Broadcom Launches Arcot Scam Defense to Block Social Engineering Fraud

Broadcom launches Arcot Scam Defense, targeting $4 million monthly fraud losses for issuers.

What the company is saying

Broadcom Inc. (NASDAQ:AVGO) is launching Arcot Scam Defense, a new feature for its Arcot platform, positioned as a direct response to rising social engineering fraud in card-not-present transactions. The company frames the product as a critical second layer of real-time defense, claiming it can flag and block fraudulent transactions even after successful authentication challenges. Matt Cooke, vice president and general manager of the Payment Security Division, emphasizes the sophistication of current fraud tactics and the need for advanced, behavioral-based solutions. The announcement highlights the product’s ability to analyze multiple signals—including device location, authentication method, and behavioral discrepancies—and mentions integration with third-party solutions to detect active phone calls during authentication. Broadcom stresses the scale of the problem, citing nearly half a billion dollars in fraud over the past year, and uses pilot data to demonstrate the feature’s impact: reviewing the top 1% of successful challenges could have prevented $4 million in fraud in a single month for one issuer, at a cost of just 0.38 points off authentication success rate. The company signals ongoing development, planning to add new detection signals and a profiling engine for challenge history.

What the data suggests

The disclosed figures show a substantial fraud problem, with nearly $500 million lost in the past 12 months on successfully authenticated card-not-present transactions. Pilot testing of Arcot Scam Defense, using a full month of live data from a major issuer, suggests that targeting the riskiest 1% of authentication challenges could have blocked $4 million in fraud in just one month. The operational trade-off is minimal, with only a 0.38 percentage point reduction in authentication success rate. These numbers are concrete but limited: the $4 million figure is issuer-specific and based on a single month, not a broad multi-institutional or multi-period dataset. No revenue, adoption, or cost figures for Broadcom itself are disclosed, and the pilot does not quantify false positives or customer experience impact. The evidence supports the product’s potential efficacy for fraud reduction in high-risk cases, but broader financial or operational impact remains unquantified.

Analysis

The announcement is generally positive in tone, highlighting the launch of a new fraud prevention feature and providing specific pilot results. The majority of claims are realised: the product has launched, pilot testing was conducted on live data, and quantifiable results (e.g., $4 million in fraud potentially prevented for one issuer in a month) are disclosed. However, several technical claims about the product's capabilities (real-time operation, behavioral analysis, third-party integration) are asserted without supporting operational data or case studies. The only forward-looking claim is the planned expansion of product features, which is clearly identified as a future intention. No financial metrics (revenue, profit, adoption rates) are disclosed, so the impact on Broadcom's financials cannot be assessed. The gap between narrative and evidence is moderate: while pilot data is specific, broader claims about industry impact and technical efficacy are not fully substantiated.

Risk flags

• ●The pilot data is limited to one major issuer and a single month, raising questions about generalizability across different institutions, geographies, and transaction types. Broader efficacy and scalability are unproven until more adoption data is released.
• ●No financial metrics, adoption rates, or customer commitments are disclosed for Broadcom, making it impossible to assess the revenue or profit impact of Arcot Scam Defense. The commercial success of the product is therefore uncertain.
• ●The announcement asserts advanced technical capabilities—such as real-time behavioral analysis and third-party integration—without providing independent validation, operational case studies, or quantified false positive rates. This leaves a gap between technical claims and demonstrated real-world performance.

Bottom line

Broadcom’s Arcot Scam Defense directly targets a large and growing fraud problem, with pilot data indicating it could have prevented $4 million in fraud for a single issuer in one month at a minor operational cost. The technical narrative is ambitious, but the evidence is limited to a narrow pilot and does not address broader adoption, revenue impact, or operational downsides such as false positives. Investors have clear proof of concept but lack visibility into commercial traction or financial upside. The most important takeaway is that while the product addresses a real and quantifiable pain point, its impact on Broadcom’s financials will depend on widespread adoption and measurable business results, neither of which are disclosed in this announcement. Future updates should focus on customer wins, revenue contribution, and multi-institutional efficacy data to move from technical promise to proven business value.

Announcement summary

(NASDAQ:AVGO) Broadcom Inc. announced the launch of Arcot Scam Defense, a new feature of Arcot by Broadcom, designed to block social engineering fraud during card-not-present (CNP) transactions. Matt Cooke, vice president and general manager of the Payment Security Division at Broadcom, stated that financial institutions are experiencing broad increases in fraud attempts driven by sophisticated, AI-enhanced social engineering attacks. Arcot Scam Defense operates as a real-time second layer of defense, leveraging advanced intelligence during authentication to flag suspected fraud even after a successful challenge. The solution analyzes a broad range of signals, including transaction information, device intelligence, historical behavior, and challenge interaction, to identify patterns indicative of social engineering. It can also integrate with third-party solutions to determine if the authenticating device is on an active phone call, which is a prime indicator of social engineering. Even if a cardholder falls for a scam and hands over their credentials, Arcot Scam Defense can help identify the behavioral shift and block the transaction in real time. Nearly half a billion dollars in fraud was reported over the last 12 months on successfully authenticated challenges. In pilot testing validated on a full month of live data, Arcot Scam Defense demonstrated exceptional performance. For one major pilot issuer, reviewing just the top 1% of successful challenges would have protected an estimated $4 million in fraud in just a month, at a cost of only 0.38 points off their authentication success rate. Broadcom expects to expand Arcot Scam Defense’s capabilities by adding new signals, including cardholder and device attributes, and a dedicated challenge history profiling engine to learn each cardholder's past challenge behavior. Arcot by Broadcom is exclusively focused on 3-D Secure payment authentication.

Disagree with this article?