Skip to content
←Back to glossaryCyber

Fraud-as-a-service

Rental of turnkey fabrication capabilities, putting professional-grade attacks into the hands of amateurs.

Definition

In February 2024, 404 Media exposed OnlyFake, a site selling neural-network-generated photos of fake ID documents for USD 15 each. The reporter got one through the identity check of the crypto exchange OKX. Fraud-as-a-service is a model patterned on ransomware-as-a-service, where providers rent out fabrication capabilities by the month, generation of images, synthetic documents or identities, even autonomous fraud agents. It drastically lowers the technical barrier: professional-grade attacks come within reach of amateurs, and fraud is industrialized at the same time as it is professionalized. This combination catches traditional defenses off guard and explains the measured surge in AI-assisted fraud cases, multiplied fourfold between 2022 and 2025. It carries into insurance fraud the as-a-service logic of criminal ecosystems already observed in cybercrime.

Its 3 cross-references, woven across the glossary's 18 categories
Fraud-as-a-service: Cyber glossary illustration, AlgoPolis
Example

Textbook case: an amateur rents, for a few dozen dollars a month, an online service that generates fake claim-supporting documents on demand, without any technical skill.

Read next
CyberRansomware as a Service (RaaS)A cybercriminal business model in which operators rent a turnkey ransomware kit to affiliates in exchange for a share of the ransom.Read the entry →CyberDeepfakeA synthetic medium, voice or video, generated by artificial intelligence to convincingly imitate a real person, becoming a vector of fraud and disinformation.Read the entry →InsuranceInsurance fraudThe undue obtaining of an indemnity or cover through deception, a structural cost of the sector that generative AI turns into mass production.Read the entry →
Put it to work
SimulatorPlay this case from the underwriter's seatEight quarters, one book, cyber and political risk files. You set the price and the war clause, then the market answers back.Take the seat →
Related articles
Also known as

fraud-as-a-service, FaaS

Stay informed

Follow the research

One letter a week. First, the week's underwriting note, when one is published: a dated, argued decision, signed by Paul Bernardski. Then what the observatory published on cyber risk, political risk and insurance. No account, no tracking.

No spam, one-click unsubscribe, no data ever sold.