The Convergence Dividend: What Happens When Fraud and Cyber Teams Actually Converge
Organizations that manage fraud and cybersecurity as one integrated discipline dramatically outperform those that keep the two siloed. In The Convergence Dividend, a 2026 study of 250 fraud and risk decision-makers from Accertify and Liminal, organizations with all four convergence behaviors scored 3.4x higher on the study’s fraud-precision measure than organizations with none. The study also surfaced a counterintuitive finding: how an organization converges — the sequence it follows — matters as much as whether it converges at all.
Why fraud and cyber are converging
Fraud-cyber convergence is the practice of managing fraud prevention and cybersecurity as a single, coordinated discipline rather than two separate functions. It is happening because the threats themselves have merged. The threats organizations discuss most — payment fraud (56.8%), bot and automated attacks (54.8%), and synthetic identity fraud (48.4%) — all straddle the line between fraud and security, and none belongs cleanly to one team. The clearest sign that detection hasn’t kept pace: 63.6% of organizations cannot distinguish a cyber attack from a fraud attack in real time. And the shift is bottom-up — the leading drivers are resource constraints and shared-visibility needs, while executive mandates rank last at just 3.2%, which is what makes the trend durable rather than dependent on any one leader.
Inside the study: 250 organizations across five industries
Accertify and Liminal surveyed 250 senior fraud, security, and risk leaders across five verticals — Retail/eCommerce, Travel, QSR/Restaurants, Entertainment & Media, and Marketplaces — and three regions. The survey measured how organizations structure fraud and cyber, where they concentrate detection across the customer journey, how they share data and signals, and — critically — their real performance: approval rates, chargeback rates, and fraud outcomes.
How the study measured fraud precision
On the metrics fraud teams track day to day, the 250 organizations look nearly identical. Dollar-volume approval rates cluster between 97.5% and 98.2%, and fraud chargeback rates fall between 15.9 and 24.9 basis points — ranges too narrow to reveal who is genuinely performing better. To surface the real differences, the study built a precision measure: the Precise Yes Score (PYS), calculated as approval rate divided by fraud chargeback rate — the dollars an organization approves for every dollar it loses to fraud. Because it captures approvals and fraud control at once, it separates organizations that are genuinely more precise from those that are simply approving more or blocking more.
Fraud precision varies widely by industry
Once measured on a single precision scale, the industries pull apart. Retail/eCommerce leads, reflecting a longer history of fighting online fraud; Marketplaces sits at the bottom, where protecting buyers and sellers simultaneously creates a structurally harder detection problem.
| Industry | Mean Precise Yes Score |
|---|---|
| Retail/eCommerce | 874 |
| QSR/Restaurants | 851 |
| Travel | 820 |
| Entertainment & Media | 529 |
| Marketplaces | 527 |
The four convergence pillars
The study tested four behaviors against performance and found each one independently lifts fraud precision:
- Shared use-case ownership — fraud and cyber share responsibility for two or more threat use cases (such as account takeover or credential stuffing) rather than owning them in isolation.
- Unified data — the two teams work from integrated or fully unified data rather than separate systems that don’t talk to each other.
- Board engagement — fraud risk is discussed regularly at the Board level, not treated purely as an operational concern.
- Structural integration — fraud and cybersecurity responsibilities are organizationally integrated under a shared structure.
Why the order of convergence matters
The pillars are not interchangeable, and the order in which organizations adopt them changes the result. The path to peak performance runs through shared use-case ownership first, followed by data integration and Board engagement together, with structural integration last.
The evidence is stark. Organizations that pursued structural integration alone scored just 364 — below the 456 posted by organizations doing nothing at all — while organizations that combined all four behaviors scored 1,540, more than four times higher than the structure-only group. Reorganizing the org chart before the operational foundations are in place actively hurt performance. Structure ratifies convergence that already works; it does not create it.
How much convergence is worth
Organizations with all four behaviors in place scored a Precise Yes Score of 1,540 — approving $1,540 for every dollar lost to fraud — versus 456 for those with none, a 3.4x difference and a gap of $1,084 in approved dollars per dollar of fraud loss. Because approval rates across the study cluster so tightly, that gap reflects how precisely organizations control fraud, not how freely they approve: the leaders lose far less to fraud while approving in the same range as everyone else.
What does not move performance
Several things organizations assume matter turn out not to. The study found no statistically meaningful performance difference between organizations with large, formally funded convergence programs and those without, nor between shared and separate budgets — in fact, organizations with fully separate budgets posted the highest scores. The lever that reliably moves performance is data integration, the one convergence dimension with a linear relationship to fraud precision: every step toward unified data produces a measurable gain. Meanwhile a near-universal blind spot persists — 94.4% of organizations do not measure false positives, the very metric that would tell them whether their controls are protecting or eroding the customer experience they cite as the top reason to converge.
How far along organizations already are
Convergence is no longer aspirational. 94.0% of the organizations surveyed call fraud-cyber convergence a strategic priority, and 96.8% report changes in who owns fraud decisions. Risk leaders still hold the mandate in most organizations, but the CISO is increasingly in the room: the CISO is now involved in fraud-solution evaluation at 70.0% of organizations. The question for most teams is no longer whether to converge, but in what order — and how to avoid the combinations that don’t pay off.
Get the full study
The complete report includes the full breakdown of all pillar combinations and the Precise Yes Score each one produces, industry-by-industry deep dives for all five verticals, the sequencing roadmap, and the organizational and data-sharing benchmarks behind these findings.
Frequently asked questions
-
Q: What is fraud-cyber convergence? Fraud-cyber convergence is the practice of managing fraud prevention and cybersecurity as a single, coordinated discipline rather than two separate functions. Rather than siloing fraud teams and security teams, converged organizations share use-case ownership, integrate data and signals, and align on detection across the full customer journey.
Q: How much better do converged fraud and cybersecurity teams perform? According to The Convergence Dividend, a 2026 study of 250 fraud and risk decision-makers by Accertify and Liminal, organizations that adopted all four convergence behaviors scored 3.4x higher on fraud precision than organizations with none. Fully converged organizations achieved a Precise Yes Score of 1,540, compared to 456 for organizations with no convergence behaviors.
Q: What is the Precise Yes Score (PYS)? The Precise Yes Score (PYS) is the metric developed for this study to capture true fraud precision. It is calculated as approval rate divided by fraud chargeback rate — representing the dollars an organization approves for every dollar it loses to fraud. Standard metrics like approval rates (which cluster between 97.5% and 98.2% across all organizations) are too narrow to reveal performance differences. PYS separates organizations that are genuinely more precise from those that are simply approving more or blocking more.
Q: Which industries have the highest fraud precision? Retail/eCommerce leads with a mean Precise Yes Score of 874, followed by QSR/Restaurants (851), Travel (820), Entertainment & Media (529), and Marketplaces (527). Retail’s higher score reflects a longer history of fighting online fraud; Marketplaces scores lowest because protecting both buyers and sellers simultaneously creates a structurally harder detection problem.
Q: Does it matter what order you converge fraud and cyber teams? Yes, and this was one of the study’s most counterintuitive findings. The sequence matters as much as whether you converge at all. Organizations that pursued structural integration first – before shared use-case ownership or data integration – scored just 364, which is below the 456 scored by organizations with no convergence behaviors. The path to peak performance starts with shared use-case ownership, then data integration and board engagement together, with structural integration last.
Q: What are the four pillars of fraud-cyber convergence? The study identified four behaviors that each independently lift fraud precision: (1) shared use-case ownership — fraud and cyber share responsibility for threat use cases like account takeover and credential stuffing; (2) unified data — both teams work from integrated or fully unified signals; (3) board engagement — fraud risk is discussed regularly at the board level; (4) structural integration — fraud and cybersecurity responsibilities sit under a shared organizational structure.
-
Q: Why are fraud and cybersecurity teams converging now? The threats are driving it, not executive mandates. Payment fraud (56.8%), bot and automated attacks (54.8%), and synthetic identity fraud (48.4%) all straddle the line between fraud and security — none belongs cleanly to one team. The clearest signal that the current structure isn’t working: 63.6% of organizations in the study cannot distinguish a cyber attack from a fraud attack in real time. The shift is also bottom-up — resource constraints and shared-visibility needs are the leading drivers, while executive mandates rank last at just 3.2%.
-
Q: How many organizations consider fraud-cyber convergence a priority? 94.0% of the 250 organizations surveyed call fraud-cyber convergence a strategic priority, and 96.8% report changes in who owns fraud decisions, with the CISO now involved in fraud evaluation at 70.0% of organizations.
- Source: The Convergence Dividend: Quantifying What Fraud-Cyber Convergence Actually Delivers, Accertify + Liminal, 2026. n=250.