Identity theft, also known as third-party fraud losses, is just the tip of the application fraud iceberg. First-party fraud can be 10 times as much.