Credit Card Fraud and Rico Claims: Defense Strategies

RICO defines an enterprise as any individual, partnership, corporation, association, or other legal entity, and any union or group of individuals associated in fact, although not a legal entity. Courts have held that the enterprise must be an entity separate from the pattern of racketeering activity itself; the enterprise is the vehicle through which the pattern operates. For a corporation defending against RICO charges, this distinction is critical because the plaintiff must prove the corporation functioned as an ongoing organization with some continuity and hierarchy, not merely that fraudulent transactions occurred. If the plaintiff conflates the fraud scheme with the enterprise, or cannot identify a distinct organizational structure, the RICO claim may fail at the threshold.

A pattern requires at least two acts of racketeering activity within ten years. Mail fraud, wire fraud, and identity theft are common predicate acts in credit card fraud RICO cases. Courts require that the predicate acts be related and pose a threat of continued criminal activity; isolated or sporadic fraudulent transactions may not satisfy the pattern requirement. A corporation's defense often turns on demonstrating that the alleged acts were disconnected, that they occurred outside the ten-year window, or that they do not constitute the specific predicate acts alleged. Additionally, if the plaintiff relies on civil RICO, the predicate acts must still constitute violations of the predicate statutes, even though criminal conviction is not required.

Credit card fraud standing alone involves unauthorized use of a card, identity theft, or misrepresentation in a transaction. RICO incorporates fraud as a predicate act but requires the plaintiff to prove that the corporation used the fraud scheme as a vehicle for conducting an ongoing enterprise. In practice, courts have held that a single fraudulent transaction, even if proven, does not establish RICO liability without evidence of the enterprise structure and the pattern. A corporation's defense often emphasizes that isolated employee misconduct or a limited number of fraudulent transactions do not constitute the organizational conspiracy or systematic operation that RICO contemplates. This distinction has proven decisive in many cases where plaintiffs conflate ordinary commercial fraud with organized racketeering.

RICO requires that the defendant participate in the conduct of the enterprise through the pattern of racketeering activity. Mere knowledge of fraud, or even negligent failure to prevent it, does not satisfy this requirement. A corporation defending against RICO allegations must demonstrate that it did not knowingly participate in or facilitate the fraudulent scheme. From a practitioner's perspective, this element often becomes a battleground because plaintiffs may attempt to impute knowledge to the corporation based on the conduct of individual employees or agents. Corporate counsel should focus on evidence of corporate policies, training, and controls designed to prevent fraud, as well as evidence that the corporation took corrective action upon discovering misconduct. Documentation of compliance efforts and swift remediation can undermine the plaintiff's theory of knowing participation.

If the underlying credit card fraud allegations are weak or legally insufficient, the RICO claim collapses because the predicate acts are its foundation. A corporation should scrutinize whether the alleged acts constitute mail fraud, wire fraud, or other qualifying predicate offenses under the applicable statutes. For example, if the plaintiff alleges credit card fraud but cannot prove reliance, causation, or scienter (knowledge and intent to defraud), the predicate act may fail. Additionally, if the plaintiff cannot establish that the corporation itself, rather than a rogue employee acting against corporate policy, committed the fraud, the predicate act attribution may be defective. This is where the corporate client's internal investigation and documentation of compliance efforts become crucial evidence.

Even if isolated fraudulent transactions occurred, the corporation can argue that they do not constitute a pattern because they are temporally isolated, unrelated in method or purpose, or do not demonstrate the threat of continued activity that RICO requires. Courts have rejected RICO claims where the plaintiff presented only two or three sporadic acts separated by years or committed by unrelated individuals without evidence of organizational coordination. Similarly, if the plaintiff cannot identify a distinct enterprise structure separate from the alleged fraud, the RICO claim fails. A corporation's defense here involves presenting evidence of internal controls, compartmentalization, and the absence of a coordinated scheme to defraud credit card holders or issuers.

The corporation can argue that it did not knowingly participate in the conduct of the enterprise through the pattern of racketeering activity. This defense is particularly strong when the corporation can demonstrate that it discovered the fraud, investigated it, and took corrective action, including termination of employees or referral to law enforcement. Courts have recognized that corporate policies and compliance mechanisms, even if imperfect, can negate the inference of knowing participation. Documentation of the corporation's response to fraud allegations is critical evidence in this regard.

Under Federal Rule of Civil Procedure 9(b), allegations of fraud must be stated with particularity. RICO claims, which typically depend on underlying fraud predicate acts, are subject to heightened pleading scrutiny. In the Southern District of New York and other federal courts in New York, defendants routinely move to dismiss RICO claims for failure to plead the predicate acts with sufficient specificity. A corporation should carefully review the plaintiff's complaint to identify vague or conclusory allegations regarding the credit card fraud predicate acts. If the complaint fails to identify specific transactions, dates, or the manner in which the corporation participated, a motion to dismiss may succeed. Corporate counsel should preserve evidence of the corporation's contemporaneous records, including transaction logs, customer account files, and compliance documentation, because these records will be critical both to defending against the pleading challenge and to demonstrating the absence of a knowing pattern of fraud.

Upon receipt of a RICO complaint alleging credit card fraud, the corporation should immediately implement a litigation hold to preserve all relevant documents, including transaction records, customer communications, employee records, compliance policies, and communications about the alleged fraud. The corporation should also consider engaging outside counsel or a forensic investigator to conduct an internal investigation that can inform the defense strategy and, if appropriate, support a motion to dismiss. This investigation should focus on identifying the specific transactions alleged, determining whether they involved corporate authorization or policy, and documenting the corporation's response upon discovering the conduct. In New York state and federal practice, courts may impose sanctions for failure to preserve evidence, so early and comprehensive preservation is both legally necessary and strategically valuable.

A RICO claim often accompanies direct fraud allegations or claims under state consumer protection statutes. The corporation's defense must coordinate across these theories because a successful defense to the RICO claim may depend partly on evidence that also defeats the underlying fraud allegations. Conversely, weaknesses in the fraud defense may undermine the RICO defense. Corporate counsel should work with trial counsel to ensure that the defense strategy addresses both the predicate acts and the organizational elements required by RICO, and that discovery strategy prioritizes evidence that supports the corporation's theory on each element. Additionally, if the corporation has related credit card debt or credit card fraud matters, counsel should evaluate whether those proceedings inform or conflict with the RICO defense.

A corporation facing RICO allegations based on credit card fraud should focus early on documenting its compliance infrastructure, identifying weaknesses in the plaintiff's pleading regarding the predicate acts and pattern elements, and preserving evidence that demonstrates the absence of knowing corporate participation in any fraudulent scheme. The strength of a RICO defense often turns on whether the corporation can show that the alleged conduct was isolated, that it did not constitute a pattern, and that the corporation did not knowingly participate in or facilitate the fraudulent activity through an organized enterprise structure.