Adverse Media Screening: What It Is and Why It Matters
Adverse media screening is a risk assessment process that identifies negative news, legal actions, and regulatory red flags tied to individuals or businesses.
fraud detection software

Fraud losses in payments don't start with a suspicious transaction—they start with a bad merchant slipping through onboarding. By the time chargebacks spike or funds disappear, the damage is already done.
Fraud detection software exists to catch these risks earlier, but not all solutions work the same way or solve the same problems. This guide covers how fraud detection software works across the merchant lifecycle, the different types of systems available, and how to evaluate the best options for payments companies in 2026.
Fraud detection software analyzes merchants, transactions, and behavioral signals to flag suspicious activity before money moves — critical given that 76% of organizations experienced fraud in 2025 according to the AFP Payments Fraud and Control Survey. For payments companies—payfacs, ISOs, platforms with embedded payments—the focus is on merchant-side fraud: the risks that come from the businesses you onboard, not from consumers or cardholders.
The software typically combines AI, machine learning, and rule-based systems to catch patterns that human reviewers would miss or catch too late. Some solutions focus on a single layer, like transaction monitoring. Others cover the full lifecycle from onboarding through ongoing portfolio surveillance.
The fraud types worth knowing:
Fraud detection isn't a one-time check at onboarding. It spans three distinct stages, and gaps at any stage create exposure.
First, there's onboarding and underwriting—screening merchants before approval, verifying business identity, and assessing risk signals from external data sources. Second, portfolio monitoring involves continuous reassessment of existing merchants as their behavior, websites, or risk profiles shift over time. Third, transaction monitoring analyzes payment activity in real time to catch anomalies, velocity spikes, or patterns that suggest fraud.
Example: A payfac approves a merchant selling apparel. Three months later, the merchant's website shifts to high-risk supplements. Without ongoing monitoring, that change goes unnoticed until chargebacks spike and losses have already accumulated.
Different architectures serve different purposes. Understanding the trade-offs helps clarify which approach fits your risk profile.
Rules-based detection uses if-this-then-that logic. If a merchant's chargeback rate exceeds 1%, flag for review. If a business registration is less than 30 days old, require additional verification.
The strength here is predictability—you know exactly what triggers an alert. The weakness is rigidity. Sophisticated fraudsters learn to evade static rules, and novel threats slip through because no rule exists to catch them yet.
Anomaly detection establishes a baseline of normal behavior, then flags deviations. A merchant suddenly processing 10x their usual volume triggers an alert. A spike in transactions from a new geography raises a flag.
Without merchant context, though, anomaly systems can generate false positives on legitimate growth. A seasonal business ramping up for the holidays looks suspicious if the system doesn't understand the pattern.
Machine learning models use historical fraud data to score risk. They improve over time as they see more cases, catching patterns that humans and static rules miss.
The trade-off is explainability. When a model flags a merchant, investigators want to understand why. Black-box scores without clear reasoning slow down case resolution and create compliance challenges.
Merchant intelligence aggregates external data—business registrations, website signals, reviews, litigation records—to assess risk before and after onboarding. KYB (Know Your Business) is the merchant-side equivalent of KYC, verifying that a business is real, legitimate, and matches its application.
This layer catches risks that transaction data alone can't reveal, like a business owner with a history of fraud at previous companies.
Agentic systems represent a newer approach where AI agents autonomously investigate alerts, make decisions, and take actions—not just produce scores. An agent might research a flagged merchant, pull external data, compare it against the application, and resolve the case with a documented rationale.
The value is in handling routine cases at scale while freeing analysts for complex investigations. Risk teams at payments companies also need to demonstrate to card network auditors and bank partners exactly what triggered a decision and what action was taken on which merchant — an agentic system without a full decision log creates compliance exposure, not just operational risk.
When comparing solutions, certain capabilities matter more for payments companies than for general fraud prevention.
Transactions analyzed as they happen allow fraud to be stopped before funds move. This matters especially for card and ACH payments—ACH fraud, in particular, often goes overlooked because many systems focus primarily on card transactions, even as 41% of institutions report rising ACH fraud according to the Federal Reserve's 2026 Risk Officer Report.
Payer data alone tells an incomplete story. Effective fraud detection also draws on merchant context: business verification, website attributes, ownership data, and ongoing signals that reveal risk before it shows up in transaction patterns.
Risk teams benefit from the ability to customize detection logic and manage alerts in one system. Receiving scores without workflow tools means building your own case management infrastructure or stitching together multiple platforms.
AI agents that automate investigations while maintaining full traceability support compliance and accountability. Every action the agent takes—research, decisions, escalations—gets logged for review. See also: 7 AI-Powered Risk Management Solutions That Beat Fraud Every Time.
Many payments companies work with multiple processors. Software that integrates across providers without creating vendor lock-in offers flexibility as your business evolves or adds new processing relationships.
Here's a look at the leading vendors for payments-focused fraud detection, with a focus on who each solution fits best.
Coris is a merchant risk platform built for payfacs, ISOs, and platforms with embedded payments. It runs across Stripe, Adyen, TSYS, and Fiserv without processor lock-in, and combines merchant intelligence, CorShield fraud scoring for business impersonation and synthetic identities, and AI agents that automate case resolution. Weave reduced manual reviews by 89% in year one.
Sift is a digital trust and safety platform focused on account protection and payment fraud. It fits ecommerce and digital businesses well, with particular strength in consumer-facing fraud use cases like account takeover and payment abuse.
Feedzai is an enterprise AI platform for financial crime, covering fraud, AML, and compliance. Large banks and payment networks are the primary fit, with strong machine learning-driven detection across high transaction volumes.
Sardine is a fraud and compliance platform using device and behavior intelligence. Fintechs and neobanks are the primary fit, with standout capabilities in real-time device fingerprinting and behavioral biometrics.
Unit21 is a no-code fraud and AML operations platform. Fintechs that want flexible case management and compliance workflows without heavy engineering investment are the primary fit.
SEON is a fraud prevention platform using email, phone, IP, and device intelligence. Online businesses and fintechs are the primary fit, with strength in digital footprint analysis and social signal enrichment.
Ballerine is open-source risk infrastructure for merchant onboarding and KYB. Platforms that want to build custom risk workflows with full control over the stack are the primary fit.
Worth is an AI-driven underwriting and risk decisioning platform for lending and payments. Lenders and embedded finance businesses are the primary fit, with strength in credit risk assessment.
TrueBiz is a business verification and merchant intelligence solution for onboarding. Platforms that want KYB automation with strong business data coverage are the primary fit.
ComplyAdvantage is an AML and fraud detection platform with transaction monitoring and screening. Regulated financial institutions with compliance-first priorities are the primary fit.
Selecting the right solution depends on your risk profile, operational maturity, and growth trajectory. A few steps help clarify the decision.
Start by identifying whether you face merchant fraud, transaction fraud, or both. Consider your merchant categories—high-risk verticals like nutraceuticals or travel carry different exposure than low-risk SaaS subscriptions.
Map the data you already have and identify which processors, CRMs, and support platforms you use. Integration requirements vary significantly across vendors, and some solutions work better with certain processor relationships.
Assess how the system makes decisions and whether you can understand why a merchant or transaction was flagged. Explainability matters for investigations, compliance, and building trust with your risk team.
Ask vendors about implementation timelines and run pilot programs when possible. Solutions that take months to deploy without demonstrating clear value early are worth scrutinizing carefully.
Calculate the current cost of manual reviews—analyst time, delayed approvals, fraud losses—and compare it against projected savings. Pricing that fits present volume but breaks at scale creates problems down the road.
After deployment, tracking the right metrics reveals whether the investment is paying off.
Track the percentage of alerts auto-resolved versus those requiring human review. A high auto-resolution rate reflects operational efficiency gains and indicates the system is handling routine cases effectively. Platforms using automated merchant risk infrastructure typically target 80%+ auto-resolution rates; Coris customers have averaged 89% reduction in manual reviews.
Measure direct fraud losses and chargeback ratios before and after implementation. With merchants losing $4.61 for every $1 of fraud according to LexisNexis, this is the most direct financial impact metric and the one finance teams care about most.
Track the time required to approve low-risk merchants. Faster approvals improve the merchant experience and accelerate revenue—delays cost you good merchants who go elsewhere.
Measure how many cases each analyst handles. This determines whether you can scale portfolio size without proportional hiring, which is often the core operational goal.
Track what percentage of the portfolio is monitored and the false-positive rate of alerts. Breadth without precision creates alert fatigue; precision without breadth leaves blind spots.
Coris covers the full merchant risk lifecycle in one platform, from onboarding intelligence and fraud scoring to continuous monitoring and automated dispute resolution. Request a demo at coris.ai.
Fraud detection identifies suspicious activity; fraud prevention actively blocks it before losses occur. Many modern platforms combine both capabilities in a single system.
Transaction monitoring is one component of fraud detection software. Broader solutions also include merchant intelligence, KYB verification, and ongoing portfolio monitoring.
Deployment can take anywhere from days to months depending on integration complexity. API-first platforms often go live in weeks, while legacy systems with custom integrations take longer.
Fraud detection software can automate routine reviews and extend coverage, but human analysts remain necessary for complex investigations, policy decisions, and edge cases that require judgment.
Merchant fraud detection focuses on businesses accepting payments—risks like business impersonation and transaction laundering. Payer fraud detection focuses on consumers or cardholders, covering stolen cards and account takeover.