At Money20/20 USA, Mastercard introduced what it calls the first threat intelligence solution designed specifically for payments at scale: Mastercard Threat Intelligence. The announcement reflects a growing recognition that fraud doesn’t start at the swipe or click of a transaction—it often begins upstream, in cyberattacks that compromise merchants, banks, and consumers long before a fraudulent payment attempt even occurs. According to Mastercard, 60% of fraud leaders globally only become aware of cyber breaches after fraud losses appear, a lag that undermines defense and eats directly into financial institutions’ bottom lines.
What Mastercard is building here is a fusion of payment fraud visibility and curated cyber intelligence. By embedding Recorded Future’s threat intelligence platform—which Mastercard acquired less than a year ago—into its own global fraud detection framework, the company is positioning itself as a nexus point for intelligence-led defense. This makes sense: Mastercard already sees transaction-level fraud patterns across its vast network; combining that with indicators of compromise and cybercrime infrastructure data gives a much earlier warning system.
The features outlined are not just incremental improvements; they read like a direct attempt to bridge the longstanding gap between fraud teams and cybersecurity teams. For example, card testing detection can help issuers and acquirers shut down fraudulent attempts before they cascade into full-scale fraud rings. Digital skimming intelligence draws on Mastercard’s broader ecosystem visibility to highlight malicious JavaScript or malware siphoning off cardholder data. Merchant threat intelligence extends that reach, helping acquirers and compliance teams understand which merchants are compromised, risky, or under attack. Weekly ecosystem reports and case study-driven fraud intelligence further broaden the context, giving financial institutions the kind of situational awareness normally reserved for national cyber defense agencies.
This isn’t purely academic. Mastercard reports that since it began market testing, its intelligence-led approach helped partners identify and take down malicious domains linked to 9,500 compromised e-commerce sites, preventing an estimated $120 million in fraud losses. Those are numbers that speak directly to risk officers and bank executives alike.
Industry analysts are also framing this as part of a broader shift. Tracy “Kitten” Goldberg of Javelin Strategy & Research notes that “effective cybersecurity will increasingly depend on threat intelligence that crosses sectors and regions.” Payment networks like Mastercard have a privileged vantage point: they see both transaction-level anomalies and global cyber signals. Feeding this intelligence back into banks, merchants, and regulators can reduce reaction time and shift fraud management from reactive cleanup to proactive defense.
There’s also a talent and operational efficiency angle. As Banco Mercantil del Norte’s fraud lead put it, many banks simply don’t have the bandwidth to keep up with threat monitoring in-house. Embedding Mastercard Threat Intelligence into their workflows offers a force multiplier: curated, real-time intelligence that doesn’t require massive new operational headcount.
What this launch really signals is Mastercard leaning into its role not just as a payments processor, but as an intelligence clearinghouse for the financial ecosystem. With Recorded Future under its roof, it can deliver cyber-fraud fusion capabilities that most institutions could never build alone. And in a world where the boundary between cybercrime and financial crime has nearly dissolved, this move positions Mastercard at the heart of the fight—turning its global network into both a shield and a sensor for the entire payment ecosystem.