Topic starter
10/07/2026 9:22 pm
TL;DR: Agentic AI breaks the identity verification assumptions behind human-centric fraud controls, while banks are already blocking 300 to 500 deepfake attempts per day and human reviewers perform roughly 8x worse than machine learning models in IDV, according to Incode. The operational gap is no longer theoretical: identity programmes built around people, documents, and review queues now face sessions with no stable human subject to verify.
Editorial analysis by NHI Mgmt Group, based on content published by Incode: “10 Insights on Deepfake Fraud and Identity Security From Money 20/20 Europe”.
Key questions
Q: What breaks when identity verification assumes there is always a human behind the session?
A: The model breaks when the subject is an AI agent or a synthetic identity that cannot be verified through conventional human attributes.
Q: Why do AI deepfakes increase fraud risk even when people are trained to spot them?
A: Training helps, but it cannot reliably overcome synthetic voice, video, and writing that mimic familiar people under pressure.
Q: How do teams know their identity controls are keeping up?
A: Look for evidence that the programme can explain who owns each identity, when access is reviewed, and how quickly dormant access is removed.
Practitioner guidance
- Recast identity assurance around actor type Map where your current verification stack assumes a human subject and where it should instead govern agent ownership, delegated authority, and runtime scope.
- Treat account recovery as a high-risk lifecycle stage Test recovery paths separately from onboarding, then remove weak re-entry factors such as SMS-only resets and knowledge-based questions where they still exist.
- Layer independent fraud signals Combine device integrity, session behaviour, document authenticity, biometric liveness, and network intelligence so one evasion path does not collapse the full decision.
Bottom line: Human-centric identity verification fails when the actor is an agent or synthetic identity rather than a person with documents and a reviewable session.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
10/07/2026 9:45 pm
Agentic AI creates an assumption collapse in identity verification: human verification stacks were designed for actors that can be tied to a face, a document, and a stable review window. That assumption fails when the actor is autonomous or agentic because the runtime subject is an agent acting under delegated authority, not a person being observed in the moment. The implication is that identity programmes must rethink what they are certifying, not just add more checks.
A few things that frame the scale:
- Businesses report a 200% surge in attempted deepfake-aided wire fraud in Q1 2025 alone.
A question worth separating out:
Q: What should security teams do first when their verification model is built for people?
A: Start by mapping every control that still presumes a face, a document, or a manual reviewer, then test those flows against non-human and synthetic cases. Recovery, step-up, and exception handling usually reveal the biggest gaps first. The goal is to identify where authority is being inferred from human proxies that no longer hold.
👉 Read our full editorial: Agentic AI breaks identity verification stacks built for humans