As ACH payment becomes more available, it gives fraudsters a route to move funds from compromised bank accounts, a risk that digital platforms may not recognize as fraud until it is too late. Through dark web intelligence and internal transaction data, Riskified analysts observed fraudsters discussing compromised bank accounts, ACH-accepting platforms, and ways to cash out stolen funds. Separately, Riskified’s transaction data show that ACH transactions carry a significantly higher fraud risk than card-not-present (CNP) transactions and reveal behavioral patterns associated with fraudulent act