TL;DR: Three rising identity fraud patterns are emerging in 2025: generative AI video reenactments, serial fraud through reused biometrics and PII, and organised account takeover using the same devices across sessions, according to Incode. The finding underscores that verification systems need cross-session analysis, device intelligence, and real-time correlation, not one-step checks alone.
Editorial analysis by NHI Mgmt Group, based on content published by Incode: “Identity Fraud: 3 Rising Trends To Watch in 2025”.
Key questions
Q: What breaks when identity verification is treated as a one-time event?
A: Fraudsters can exploit the gap between acceptance and later review.
Q: Why do reused devices and biometrics increase fraud risk in onboarding flows?
A: Reused devices and biometrics are strong indicators that multiple applications may be controlled by the same actor or fraud ring.
Q: What are the signs that AI-assisted identity fraud is slipping past verification controls?
A: Common warning signs include repeated failed or suspicious document checks, unusual biometric patterns, mismatched identity artifacts, and accounts that appear legitimate but later behave inconsistently.
Practitioner guidance
- Strengthen cross-session correlation Link onboarding outcomes, prior attempts, and device history so repeated biometric or PII patterns are visible across sessions rather than only inside one transaction.
- Treat device fingerprints as fraud evidence Flag repeated use of the same device across multiple accounts, applications, or takeover events, especially when identity attributes vary between attempts.
- Upgrade liveness beyond passive checks Use multi-frame and behavioural signals that can challenge AI reenactments and other dynamic spoofing methods, not just static face comparison.
Bottom line: The article describes fraud as a repeatable system built on AI reenactments, reused identity data, and recurring devices rather than isolated spoofing attempts.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Identity fraud is moving from single-event deception to serial trust exploitation. The article shows that AI reenactments, biometric reuse, and device reuse are not separate problems but one operating model. Verification programmes that stop at first-pass approval are blind to the repeatable structure of organised fraud. The practical conclusion is that identity assurance now depends on correlation across time, not only confidence at a single checkpoint.
A few things that frame the scale:
- Sophisticated multi-step fraud rose 180%, according to Sumsub's Identity Fraud Report 2025-2026.
A question worth separating out:
Q: How should fraud teams respond when one device appears in many onboarding attempts?
A: Treat it as an escalation signal, not a coincidence. A single device showing up in many applications may indicate organised fraud, account takeover, or assisted onboarding abuse. Teams should quarantine the linked cases, review identity reuse, and push the pattern into device-level monitoring and case management.
👉 Read our full editorial: Identity fraud is shifting to AI reenactments and device reuse