Topic starter
16/09/2026 9:21 am
TL;DR: Identity verification must shift from one-time KYC to continuous, AI-assisted decisioning that adapts to reused faces, devices and fraud patterns across markets, according to Smile Identity. The core implication is that fraud defence now depends on network intelligence, precision and human authorisation for AI-mediated actions, not static gates.
Editorial analysis by NHI Mgmt Group, based on content published by Smile Identity: “500 Million Verifications, and a Brave New World”.
Key questions
A: Security teams should treat identity verification as a moving control, not a one-time gate.
Q: Why do reused faces and devices create such a large fraud risk?
A: Because a single identity event often looks harmless in isolation, while the same face or device reused across many institutions reveals a coordinated pattern.
Q: What are the signs that static KYC controls are failing?
A: Common signs include repeated identity artefacts across channels, successful logins after suspicious onboarding, and fraud cases that become obvious only when data is compared with other organisations or prior attempts.
Practitioner guidance
- Expand verification beyond onboarding Trigger identity checks at login, transfer, settings change and other high-risk actions instead of relying on a single KYC event.
- Use network-level fraud signals Ingest reused faces, devices, IP ranges and address patterns from prior fraud events so one attack seen elsewhere can inform local blocking decisions.
- Tune for precision before scale Prefer narrower rules that reduce false positives, especially where shared mobile gateways or common infrastructure could block legitimate users.
Bottom line: Identity verification is no longer just an onboarding problem, because fraudsters reuse the same faces, devices and infrastructure across multiple institutions.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
16/09/2026 9:21 am
Continuous verification is now the right identity control model for fraud-heavy channels: a single onboarding decision no longer matches the way attackers operate. Fraud rings reuse faces, devices and network infrastructure across organisations, so the control has to move to the point of action. The practical conclusion is that identity governance must treat trust as event-scoped, not permanent.
A question worth separating out:
Q: What should teams do when AI agents can act on a customer's behalf?
A: Require explicit human authorisation for high-risk actions and separate delegated permission from the underlying human identity. If an agent can open accounts or move money, the control problem is not just authentication. It is proving who granted the agent authority, what that authority covers, and when it should be revoked.
👉 Read our full editorial: 500 million identity checks show verification is becoming continuous