Innov8tif

Customer ID assurance for BNPL — fraud prevention by design

Buy Now, Pay Later platforms in ASEAN face four distinct fraud patterns. EMAS eKYC closes the soft-pull credit loophole that makes BNPL more vulnerable than traditional credit lines.

PDF

BNPL fraud and customer ID assurance — full PDF

10 pages: ASEAN fraud landscape, the 4 attack patterns, and the eKYC controls that stop them.

PDF · v3.1

Get the PDF

Why BNPL is the new fraud target

Juniper Research estimates online payment fraud losses will reach USD 206 billion between 2021 and 2025. U.S. BNPL users are projected to grow 19% over the same window (InsiderIntelligence.com), making BNPL one of the most actively targeted online payment channels. As BNPL adoption accelerates across ASEAN, the same threat patterns are following.

The current BNPL vetting structure typically involves a soft pull on the consumer's credit history — a check that does not authenticate the applicant. That gap is what fraudsters exploit.

Four BNPL fraud patterns

Account takeover

Through data leaks or social engineering, fraudsters gain access to a victim's existing BNPL account and authorise unauthorised payments.

Buy now, pay never

Fraudsters open new BNPL accounts using stolen identities and make large purchases with no intent to repay.

Synthetic identity

Real and fabricated personal data are combined to create a new identity — for example, a real MyKad number paired with a fabricated name — that bypasses automated checks.

New account abuse

Sign-up incentives offered to new BNPL users are exploited at scale by fraudsters creating multiple accounts to harvest the default credit lines.

"The current buy now, pay later vetting structure, which typically involves soft pulls on a consumer's credit history, makes the payment method more vulnerable and susceptible to fraud."

— Ashley Usher, Chief Integration & Information Officer, Fortis Payment Systems

How EMAS eKYC closes the gap

Better risk management on account opening — verified identity, not just credit score

Block synthetic identities at source via document authentication and liveness detection

Detect device-binding violations across multiple new-account attempts

Pair eKYC with credit-score and bankruptcy checks in a single onboarding flow

Audit trail for regulator and dispute review

Sub-minute end-to-end verification — no impact on conversion

BNPL and digital-credit deployments

Innov8tif powers identity assurance for BNPL and digital-finance providers across ASEAN.

Versa

Versa

Digital investment platform — eKYC at sign-up across the customer journey.

Compasia

Compasia

Device trade-in and financing — verified identity at point-of-purchase.

PayLater

PayLater

BNPL provider — automated identity capture during application.

Affin Hwang Capital

Affin Hwang Capital

Financial services and asset management — regulated KYC for digital onboarding.

Cut BNPL fraud at sign-up

Book a 30-minute scoping call. We'll walk through the four attack patterns against your stack.

Book a demo

Get the BNPL fraud guide

Submit your details and we'll email the PDF.