CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

From Bazooka to Fake Nikes

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 1978

As cited

Copy frozen at (site build).

breaches incidents

From Bazooka to Fake Nikes

Business impersonation is a unified fraud tactic exploiting trust across payment systems, manifesting in both rising commercial check fraud and AI-powered online shopping scams targeting younger consumers. Fraudsters intercept checks destined for legitimate companies and create shell businesses with similar names to cash them, while simultaneously leveraging social media platforms and brand impersonation to sell counterfeit goods online. Existing controls like Positive Pay and 3D Secure authentication have pushed threat actors to exploit ecosystem gaps in the chain of trust between financial institutions, merchants, card networks, and business registries.

Why it matters: Finance and fraud teams must recognize that business impersonation across payment channels requires cross-functional detection strategies spanning check processing, corporate account onboarding, and merchant verification, as traditional fraud controls now funnel attackers toward identity-based schemes rather than stopping them entirely.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

breaches incidents

From Bazooka to Fake Nikes

No summary had been written when this copy was frozen.

First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

breaches incidents

From Bazooka to Fake Nikes

Business impersonation has emerged as a unifying fraud tactic across both declining check fraud and rising online shopping scams. Fraudsters exploit ecosystem gaps in trust chains between financial institutions, payment networks, social media platforms, and business registries to register fake companies and execute high-value thefts, such as intercepting a $1.24 million Bazooka check in 2022. Existing fraud controls like Positive Pay and 3D Secure authentication have inadvertently pushed threat actors to evolve schemes that render those defenses irrelevant.

Why it matters: Commercial fraud teams and payment processors must recognize that business impersonation attacks target both high-value check fraud and consumer shopping fraud simultaneously, requiring cross-functional detection that looks beyond traditional payment controls and addresses registry-level business registration vulnerabilities.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary