Onboarding fraud is abuse of the account-registration or identity-verification process. Instead of attacking a logged-in user, the criminal targets the moment a new account is created, recovered, or approved, using stolen identities, synthetic identities, fake documents, mule devices, or hijacked verification channels.
It matters because onboarding is where a service decides whether a person is real and trustworthy. If that decision is weak, attackers can open accounts for laundering, loan abuse, payment fraud, or future account takeover. In banking and fintech, defenses often include document checks, biometric liveness tests, device fingerprinting, velocity rules, sanctions screening, and step-up review for risky cases. Strong onboarding controls are important, but they should be balanced with fallback paths for legitimate users who fail automated checks. The goal is to make it expensive for impostors to get in without blocking normal customers.