission and attention before a mortgage inquiry ever happens?  Transforming the funnel: From reaction to anticipation  The shift in mortgage inquiry-based prescreen isn’t the end of high-intent lead targeting. It’s the beginning of a more strategic and intentional approach—one that leverages earlier indicators of mortgage readiness and focuses on building relationships, not just closing transactions.  Here’s where the momentum is evolving, creating a new and smarter funnel:  Prescreen marketing: Using credit and behavioral attributes to help identify consumers who meet specific lending criteria before they signal active intent.  Predictive modeling: Leveraging propensity scores or custom models to prioritize outreach based on conversion likelihood.  Consent-based engagement: Implementing compliant mechanisms to capture and manage borrower opt-ins at scale.  The power of predictive modeling  According to recent industry interviews, propensity modeling is emerging as one of the most effective replacements for trigger-based prescreen. These models analyze hundreds of credit attributes—such as utilization, account mix, account age, and depth—to help identify consumers statistically more likely to seek a mortgage.  For lenders just beginning to use predictive modeling, off-the-shelf models can be a quick way to identify potential borrowers. For example, when layering propensity scores on top of credit eligibility, which can improve borrower targeting, many lenders see an increase in open mortgage loan rates.  Meanwhile, custom-built models, which analyze a lender’s own campaign performance over time, offer the highest level of precise targeting. These models isolate the attributes most predictive of conversions within a specific product mix—optimizing not just volume, but fit.  Speed without traditional triggers? It’s possible  One of the biggest concerns among lenders is maintaining the speed historically enabled by trigger leads. But that concern may be overblown.  Self-service prescreen platforms now allow marketers to generate qualified lead lists in as little as 24 hours, enabling rapid response during rate drops, competitive shifts, or seasonal demand spikes.   For those new to prescreening, batch campaigns still offer value, especially with analyst support.   Don’t overlook retention  In an era of intense acquisition competition, retention becomes a key differentiator.  Lenders who monitor property status, cash flow, and consumer credit behavior can proactively identify when an existing borrower is likely to list, refinance, or exit. Armed with that intelligence, lenders can re-engage with the borrower at the right moment—sometimes before a competitor is considered or contacted.  This level of behavioral intelligence may soon separate proactive lenders from reactive ones.  Actions instead of reactions  The evolution of trigger-based prescreen doesn’t just require new tools; it demands new thinking. Lenders should begin by auditing their current pipelines and determining:  What percentage of our acquisition is dependent on triggers?  What share of our book falls under the HPPA exemptions?  How will we scale compliant opt-in collection?  Are our current prescreen or modeling capabilities future-ready?  Those who answer these questions today—and act on them—won’t just be in compliance with the new laws, they’ll lead in a transformed market. Lenders should also be asking:   Do we have the infrastructure to collect and act on borrower consent?  Are our acquisition teams equipped to run prescreen campaigns — both batch and self-service?  What predictive models are we using (or could we use) to prioritize leads?  Are we proactively monitoring our portfolio to catch retention risks early?  How are we preparing our sales teams for longer, more consultative buying journeys?  Conclusion  The HPPA signals a shift away from relying on passive, inquiry-based prescreen acquisition and the beginning of smarter, more strategic engagement with potential borrowers. Lenders who embrace this transition early will find themselves not just compliant, but competitive—with deeper borrower insights, better conversion rates, and stronger long-term customer relationships.  The market is moving. The only question is: will you lead the change or chase it?  Citation  Experian. (2025, November). Interview: How the Homebuyers Privacy Protection Act is reshaping mortgage marketing—and what lenders should do now [transcript]. Experian Mortgage Insights. Insights based on lender feedback, campaign performance data, and analysis of prescreen marketing strategies and predictive modeling outcomes were gathered from Experian client engagements and internal mortgage analytics between May and October 2025. Homebuyers Privacy Protection Act timeline and legal context referenced from legislation signed September 5, 2025, with implementation beginning March 5, 2026.   

Published: April 22, 2026 by Ivan Ahmed