Lenders, microfinance and BNPL
A fraudulent loan is your own money: loans taken out in someone else's name, or several loans paid out to the same card. In the US, synthetic-identity fraud cost unsecured lenders about $2.94 billion in 2025 (Datos Insights with Mitek, June 2026; vendor-sponsored research). WoWyrd flags fraud signals around the application and the payout. It doesn't score credit risk.
What WoWyrd flags, from application to payout
Each stage below names the rules that fire there, and every flag shows its reason.
Application and sign-up
Many new accounts on one device or IP address, throwaway email domains, and a brand-new account asking for a large amount (new accounts). Scripted applications from Tor, VPN, proxy or datacenter origins (bots).
Login
One session from several IP addresses, countries or networks, and an account country that differs from the IP country (account takeover).
Repayment and card checks
Bursts of bank declines, repeated declines with the same code, and prepaid or virtual cards (card testing & payment abuse).
Loan payout
Several payouts going to one card or account, and a new account asking for a payout within an hour (money mules). A payout right after a password reset, a contact-detail change or a KYC change (account takeover).
What data you need
Only the IP address is required; each optional field switches on the rules that need it, and comes from your application and payout systems.
| Field | Where it comes from | Mandatory |
|---|---|---|
ip | Your edge or load balancer (the real client IP) | Yes |
customer_id, account_created_at | Your application or account system | No. Needed for new-account and payout rules |
device_fp, email | Your application form or app | No. Needed for multi-account and throwaway-email rules |
beneficiary_id, amount | Your loan payout service (the card or account the loan goes to) | No. Needed for payout rules |
card_bin, decline_code | Your payment gateway | No. Needed for card rules |
preceding_event, kyc_state | Your login, account and KYC services | No. Needed for account-takeover rules |
How a pilot starts here
We start with your own history: WoWyrd scores past applications and payouts next to the fraud you already confirmed. Then it observes one live stream, usually loan payouts for 30 days in shadow mode, and decides nothing.
Talk to us about one stream, one owner, one question.
In the UK? See how WoWyrd maps to the FCA's draft guidance CP26/38.