Candescent has added Memcyco to its marketplace. The offering is now generally available to eligible bank and credit union clients.
The addition expands Candescent's identity, fraud and security partner roster with a tool designed to tackle account takeover, phishing and digital impersonation before stolen credentials are used.
Memcyco is available for single sign-on web and mobile environments. Candescent says it can be deployed without software agents on end-user devices, avoiding disruption to customer activity and day-to-day operations.
The move reflects a broader push by financial technology providers to address fraud earlier in the attack chain. Rather than focusing only on logins or transactions, banks are seeking more visibility into fake websites, lookalike domains, suspicious devices and exposed users before an attempted breach reaches internal systems.
Earlier detection
Through the marketplace, financial institutions can use Memcyco to identify users on fake sites, present warnings, redirect them or block data entry. The service also feeds decoy data to attackers, identifies devices through reused "Canary Credentials", tracks malicious devices even if IP addresses change or cookies are cleared, and sends intelligence into fraud, Security Information and Event Management, and Identity and Access Management systems.
Other functions listed by the companies include monitoring fake sites and domains, detecting credential stuffing and brute-force attempts, scoring session risk, providing incident dashboards and workflows, and taking down fake sites and apps.
The focus addresses a gap for many lenders and credit unions, where existing controls are often strongest at the point of authentication or payment. By then, a customer may already have been lured to a fraudulent site or had credentials exposed.
Gareth Gaston, Chief Product Officer at Candescent, said many attacks now begin before customers or members ever reach the login screen.
"Account takeover, phishing and digital impersonation are increasingly difficult to combat because much of the attack activity begins before customers or members ever reach the login screen," said Gareth Gaston, Chief Product Officer, Candescent.
"With Memcyco, we're giving banks and credit unions an upstream layer of protection that identifies exposed users, suspicious devices and active impersonation attempts in real time while preserving the seamless experiences their customers and members expect," Gaston said.
Marketplace strategy
The listing supports Candescent's effort to build a connected identity and fraud ecosystem around its banking platform. The company serves more than 1,300 banks and credit unions, representing more than 30 million registered users.
For marketplace operators in financial services, adding specialist fraud vendors can give clients access to tools without requiring a separate procurement and integration process for each service. It also allows banks to combine external intelligence with existing fraud monitoring and access controls.
Within that structure, Memcyco provides signals from outside a bank's own login and transaction systems, including information tied to impersonation attempts and devices believed to be linked to attackers. Those signals can then be used by existing fraud and security systems for earlier intervention.
Israel Mazin, Chief Executive Officer at Memcyco, said the partnership is intended to bring visibility forward in the attack cycle.
"Account takeover doesn't start at login. By the time traditional controls see the resulting login or transaction, the customer may already have been deceived and their credentials compromised," said Israel Mazin, Chief Executive Officer, Memcyco.
"Our partnership with Candescent gives financial institutions visibility earlier in that attack journey, when there is still an opportunity to intervene. Together, we're helping banks and credit unions move fraud prevention upstream without adding friction for legitimate customers," Mazin said.
The companies say the service links signals across fake sites, suspicious devices, exposed users, compromised credentials and accounts considered at risk. In practice, that means a bank could flag activity before a login attempt succeeds, rather than reacting after a fraudulent session or payment has begun.
The approach also speaks to cost pressure in fraud operations. Earlier detection can reduce downstream case handling, customer remediation and losses associated with account recovery, while giving institutions more evidence when investigating coordinated phishing and impersonation campaigns.
The launch adds another fraud and security option to Candescent's marketplace as banks and credit unions face pressure to strengthen digital defences without making online access harder for legitimate users.