E-commerce fraud rates spike 33% in 2016

by Guest Contributor 6 min read March 28, 2017

Florida, Delaware, Oregon and New York were the riskiest states for e-commerce fraud

e-commerce fraudMiami accounted for the most ZIP Codes ranked across shipping and billing fraud.

Where is e-commerce fraud taking place? Everywhere.

Last year we reported that 2016 e-commerce fraud attack rates were on pace to surpass the 2015 totals. At the time, the fraud attack rates for the first half of 2016 appeared to be at least 15% higher than the 2015 total. That percentage turned out to be much higher as e-commerce fraud increased to 33% in 2016 compared to 2015 according to Experian data.

View our e-commerce fraud heat map
See the top 100 riskiest cities in the United States.
Download the list today

Experian analyzed millions of e-commerce transactions from our 2016 client data to identify fraud attack rates for both shipping and billing locations across the United States. The data reveals the increase of e-commerce attacks in 2016, the geographical differences, and whether a credit card has been stolen or personal credentials have been compromised. Fraud attack rates represent the attempted fraudulent e-commerce transactions against the population of overall e-commerce orders.

The 2016 e-commerce fraud attack rate data shows:

  • Miami, FL., is where the riskiest ZIP™ Code comes from for both shipping and billing e-commerce fraud. Miami accounted for 17 of the top 100 ZIP™ Codes for shipping fraud and 20 of the top 100 for billing fraud.
  • 70% of e-commerce billing fraud came from three states – Florida, California and New York – based on the sum of fraud attacks
  • Delaware, Oregon, and Florida were the top-ranked states for billing and shipping e-commerce fraud in 2016
  • Oregon and Delaware saw an increase in e-commerce billing fraud attacks of over 200%.

Many of the higher-risk ZIP™ codes and cities are located near a large port-of-entry city or airport, making them ideal locations for reshipping fraudulent goods. This includes Miami, Houston, New York City, and Los Angeles, perhaps allowing criminals to move stolen goods more effectively. All those cities are ranked among the riskiest cities for both measures of fraud attacks.
.dataTb{margin:20px auto;width:100%}.dataTb:after{clear:both}.dataTb table{}.dataTb td,.dataTb th{border:1px solid #ddd;padding:.8em}.dataTb th{background:#F4F4F4}.tbL{float:left;width:49%}.tbR{float:right;width:49%;margin:0 0 0 2%}

Top 10 riskiest Billing ZIP™ Codes for 2016
33198 Miami, FL
33192 Miami, FL
33195 Miami, FL
33166 Miami, FL
91733 South El Monte, CA
33191 Miami, FL
91746 La Puente, CA
17064 Port Reading, NJ
66025 Eudora, KS
89423 Minden, NV
Source: Experian.com
Top 10 riskiest Shipping ZIP™ Codes for 2016
33198 Miami, FL
33166 Miami, FL
33191 Miami, FL
33195 Miami, FL
77036 Houston, TX
33192 Miami, FL
91733 South El Monte, CA
91746 La Puente, CA
66025 Eudora, KS
62694 Winchester, IL
Source: Experian.com


What is driving credit card fraud trends?

The biggest component of this trend is the fact that 2016 was a record year for data breaches. There were 1,093 data breaches last year, a 40% increase from 2015, according to the Identity Theft Resource Center. The recent Federal Trade Commission (FTC) 2016 Consumer Sentinel Network Data Book, announced a jump in consumers who reported that their stolen data was used for credit card fraud, from 16% in 2015 to more than 32% in 2016. The record number of data breaches is a signal that future fraudulent activities will take place. This is further reflected by the increase of consumers reporting credit card fraud to the FTC in 2016. So far in 2017, that same trend continues as the total number of breaches has increased 56% compared to the same time in 2016.

See our 2016 e-commerce fraud infographic
Compare fraud attack rates — and more — from 2015 to 2016 in our latest infographic.
Download today

Why are there geographical differences in ecommerce fraud?

Most e-commerce merchants have basic controls in place to validate that transaction billing information matches a particular account holder using things like the address verification service. So from a billing or victim perspective, attackers typically leverage the legitimate cardholder billing details in a fraudulent order. In order to maximize successful fraud attacks, they need to make the transaction appear as normal as possible. But from a shipping perspective, those same fraudsters often can’t rely on shipping to the cardholder’s address and trying to intercept the package. To acquire the proceeds of their fraudulent transactions, this is where attackers get creative, often using re-shippers or shipping “mules”, freight forwarders, or delivery addresses that do not raise suspicion but are nearby international ports or airports so the fraudulent order can be quickly picked up and shipped to its final destination (often overseas). That’s why we see such a big disparity between attacks by a victim or billing address being mostly evenly spread across the country vs. shipping attacks, which are mostly concentrated in coastal states with major port cities and airports. Delaware and Oregon are two exceptions to this flattening of victim attacks, as both states saw a more than 200% increase in billing attacks with only modest increases in shipping attacks. From a shipping perspective, 10 states saw at least a 100% increase in fraudulent orders, having a significant impact on the overall population attack rate.
.dataTb{margin:20px auto;width:100%}.dataTb:after{clear:both}.dataTb table{}.dataTb td,.dataTb th{border:1px solid #ddd;padding:.8em}.dataTb th{background:#F4F4F4}.tbL{float:left;width:49%}.tbR{float:right;width:49%;margin:0 0 0 2%}

Top 5 riskiest Billing fraud States
State Fraud Attack Rate
Delaware 69.0
Oregon 65.7
Florida 41.1
New York 28.0
Nevada 27.0
Source: Experian.com
Top 5 riskiest Shipping  fraud States
State Fraud Attack Rate
Delaware 44.8
Oregon 43.2
Florida 34.2
Alaska 26.2
Washington, D.C. 25.8
Source: Experian.com

Has the EMV switch affected fraud ecommerce rates at all?

The increase in e-commerce fraud follows a similar trend pattern from countries that previously rolled out EMV cards – UK, France, Australia, and Canada – that also saw gradual increases in card-not-present fraud. We suspect that the EMV liability switch and increased adoption by merchants of chip-and-pin enabled terminals have had a profound impact on driving up e-commerce attacks. Fraudsters that typically relied on committing counterfeit fraud have shifted their focus to the digital channels where they could have more success.  As more fraud attackers enter a rapidly growing mobile and online commerce space, that makes it even more difficult for merchants to differentiate their good customers from the sophisticated fraud attackers.

Our annual fraud attack rate data brings to light the increase of e-commerce attacks over the last year across the US. This latest data is a strong indicator that other types of fraud have already occurred and can help businesses understand how to better protect themselves and their customers. Whether a credit card has been stolen or personal credentials have been compromised.  Businesses need to expect an increase of e-commerce fraud over time and to be prepared.

If I run an ecommerce business what should I do to prevent fraud attacks like this?

Businesses need to anticipate an increase of e-commerce fraud over time and to be prepared.  The value of employing a multi-layered approach to fraud prevention especially when it comes to authenticating consumers to validate transactions cannot be understated. By looking at all the points of the customer journey, businesses can better protect themselves from fraud, while maintaining a good consumer experience.  Most importantly, having the right fraud solution in place can help businesses prevent losses both in dollars and reputation.

That layered fraud solution should pair transactional data elements with details about the user (and their previous history and behaviors), the device (and how they typically interact with the business and even understanding what the customers are purchasing and how it relates to the overall population of orders. Machine learning and automation are great complements in a holistic hybrid approach that pairs human intelligence and business rules with machine-based recommendations. We highly recommend that organizations partner with fraud experts who have visibility across peer organizations, the challenges facing the industry, and have been instrumental in solving those problems alongside merchants.

Related Posts

New Data Available for MBS Investors: Current Credit Score 

In a previous post, we described how every mortgage borrower’s financial situation and credit profile evolve over time.  After a borrower opens a loan, their financial status evolves—jobs are gained and lost; incomes can rise or fall, and financially stressful situations or windfalls can occur. These effects are often reflected in the consumer’s evolving credit score, which changes with the consumer’s payment behavior on open loans, credit inquiry activity, credit card utilization, and other revolving lines, among other things.    Even though MBS, whole loan, and MSR investors ultimately bear borrower credit risk, they may have access to less current borrower credit information than other participants in the mortgage ecosystem.   In securitized markets (both agency MBS and private-label MBS), updated scores are not provided in disclosure to bondholders, even as loans age year over year.  In whole loan and MSR markets, a single origination credit score is often provided at the time of bid, and after a successful bid, the investor may have a permissible purpose to pull individual scores on an owned portfolio. But until recently, there was no single loan-level dataset that included continuously refreshed credit scores across the U.S. mortgage market—the type of foundational dataset needed to build and tune credit and prepayment models.  A monthly-refreshed Current Credit Score field meets our three-pronged materiality standard for new data delivery to MBS markets:  New: Provides information not available in existing datasets (i.e., orthogonal to currently available data). Neither private-label MBS nor agency MBS standard market data includes a monthly-refreshed borrower credit score.  Material: Impacts a sizeable portion of the MBS universe. For the vast majority of loans in MBS, borrowers credit scores are available.  Significant: Differentiates collateral performance by a large enough margin to influence trading and risk management decisions.  A current credit score wraps all of a borrower’s credit-related behaviors into a single numerical value and has historically been associated with a borrower’s likelihood of becoming 60+ days past due on any obligation within the subsequent 24 months.    In fact, a current credit score is among the most informative indicators of near-term mortgage default risk, as shown in the image below, which depicts 30+ DPD rates by current credit score bands for the entire U.S. mortgage market, controlling for origination score <=650.    Without access to current credit scores, investors are limited to the score at origination—causing the four distinct performance trends shown here to appear as a single averaged line. In reality, score migration since origination reveals significant divergence in credit risk, with the lowest current-score bucket exhibiting a nearly 10 times higher 30+ DPD rate than the highest-score bucket in the latest period shown.  Source:  Experian Mortgage Loan Performance (MLP) dataset hosted on IVolatility DataDriven Platform  In this article, we’ll take a quick look at how score migration acts as an early predictor of a performing loan’s first roll into 30-day delinquent status.    MBS Investors’ Current Credit Score Blindspot: Solved   An MBS investor relying on standard market data and securitization remittance reports sees no sign of borrower stress until the subject mortgage loan in the securitization misses a payment and is reported at 30 days delinquent. Of course, in the vast majority of cases, a borrower begins struggling financially well before missing a mortgage payment:  The borrower may miss payments on other types of loans (credit card, auto loan, personal unsecured, or payday loans) as they prioritize their home and mortgage.  Outstanding balances on credit cards may grow as the borrower begins to make only minimum payments on revolvers.  The borrower may apply for additional credit cards, personal or payday loans   The borrower may apply to increase limits on existing credit cards as outstanding balance nears spending limit  All these stress-indicative behaviors result in a decreasing credit score, many months before the borrower misses their first mortgage payment. An MBS investor with access to each borrower’s current credit score, refreshed each month, can predict increased likelihood of default many months before the first missed mortgage payment—and is therefore at a major information advantage relative to the market generally.  Experian’s Mortgage Loan Performance (MLP) dataset contains thousands of fields describing mortgage performance from each borrower, loan, and property perspective, all refreshed monthly (including, amongst other things, new credit scores and refinance inquiry activity, loan performance on all types of debt, filed junior liens, and AVM values).   MLP is much more comprehensive than loan-level data provided by Freddie Mac, Fannie Mae, Ginnie Mae, and PLS data vendors in several ways:   Standard market datasets may not contain certain data elements that some market participants consider useful when evaluating mortgage prepayment or credit performance. Basic, critical fields such as the borrower’s current credit score and the current junior lien balance on the property are missing.    MLP contains borrower, loan, and property data fields spanning a broad portion of the mortgage universe, including Agency, Non-Agency, and Esoteric mortgage products (CES, HELOC, Reverse), including both securitized and non-securitized loans.   MLP enables full three-dimensional (borrower + loan + property) tracking with persistent keys for borrower (before and after refinancing), loan (in securities/deals even after exit due to payoffs or buyouts, including before and after MSR sales), and property.  This enables end-to-end analysis of each borrower’s (and property’s) mortgage experience throughout their credit lifecycle.  Is Downward-Trending Credit Score a Signal for Impending Delinquency?  MLP contains thousands of fields describing each loan, borrower, and property across all U.S. mortgages.  It allows for virtually unlimited segmentation and granular analysis.   For purposes of this illustrative article, we’ll take a high-level look at the entire U.S. mortgage market and perform a quick analysis to confirm intuition that a declining credit score provides a signal for higher likelihood of near-term mortgage delinquency.  Figure 1 illustrates the current pay status (as of 6/30) for the entire U.S. mortgage market, as contained in the MLP dataset, along with count, UPB and UPB-weighted Vantage 4.0 credit score for each bucket.  Figure 1  Source:  Experian Mortgage Loan Performance dataset  As illustrated in Figure 1, approximately 772,000 individual mortgage loans were reported to Experian as 30 days delinquent as of 6/30/2026.  Of the 772,000 30d delinquent loans in the June snapshot, approximately 426,000 were current in the prior (May) snapshot.  Some of these 426,000 loans were reperformers which had been bouncing from 30 DPD to current over the prior few snapshots. To remove reperformance score noise, we further parsed out the population which: 1) had rolled from current to 30 DPD from May to June; and 2) was consistently current for a full year prior to the 6/30 missed payment.  The population meeting both conditions totaled approximately 123,000 loans.  Figure 2 below shows, for this population of 123,000 “clean current” loans, the UPB-weighted average Vantage4 credit score for each of the 12 months leading up to the June missed payment, as well as the impact of the missed payment on the 6/30 score.  Figure 2  Source:  Experian Mortgage Loan Performance Dataset  Figure 2 reveals a rather slow and steady ~20-point deterioration of score in the 12 months prior to first missed payment – as well as the 80-point drop once the missed payment hits.  When we compare this cohort’s Vantage 4.0 score trend to the broader Current population across the entire dataset in Figure 3, we see a marked difference in both absolute value and trend:  Figure 3  Source:  Experian Mortgage Loan Performance Dataset  Not only is the cohort’s starting Vantage 4.0 score lower than the broader current population, but it also displays a dropping trend (with a notable 2 to 3x acceleration in monthly score drop the month before the first missed mortgage payment) while the broader Current population’s score (of which the isolated cohort is a subset) remains rock steady.  Lastly, we present Figure 4, a histogram comparing the distribution of at-origination and as-of 5/30 (i.e., the period just before the missed June mortgage payment) credit scores for the clean current population. The distribution appears to shift toward lower credit scores. To the extent credit scores are correlated with credit risk, this shift may indicate elevated credit risk relative to origination. Since this degradation occurs during a period of perfect mortgage pay performance, it is invisible to MBS investors who lack access to current borrower credit scores. Experian MLP provides monthly refreshed credit scores for mortgage borrowers contained within the MLP database.  Figure 4  Source:  Experian Mortgage Loan Performance Dataset 

September 22, 2026 by Michael Pyatski, Perry DeFelice
Ask the Expert: The Future of Lending Starts With Identity With Shawn Rife and Brian Cardona

Identity intelligence and alternative data can help lenders validate consumers and support more informed decisions across the customer lifecycle.

September 16, 2026 by Julie Lee
Financial Institutions Are Rethinking Customer Acqusition

Customer acquisition strategies are constantly evolving toward more precise targeting. From a marketing lens, you can track every step, optimize communication channels and still miss the person most likely to convert. Attribution can tell us which channels work and automation can make marketing spend more efficient. But both assume we know who is actually on the other end. Financial institutions are learning that finding audiences and targeting them is no longer the biggest challenge. As acquisition optimization marketing becomes more sophisticated, teams can measure and act on more signals than before. What they can't always know is whether the person on the receiving end is real. Customer acquisition has evolved into an identity problem. The challenge is not that every questionable signal represents malicious activity. It's that acquisition systems must make increasingly intelligent decisions with an imperfect understanding of who they're actually engaging. When identities are fragmented, duplicated, temporary or synthetic, optimization becomes a question of trust as much as targeting. When your signals don't reliably identify customers The customer journey often includes searching, filling out a form, creating an account, requesting a quote and subscribing. All of these signals work well when identity is relatively stable.  However, financial institutions are finding that these signals are becoming less reliable. A single person can operate across multiple personas, devices, browsers, aliases, accounts and intermediaries while several apparent “people” may actually represent one underlying actor. Financial instituions are finding: Fragmented customer signals Difficulty distinguishing an old account from a new one Different digital pathways associated with the same individual Signals that are generated by automation Real customers getting flagged because signals are too thin to evaluate confidently Legacy signals continue to be challenged Marketing has historically treated intent as a valuable signal because intent was relatively difficult to produce. A search required human intent. A form required someone to fill it out. An inquiry implied a meaningful amount of human effort. Financial institutions are already combating AI-enabled fraud, and now marketing teams are starting to face it on a massive scale. AI can mimic human behavior by researching products, comparing prices, filling out forms, creating accounts and signing up for services. A valid email address is no longer enough. Marketers need to know: How long has it existed? How recently has it been active? Does its activity appear consistent or suddenly anomalous? Has it gone dormant and returned? Is it associated with patterns that suggest stability or unusual behavior? How to build on your strongest signal Email remains one of the most persistent identifiers in digital commerce, following people across devices, platforms, transactions, subscriptions, accounts and years of activity. For over two decades, this has shaped how AtData thinks about identity. Now, as part of Experian, it’s shaping how an entire platform and team approach identity. A marketer doesn’t need every prospect to have existed online for twenty years. But understanding whether a newly acquired prospect has meaningful identity context can dramatically improve the quality of the decision being made around it. Better identity intelligence can help organizations reduce unnecessary friction by improving their ability to recognize legitimate customers. With a strong identity foundation, marketing teams can better address: Which audiences are more likely to convert? Which leads are high quality? Which channels are driving incremental growth? What do the best prospects look like? The value isn't simply having an email address. It's understanding the history and behavioral context associated with it. That context can provide a stronger digital identity signal, helping marketers understand how long they have been active, whether its behavior is consistent with that of a real person and whether current activity aligns with past patterns. It continues to be one of the most persistent identifiers in digital commerce. An infrastructure built for what's coming The acquisition of AtData by Experian reflects a fundamental shift in how identity infrastructure needs to work. Experian's scale and decisioning capabilities, combined with AtData's real-time email intelligence, create a strong platform. Read more about the why behind the acquisition and see how email works as an identity anchor for fraud prevention. Contact us to learn about our customer acquisition solutions

September 15, 2026 by Zohreen Ismail

Subscribe to our Newsletter

Enter your name and email for the latest updates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Subscribe to our Newsletter

Don't miss out on the latest industry trends and insights!
Subscribe