Topic starter
10/06/2026 12:35 am
TL;DR: A consumer study of 2,000 people in the UK and US found that 74% would switch banks for guaranteed deepfake protection, while 48% now question almost everything they see online, according to iProov. The shift turns human identity assurance into a business continuity issue, not just a fraud control.
Editorial analysis by NHI Mgmt Group, based on content published by iProov: “The Great Trust Recession: Study Shows Deepfakes Shatter Online Confidence, iProov Study Reveals”.
Key questions
Q: How should organisations protect human identity journeys from deepfake-enabled fraud?
A: Use layered assurance rather than relying on any single signal.
Q: Why do facial deepfakes create risk for biometric authentication programmes?
A: Because they undermine the assumption that a face capture is strong evidence of a real person present in the session.
Q: What are the signs that human identity controls are not keeping up with deepfakes?
A: Common signals include rising manual review, more account recovery disputes, increased customer complaints about verification, and growing use of fallback channels for high-risk actions.
Practitioner guidance
- Strengthen proof-of-presence checks Use liveness, device binding and context signals together for onboarding, account recovery and high-value transactions so a single biometric or media cue does not carry the decision alone.
- Redesign recovery flows for synthetic media Treat password resets, call-centre verification and manual overrides as prime deepfake targets, and require step-up verification before any sensitive account change proceeds.
- Separate fraud response from verification design Give fraud, IAM and customer operations a shared escalation path for suspected impersonation so trust failures are handled as operational events, not isolated support cases.
Bottom line: Deepfakes are eroding the basic trust assumptions behind human identity journeys, not just creating another fraud variant.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 18 hours ago by NHI Mgmt Group
11/06/2026 2:18 am
Deepfake trust erosion is now a human identity governance problem. This study shows that consumers are no longer evaluating identity assurance only at the point of login. They are judging whether institutions can prove that a person, not a synthetic proxy, is on the other end of the interaction. For IAM teams, that means assurance is part of customer trust architecture, not just authentication design.
A few things that frame the scale:
- The average estimated time to remediate a leaked secret is 27 days, despite 75% of organisations expressing strong confidence in their secrets management capabilities, according to The State of Secrets in AppSec.
- Only 44% of developers are reported to follow security best practices for secrets management, exposing a significant developer behaviour gap.
A question worth separating out:
Q: What should banks and public services do when customers demand stronger deepfake protection?
A: Treat it as a governance requirement, not just a feature request. Prioritise stronger verification in enrolment, account recovery, and transaction approval, then publish clear rules for disputed identity events. Customers want confidence that the institution can tell a real person from synthetic manipulation, and policy clarity is part of that confidence.
👉 Read our full editorial: Deepfake trust erosion is reshaping human identity security
12/06/2026 3:53 am
Deepfakes have turned human identity assurance into a trust infrastructure problem. The article shows that consumers are no longer treating verification as a back-office control; they are using it as a proxy for whether an institution deserves their business. That shifts the centre of gravity from authentication UX to trust continuity. For identity practitioners, the implication is that assurance failures now have commercial consequences that are broader than fraud.
A few things that frame the scale:
- Gartner predicts that by 2026, 30% of enterprises will consider identity verification solutions unreliable in isolation because of AI-driven attacks.
A question worth separating out:
Q: Who should own deepfake-related identity failures in an organisation?
A: Ownership should be shared across IAM, fraud, customer operations and legal or compliance teams, because the impact spans authentication, financial loss, service quality and accountability. If only one team owns the issue, the organisation usually treats a trust failure as a narrow technical event instead of a broader governance problem.
👉 Read our full editorial: Deepfake trust erosion is reshaping human identity security
This post was modified 18 hours ago by NHI Mgmt Group