Skip to main content

Looking for Valuant? You are in the right place!

Valuant is now Abrigo, giving you a single source to Manage Risk and Drive Growth

Make yourself at home – we hope you enjoy your new web experience.

Looking for DiCOM? You are in the right place!

DiCOM Software is now part of Abrigo, giving you a single source to Manage Risk and Drive Growth. Make yourself at home – we hope you enjoy your new web experience.

Looking for TPG Software? You are in the right place!

TPG Software is now part of Abrigo. You can continue to count on the world-class Investment Accounting software and services you’ve come to expect, plus all that Abrigo has to offer.

Make yourself at home – we hope you enjoy being part of our community.

Fraud typologies all financial institutions should know

Terri Luttrell, CAMS-Audit, CFCS
February 28, 2025
Read Time: 0 min

Can your AML/CFT and fraud staff recognize these fraud typologies?

The technology used to perpetrate financial crimes may be changing, but these common fraud typologies aren't going anywhere.

Why familiarizing staff with fraud typologies matters in 2025

In 2023, the Federal Bureau of Investigation received a record number of complaints resulting from fraud schemes. 880,418 complaints were registered, with potential losses exceeding $12.5 billion. This is a nearly 10% increase in complaints received and a 22% increase in losses—and that’s just fraud that was offically reported. The Global Anti-Scam Alliance reports that scammers siphoned away over $1.03 trillion globally in 2024. These statistics underscore the pressing need for financial institutions to adapt to the ever-changing fraud landscape. 

Staying on top of fraud is a full-time job. Let our Advisory Services team help when you need it.

Connect with an expert

Common fraud schemes

Check fraud

Check fraud is one of the most concerning fraud trends for community banks in 2025. According to a  2024 Abrigo Fraud Survey, 61% of Americans still write checks, and incidents of fraud and the resulting losses remain high. The FBI estimates that 500 million fraudulent checks annually total $18 billion in annual losses. 

Phishing scams  

Phishing scams involve fraudsters impersonating legitimate entities—such as banks, government agencies, well-known companies, or business contacts—to trick individuals into providing sensitive information like login credentials, Social Security numbers, or financial details. Scammers may utilize a technique called “spoofing” to disguise their phone numbers, email addresses, or websites to appear as trusted sources. In one variation, phishing scammers may pose as government officials—such as IRS agents, Social Security representatives, or law enforcement officers—and threaten victims with arrest, deportation, or fines unless they make an immediate payment or provide personal information.  

These scams often come through email, but thanks to new AI-driven fraud methods, they can also occur via text (smishing) or voice calls (vishing). In one popular variation known as business email compromise (BEC), cybercriminals impersonate executives, vendors, or financial institutions via email, deceiving businesses into wiring money to fraudulent accounts. 

Investment schemes 

Investment scams lure victims with promises of high returns and little to no risk, only to steal their money. Variations include: 

  • Pig butchering scams – Scammers build relationships with victims through social media or dating apps, persuading them to invest in cryptocurrency or other financial opportunities. Once trust is established and investments increase, the scammer disappears with the funds. 
  • Nigerian letter (419 fraud): The scammer claims to need help transferring large sums of money out of Nigeria and promises the victim a share of the funds in exchange for financial assistance. 
  • Ponzi schemes – A fraudulent investment operation that pays returns to earlier investors using money from new investors rather than legitimate profits. Eventually, the scheme collapses when new funds dry up. 
  • Pyramid schemes – Similar to Ponzi schemes, these scams require participants to recruit new investors to earn money. The model is unsustainable and often collapses, leaving late-stage investors with significant losses. 

Synthetic identity fraud 

Fraudsters combine real and fake personally identifiable information (PII) to create fictitious identities used to open bank accounts, secure loans, or conduct other fraudulent activities. Because these identities blend real and fake data, they can be challenging to detect. 

Romance scams 

A scammer assumes a fake online persona, builds an emotional connection with a victim, and ultimately convinces them to send money, gifts, or personal information under pretenses. These scams often take place on dating apps and social media. 

Skimming 

Fraudsters install hidden devices on ATMs, point-of-sale (POS) terminals, or fuel pumps to steal credit or debit card information. Some devices also capture PINs, allowing criminals to withdraw cash or make fraudulent purchases. 

Grandparent scams 

Scammers pose as a grandchild or another relative in distress, urgently requesting money for an emergency, such as bail, hospital bills, or travel expenses. They often prey on older adults’ emotions to bypass skepticism. 

Sweepstakes/charity/lottery scams 

Victims are told they have won a lottery or sweepstakes but must pay taxes or fees to claim their prize. In charity scams, fraudsters pretend to represent legitimate charities to solicit donations, often exploiting natural disasters or tragic events to manipulate victims. 

Home repair scams 

Criminals approach homeowners offering repair or improvement services, demand upfront payment, and either perform substandard work or disappear without completing the job. These scams are common after storms or natural disasters when homeowners urgently need repairs. 

Fraud risk management best practices

 Financial institutions (FIs) should be sure to invest in the following: 

  • Hardware: FIs should ensure that their systems are safe and that all updates and patches are applied in a timely manner. Experienced, qualified cybersecurity teams should be in place. 
  • Software: FIs should have a strong fraud detection and monitoring system to detect check fraud, wire fraud, ACH fraud, and other types of fraud. A combined anti-money laundering/fraud system is recommended due to the criminal crossover of financial crimes. Proceeds from fraud must be laundered, and robust software will follow patterns for better detection and prevention. 
  • People: FIs should have adequate, qualified, trained staff to investigate suspected fraud alerts before they become hard-dollar losses. Fraud investigators should have a specific skill set and proper on-the-job training. 
  • Dynamic processes and education: Fraud schemes are becoming more difficult to detect and evolving quickly. FIs must stay up with the newest schemes and typologies, and processes, and education must reflect the most current technology being used to commit fraud. 

Regardless of the current budget, regulators will expect adequate technological and human resources to protect the institution's safety and soundness. 

Customer education outreach

Financial institutions should help educate community members through website alerts and community outreach events such as fraud seminars, especially for older members of the community. These could be held in a local branch lobby, community center, or place of worship. Clients should be advised to: 

  • Verify the validity of any investment opportunity from strangers or long-lost contacts on social media websites. 
  • Be on the lookout for domain names that look like legitimate financial institutions, especially cryptocurrency exchanges, but that have misspelled URLs or slight deviations in the name. 
  • Avoid downloading or using suspicious-looking apps as investment tools without verifying their legitimacy. 
  • Be cautious of clicking on any links or attachments from an unknown source or without verifying the source. 
  • Be cautious of get-rich-quick schemes. If an investment opportunity sounds too good to be true, it likely is. 

3 Steps financial institutions can take to prevent fraud 

  • Train staff on fraud typologies. Fraudsters continually adapt their tactics, making it crucial for financial institutions to keep employees informed about emerging threats. Regular training on typical fraud schemes helps employees recognize red flags early. Institutions should also offer scenario-based exercises and provide access to updated fraud prevention resources to ensure staff can respond effectively to suspicious activities. 
  • Start or enhance a customer fraud prevention plan. As mentioned above, a strong fraud prevention plan includes proactive customer outreach, security alerts, and educational resources on phishing scams, identity theft, and safe banking practices. Financial institutions can also implement customer authentication measures such as multi-factor authentication and transaction monitoring to detect and prevent fraudulent activities. 
  • Partner with local law enforcement. Collaboration with law enforcement agencies strengthens a financial institution’s ability to respond to fraud incidents quickly. Establishing relationships with local, state, and federal agencies, including the FBI and the FinCEN, ensures a coordinated response to financial crimes. Institutions should also participate in industry fraud prevention forums and information-sharing networks to stay ahead of emerging threats. 

 Staying vigilant and adaptable will be key to safeguarding financial assets and maintaining trust in an increasingly complex fraud landscape. 

About the Author

Terri Luttrell, CAMS-Audit, CFCS

Compliance and Engagement Director
Terri Luttrell is a seasoned AML professional and former director and AML/OFAC officer with over 20 years in the banking industry, working both in medium and large community and commercial banks ranging from $2 billion to $330 billion in asset size.

Full Bio

About Abrigo

Abrigo enables U.S. financial institutions to support their communities through technology that fights financial crime, grows loans and deposits, and optimizes risk. Abrigo's platform centralizes the institution's data, creates a digital user experience, ensures compliance, and delivers efficiency for scale and profitable growth.

Make Big Things Happen.