Topic starter
10/06/2026 10:40 pm
TL;DR: Overall fraud volume fell 50% while sophisticated attacks nearly tripled and now combine synthetic identities, deepfakes, and telemetry tampering to defeat verification systems, according to SumSub’s annual Identity Fraud Report based on over 4 million fraud attempts globally. Fraud controls built for static checks are losing ground to coordinated operations that adapt in real time.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Inside Sumsub's 2025 Identity Fraud Report”.
Key questions
Q: How should compliance and fraud teams respond when AI-assisted identity fraud increases?
A: They should update risk appetite, escalation paths, and review thresholds together rather than treating fraud as a back-office exception.
Q: Why do deepfakes create more risk than ordinary identity fraud?
A: Deepfakes compress the time needed to impersonate a real person and make the attack look legitimate at the exact moment trust is granted.
Q: What signs show that identity verification controls are being adapted to by fraudsters?
A: Look for sudden success after repeated failures, inconsistent device or telemetry patterns, clusters of similar-looking submissions, and attacks that switch tactics across attempts.
Practitioner guidance
- Tighten control chaining across verification steps Map the full onboarding and verification path to identify where one successful signal can be reused to satisfy later checks without fresh evidence.
- Harden liveness against replay and generation Review how liveness decisions handle synthetic video, replay attacks, and manipulated capture conditions, then raise scrutiny where passive checks are easy to fool.
- Treat telemetry integrity as a control requirement Validate the integrity of device, browser, and behavioural signals before they are used in automated decisioning, especially where fraudsters can influence the client environment.
Bottom line: AI-powered fraud is shifting identity verification from a single-screen check into a multi-stage adversarial process.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
11/06/2026 2:47 am
Professional fraud has become a systems problem, not a single-check problem. The report’s strongest signal is that attackers are no longer trying one weak point at a time. They combine synthetic identities, deepfakes, and telemetry manipulation to move across the verification stack as a coordinated chain. That means identity teams should stop thinking in terms of isolated control wins and start thinking in terms of attack-path resilience.
A few things that frame the scale:
- 91.6% of secrets remain valid five days after the targeted organisation is notified, showing a critical gap in remediation procedures, according to Ultimate Guide to NHIs.
- 96% of organisations store secrets outside of secrets managers in vulnerable locations including code, config files, and CI/CD tools, according to Ultimate Guide to NHIs.
A question worth separating out:
Q: How can organisations reduce fraud without creating excessive user friction?
A: By moving from single-check trust to layered evidence and risk-based escalation. Low-risk journeys can stay fast, but higher-risk actions should require stronger proof, additional context, or step-up review. That reduces blanket friction while making the most valuable trust decisions harder to fake.
👉 Read our full editorial: AI-powered fraud is outpacing identity verification controls
12/06/2026 4:21 am
Identity verification is no longer a point-in-time decision problem: AI-powered fraud turns onboarding into an adversarial feedback loop. The control no longer fails only when a document is fake; it fails when every signal in the workflow can be tuned in sequence. For IAM and fraud teams, the practical conclusion is that assurance must be designed as a system boundary, not a single check.
A few things that frame the scale:
- Sophisticated multi-step fraud rose 180%, according to Sumsub's Identity Fraud Report 2025-2026.
A question worth separating out:
Q: How should fraud teams decide whether to hold transactions for manual review?
A: Fraud teams should hold transactions when the business can absorb delay, the order is risky enough to justify more scrutiny, and review can improve decision quality. Holding makes less sense when fulfillment must be instant or when a bad order can be reversed with little cost. The key is balancing fraud loss, customer friction, and operational response time.
👉 Read our full editorial: AI-powered fraud is outpacing identity verification controls
This post was modified 1 day ago by NHI Mgmt Group