Topic starter
25/08/2026 6:10 pm
TL;DR: Physical biometrics adoption in anti-fraud programs rose from 34% to 45% since 2022, making it the fastest-growing emerging technology tracked in the 2026 ACFE/SAS benchmark, but generative AI is already undermining the assumptions behind liveness checks and camera-based verification, according to Trusona. The real issue is not adoption speed, but whether identity verification controls can withstand synthetic media, injection attacks, and replay-driven impersonation.
Editorial analysis by NHI Mgmt Group, based on content published by Trusona: “Physical biometrics are surging in anti-fraud programs. That's a problem.”.
By the numbers:
- Physical biometrics adoption in anti-fraud programs grew from 34% to 45% since 2022.
Key questions
Q: What breaks when biometric identity proofing is exposed to deepfakes?
A: The assumption that a biometric sample proves a live, genuine person breaks down.
Q: Why do deepfake attacks create a different identity risk than ordinary phishing?
A: Deepfakes reduce the value of human judgment because the attacker can imitate a familiar person, tone, and emotional state in real time.
Q: How can security teams know if biometric verification is actually working?
A: Teams should measure successful enrolment rates, match accuracy, failed capture rates, exception volumes, and fraud attempts that bypass or challenge the control.
Practitioner guidance
- Broaden verification beyond biometrics Use document validation, device continuity, and session checks so the control can still work when faces or voices are synthetically generated.
- Harden the capture channel Review whether your verification flow can detect injected video, relayed sessions, or tampered inputs before the biometric engine evaluates them.
- Test against deepfake and replay scenarios Run red-team exercises that use synthetic face, synthetic voice, and replayed-session tactics to see whether liveness checks fail cleanly or silently.
Bottom line: Physical biometrics are rising in anti-fraud programmes, but the article argues that adoption is outrunning resilience against synthetic-media attacks.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/08/2026 6:11 pm
Deepfake resilience is now a verification governance problem, not a biometric tuning problem. The article shows that the failure is not simply in model accuracy but in the assumption that the capture path is trustworthy. Once synthetic media can satisfy liveness prompts or bypass the camera entirely, biometric verification becomes one signal among many rather than a decisive control. Practitioners should therefore govern the verification workflow as a trust chain, not a single test.
A few things that frame the scale:
- U.S. fraud losses are projected to reach $40 billion by 2027.
A question worth separating out:
Q: Should organisations use biometrics or help desk verification for account recovery?
A: They solve different problems. Biometrics are better when the organization needs to verify the real person remotely, while help desk verification can still play a role in escalations that require human review. The key decision is whether the recovery event creates enough fraud risk to justify live person verification before access is restored.
👉 Read our full editorial: Physical biometrics are rising, but deepfake fraud is outpacing them