Topic starter
24/06/2026 8:46 pm
TL;DR: eKYC turns identity proofing into a multi-signal assurance decision that needs the same governance as other security controls, according to 1Kosmos. Remote verification should be managed with the same discipline as any other control, especially where privacy, evidence retention, and review rules affect trust.
Editorial analysis by NHI Mgmt Group, based on content published by 1Kosmos: “What Is eKYC? A Quick Guide”.
Key questions
Q: When should businesses prioritise stronger identity proofing over convenience in digital onboarding?
A: Businesses should prioritise stronger identity proofing when the transaction carries legal, financial, or compliance risk, or when fraud patterns are escalating.
Q: What are the signs that remote identity verification is too weak?
A: Common signs include high manual review rates, repeated document resubmission, inconsistent identity data, and customer records that later trigger sanctions or fraud exceptions.
Q: What breaks when remote online notarisation relies on weak identity proofing?
A: The notarisation may still look complete, but the legal trust chain is broken.
Practitioner guidance
- Define proofing assurance tiers Map onboarding journeys to the minimum identity assurance level they actually require, rather than applying one remote-proofing flow to every use case.
- Test anti-spoofing controls Challenge biometric, liveness, and document checks with replay, synthetic media, and low-quality capture scenarios to see where fraud passes.
- Limit proofing data retention Review how long identity documents, selfie evidence, and biometric derivatives are stored, and remove anything not needed for audit or dispute handling.
Bottom line: eKYC changes identity proofing from a manual verification task into a multi-signal assurance decision that has to be governed like any other security control.
Glossary terms: Identity proofing, Electronic Know Your Customer, Liveness Detection, Privacy by Design
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 12 hours ago by NHI Mgmt Group
25/06/2026 5:34 am
Remote identity proofing is now an assurance problem, not a document-scanning problem: eKYC works only when organisations understand that they are making a trust decision from multiple signals, not confirming identity from a single artifact. That shift matters because the weakest part of the proofing chain can determine the outcome even when the document check looks strong. Practitioners should treat proofing quality, exception handling, and evidence retention as governance issues, not back-office detail.
A few things that frame the scale:
- U.S. fraud losses are projected to reach $40 billion by 2027.
A question worth separating out:
Q: How should teams govern identity evidence collected during eKYC?
A: Teams should define who can store, access, reuse, and delete identity evidence, then tie those decisions to retention and privacy policy. If proofing artefacts are retained indefinitely or reused across journeys without clear purpose, the process becomes a data-hoarding risk as much as an identity control.
👉 Read our full editorial: eKYC changes identity proofing, but trust assumptions still matter