A new fraud ecosystem emerges: How threat actors leverage AI and dark web tools to scale purchase scam operations

Recent analysis from Recorded Future's Payment Fraud Intelligence Team reveals an alarming convergence of dark web services and AI tools enabling threat actors to rapidly scale purchase scam infrastructure and evade detection. This comprehensive report examines how sophisticated transaction laundering and traffic distribution systems obscure connections between scam websites and merchant accounts, creating resilient fraud networks that exploit victim-authorized payments.

Key findings include:

• Dark web "opportunity economy" and AI tools like Gamma and Darcula enable rapid scaling of purchase scam operations with lowered barriers to entry
• Transaction laundering successfully masks relationships between scam websites and fraudulent merchant accounts, while malicious advertising funded by stolen cards creates self-perpetuating fraud cycles
• Holiday shopping seasons drive surges in dark web activity as threat actors exploit seasonal vulnerabilities and shifting fraud controls
• Actionable strategies for financial institutions including scam merchant intelligence programs and proactive identification of fraudulent accounts before fraud occurs