Skip to content
All articles
Lending·10 min read·

Payroll mule rings and advance fraud in 2025

Synthetic employers and staged deposits evolved. Detection signals that still work at scale without killing conversion.

Rise Product

Payments & lending

Developer reviewing code for security patterns

Fraud rings target advance products because velocity is high and KYC is light. Payroll narratives are the new synthetic identity.

Graph features linking employers, devices, and repayment sources catch clusters humans miss. Combine with velocity limits on first-time linkers.

Challenge flows must be rare enough to preserve UX — but mandatory when graph scores cross thresholds.

Share intelligence across programs where legal permits; silos help fraudsters more than privacy purists admit.

Work with Rise

Building something in production?

We ship the same rails we write about — B2B infrastructure and consumer apps in market.

Book a discovery call

The Ledger, weekly

Engineering deep-dives and regulatory primers from the Rise team. No fluff — just what we ship in production.