In the telecommunications sector, onboarding new subscribers is one of the most critical moments in the customer lifecycle. What was once a straightforward activation experience is now a high-stakes gateway where identity, credit and device financing converge. Fraudsters target this opportunity with relish, exploiting the wealth of identities exposed by data breaches, proliferation device financing offers, the ease of digital onboarding and, of course, sophisticated technologies such as AI. Conversely, legitimate subscribers approach the process with greater weariness, shaped by customer touchpoints that involve more friction. The result is that onboarding is no longer simply adding new subscribers — it’s about establishing trust while controlling risk from the very first interaction.

Critical fraud trends impacting subscriber onboarding journeys

Today, high-value devices, priced between $800 to $1,400, are typically offered with installment plans at account opening, with limited upfront cost to the buyer. Every new account opening has become both a subscriber acquisition and credit and asset financing decision, significantly raising the stakes. This industry practice has made the onboarding journey especially attractive to organized fraud rings, contributing to an estimated $4.2 billion in device-related fraud losses globally (out of $10.2 billion in total application fraud losses)[1]. Identity-based attacks dominate, with identity theft and first-party fraud such as credit mule activity representing the most prevalent methods used to acquire devices and services. These approaches are particularly effective because they rely on high-quality, data-rich identities that can pass traditional verification checks.

Fraud is also shifting earlier in the lifecycle. Increasingly, fraudsters are leveraging synthetic identities and manipulated credit profiles to qualify for offers before an application is even submitted, i.e. targeting prescreen offers. This aligns with broader industry trends where fraud has become industrialized — leveraging breached data, automation, and AI to create highly convincing profiles. Unfortunately, the competitive wireless market requires carriers to maintain rapid onboarding and competitive offers.

The challenge is compounded by the multi-channel nature of telecom onboarding. Carriers witness fraud attacks distributed across digital storefronts, physical retail locations and call centers, with losses relatively evenly split between these channels. This fragmentation creates inconsistent controls and exploitable gaps, allowing fraudsters to target the weakest link in the chain.
 
Operationally, these trends and the overall environment create significant strain for carriers. Most grapple with a persistent challenge: controls that are too blunt introduce friction and cost, while controls that are too lenient expose the business to loss.

Best practices for mitigating new application fraud

Addressing these challenges requires a shift in how subscribers are acquired and onboarded. Leading wireless providers are moving fraud controls earlier in the journey, treating prescreen as a critical risk decision point rather than a pure marketing function. By screening for synthetic identities and credit manipulation/washing signals before promotional offers are extended, they can reduce exposure and improve campaign efficiency.

Telecom leaders are also moving toward more sophisticated, layered identity frameworks. They realize that identity verification remains a critical step, but it is no longer sufficient on its own. Organizations need to incorporate intent-based signals and anomaly detection. For example, IP address intelligence can help assess risk, since a wireless device’s IP address should correspond with the declared carrier. If it doesn’t, this would be digital signal indicating a potential fraudster is trying to mask their identity. Depending on the channel, operators can also layer in document verification, device intelligence, behavioral signals and email/phone authentication to build a more holistic view of the applicant.

Furthermore, waterfall strategies (or risk-based authentication) allow CX-focused providers to dynamically apply friction based on assessed risk, fast-tracking low-risk applicants while stepping up verification for those who exhibit anomalies. This not only improves fraud detection but also preserves the seamless experiences that legitimate customers expect. In an environment in which onboarding speed remains a competitive differentiator — often with order acceptance and shipments occurring within 24 hours — adaptive, risk-based controls are essential to balancing conversion and security. 

Where onboarding strategies are headed

The customer onboarding journey is now the primary control point for both fraud prevention and trust—and must be managed as such. As fraudsters exploit identity, credit, and device convergence, onboarding must evolve into a real-time, risk-based decisioning engine.

Communications service providers should focus on four actions:

1. Diagnose the funnel
   Map onboarding end-to-end to identify where fraud enters—application, identity verification, device provisioning, or funding. Track key KPIs to expose weaknesses.
2. Implement risk-based controls
   Move from static rules to adaptive decisioning using identity, device, and behavioral signals. Apply friction selectively for high-risk cases while fast-tracking trusted customers.
3. Continuously rebalance friction
   Regularly tune controls based on fraud trends and performance data, shifting friction toward bad actors without degrading legitimate experiences.
4. Leverage external intelligence
   Partner with identity and fraud providers to enrich data and gain cross-industry insights that enable proactive risk detection. Executing on these priorities reduces fraud, improves approvals and builds trust from the first interaction — turning onboarding into a durable competitive advantage.

  [1] Source: 2025 CFCA Global Fraud Loss Survey Report

To contribute content, please contact comms@ccamobile.org. (CCA members only.)