Projected global fraudulent transactions neared $1.2 trillion in 2023. These losses highlight the critical security burden that third-party vendor risk now places on payment systems.
Key Takeaways
- $1.2 trillion in fraudulent transactions was projected globally for 2023, highlighting the payments security burden that supply-chain risk can amplify
- $32.0 billion reported fraud losses in the U.S. in 2022, underscoring the financial impact of compromised payment ecosystems
- $4.4 million median cost of a data breach for healthcare organizations in 2023 (Ponemon/IBM-styled datasets reported in industry analysis), showing sector-level exposure through vendors
- 86% of companies reported supply-chain disruptions in 2021 due to COVID-19-related constraints (survey), which affects downstream payment cycles
- $7.0 million average cost of downtime per hour reported in some enterprise studies, illustrating the payments operational cost of third-party outages
- $3.2 billion estimated global economic losses from cyber incidents in 2020 affecting financial services (government-linked estimate), with downstream operational effects
- $1.0 trillion global trade finance gap in 2022, relevant because supply-chain finance underpins payment flows across the supply chain
- $140 billion global trade finance demand gap for SMEs in 2022 (from the same dataset/handbook), impacting payment liquidity
- $3.3 trillion global B2B e-invoicing market size in 2024 (forecast), which influences payment automation
- 25% of organizations planned to adopt real-time payments capabilities by 2024 (survey), changing settlement schedules across payments supply chains
- 49% of breaches involved malware (including trojans and backdoors) used to compromise systems tied to payment workflows (2024 Verizon DBIR).
- 68% of organizations reported using automated threat intelligence to improve detection and response (2024 CrowdStrike Global Threat Report referenced in CrowdStrike blog).
- 76% of surveyed organizations said they use vendor risk questionnaires as part of their third-party risk process (2024 EcoVadis/third-party compliance survey reported by EcoVadis).
- 62% of organizations said they require security testing (e.g., penetration testing or security assessments) for critical vendors (2024 SecurityScorecard third-party risk report).
- NIST’s Computer Security Resource Center (CSRC) reported that supply-chain risk management is addressed via the NIST Secure Software Development Framework (SSDF) with 20 practices, published in 2022.
Payments supply chains face rising fraud, cyber and operational disruption, making third party risk controls essential.
Related reading
01 · Category
Market Size10 stats
01
$1.0 trillion global trade finance gap in 2022, relevant because supply-chain finance underpins payment flows across the supply chain
02
$140 billion global trade finance demand gap for SMEs in 2022 (from the same dataset/handbook), impacting payment liquidity
03
$3.3 trillion global B2B e-invoicing market size in 2024 (forecast), which influences payment automation
04
$6.7 billion global supply chain management software market size in 2023 (forecast by vendor research), relevant to payments-linked procurement orchestration
05
$12.6 billion global supply chain risk management software market size in 2023 (vendor research), reflecting spend on vendor-risk controls
06
$8.8 billion global identity and access management market size in 2023 (vendor research), relevant to payment vendor access control supply chain security
07
$2.2 billion global third-party risk management software market size in 2023 (vendor research), directly relevant to payments supply chain governance
08
$1.8 billion global regulatory compliance software market size in 2023 (vendor research), supporting payments regulatory reporting and controls
09
$5.3 billion global fraud detection and prevention market size in 2023 (vendor research), relevant to payment supply chain fraud mitigation
10
$1.7 billion global payment orchestration market size in 2023 (vendor research), relevant to coordinating across payment service providers and vendors
Interpretation
Market Size Interpretation
With the supply chain payments ecosystem sitting behind a $1.0 trillion trade finance gap in 2022 and a further $140 billion SME funding shortfall, the market opportunity for payments-linked supply chain solutions is growing alongside automation and risk needs, reflected in $3.3 trillion global B2B e-invoicing in 2024 and $6.7 billion supply chain management software plus $12.6 billion supply chain risk management software expected in 2023.
02 · Category
Regulation & Standards5 stats
01
NIST’s Computer Security Resource Center (CSRC) reported that supply-chain risk management is addressed via the NIST Secure Software Development Framework (SSDF) with 20 practices, published in 2022.
02
The U.S. SEC’s 2023 cyber disclosure rules adopted under Regulation S-K require registrants to disclose material cybersecurity incidents within four business days (Form 8-K Item 1.05).
03
The EU Digital Operational Resilience Act (DORA) entered into force on 16 January 2023 (Regulation (EU) 2022/2554).
04
The EU NIS2 Directive (Directive (EU) 2022/2555) sets requirements for entities, including essential and important entities, to manage and report incidents by 2024 (transposition deadline).
05
The U.S. Department of Treasury’s Office of Foreign Assets Control (OFAC) administered sanctions against 1,190 individuals/entities and 143 vessels/aircraft in 2023 (OFAC annual report).
Interpretation
Regulation & Standards Interpretation
Across major regulation and standards regimes, rulemaking is rapidly tightening expectations for supply chain and related cyber risk, as shown by the EU DORA taking effect on 16 January 2023, the EU NIS2 directive setting new management requirements, and the U.S. SEC’s 2023 cybersecurity disclosure rules alongside OFAC sanctions reaching 1,190 individuals and 143 entities.
03 · Category
Risk & Compliance4 stats
01
$1.2 trillion in fraudulent transactions was projected globally for 2023, highlighting the payments security burden that supply-chain risk can amplify
02
$32.0 billion reported fraud losses in the U.S. in 2022, underscoring the financial impact of compromised payment ecosystems
03
$4.4 million median cost of a data breach for healthcare organizations in 2023 (Ponemon/IBM-styled datasets reported in industry analysis), showing sector-level exposure through vendors
04
54% of organizations said they were more likely to use third-party security monitoring tools to address compliance needs (2024 survey), indicating compliance-linked security investments
Interpretation
Risk & Compliance Interpretation
With projected fraudulent transactions reaching $1.2 trillion globally in 2023 and the U.S. seeing $32.0 billion in fraud losses in 2022, Risk and Compliance teams are under mounting pressure to strengthen payment security, and the 54% of organizations increasingly relying on third-party security monitoring tools signals a growing compliance-driven shift toward external oversight.
More related reading
04 · Category
Operational Disruptions3 stats
01
86% of companies reported supply-chain disruptions in 2021 due to COVID-19-related constraints (survey), which affects downstream payment cycles
02
$7.0 million average cost of downtime per hour reported in some enterprise studies, illustrating the payments operational cost of third-party outages
03
$3.2 billion estimated global economic losses from cyber incidents in 2020 affecting financial services (government-linked estimate), with downstream operational effects
Interpretation
Operational Disruptions Interpretation
In the operational disruptions category, 86% of companies saw COVID-19 supply-chain disruptions in 2021 while downtime can cost about $7.0 million per hour, underscoring how tightly connected logistics interruptions and operational resilience are for payments alongside the broader $3.2 billion global losses from cyber incidents affecting financial services in 2020.
05 · Category
User Adoption3 stats
01
68% of organizations reported using automated threat intelligence to improve detection and response (2024 CrowdStrike Global Threat Report referenced in CrowdStrike blog).
02
76% of surveyed organizations said they use vendor risk questionnaires as part of their third-party risk process (2024 EcoVadis/third-party compliance survey reported by EcoVadis).
03
62% of organizations said they require security testing (e.g., penetration testing or security assessments) for critical vendors (2024 SecurityScorecard third-party risk report).
Interpretation
User Adoption Interpretation
For user adoption in payments supply chains, a strong majority of organizations are already putting security and risk tools into routine workflows, with 76% using vendor risk questionnaires and 62% requiring security testing for critical vendors, while 68% leverage automated threat intelligence to improve detection and response.
06 · Category
Industry Overview2 stats
01
25% of organizations planned to adopt real-time payments capabilities by 2024 (survey), changing settlement schedules across payments supply chains
02
49% of breaches involved malware (including trojans and backdoors) used to compromise systems tied to payment workflows (2024 Verizon DBIR).
Interpretation
Industry Overview Interpretation
For the Industry Overview in supply chain for the payments industry, 25% of organizations planned to adopt real-time payments capabilities by 2024, while 49% of breaches involved malware tied to payment workflows, underscoring how accelerating settlement is happening alongside persistent cyber risk.
report visual · Key figures
Payments supply chains face mounting risk and compliance pressure
Regulatory, cyber, and operational risk factors are increasing the need for stronger supply-chain governance and security across payments ecosystems.
86%
86% of companies reported supply-chain disruptions in 2021 due to COVID-19-related constraints (survey), which affects d
49%
49% of breaches involved malware (including trojans and backdoors) used to compromise systems tied to payment workflows
25%
25% of organizations planned to adopt real-time payments capabilities by 2024 (survey), changing settlement schedules ac
source-verifiedgartner.com · verizon.com · consultancy.uk2024
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Thomas Lindqvist. (2026, February 13). Supply Chain In The Payments Industry Statistics. Gitnux. https://gitnux.org/supply-chain-in-the-payments-industry-statistics
MLA
Thomas Lindqvist. "Supply Chain In The Payments Industry Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/supply-chain-in-the-payments-industry-statistics.
Chicago
Thomas Lindqvist. 2026. "Supply Chain In The Payments Industry Statistics." Gitnux. https://gitnux.org/supply-chain-in-the-payments-industry-statistics.
Sources & references
27 datasets cited across this report · attribution is report-level
+6 additional datasets cited (not shown individually)