Join our Newsletter — 33% off our NHI Course

Digital banking liveness: what is the governance gap for IAM teams?

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 16626
Topic starter  

TL;DR: Banks are losing customers to slow or inefficient onboarding, with Fenergo reporting that 70% of financial institutions globally lost clients in the last year for that reason, while synthetic fraud and injection attacks are making gesture-heavy liveness checks less reliable according to Oz Forensics. The real issue is not active versus passive biometrics, but whether onboarding is risk-based enough to balance conversion with modern fraud resistance.

Editorial analysis by NHI Mgmt Group, based on content published by Oz Forensics: “The Liveness Paradox in Digital Banking”.

By the numbers:

  • 70% of financial institutions globally lost clients in the last year specifically due to slow or inefficient onboarding processes, according to Fenergo research cited by Oz Forensics.
  • 38% of customers abandon account creation simply because the process takes too long, according to Deloitte research cited by Oz Forensics.
  • Nearly 68% of consumers have abandoned a financial application due to technical friction, according to Oz Forensics.

Key questions

Q: What breaks when banks use gesture-heavy liveness as a blanket onboarding control?

A: Gesture-heavy liveness breaks when every applicant is forced through the same friction-heavy path regardless of risk.

Q: Why do synthetic media attacks matter more than simple selfie spoofing in digital onboarding?

A: Synthetic media attacks matter because they target the capture pipeline itself, not just the user’s appearance.

Q: How should banks balance liveness security with onboarding conversion?

A: Banks should stop treating liveness as a universal challenge-and-response step and instead align verification strength to applicant risk.

Practitioner guidance

  • Segment onboarding by risk tier Use differentiated liveness and verification paths for low-risk, medium-risk, and high-risk onboarding journeys instead of one universal challenge flow.
  • Separate gesture checks from stream provenance checks Treat biometric response and camera-feed authenticity as distinct controls so synthetic video injection is evaluated independently from face movement detection.
  • Test for deepfake and puppetry abuse Include adversarial testing for responsive synthetic faces, replayed video, and virtual camera injection in onboarding validation exercises.

Bottom line: Digital banking onboarding is now a security and conversion decision at the same time, and a single friction-heavy verification path is usually the wrong design.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →



   
Quote
(@mr-nhi)
Member Moderator
Joined: 5 months ago
Posts: 17057
 

Onboarding liveness has become a governance control, not a UX feature: The article shows that banks are now using biometric assurance as part of account-opening risk management. That changes the decision model from 'does the user complete the check' to 'does the check meaningfully reduce fraud without suppressing legitimate demand'. Practitioners should treat liveness policy as part of onboarding governance, not only identity verification engineering.

A question worth separating out:

Q: What is the difference between active liveness and stream integrity checks?

A: Active liveness tests whether a person can complete a challenge such as blinking or turning their head. Stream integrity checks test whether the video came from a real camera and has not been injected or manipulated. Both matter, but they solve different problems, and confusing them leaves a gap in onboarding assurance.

👉 Read our full editorial: Liveness paradox in digital banking exposes onboarding risk



   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.