Vincent Passaro
Head of Attacker Engineering & Intelligence Partnerships
Stripe Security. Creator of FT3
- Based
- San Diego, CA
- Focus
- Fraud intelligence · attacker engineering
- Experience
- 25 years in security
- Currently
- Stripe
- Framework
- FT3 · creator
Speaking
Vincent Passaro speaks on fraud intelligence, FT3 (the open fraud tactics-and-techniques framework he created at Stripe), and attacker engineering for agentic systems. He has been invited to speak by Intel 471, Mil-OSS, PCI SSC, Piper Sandler, RBLN, Team Cymru, and the Underground Economy conference (UE26). Formats: keynotes (15–45 min), sessions (45 min), conversations (20–70 min), and workshops (half to full day).
Bio
In the 82nd Airborne, Vince Passaro learned early that systems fail under pressure, and someone has to understand why. That has always been the work.
From Fort Bragg to Booz Allen, General Atomics, Fotis Networks, Buddha Labs, AWS, and Stripe, the pattern has stayed the same: understand how adversaries win, find where defense breaks, and build what should have existed all along.
At AWS, that meant response and cyber intelligence systems built for failure at global scale. At Stripe, it means attacker engineering, FT3, and frameworks that give defenders a shared operating language for fraud and adversary behavior.
The logos are not the story. The pattern is: find what is broken, understand it completely, and build what fixes it properly. No theater. No abstractions. Just the work.
Samples of topics to book
FT3 Evolution: From Static Classification to Living Agentic Framework
This session will provide a builder’s view of how fraud intelligence must evolve as adversaries use AI to accelerate their tactics. The next evolution is making that language operational, adaptive, and usable inside real investigative and intelligence workflows.
Also given as “FT3: The Industry’s First Agentic ATT&CK-Style Matrix” at Intel471 CyberCon, Frisco, Apr 2026, and as “Fighting Fraud with FT3” at Intel471 Unconference, San Diego, Feb 2026.
When Both Sides Have Agents: Attacker Engineering at Machine Speed
The next attacker may not need to break in. In agentic systems, an action can be permitted—and still adversarial. This talk moves beyond asking an LLM to just threat model and into model reasoning.
Simple and Complex Environments: A Service Provider’s Perspective
In this talk, Stripe shares practical observations from the field describing “simple” environments where merchants rely largely on service providers for payment processing and contrasts those with “complex” environments that directly contact or retain card data.
- Keynote
- 15–45 min
- Session
- 45 min
- Conversations
- 20–70 min
- Workshop
- Half to full day
Invited by
Cited by
F3 Design Principles and Methodology
MITRE’s Center for Threat-Informed Defense cites Stripe Fraud Tools Tactics and Techniques (FT3) among the prior frameworks its F3 framework analyzed and fused. Apr 2026.
Fraud Intelligence Beyond the Transaction
“Fraud is monetized in payments. It is built everywhere else.”
Vincent Passaro, quoted by Team Cymru, which highlights FT3 / FT3 2.0 as shared language for defenders. Sep 2026.
Recognition
Global Defender Ally Award
Team Cymru’s first Global Defender Ally Award for growing the defender community and advancing FT3 2.0. Received at The Underground Economy Conference (UE26), Strasbourg, Sep 2026.
Public appearances
Keynotes, conference sessions, podcasts, and writing across attacker engineering, fraud intelligence, and FT3. Full index available at vincentpassaro.com/media
Inquiry
hello@vincentpassaro.comTo book a talk, email with the subject “Speaking request: [event name]”. Replies usually within five business days. Views expressed are his own; inquiries are for personal speaking, training, and collaboration, not Stripe services or access to non-public information.