Fraud Strategist, Business & Commercial Banking

The role

We are searching for a Fraud Strategist, Business & Commercial Banking to own fraud strategy across SoFi's business banking surface: business onboarding, SMB lending, business deposit accounts, and commercial money movement. Business fraud is a different discipline from consumer fraud. The unit of risk is not a person but an entity, its beneficial owners, and the relationships between them, and the attack patterns reflect that: synthetic and shell businesses at application, straw ownership, bust-out and loan stacking in lending, business email compromise and vendor impersonation in payments, check fraud, and mule networks operating behind legitimate-looking registrations. You will design decisioning that verifies the business and the humans behind it as one risk surface, and that follows the entity from formation data through funding, transacting, and repayment. The work requires fluency in KYB orchestration, beneficial ownership verification, entity resolution across businesses and owners, commercial payment fraud typologies, and the rule-engine craft to translate that fluency into production policy. You do not need to have spent your whole career in business banking. Much of what makes a strong business fraud strategist was learned somewhere else: consumer identity verification, scam and ATO defense, payments risk, first-party analytics. If you can reason clearly about which of those skills transfer to an entity context and which do not, you will do well here.

By joining SoFi, you'll join a company changing how people and businesses manage their money. We offer the pace of a growing startup with the stability of an established leadership team.

What you'll do:

The Fraud Strategist, Business & Commercial Banking will help SoFi build a durable business fraud defense by:

• Owning fraud strategy across business onboarding, SMB lending, business deposits, and commercial payments, designing decisioning that treats the entity, its beneficial owners, and its transaction behavior as a single risk surface rather than separate checks.
• Leading business identity strategy at onboarding: entity verification against registry and standing data, beneficial ownership (UBO) verification, TIN and EIN validation, and detection of synthetic businesses, shell and shelf companies, and recently formed entities dressed to pass KYB.
• Designing detection for commercial payment fraud: business email compromise, vendor impersonation and invoice fraud, payroll diversion, check fraud (counterfeit, altered, and remote deposit), and risk-tiered decisioning for ACH origination, wire, and real-time payments from business accounts.
• Building first-party and credit-abuse defense for SMB lending: bust-out, loan stacking, misrepresented financials and falsified bank statements, straw ownership, and post-funding identity theft with clean unwind procedures.
• Building the analytics layer in SQL and Python: entity resolution linking businesses to owners, owners to other businesses, and both to devices and bank accounts; shared feature tables joining KYB, transaction, and credit data; and rule-level attribution for every strategy change.
• Partnering with EPD, Fraud Ops, Credit, AML/BSA, and product owners to ship strategy changes through the rules engine with clean governance, performance monitoring, and clear escalation when losses deviate from forecast.

What you'll need:

• BA/BS in Statistics, Information Systems, Mathematics, Data Science, or related fields, or equivalent work experience, and 5-8 years of work experience in Fraud Analytics. Direct business or commercial banking exposure is a strong plus. Deep consumer fraud experience with a clear view of what transfers to an entity context is an acceptable substitute.
• Business Identity: Hands-on experience with KYB orchestration and business identity data: secretary of state and registry records, beneficial ownership verification, TIN matching, and vendor stacks such as Middesk, Baselayer, LexisNexis, and Sentilink, plus document and bank-data verification tools (Inscribe, Truepic, Ocrolus, Plaid). Deep consumer IDV experience (Socure, Persona, Veriff) paired with a working grasp of how entity verification differs is a credible starting point.
• Fraud Typologies: Working command of the business fraud taxonomy: synthetic and shell businesses, straw and nominee ownership, bust-out, loan stacking, business email compromise, vendor and invoice fraud, payroll diversion, check fraud, and mule activity routed through business accounts. Consumer-side depth in the analogous patterns (synthetic identity, first-party abuse, scams, ATO) counts, with explicit framing of where those patterns map and where they break.
• Entity Resolution: Demonstrated track record using entity-level analysis to link one bad actor across businesses, owners, devices, and bank accounts that look clean in isolation, and to separate genuinely new businesses from recycled fraud infrastructure.
• Money Movement and Onboarding: Working knowledge of onboarding orchestration, rules engines (Oscilar, SAFE, Camunda), and the economics of risk-tiered limits for ACH origination, wire, and real-time payments in a business context.
• Balance Friction and Growth: Deep mastery of evaluating trade-offs between fraud mitigation and UX, ensuring security strategies protect the business without compromising key conversion and retention metrics.
• Architect Scalable Data Systems: Expert-level SQL/Python skills used to build automated, high-volume data architectures and statistical models that serve as the foundation for global risk detection.
• Drive Strategic Influence: A proactive leader who uses cross-functional persuasion to align stakeholders across product lines and owns the end-to-end execution of complex initiatives in fluid environments.
• Founders' Mentality: You need to have a positive, proactive attitude, being able to identify problems, raise proposals, and be an advocate of your initiatives. Learn, iterate, and excel.