Velocity control is a fraud-control rule that limits how quickly or how often transactions, logins, or account changes can happen. It can apply per card, account, device, beneficiary, IP address, or time window, and it may cap counts, amounts, or both. The goal is to slow suspicious activity enough for monitoring systems to notice and for a bank to intervene.
It matters because many attacks depend on speed. Criminals may test stolen cards, move money through multiple transfers, or trigger repeated payment attempts before a victim can react. In modern banking, especially with instant payments and remote onboarding, there is less time to stop abuse after a transaction starts. Defenders use velocity limits, step-up authentication, alerts, and temporary holds to reduce fraud without blocking normal customer behavior.