Zip lost half its value in a morning after fraudsters opened fake accounts: the BNPL warning for Southeast Asia

How did Zip lose half its market value in a morning? A fraud attack it had already contained, disclosed alongside otherwise healthy results. Zip Co shares plunged as much as 50.5 percent on Friday 23 October to a two and a half year low of 1.025 Australian dollars, their worst intraday loss ever, after the buy now pay later company revealed an external fraud event in the United States, as reported by Investing.com. The stock later pared losses to trade down about 30 percent.

The numbers behind the panic were not catastrophic. Transaction volume and income both grew in the quarter. But the fraud exposed a weakness that every digital lender fears: criminals can open accounts faster than risk systems can spot them. For Southeast Asia, where buy now pay later has exploded through Atome, Grab PayLater, Kredivo and others, Zip's bad day is a lesson worth studying closely.

What happened at Zip?

Zip disclosed an "external fraud event" in the United States involving the coordinated creation of new accounts to execute transactions that were never repaid. The attack temporarily disrupted transaction volumes in July and August and added 7.2 million dollars to Zip's cash operating expenses, according to the company's first quarter update. Zip said it had notified the relevant authorities and lodged a claim with its insurer.

The fraud also pushed up losses. Net bad debts written off rose to 49.5 million dollars in the quarter from 39.3 million dollars in the previous quarter, equal to 1.93 percent of total transaction volume. Zip said it expects bad debts to decline in the second fiscal quarter while remaining in the top half of its 1.5 to 2.0 percent target range.

Elsewhere, the business kept growing. Total transaction volume rose 18 percent to 4.6 billion Australian dollars, total income rose 17 percent to 376.1 million dollars, and adjusted earnings before interest, tax, depreciation and amortisation rose nearly 20 percent to 75.1 million dollars. Capital Brief reported that Zip reaffirmed its full year guidance.

Why investors panicked

The market reaction was out of proportion to the reported loss, and that is the point. Zip's shares had already fallen sharply this year amid concerns over slowing customer demand, and Friday's slump brought the year to date decline to nearly 57 percent. In that context, any sign that growth or credit quality was weaker than thought triggered a stampede.

Fraud also raises questions that investors cannot easily answer. How many fake accounts got through? Have the controls been fixed? Could it happen again, in another market, at a larger scale? Until management provides convincing answers, uncertainty is priced as risk.

In consumer lending, a fraud loss is never just a number. It is a question about whether the risk engine can be trusted.

The attack method, coordinated creation of new accounts, is sometimes described as synthetic or bust out fraud. Criminals build or borrow identities, open many accounts quickly, spend up to their limits and disappear. Buy now pay later firms are attractive targets because approvals are fast and checks are designed to minimise friction.

What it means for buy now pay later in Southeast Asia

Buy now pay later has grown rapidly across Southeast Asia, offered by standalone players and super apps alike. Grab has deepened its push into consumer credit, including through its relationship with Atome, which we covered in our report on Grab, Atome and the 1.49 billion dollar BNPL lending push. Indonesia's market is crowded with digital lenders, and the Philippines and Vietnam are adding users fast.

The same features that drive growth, instant approvals, minimal paperwork and mobile onboarding, make the sector vulnerable to organised fraud. Southeast Asia also faces sophisticated scam networks that already exploit banks and payment apps. The key lessons from Zip for regional lenders include:

• Fast onboarding must be matched by strong identity verification and device checks
• Sudden spikes in new account creation should trigger automatic reviews
• Fraud losses can hit both credit metrics and operating costs at once
• Clear, early disclosure reduces the risk of a market panic
• Insurance can soften losses but does not restore investor confidence

Regulation is tightening too

Regulators across the region have moved to oversee buy now pay later more closely. Singapore has an industry code for providers, and Malaysia has moved to bring BNPL under a consumer credit framework. Indonesia's financial services authority supervises digital lending and has tightened rules on credit assessment. We tracked the global trend in our analysis of how BNPL regulation is reshaping consumer credit.

Stronger rules usually focus on affordability and consumer protection, but fraud controls are becoming a supervisory priority as well. A lender hit by large scale fraud may face questions not only from investors but from regulators about its onboarding and monitoring processes.

What comes next for Zip

Zip's immediate task is to rebuild confidence. That means showing that the US fraud has been contained, that bad debts are falling as promised, and that customer growth is recovering. The second quarter update will be closely watched for evidence that the 1.93 percent bad debt ratio is moving back toward the middle of the target range.

For the wider sector, the episode is a warning that growth without robust fraud controls can be wiped out in a single trading session. Buy now pay later firms in Southeast Asia, many of which are preparing for listings or new funding rounds, will want to show investors that their risk systems can withstand a coordinated attack.

Zip's dramatic share price collapse shows how unforgiving markets are toward fraud in consumer lending, even when the underlying business is still growing. A coordinated attack using fake accounts exposed the trade off between frictionless onboarding and robust risk control. For Southeast Asia's fast growing buy now pay later sector, the lesson is clear: invest in fraud defences before the market forces you to.