Merchant Collusion

Overview

Merchant collusion is coordinated misconduct in which a merchant or merchant insider cooperates with customers, fraudsters, affiliates, employees, or other merchants to generate illegitimate transactions or conceal fraud.

Merchant Collusion is closely connected to Fraud Ring, Referral Fraud, and Identity Fraud. It differs from ordinary merchant fraud because the activity depends on cooperation among multiple parties and may use apparently valid orders, refunds, referrals, or settlement flows to hide the scheme.

Operational implementation should link merchants and counterparties, monitor shared devices and beneficiaries, compare sales with inventory or service evidence, review refund and payout patterns, verify ownership, and investigate unusual concentration.

The principal failure modes include fake sales, cash-out schemes, refund cycling, fabricated fulfillment, shared bank accounts, insider override, referral abuse, and false positives among legitimate related businesses.

Useful measures include linked-merchant loss, suspicious refund rate, beneficiary concentration, collusion cases, and time to restrict coordinated accounts.

Operationally, teams should link merchants and counterparties, monitor shared devices and beneficiaries, compare sales with inventory or service evidence, and review refund and payout patterns. Key risks include fake sales, cash-out schemes, refund cycling, and fabricated fulfillment.

A production treatment of Merchant Collusion should test coordinated misconduct in which a merchant or merchant insider cooperates with customers, fraudsters, affiliates, employees, or other merchants to generate illegitimate transactions or conceal fraud within the relevant asset, decision, or service state. The Merchant Collusion context record for misconduct in which a merchant, merchant insider cooperates with customers, and fraudsters should preserve source data, configuration or policy version, responsible actor, exception, and outcome. Review of Merchant Collusion should determine whether safeguards addressing misconduct in which a merchant, merchant insider cooperates with customers, and fraudsters changed exposure in practice, not merely whether a document or setting existed.