Papers
Long-form output from the practice. Three shapes: research papers (analysis and methodology), response guides (what to do if X has happened), and joint advisories (multi-agency notices co-signed with our peers).
- Total
- 03
- Words
- 3.6k
- Last updated
- 2026-04-22
- Cadence
- QUARTERLY
- RESEARCH · 2026-04-22 · v1.0
Could your choice of payment-fraud telemetry be harming your detection?
Most fraud-detection programmes report on the wrong things. Volume-of-alerts and mean-time-to-resolution measure the work that the platform produces, not the work that catches an attacker. This paper looks at four metrics we routinely see harming fraud detection in the institutions we work with, and proposes four replacements.
detection-engineering fraud metrics SOC- Length
- 1,518 words
- Reading
- 7 min
- Author
- IMF Research
- RESPONSE GUIDE · 2026-04-15
What to do if your business has just wired money to a fraudster
A short, prioritised checklist of the actions that materially affect whether the funds can be recovered. The first sixty minutes matter most; by the end of the working day the realistic recovery probability is meaningfully lower. Read this once before you need it.
incident-response business-payment-fraud response-guide- Length
- 1,233 words
- Reading
- 6 min
- Author
- IMF Practice
- JOINT ADVISORY · 2026-04-08 · v1.0
Joint advisory: shell-company exploitation in third-party payment processing
We are issuing this joint advisory together with five sector partners to draw attention to a sustained pattern of shell-company onboarding through third-party payment processors. The pattern moves between jurisdictions on a weekly cycle, exploits inconsistencies in beneficial-ownership data, and is currently observed against small-and-mid-sized payment processors in particular.
joint-advisory financial-crime third-party-payment-processing shell-company- Length
- 887 words
- Reading
- 4 min
- Author
- IMF Practice