Really? I think it's more subtle - fraud detection is big business (Palantir et al) and presumably companies have to find a cost / benefit compromise between building their own solutions vs. contracting it out to experts. It might well end up cheaper and easier to add a .5% APR penalty to all their customers and take the hit on retention; it's not THAT competitive out there (at least here in the UK) IMO.