Inside the Fight Against Fraud: Highlights From WBA’s First Fraud Summit

By Katie Reiser

As fraud becomes more prevalent and complex, many Wisconsin bankers voiced the need for more practical insights and support. In response, the Wisconsin Bankers Association (WBA) hosted its first Fraud Summit on June 3, 2025. The one-day event brought bankers together to dig into today’s biggest fraud threats and how to fight back — from cyberattacks and scams to regulatory changes and prevention tactics. The summit was created based on direct input from members who said they needed more resources to stay ahead of fraud trends. Strong turnout and engaged discussion underscored how relevant the event was, and based on early and enthusiastic feedback, WBA is exploring hosting another Fraud Summit in the future.

Bankers Reflect on Takeaways and Impact
Two attendees from Wolf River Community Bank shared their feedback from the Summit. Diane Moen-Ross, electronic banking supervisor, said, “I found the Fraud Summit to be both entertaining and insightful. I had a few things make me really think about my day-to-day habits and look at things differently from a security level for the bank after hearing from the speakers. I found the information they shared to be helpful in protecting the bank and looking out
or our customers.” She added, “I also enjoyed the humor they put into their presentations.”

Her colleague Kyra Baeten, BSA & risk analyst, offered this take, “The summit was amazing, and I was truly in my element! It exceeded my expectations in every way. The presenters were raw, real, and incredibly insightful, which went beyond just surface level discussions. It pushed me to think beyond my current ‘fraud box’ and how to better protect myself, my institution, and the communities we serve.” She summarized her experience, “I left feeling inspired, energized, and already looking forward to next year’s Summit!”

SHAZAM’s Kern: How Froud Follows Shifting Payment Trends
In the opening session, “Where Payments Go, Fraud Will Follow,” Diana Kern, AAP, senior financial solutions consultant at SHAZAM, explored how changing consumer payment habits are driving new fraud risks. For the first time, cash is no longer the most common method for purchases under $25, according to the Federal Reserve’s 2024 Diary of Consumer Payment Choice. Card payments now lead the way, and nearly half of person-to-person payments are made through mobile apps.

Kern walked attendees through how debit transactions have evolved — from magnetic stripe to chip and contactless cards, from physical cards to digital wallets, and from card-present to card-not-present (CNP) scenarios. These changes have big implications. In 2024, 98% of debit card fraud reported by SHAZAM clients occurred in CNP environments.

She pointed to BIN attacks, account probing, and fraud targeting specific merchant codes (like digital goods and money transfer services) as key issues. While chip technology has helped reduce counterfeit fraud, fallback transactions using magnetic stripes remain vulnerable.

Kern stressed the value of layered fraud defenses, such as real-time blocking, cardholder alerts, and well-calibrated decline rules. She also noted that data breaches — even those unrelated to payments — can give scammers the fuel they need to launch convincing social engineering attacks.

ABA’s Smith: Social Engineering, Check Fraud, and AI Threats
Patrick Smith, senior vice president of fraud operations with the American Bankers Association (ABA), gave an overview of current fraud challenges, including social engineering, check fraud, and emerging risks tied to artificial intelligence.
Smith made it clear that while banks are doing more than any other sector to protect consumers, they can’t do it alone. Responsibility must also be shared by telecom companies, social media platforms, and lawmakers.

He noted that social engineering scams have become harder to detect. Many now mimic trusted environments, build rapport with victims, and create a sense of urgency — making them highly effective. Check fraud, meanwhile, continues to grow despite a downturn in check use, now accounting for 66% of payment fraud. Mail theft and counterfeit or altered checks are key drivers.

AI is making an already complex fraud landscape even more challenging. Smith cited examples like deepfakes (providing a chilling example of how easy it is to clone voices), spoofed identity checks, and realistic fake IDs, all of which make scams faster to perpetuate and more convincing. He urged banks to continue building robust defenses by ensuring their teams are familiar with current threats and working closely with trusted vendors.

Smith shared that ABA is calling for a national fraud prevention strategy that includes establishing a White House Office of Fraud and Scam Prevention, increasing FCC enforcement regarding customer reported spam texts, and bringing in state and local law enforcement to improve prosecution rates.

Iannarelli: Cyber Vigilance in a High-Risk Environment
Former FBI Special Agent John Iannarelli, Esq., CSP (aka FBI John) gave a candid assessment of the cybersecurity landscape. According to the Identity Theft Resource Center, last year set records for data breaches, with over 15 billion records compromised.

Top threats include identity theft, phishing, ransomware, business email compromise (BEC), Internet of Things (IoT which are the internet-connected devices embedded in everyday objects which are sending and receiving data), and mobile-device related fraud. According to an FBI report, BEC alone cost U.S. businesses $2.4 billion last year, with cases up 270%. Iannarelli referenced the 2024 ransomware attack on Patelco Credit Union as a reminder of the financial and reputational damage such events can cause.

He also flagged the role of AI deepfakes in expanding cyber risk, highlighting a $25 million fraudulent wire transfer driven by a deepfake impersonation. Still, he warned that internal threats remain significant. About 75% of breaches are tied to insiders — often well-meaning but untrained employees.

To help reduce exposure, Iannarelli encouraged banks to focus on staff training, establish strong policies, use multifactor authentication, and maintain a tested incident response plan.

Ayotte: Stop Social Engineering Before It Starts
Michael Ayotte, senior cybersecurity consultant with Wipfli LLP and U.S. Special Forces veteran, focused on the human side of fraud — particularly how scammers manipulate people, not just systems. He explained how criminals often start with publicly available data from sources like obituaries, social media, and bank websites to piece together convincing identities.

Ayotte reminded attendees that identity verification processes should never give away clues. “Never disclose account numbers over the phone,” he said. If a caller can’t be verified, staff should direct them to a branch.

His session also highlighted common phishing tactics: urgency, secrecy, unusual grammar, and lookalike email addresses from company executives. Ayotte recommended physical security protocols too — from screening vendors to checking IDs — and stressed the need for ongoing training and internal testing through simulated phishing and security drills. He shared his own experiences conducting physical security audits for clients that were eye-opening and likely prompted many attendees to review their workplace policies.

His message was clear: it is crucial to empower employees to act on suspicious activity even though their focus is typically on customer service. There needs to be a balance between the two. Policies and technology matter, but awareness and a questioning mindset when something seems off are just as critical.

What’s Next?
WBA plans to follow up with a future article sharing practical tips and takeaways from the Summit, with additional insights from WBA’s Director – Legal, Scott Birrenkott. Birrenkott will share how Wisconsin banks can apply these lessons in the face of shifting fraud risks. Birrenkott
commented, “A lot of great information was shared at the WBA Fraud Summit. It just goes to show the value of gathering and sharing information. WBA will continue to provide updates and resources to help banks tackle the challenge of staying one step ahead of criminals.”