Fraudology Podcast with Karisse Hendrick

The episode delivers several genuinely useful operational insights - VAMP's immediate fine structure, TC40 attribution by descriptor rather than MID, and the chargeback representment gap for agentic transactions - that practitioners would not find in mainstream coverage. However, roughly a quarter of the runtime is conference promotion, a Sardine ad, and filler anecdotes, pulling the density down significantly.

“VAMP is not cheap. And there's no, there's no trial month. There's no safety month. That used to be that you had two to three months before the VFMPs or VDMPs would charge fines. That doesn't happen anymore. There's now it's the first month that you go over that 1.5%, you occur $8 per TC, 40 and per chargeback.”

“TC 40s are based on the descriptor, not the merchant ID. So if this fake company selling $20 Nikes created a website called Nike123 chances are the real Nike would get the TC 40s for those.”

The connection between agentic AI's price-optimisation behaviour and its susceptibility to phishing/clone sites - and the downstream VAMP consequence for innocent legitimate merchants - is a specific and non-obvious chain of reasoning. However, the bulk of the episode is reporting on an announced partnership and reading a Guardian article aloud, limiting how much original thinking is actually present.

“agents will be trained to look for the best price...those phishing websites are known for giving the best prices ever”

“my hope in asterisk is is that visa and OpenAI rework the liability for these circumstances to require the agentic platform OpenAI in this case to take financial liability for agent mistakes”

This is a solo episode; the host is a practitioner-level fraud consultant who runs the Merchant Fraud Alliance and clearly has real industry relationships (Visa contacts, Sardine CEO access), but she is not an operator who has run fraud at enterprise scale, and there is no guest to evaluate on seniority or relevance.

“I got a one on one demo from Supes, actually, uh, the CEO of Sardine while at a conference this spring on exactly how they can detect an AI agent.”

“I have been in touch with my contact at Visa, uh, who said, you know, this is such a new thing. They don't know if this has been considered yet, but that they were going to do their best to run it up the flagpole”

There are useful concrete specifics - the $8-per-TC40 VAMP fine, the 1.5% threshold, the 10-day acquirer notification window, Sardine named as a detection tool, and Matt Vega cloning a MasterCard site in five minutes - but the lone merchant case study is vague ('pretty big dollar transaction') and several claims about scale of future harm are asserted without data.

“first month that you go over that 1.5%, you occur $8 per TC, 40 and per chargeback”

“he cloned MasterCard's website right in front of me as we were talking and recording the podcast, uh, he did it in about five minutes”

As a solo monologue there is no interviewer craft to evaluate - no questions, no follow-ups, and no productive challenge. The host organises her argument coherently and does call out her own speculative limits, but the format inherently precludes the conversational dynamics this dimension rewards, and there is notable rambling and self-promotion diluting focus.

“I'm going to go ahead and read the LinkedIn post that I wrote about it to start, uh, just because I think I did a pretty good job of summarizing this.”

“My grandmother used to say if I ever said something wasn't fair, she would say, you know, the fair only comes once a year, meaning that nothing's fair and the county fair is the only thing that exists.”