Fraud-as-a-service meets agentic AI
Fraud has always adapted to new technology, but the pace is different now. What used to take effort and technical skill can be bought off the shelf. People who have never written a line of code can now set up entire operations. As a result, that shift is reshaping the environment investigators are working in.
Entire ecosystems now exist to support, scale and monetise digital harm, with emerging technologies like agentic AI accelerating the shift. As we explored in Fraud is learning and investigations need to evolve faster, fraud is not simply reacting to new controls. The technology behind it is becoming faster and more sophisticated.
Fraud is becoming an industry
There are now marketplaces where criminals can buy almost everything they need. Fake websites. Identity kits. Automated phishing tools. Even support services. Criminal networks package these services in a way that mirrors legitimate software businesses.
This isn’t a niche corner of the internet. Instead, it’s organised, commercialised and designed to scale. Because these tools are so easy to access, more people can get involved in fraud without the technical capability that would previously have been required.
What agentic AI means for fraudsters
However, the arrival of agentic AI adds another layer. These systems can take actions, follow instructions and make decisions to achieve a defined goal.
For criminals, that means they can set an AI system to gather information, test vulnerabilities or tailor messages to a victim’s behaviour. Once it’s running, it doesn’t need much supervision. It can continue learning from the responses it receives, increasing what a single person can do and accelerating the speed at which attacks unfold.
Synthetic identities: the perfect criminal mask
One area where AI is already having a significant impact is identity creation. Criminals can now generate:
- Convincing biometric data
- Realistic digital footprints
- AI-generated documents
- Entire online personas
As a result, these identities don’t belong to real people, allowing suspicious activity to sit in systems for longer before anyone notices something is wrong. This makes them useful for everything from financial fraud to infiltrating supply chains.
For investigators, connecting these digital identities with the people, organisations and activity surrounding them is increasingly important. OSINT in financial crime investigations can help teams uncover relationships and digital activity that may not be immediately visible through financial records alone.
Why real-time data sharing is becoming essential
Investigators often work with fragments of information that only make sense when connected to activity happening elsewhere. Meanwhile, the tools used in fraud, including phishing kits, identity generators and ransomware payloads, spread quickly because criminals buy, sell and reuse them across different groups.
Therefore, the same technique can appear in several places at once, even when the people behind it have never spoken to each other. When organisations share data in real time, investigators can flag these patterns earlier and understand how one incident links to another.
This is particularly important as financial and digital activity become increasingly connected. Bringing OSINT and financial intelligence together can give investigators a broader view of the people, transactions, relationships and digital activity involved in an investigation.
Ultimately, there’s no single fix for the changes we’re seeing. Fraud is shifting because the tools behind it are shifting. However, organisations that adapt and give investigators the right tools to work with this changing environment will be in a far stronger position than those trying to manage modern threats with technology built for a different era.
Altia’s Financial Investigation Toolkit helps investigators turn complex financial records into structured intelligence, uncover suspicious activity and build stronger cases.
