Why private lending is the next fraud frontier

Bank fraud has thirty years of controls behind it: identity verification stacks, transaction monitoring, regulator pressure, shared consortia, and a generation of risk officers who grew up assuming the worst about every wire. Private real estate lending has none of that. It has spreadsheets, relationships, and a draw admin who has been doing this for nine years and trusts her gut.

That gap is what makes the asset class attractive — speed, flexibility, judgment. It is also what makes it the next obvious target.

Why the attackers showed up

Three things changed at the same time. Capital flowed into private credit faster than operational discipline could keep up. Generative AI made it trivially cheap to produce plausible photos, documents, and identities. And the fraud playbooks that were perfected against banks — synthetic identities, fabricated income, recycled collateral evidence — port directly to a private lender with a smaller fraud team and a faster funding clock.

Why the defenders are behind

Most private lenders I talk to discover fraud the way you discover a roof leak: after it has been raining for a while. The draw admin notices a photo looks familiar. The construction inspector flags a foundation that has not changed in two months. The workout team unwinds the file and finds the bank statements never reconciled. By then the money is gone.

The structural problem is that verification was never a separate workflow. It was a step inside a step inside the underwriter's head. That works at ten loans a month. It does not work at a hundred, and it does not work when the borrower is using a model the underwriter has never seen.

What the next five years look like

Verification becomes its own surface in the lending stack — captured at the source, scored before funding, attached to the loan as an evidence record, and reusable at audit. Lenders that build it early will price more competitively because their loss rate is lower. Lenders that wait will pay for it twice: once in losses, and again in the cost of capital their partners demand after the losses are visible.

“Private credit is not too small to be a fraud target. It is exactly the right size — large enough to be worth the work, small enough to lack the controls.”

This is the beat I cover. If you are reporting on it, building in it, or allocating to it, my contact details are on the press kit.