Fraud as a service (FaaS) is the sale of fraud capabilities as ready-made products: phishing kits, botnet rentals, stolen credential bundles, synthetic identity packages, refund-scheme coaching, and step-by-step playbooks. It applies the software-as-a-service model to crime, letting people with no technical skill run sophisticated attacks for a subscription fee or a revenue share.
What the FaaS Market Sells
The catalog mirrors legitimate software: infrastructure (botnets for hire, proxy networks, card testing tools), data (stolen cards and credentials sold on the dark web), identity products (synthetic identities, aged accounts), and services (professional refund operators who file claims on a customer’s behalf for a cut). Support, documentation, and money-back guarantees included. Visa’s threats reporting describes this industrialization of fraud, with reusable infrastructure deployed across attack types, and its Spring 2026 report notes AI has fundamentally lowered the barrier to entry.
Why FaaS Changes the Defense Math
FaaS decouples skill from scale. The population of capable attackers is no longer limited to people who can build tools, and the same purchased kit gets fired at hundreds of merchants, so an attack pattern seen once will be seen again. That cuts both ways: defenses that learn across a network of merchants blunt an entire product line of attacks at once, while single-merchant defenses fight each buyer of the kit separately.
How Wyllo Helps
Kit-driven attacks carry kit-shaped fingerprints: shared infrastructure, templated behavior, and repeated patterns across brands. Wyllo’s network-level intelligence recognizes them on arrival, and Wyllo Bot and Reseller Detection plus Wyllo Payment Fraud Protection turn one detection into protection for every merchant on the platform.
Frequently Asked Questions
Who buys fraud as a service?
Everyone from organized rings scaling operations to ordinary consumers buying a “refund service” for a single order. The consumer end matters to merchants because it turns casual opportunism into professionally executed abuse.
How does FaaS relate to friendly fraud and refund abuse?
Professional refund operators are FaaS applied to post-purchase abuse: they coach or execute refund claims using proven scripts, which is why individual claims increasingly read like they came from the same playbook. They did.
