Notifications
Clear all
Topic starter
24/06/2026 8:40 pm
TL;DR: Digital onboarding now determines whether organisations stop stolen, synthetic, and AI-generated identities at first touch, with the source article tying strong identity proofing to faster time-to-value, higher completion rates, and lower fraud losses. The security question is no longer whether onboarding can be automated, but whether verification is strong enough to preserve trust at scale.
NHIMG editorial — based on content published by 1Kosmos: digital onboarding and identity proofing guidance
Questions worth separating out
Q: How should security teams set assurance levels in digital onboarding?
A: Security teams should align assurance levels to the downstream risk of the identity being created.
Q: Why do synthetic identities create such a problem for onboarding?
A: Synthetic identities blend real and fabricated data to look legitimate to basic checks.
Q: What breaks when onboarding focuses on speed instead of assurance?
A: When speed becomes the primary goal, organisations are more likely to accept weak evidence, miss fraud indicators, and issue reusable identities to the wrong person.
Practitioner guidance
- Define enrolment assurance thresholds Set different proofing thresholds for low-risk and high-risk identities, then require stronger verification before account activation when the downstream privilege or compliance exposure is higher.
- Layer independent identity signals Combine document authenticity checks, biometric matching, liveness detection, and external screening so that no single signal decides trust on its own.
- Measure fraud resistance alongside completion Track abandonment, time-to-value, fraud loss, and false acceptance together so operational teams cannot optimise onboarding speed at the expense of assurance.
What's in the full article
1Kosmos's full article covers the operational detail this post intentionally leaves for the source:
- Step-by-step digital onboarding flow design for registration, proofing, and activation.
- Document verification and liveness detection considerations for remote enrolment.
- Metrics for time-to-value, completion rate, and fraud loss across onboarding journeys.
- Operational discussion of how onboarding supports passwordless authentication and compliance.
👉 Read 1Kosmos's guidance on digital onboarding, identity proofing, and fraud resistance →
Digital onboarding and identity proofing: are your controls enough?
Explore further
25/06/2026 5:24 am
Digital onboarding is now an identity trust control, not a convenience feature. The source article is right to frame first-touch verification as the moment that determines whether fraud enters the environment or is stopped at the door. In IAM terms, the onboarding decision now carries lifecycle consequences because it creates the identity foundation for all later authentication and access decisions. Practitioners should treat enrolment assurance as part of identity governance, not just customer experience.
A few things that frame the scale:
- 97% of NHIs carry excessive privileges, increasing unauthorised access and broadening the attack surface, according to Ultimate Guide to NHIs.
- Only 5.7% of organisations have full visibility into their service accounts, which shows how quickly identity control degrades when governance is incomplete.
A question worth separating out:
Q: Who is accountable when a fraudulent identity is activated?
A: Accountability sits with the team that defined the onboarding assurance model and approved the activation path. If identity proofing is too weak, later controls inherit that decision and cannot fully recover the lost trust. Governance teams should therefore treat onboarding approval criteria as a formal control objective, not an implementation detail.
👉 Read our full editorial: Digital onboarding is now a frontline identity trust control
