Summary

We sit down with Mike Vergara - a fraud and risk leader with more than two decades in the space, spanning RSA, PayPal, Blackhawk, and now Trustly. Mike brings a rare product-first lens to risk, and the conversation draws out how he's built multi-tiered risk systems that are not just defensive but powerful business enablers. We get into why the "I Love You" virus era looks quaint compared to today's adversaries, how a Brazilian credit-card-sharing lesson reshaped PayPal's global models, why first-party abuse is fundamentally harder than third-party fraud (including the rise of "affluent abusers" who return their couch before they move apartments), how PayPal built "human-in-the-loop" before the term existed, and what the AI era means for risk leaders and product managers. A candid, insightful episode for anyone building or leading in fraud, risk, product, or fintech.

Show Notes

Guest: Mike Vergara — VP of Risk Management, Trustly

• Hosts: Arthi Rajan Makhija & Jayan Tharayil
  

Key Topics Discussed:

• Mike's career journey from RSA through PayPal, Blackhawk, and Trustly
• Why risk is a scale, not a binary — and the limits of the InfoSec mindset
• Building multi-tiered risk systems on "people and data"
• The Brazil credit-card-sharing lesson that reshaped PayPal's global models
• Risk as a business enabler — committing numbers to the CFO
• Dolphins in the net: CAC as the hidden ROI of nuanced risk
• Why first-party abuse is harder than third-party fraud
• Affluent abusers, policy abuse, and the "I didn't know" defense
• Trust vs. friction — letting customers know you're watching
• Gift card fraud and victim-assisted scams at Blackhawk
• Pinch's "three strike" problem: stolen card, empty-box return, chargeback
• ML vs. LLMs — and why explainability still matters
• Building "human-in-the-loop" at PayPal before it had a name
• What a great risk PM does that AI can't — and the eBay Live story
• Rapid-fire: crisis leadership, consumer trust in the AI era, and the PayPal risk mafia

Chapters

• 00:00 Mike's Career Journey — From RSA & Public Key Infrastructure to Trustly
• 01:54 From InfoSec to Product Thinking — "How Much Is a New York Times Article Worth?"
• 05:44 Building Multi-Tiered Risk Systems — People, Data & the Brazil Lesson
• 10:00 Risk as a Business Enabler — Committing Revenue Numbers to the CFO
• 11:16 The Business Case for Nuance — Dolphins in the Net & the Hidden ROI of CAC
• 15:51 First-Party Abuse vs. Third-Party Fraud — Why Intent Is So Hard
• 19:24 Affluent Abusers, Policy Abuse & Letting Customers Know You're Watching
• 25:45 Lessons from Blackhawk — Gift Card Fraud & Victim-Assisted Scams
• 29:32 Pinch's "Three Strike" Problem — Connecting Return & Redemption Systems
• 31:37 ML vs. LLMs — Strengths, Weaknesses & Why Explainability Still Matters
• 35:30 Building "Human-in-the-Loop" at PayPal Before the Term Existed
• 38:35 The Modern Risk PM in the AI Era — and the eBay Live Story
• 44:22 The "In a Pinch" Round — Crisis, Consumer Trust & the PayPal Risk Mafia
• 50:37 The Most Creative Abuse MO Mike Ever Tipped His Hat To
• 52:45 Closing

Keywords

fraud prevention, risk management, Trustly, Blackhawk, RSA, first-party abuse, third-party fraud, return abuse, policy abuse, multi-tiered risk, human-in-the-loop, gift card fraud, victim-assisted scams, affluent abusers, product management, risk as business enabler