Problem overview

Fraudsters acquire large batches of stolen credentials from phishing attacks, data breaches or by purchasing them on the dark web with the intent of using them to take over consumer accounts. In order to check credentials for successful logins at scale, fraudsters create automated scripts which can run thousands of combinations in minutes.  

Most organizations have bot mitigation controls in place to detect credential stuffing and other automated attacks. To circumvent these controls, fraudsters have started to abuse legitimate open banking platform providers to test batches of credentials and reverted to testing smaller, more frequent batches instead of testing at scale.