Topic starter
11/11/2026 6:01 pm
TL;DR: 96% confidence in bot detection still leaves 59% of firms struggling with synthetic identity and generative AI fraud, according to Trulioo and PYMNTS data. Verification now has to adapt across the identity lifecycle, or onboarding controls will keep missing machine-speed abuse.
Editorial analysis by NHI Mgmt Group, based on content published by Trulioo: “Why Legacy Identity Verification Can’t Stop AI-Enabled Fraud”.
By the numbers:
- 52.3% of companies are seeing increased bot traffic.
- The report links these frictions to an average 3.1% revenue loss.
Key questions
Q: Why do manual review queues fail against AI-enabled fraud?
A: Manual review queues fail when fraud volume is high, evidence is synthetic, and reviewers must make fast decisions with limited context.
Q: How should firms apply intelligent friction in identity verification?
A: Firms should apply intelligent friction by escalating checks only when risk signals warrant it, such as device reputation, behavioural anomalies, document mismatch, or repeated attempts.
Q: Why do traditional identity verification controls fail against AI enabled synthetic identities?
A: Traditional controls fail when they rely on document checks, database lookups, and risk scores that estimate identity instead of proving it.
Practitioner guidance
- Build continuous verification into onboarding flows Replace single-point approval logic with risk checks that continue after account creation, especially where synthetic identity and automated agent abuse are plausible.
- Separate low-risk and high-risk user journeys Apply intelligent friction so routine users move quickly while suspicious sessions trigger step-up checks, enhanced evidence review or manual intervention.
- Correlate behavioural and transactional signals Combine device context, interaction patterns and transaction history so one successful credential or document check does not create durable trust.
Bottom line: AI-enabled fraud breaks verification models that depend on static signals and manual judgment.
Glossary terms: Synthetic Identity Fraud, Deepfake, Identity proofing, Know Your Agent
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
11/11/2026 6:07 pm
Legacy verification fails because it was built around a stable fraud timeline. Static review assumes analysts can inspect a case before the threat changes shape, but AI-enabled fraud can generate plausible identity evidence, adapt its presentation and move on before a queue clears. That means the decisive failure is not a lack of effort, but a control model that depends on time the attacker no longer gives it. Practitioners should treat verification as a lifecycle function, not a checkpoint.
A few things that frame the scale:
- Deepfake scams now account for nearly $12 billion in fraud losses globally.
A question worth separating out:
Q: What should teams do first when AI fraud spikes during onboarding?
A: First, contain the spike by tightening onboarding thresholds and moving suspicious cases into step-up verification or manual review. Then correlate fraud signals across device, document, biometrics, and behavioural data, because AI fraud spikes usually mean one control failed and the intake path needs immediate risk-based gating.
👉 Read our full editorial: AI fraud is exposing the limits of legacy verification systems