TL;DR: Fraudsters can fabricate or hijack identities at machine speed, with SEON detailing how email, phone, address and device checks may each look legitimate alone. Identity review now has to compare signals together, or contradictions in the graph will stay hidden.
Editorial analysis by NHI Mgmt Group, based on content published by SEON: “More Signals; Nowhere to Hide: The Signal Intelligence Edition”.
Key questions
Q: Why do AI agents make onboarding fraud harder to detect?
A: AI agents remove the human limitations that used to create useful anomalies, such as hesitation, fatigue and inconsistent pacing.
Q: How do security teams know if continuous identity verification is working?
A: Look for a reduction in fraud that progresses beyond first-touch checks, plus faster escalation of risk scores when behaviour changes.
Q: Why do identity fraud controls fail when they rely on one strong signal?
A: Because attackers adapt to the strongest visible control and then reuse the same trusted identity across recovery, login, and support flows.
Practitioner guidance
- Correlate identity signals across the full journey Stop treating email, phone, address and device as isolated checks.
- Canonicalise and deduplicate address intelligence Normalise address variants to a single identifier so unit changes, punctuation differences and formatting tricks do not hide reused infrastructure across accounts.
- Add behavioural context to session controls Use session-level evidence such as automation patterns, off-screen behaviour and active call indicators to catch coached fraud and bot-assisted abuse during live transactions.
Bottom line: AI is reducing the cost of creating believable synthetic identities and account abuse, which makes human-paced fraud controls less reliable.
Glossary terms: Synthetic Identity, Signal Breadth, Signal Depth, Identity Graph
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Single-dimensional identity checks are now structurally behind the threat. Fraud programs that depend on email, phone, address, or device confidence one field at a time are being outpaced by AI-assisted fabrication. The problem is not that those signals are useless, but that they are no longer sufficient on their own. Practitioners should treat contradiction detection across multiple signals as the core control, not a supporting check.
A question worth separating out:
Q: How do fraud and IAM teams work together on AI-driven abuse?
A: They should share the same decision points. Fraud teams bring anomaly detection, rate patterns, and device intelligence. IAM teams bring identity proofing, authentication policy, and step-up enforcement. When those signals are combined, the organisation can treat suspicious automation as an access decision rather than a standalone fraud alert.
👉 Read our full editorial: AI-driven identity fraud now outpaces single-signal checks