New Tool Targets Payment Scams That Pass Security Checks

Payment Scams That Pass Security Checks are the hardest kind of fraud to stop, because the victim passes every test the bank sets. A new tool from chip and software giant Broadcom aims at exactly that gap, flagging suspicious online card payments even after the customer has cleared authentication. The launch matters because it treats the customer, not the card, as the point of attack, and it arrives as AI-powered impersonation scams grow more convincing by the month.

The problem starts with a trick, not a theft. A scammer posing as a bank, a delivery firm or a trusted brand talks a cardholder into approving a payment, often by coaching them through the one-time code or fingerprint check that normally proves a purchase is genuine. Once that check is passed, the transaction looks legitimate to the bank's usual risk models, and the money moves. According to Broadcom's announcement, fraudsters have pivoted from breaking security systems to manipulating the people those systems are meant to protect.

How the new check works

The feature, Arcot Scam Defense, sits inside Broadcom's existing payment security platform and examines a payment after authentication has succeeded. It weighs transaction details, device signals and behaviour patterns to spot the hallmarks of a scam in progress, such as unusual timing, an unfamiliar device or a purchase that does not fit the customer's history. When the signals add up, the bank can step in before the payment is final, rather than discovering the fraud from a complaint days later.

Broadcom's payment security chief, Matt Cooke, framed the shift plainly in the company's announcement. He said fraudsters trick cardholders into revealing passwords or completing step-up authentications, and that victims usually remain unaware they have handed over access until after the scam. The comment captures why older defences fall short: they were built to catch stolen credentials, not a willing customer acting under false pretences.

What the pilot numbers suggest

A trial with one major card issuer gives the first sense of scale. Reviewing only the riskiest slice of passed authentication checks over a single month could have prevented fraud worth about four million dollars, according to the company's account of the pilot. The trade-off was small: a slight dip in the share of legitimate checks that passed first time. Those figures come from one issuer and one month, so they are a promising signal rather than proof of how the tool will perform across different banks and customer bases.

That caveat matters for anyone judging the launch. Broadcom has disclosed no pricing and no revenue forecast for the feature, and wider adoption by banks remains unproven. A tool that blocks too aggressively risks irritating genuine shoppers, while one set too loosely lets scams through. The balance between catching fraud and keeping checkout smooth will decide whether banks buy in, and the pilot's small approval dip suggests the company is aware of the tension.

Why shoppers should care now

For readers, the practical lesson does not depend on any single product. Scams that pass security checks succeed because they borrow the authority of a real institution and add urgency, such as a frozen account or a missed delivery. Pausing before acting, contacting the supposed sender through a number found independently, and never sharing a one-time code with a caller are defences that work regardless of which bank or tool is involved. If a payment already went through, reporting it to the bank immediately gives the best chance of recovery.

The launch also fits a wider shift in online commerce. As AI assistants and automated checkouts spread, the line between a genuine customer and a coached one gets harder to draw, and payment providers are racing to add checks that look beyond passwords. Broadcom's move follows a similar logic to retailers opening checkout to AI shopping assistants, a trend covered in Walmart's gateway for AI shopping agents. The same spending boom driving those tools is reshaping big tech finances, as shown by Meta's new share class to fund its AI build-out and a fan petition that shows how online campaigns can move companies.

Payment Scams That Pass Security Checks will not disappear because one company launched one feature. But the focus on the moments after authentication is a recognition that security has moved past the password, and that the next frontier is judging whether the person typing it is truly acting freely. Banks, shoppers and scammers will all be watching how that judgment holds up in the real world.

Full details of the launch are available in Broadcom's official announcement and in Business News Today's analysis of the pilot findings.