Topic
Abuse of merchant payment credentials to list customers, create charges and payment links, redirect refunds and intercept payment webhooks.
Ransomnews says it found more than 50,000 exposed Stripe merchant secret keys and tested a sample. One live key to a customer list and a test charge took 17 hours.
Reality
Impersonation Risk Detection in iOS 27 returns one of three risk levels to an app when a customer makes a payment or changes account security settings, and the scoring runs on the device only after the customer switches it on.
Reality
According to the Wall Street Journal, nearly 500 Polymarket US accounts were entered by people who typed in someone else's Social Security number. The flow's duplicate-identity check opened the account it matched instead of blocking the attempt.
Reality
A phishing email impersonating Belgium's bpost asks for EUR4.95 in unpaid customs duty. Malwarebytes says the pages behind the demand are built to harvest bank and card credentials, and the fee is the pretext.
Reality
Check Point followed the chain from a reply under a verified airline post to a WhatsApp thread to a half-finished $500 transfer, and counted thousands of impersonation accounts with hundreds more appearing daily.
Reality
Piston sells loss prevention, priced off a single Wex estimate. The number a fleet can actually verify before signing is whether the stations on Piston's network sit on the routes its trucks already drive.
Reality