Sift

One breach. Two teams. Two completely different stories. Cybersecurity expert Beau R. walks through the same account takeover twice: through the SOC's eyes, then through fraud's. Security catches the front end (credential stuffing, device anomalies) and closes the incident fast. But over 65% of breached accounts had MFA enabled at compromise, per Obsidian Security. Once login succeeds, the SOC's visibility ends, right as the attacker starts probing for value. Fraud picks up the story weeks later: an altered payment method, a payout switched right before a withdrawal. By the time the chargeback confirms it, the trail back to the original compromise has gone cold, so it's written off as an isolated loss. That gap is where the real damage happens. Per Sift's Q2 2026 Index, only 37% of ATO victims found out from the company itself. Read Part 2 in the series: https://lnkd.in/gSN5cwMK #cybersecurity #fraud #accounttakeover #cyberfraudfusion

The latest Sift releases are here. 🎥 Jason Fama, Sift's SVP of Engineering, breaks down the updates helping fraud teams make more confident decisions with clearer signals, faster investigations, and more context. ✅ See more than a single event. Global Profile Intelligence now brings fresh network identity context directly into Workflows, Explore, and the Console, helping teams recognize trusted users faster and uncover linked risk with less guesswork. ✅ Catch attacks before losses spread. New fraud anomaly and alert detection surfaces when critical metrics move outside expected baselines, helping teams shorten time to detection and respond before losses spread. ✅ Stronger device visibility, less friction. Enhanced device intelligence, more persistent device IDs, deeper bot-attack detection, and FIBR benchmarking give teams better visibility into login risk and faster paths to action. It’s all part of a platform that keeps evolving to help fraud teams investigate faster, act with more confidence, and stay ahead of changing fraud. See the latest releases in action: https://lnkd.in/g2ePrg48 #FraudPrevention #TrustAndSafety #DigitalTrust

Sift just turned 15. To everyone who's helped along the way—thank you. Together we've protected thousands of businesses from billions of dollars of fraud, created 500+ jobs, and built something I'm deeply proud of. I was 25 when we started the company. Fifteen years later, a few lessons stand above the rest. Here's what I'd tell my younger self. 1. Do the work that doesn't look like work. You'll think the hardest work is fundraising, hiring, and scaling the business. It isn't. The hardest, and highest-return, work is learning who you are. Rest. Therapy. Journaling. Meditation. Community. Understanding why you react the way you do. Much of your suffering will be self-inflicted and preventable. You'll eventually discover that fear is expensive for business, and that your best leadership comes from love and service. 2. Cry more. Seriously. You'll believe that strong leaders, and strong men, don't show emotion. This couldn't be farther from the truth. The more honestly you name your fears, mistakes, and emotions, the more trust you'll earn. Vulnerability isn't the opposite of leadership. It's one of its foundations. Eventually, you'll learn a timeless truth: people follow hearts first, and minds second. 3. Surrender. You'll spend years chasing success, believing that the next valuation and headcount milestone will finally make you feel enough. It won't. One day you'll realize you've attached your identity and self-worth to your achievements and job title. Releasing that identity will be far harder than building Sift. Your most important lesson won't come from business. It'll come from realizing that you never had to achieve, perform, please, or prove your way into worthiness. Everything you needed was already within you. Full essay in the comments.

Account takeover isn’t going away. It’s changing shape. Even as overall ATO rates improve, attacks are becoming more concentrated, more connected, and harder to spot when fraudsters exploit accounts businesses already trust. In his latest article for MRC | Merchant Risk Council, Sift's Field Chief Technology Officer Kevin Lee breaks down five signals fraud teams should be watching and what they mean for the strategies built to stop them. Read the full blog: https://lnkd.in/ghuF8WBF

Fraud is getting harder to contain when the signals live in different places. Account takeover, payment fraud, and false positives can look like separate problems, but they often point to the same underlying issue: fragmented systems and an incomplete view of customer trust. When fraud teams can connect activity across touchpoints, they’re better positioned to spot patterns earlier, make more confident decisions, and reduce unnecessary friction for legitimate customers. Fraud doesn’t stop at one touchpoint. The way we defend against it shouldn’t either.

We believe neither attackers nor defenders have the advantage in the fight against fraud. In our view, that's how the Gartner® 2025 ThreatScape frames account takeover right now: a threat where attackers and defenders are engaged in an active battle, with neither side having a definitive advantage, with machine identities now in the crosshairs too. One number stuck out: Eighty-one percent of non-executive directors view cybersecurity as a business risk, and 93% see cyber risk as a threat to shareholder value. Yet, less than 40% of them are confident or very confident in the ability of CIOs/CTOs (38%) and CISOs (37%) to protect enterprises from cyber threats. If you’re heading into planning season, this is worth the 10-minute read. The Gartner report lays out the full ThreatScape matrix, how the landscape is shifting, and where teams should focus next. Explore the highlights, then get the full report: https://lnkd.in/g_MMbrAQ #CyberSecurity #AccountTakeover #FraudPrevention #DigitalTrust Gartner, Update Your Cybersecurity Priorities in a Shifting Threat Landscape, By Jeremy D'Hoinne, John Watts, 18 September 2025. Gartner is a trademark of Gartner, Inc. and/or its affiliates.

Your busiest days shouldn’t be your riskiest. Join Sift’s Maria Benjamin and Megan Doxtator for a practical look at how fraud teams can plan for peak-volume moments without creating unnecessary friction or leaving gaps in their defenses. From adjusting risk thresholds to building a cross-functional response plan, you’ll leave with a playbook for your next big surge. Register here: https://lnkd.in/gArZNHm6 #FraudPrevention #Payments #MAGWebinars

A product release shouldn’t just add more features. It should change what your fraud team can do tomorrow. Sift’s latest release is built to help teams see more context, catch attacks sooner, strengthen account takeover prevention, and move faster with less manual work. What’s new: 🔗 Global Profile Intelligence brings cross-network identity context into the Console, Workflows, and Explore for faster, more confident decisions. 🚨 Proactive attack and anomaly detection flags unusual activity sooner and provides clear paths from alert to action. 🔐 Stronger device and login visibility improves ATO detection with persistent iOS Device IDs, advanced intelligence, and in-console benchmarks. ⚡ Faster fraud operations reduce repetitive work with bulk commenting, APIs, expanded lists, advanced exports, and dark mode. Explore the latest product innovations: https://lnkd.in/gTaF8EJv Read the blog from Sift's Chief Product Officer Raj Jain: https://lnkd.in/gc8vfFff

Account takeover doesn’t fit neatly into a security or fraud box. That’s exactly why attackers continue to exploit the gap between the two. In the first article of a new three-part series with Sift, Beau R. explores why ATO must be treated as one continuous attack, from stolen credentials and compromised sessions to fraudulent payouts, drained balances, and lost customer trust. Read Part 1: Cybersecurity Has a Fraud Problem, and follow along as Beau examines how security and fraud teams can close the gaps attackers count on. #Cybersecurity #Fraud #AccountTakeover #DigitalTrust

There’s no substitute for face-to-face time. Some of our Ukrainian Sifties recently had the chance to connect in person, turning familiar names from Slack and faces from video calls into real conversations. The time together was a meaningful reminder that strong teams are built through more than meetings on a screen. We’re grateful for every opportunity to connect, collaborate, and spend time with colleagues we don’t get to see nearly enough. 💚 Interested in joining Sift? Explore open roles in Ukraine and beyond: https://lnkd.in/gis6fWju