A way to take out spammers? 3 banks process 95% of spam transactions
If you want to stop spam then going after the banks and payment processors that enable their lucrative trade may be your best bet, according to research performed by a team from the University of California-San Diego …
Context & Ripple Effects
This finding caps a decade-long arc of measurement studies: researchers showed back in 2006 that ten spammers create 80 percent of all spam, then traced real profits through the Storm Worm botnet in 2008 and documented how spammers actually cash in. The May 2011 end-to-end trace of a spam Viagra purchase supplied the last piece — the full purchase funnel — and this paper names the narrow point where it all converges: just three banks clearing 95% of the transactions.
The timing matters because spam volumes were already sliding after the December 2010 reports of a significant decline, so the marginal value of each new takedown lever is under scrutiny. If payment is the bottleneck, the fight moves from inboxes to acquiring banks.
First-order effects
- The three named banks face immediate pressure from researchers, card networks, and regulators to terminate or refuse the merchant accounts that settle spam proceeds.
- Anti-spam groups get their first concrete target list: instead of chasing botnets and filter evasion, they can file abuse complaints against a handful of acquirers.
Second-order effects
- Spam operators will migrate to less scrupulous processors and offshore jurisdictions, raising their costs and pushing the industry toward tighter merchant-vetting standards across the payments chain.
- Card brands and acquirers face reputational exposure comparable to prior fraud scandals, incentivizing due-diligence fees and compliance requirements that raise the price of doing gray-market business online.
Third-order effects
- If the follow-the-money model holds, anti-abuse enforcement structurally shifts from content filtering at the inbox to financial chokepoints, with regulators treating payment processing as an enforcement surface for online crime more broadly.
- A small set of settlement institutions becomes a systemic single point of failure for illicit online commerce — concentrating both the power to disrupt it and the risk of collateral damage to legitimate high-risk merchants.
The trend: Anti-spam strategy is shifting from filtering messages to severing payment rails, as research keeps showing the economics of spam concentrate in a handful of financial intermediaries.