Asymmetric warfare in financial services: AI-powered fraud demands unified command

2026-07-21 · Source: CIO · Field: Technology & Digital — Artificial Intelligence & Machine Learning, Cybersecurity & Data Privacy · Depth: Intermediate, medium

Summary

In January 2024, Arup's Hong Kong office lost \$25 million to a deepfake video call scam, highlighting the escalating threat of AI-powered fraud in financial services. Global payment fraud reached \$33.4 billion in 2024, with US cyber-enabled crime losses nearing \$21 billion in 2025, and AI-enabled fraud in the US is projected to hit \$40 billion by 2027. This new threat paradigm, according to Jason Kikta of Automox, is characterized by lower barriers to entry and real-time attacker adaptation, rather than just faster execution. Attackers now employ a "combined arms threat," exploiting fragmented defenses across cybersecurity, fraud, and financial crimes teams. The article advocates for a "unified command" strategy, integrating endpoint management with card fraud prevention and fusing cyber, fraud, and payments intelligence into a single operational picture to counter these sophisticated, multi-domain attacks.

Key takeaway

For Directors of AI/ML or executives overseeing financial operations, recognize that AI-powered fraud demands a strategic shift. Your fragmented cybersecurity, fraud, and AML teams create critical vulnerabilities. You must unify these risk disciplines, integrating endpoint management with fraud prevention and fusing all intelligence streams into a single operational picture. This convergence provides a competitive advantage, enabling real-time defense and informing business intelligence beyond the security operations center.

Key insights

AI-powered fraud exploits fragmented financial defenses, demanding unified intelligence and operational integration to counter multi-domain attacks.

Principles

• Asymmetric attacks target defense seams.
• AI lowers attack barriers, enables adaptation.
• Fragmented defenses create exploitable gaps.

Method

Implement a "unified command" by integrating endpoint management with card fraud prevention, fusing cyber, fraud, and payments intelligence into a single operational picture, and creating a unified data layer.

In practice

• Integrate endpoint management with fraud.
• Fuse cyber, fraud, payments intelligence.
• Build unified data layer for threat intel.

Topics

• AI Fraud
• Deepfake Scams
• Financial Services Security
• Cybercrime
• Unified Security Operations
• Threat Intelligence

Best for: AI Security Engineer, Director of AI/ML, Executive

Related on AIssential

• How AI Is Reshaping Identity Systems in Financial Security Operations — AI enhances financial identity security by applying contextual judgment and behavioral analysis, moving beyond static rules to detect sophisticated fraud.
• Southeast Asia Scam Compounds Turn AI Into a Cybersecurity Threat — AI and automation are scaling Southeast Asian scam compounds, making fraud more sophisticated and harder to detect.
• Are Europe’s fintechs ready for Mythos? — AI-powered hacking intensifies financial crime risks for fintechs, necessitating advanced AI defenses.
• Cybersecurity and the Gap Between Skill and Ability — AI significantly widens the gap between cyber skill and ability, enabling autonomous attacks and increasing global volatility.
• CrowdStrike: AI Puts Financial Sector in the Crosshairs — AI-fueled social engineering and identity-led intrusions are rapidly escalating cyber threats against financial institutions.
• Chinese cybercrime operation that used AI to scam ‘hundreds of thousands of victims’ sued by Google — Cybercrime operations increasingly use AI and "as-a-service" platforms for scalable, low-skill phishing attacks.

See Counsel's argued verdicts on the open AI decisions leaders are weighing →

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by CIO.