The cleanest victory in fraud prevention is a non-event. A payment goes through. A customer buys a train ticket, pays a contractor or sends money to a relative. Somewhere inside the transaction, software notices hundreds of clues, weighs them in a fraction of a second and wisely declines to make a fuss. No trumpet sounds for the purchase that was allowed to remain ordinary. For John Filby, that quiet passage is the point.
Filby is the chief executive of Outseer, a fraud-prevention company with roots in RSA's Fraud & Risk Intelligence business. The firm protects digital banking sessions and 3-D Secure card transactions, and its stated promise contains an unusually precise tension: stop fraud, not customers. Security businesses are usually rewarded for the door they slam. This one must also account for every door that ought to stay open.
That makes Filby's route to the corner office more useful than the usual procession of titles. He studied commerce at Queen's University, earned a law degree at Western University and later completed a master's degree in intellectual-property law at York University's Osgoode Hall Law School. He began as a corporate and intellectual-property lawyer, in a profession that treats language as an instrument and exceptions as expensive little animals. Then he moved into software, where rules still mattered but behavior could outrun them.
“We have a meaningful opportunity to help customers combat financial crimes in this dynamic threat landscape.”John Filby, on joining Outseer
The lawyer crosses into the transaction
In 1999, Filby co-founded eCash Technologies, serving as chief executive and a board member. The timing matters. Online commerce was escaping the desktop experiment and becoming a habit, but the grammar of paying online was still being written. eCash was acquired by InfoSpace in 2002, and Filby went on to work in the company's merchant-services business. In 2004 he became president and CEO of ISD Corporation, which made electronic-payment software for merchants.
The law had offered a world of defined parties and obligations. Digital payments offered a more mischievous cast: the legitimate cardholder, the merchant, the bank, the machine, the stolen credential and the stranger pretending to be familiar. A transaction could be properly authenticated and still be ruinous. A customer could behave oddly because life is odd. The central problem was no longer simply whether the rules had been followed. It was whether the pattern deserved trust.
At Fiserv, Filby led the Risk & Compliance Division and brought a suite of transactional-risk products to a global market. The division reached No. 1 in North America and No. 4 worldwide in the Chartis RiskTech100 ranking. At Deluxe, where he arrived in 2012, he led the Financial Services segment and several fintech acquisitions intended to help move a legacy services company toward a technology-led future. He later served as president, CEO and board member of Global Holdings. The company names changed; the recurring assignment was transformation.
A customer is not a rounding error
When Filby joined Outseer in April 2022, he inherited a business with decades of accumulated knowledge and the awkward youth of a new identity. Outseer had emerged the previous year from RSA's fraud and risk-intelligence portfolio. Its products had history; its name did not. The job required preserving the earned instincts of an established system while giving the independent company a sharper commercial direction.
Filby's public language around the work returns insistently to three groups: the team, the partners and the customers. It is the vocabulary of an operator more than an inventor. In early 2025, he wrote that Outseer was entering a third consecutive year of sales growth above 20 percent. In the same account, he placed that figure beside a customer Net Promoter Score of 40 and an employee recommendation rate above 90 percent. Revenue did not get to sit alone at the table. He argued that growth, customer satisfaction and employee engagement were related, and that all three mattered to sustainability.
This is Filby's idea of values-based leadership in practical clothes. A fraud platform exists in a thicket of conflicting incentives. A bank wants lower losses. A merchant wants more approvals. A customer wants to finish breakfast without proving, for the fourth time, that she is herself. An overeager defense can look impressive on a dashboard while behaving like a suspicious maître d'. The serious work is not maximizing intervention. It is improving judgment.
One transaction, several kinds of context
The emotional attack surface
The old cartoon of cybercrime featured a hooded stranger stealing a password. Modern scams are less considerate. The criminal may persuade the real account holder to log in, pass authentication and willingly press the button. The credentials are genuine. The intention has been hijacked.
Filby describes this territory as the “emotional attack surface.” It is a bleakly elegant phrase. Fraudsters manufacture urgency, romance, authority or fear, then use the victim's own access as their route through the bank. Authorized push-payment fraud forces prevention systems to look beyond the old binary of stolen versus valid credentials. A technically proper payment may still carry the behavioral outline of a con.
This is why Filby keeps returning to defense in depth. No single clue should be asked to carry the whole case. Device identifiers, location, behavior, transaction history and consortium intelligence become more useful when they are interpreted together. In 2025, Outseer added platform-native behavioral biometrics, designed to recognize anomalies in how people interact with their devices. Filby called the launch a landmark and credited both employees and clients. The wording was characteristic: technology arrived as the work of a network, not a magician.
“Defense in depth remains the gold standard in fighting fraud.”John Filby
AI, with a job description
Artificial intelligence has made the contest more lopsided and more symmetrical at once. Generative tools can help criminals compose persuasive messages, imitate voices and vary attacks cheaply. Defensive systems can use machine learning to find patterns across volumes of activity no analyst could review by hand. Filby's position is not that the acronym itself will save anyone. His case is for specialization.
In a 2025 interview, he separated predictive, generative and agentic AI rather than placing them in one sparkling bucket. Each has a different role. Specialized fraud platforms, he argued, give financial institutions leverage because they combine focused models with years of domain data. The larger principle is almost old-fashioned: use the right tool for the work, then make the tools cooperate.
At the Payments Canada Summit in May 2026, Filby opened his discussion by saying the industry was having an “everywhere all at once moment.” It was a measured acknowledgment of the noise around AI, followed by an operational question: where is the technology actually being used inside banks, and where does it still fall short? Later that year, Outseer announced certification of its AI management system under ISO/IEC 42001. Governance had entered the conversation alongside capability.
The distinction suits a former intellectual-property lawyer. Novelty is not the same as reliability. A model used to influence financial decisions needs oversight, traceability and a defined purpose. The fraud fighter cannot borrow the fraudster's fondness for improvisation.
The long ride
There are quieter clues to Filby's character in the margins of his public career. For more than seven years, he volunteered as a guest lecturer at the University of Minnesota's Carlson School of Management. He has also participated as a fundraising cyclist in the Seattle to Portland Bicycle Classic, a 200-mile route whose name contains the essential plan and omits the hills.
Cycling is an apt, if slightly irresistible, metaphor for his working life. He has moved through several generations of fintech without pretending that one launch settles the problem. Payment systems become faster; attacks become faster too. Authentication improves; criminals change the target from the credential to the person. A successful company grows; then it has to keep customers and employees willing to recommend it. Balance is not achieved once. It is continuously corrected.
Filby's aspiration for Outseer is expressed in unusually civic terms for enterprise software: make the world safer. He pairs it with a product discipline that is more modest and more testable: more signal, less noise. The two phrases need each other. Purpose without precision becomes a poster. Precision without purpose becomes a machine nobody should trust.
The honest customer will never see much of this labor. She will see a confirmation screen. The payment will clear. Her day will continue. Somewhere behind that ordinary moment, a long career in law, payments, risk and company building has arrived at its preferred outcome. Nothing happened, beautifully.