What signals actually catch first-party fraud?

First-party fraud is hard precisely because the identity is real. The signals that work in production: - Device and session consistency across the lifecycle - Velocity and structuring patterns on funding events - Funding-source mismatches versus stated intent Identity verification alone won't catch it — you need behavioral scoring layered on top.