Insights, guides, and updates on identity verification, fraud prevention, and digital security.
Attackers no longer need to break authentication systems to gain access. In many cases, they simply inherit already authenticated sessions and operate as legitimate users inside trusted environments.
For financial institutions, fintechs and enterprises operating in Microsoft 365 environments, this has become one of the most critical identity risks in modern fraud prevention.
One of the tools frequently used for this purpose is Raccoon Infostealer, a malware designed to extract sensitive data such as passwords, session cookies and financial information.
What was once largely opportunistic activity carried out by individuals is increasingly becoming organized, coordinated, and digitally enabled. Today, structured fraud networks operate across multiple sectors of the financial ecosystem.
The user scans a QR code that appears to belong to a bank, service provider, or even a public institution. The code might appear in an email, SMS message, digital advertisement, or even on a physical poster.
“Jinkusu,” a deepfake-based fraud kit circulating in underground markets, specifically designed to evade identity verification processes at banks, fintechs, and exchanges.
The adoption of instant payments is transforming the global financial infrastructure. Transfers in seconds, 24/7 availability, and frictionless experiences are already the new standard.
In Latin America and globally, governments, financial institutions, and digital platforms are moving toward digital identity wallets based on verifiable credentials.
This type of attack exploits a common behavior: the reuse of passwords across different platforms. If a user uses the same password on multiple services, a leaked credential from one site can grant access to multiple accounts on others.
Agent Smith is a mobile trojan/adware designed to operate silently once installed
For years, Apple’s ecosystem has been perceived as one of the most secure mobile environments. However, the discovery of the Coruna exploit kit, publicly documented by security researchers in 2026, shows that even highly protected platforms can become targets for attackers.
As digital banking expands across Latin America, regulatory pressure and cyber risk are converging on a critical point: identity. New audit findings show that digital risk is no longer just technical it is operational, financial, and reputational. This article explores how identity verification and behavioral risk analysis are becoming central to compliance, fraud prevention, and digital trust in the region.
When Fraud Originates Outside the Official Channel: Spoofing and Digital Impersonation In the last two years, there has been sustained growth in spoofing and brand impersonation campaigns that no longer seek to directly compromise organizational infrastructure, but rather to manipulate the end user into interacting with fraudulent environments that mimic legitimate channels.
Fraudsters are using virtual camera software to inject stolen or AI-generated videos into banking apps, bypassing facial recognition in real time. Identity fraud in LATAM surged 137% in 2024.
Mexico alone blocks over 1,000 daily attempts from predatory lending apps. These fraudulent platforms steal personal data, charge abusive interest rates, and escalate to physical threats.
A new generation of Remote Access Trojans is giving cybercriminals full control of victims' smartphones across the region. Learn how these attacks work and what financial institutions can do to protect their users.