Identity verification has long relied on the assumption that a person can be distinguished from an impostor through evidence of who they are. But synthetic identities, deepfakes and increasingly sophisticated fraud techniques are putting that assumption under pressure.  

As criminals find new ways to manipulate identity data and bypass established checks, financial institutions face a growing challenge: how to establish trust when the evidence itself can no longer be taken at face value. The question is whether traditional verification methods can adapt quickly enough, or whether the industry needs to rethink what proving an identity actually means.

In the view of Stuart Morris, chief technology and product officer at SmartSearch, if you asked a compliance team a decade ago what identity verification meant, you would have got a reasonably simple answer.

He explained, “A document, a selfie, a database check. Confirm the person is who they say they are, run them through the usual watchlists, move on.” The answer, in the opinion of Morris, no longer holds.

Morris remarked, “In 2026, identity verification operates in an environment where the person on the other end of the screen might not be a person at all. The document they present might have been generated in minutes by a tool costing less than a monthly phone contract. The voice on the call confirming the transaction might be a cloned version of a real executive the fraudster has never met.”

The CTPO added that synthetic identities are the biggest shift in financial crime typology since online banking became mainstream.

Source link