Scammers have virtual smartphones on speed dial for fraud

Group-IB research described in the article warns that criminals are using virtual "cloud phones"—fully emulated mobile devices with spoofed device IDs, IPs, geolocation, and sensor data—to commit authorized push payment (APP) fraud. These cloud phones can be preconfigured with banking apps and transaction histories to appear legitimate to financial institutions, enabling transfers that bypass traditional device-fingerprinting and telemetry-based fraud detection; the report urges financial firms to adopt multi-layered detection (device-environment correlation, infrastructure visibility, behavioral modeling, graph analytics) to identify these stealthy devices.