Topic starter
10/06/2026 10:37 pm
TL;DR: Identity fraud grew 180% year over year and multi-step attacks rose from 10% to 28% of all cases, according to Sumsub's Identity Fraud Report 2025-2026, showing that one-time verification is no longer enough across the customer lifecycle. Continuous, real-time identity controls now matter more than static checks when AI-powered fraud adapts mid-flow.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Sumsub Joins World Economic Forum Unicorn Community to Tackle AI Fraud and Advance Inclusive Digital Identity”.
Key questions
Q: Why do one-time identity checks fail against multi-step AI fraud?
A: One-time checks only validate identity at a single moment, while AI-driven fraud can change documents, device signals, and behaviour across later steps.
Q: How should security teams reduce identity fraud without blocking legitimate users?
A: Use layered decisioning instead of single-step checks.
Q: What signals show that identity security controls are not keeping up?
A: Look for broad roles granted for convenience, orphaned accounts after turnover, shared credentials in business workflows and repeated entitlement changes in critical systems without timely review.
Practitioner guidance
- Extend monitoring beyond onboarding Correlate proofing, authentication, device, and session events so that a clean initial check does not mask later fraud signals.
- Introduce lifecycle-based risk scoring Re-evaluate identity trust at key user journey stages such as account creation, first payment, profile change, and high-value actions.
- Separate legitimate friction from fraud controls Use step-up triggers and verification paths that raise assurance without excluding users who lack strong documents or stable device histories.
Bottom line: Identity fraud is shifting from single-step deception to multi-step lifecycle abuse that can survive the first verification gate.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
11/06/2026 2:44 am
Identity fraud has become a lifecycle problem, not a verification problem. The article shows why one-time onboarding checks fail once attackers can move from initial impersonation to later-stage abuse. That shift matters because the control boundary is no longer the application login screen, it is the full customer journey. Practitioners should treat fraud as a continuing governance issue across identity, session, and transaction layers.
A few things that frame the scale:
- 91.6% of secrets remain valid five days after the targeted organisation is notified, showing a critical gap in remediation procedures, according to Ultimate Guide to NHIs.
- Only 5.7% of organisations have full visibility into their service accounts, which means many teams cannot even prove where identity risk is concentrated.
A question worth separating out:
Q: What is the difference between static onboarding checks and lifecycle identity assurance?
A: Static onboarding checks validate identity at a single entry point. Lifecycle identity assurance keeps evaluating trust after the user is admitted, using session, device, and transaction evidence. That difference matters because modern fraud often appears after the initial check, not before it.
👉 Read our full editorial: Identity fraud is shifting to multi-step AI attacks
12/06/2026 4:18 am
Multi-step fraud has become a lifecycle governance problem, not a verification problem: the failure is no longer at the point of identity proofing alone. Fraud now advances by accumulating trust across stages, which means a programme that certifies identity once and then stops is governing yesterday’s attack model. Practitioners should treat identity assurance as a continuous state, not a completed event.
A question worth separating out:
Q: How do continuous identity controls differ from static verification?
A: Static verification answers whether a user looked legitimate at one point in time. Continuous controls answer whether the identity still looks legitimate as context changes across sessions, devices, and transactions. That difference matters because AI-assisted fraud often succeeds by shifting after the first check, not by failing it.
👉 Read our full editorial: Identity fraud is shifting to multi-step AI attacks
This post was modified 1 day ago by NHI Mgmt Group