Topic starter
10/06/2026 10:36 pm
TL;DR: 40% of global businesses reported fraud victims, while sophisticated fraud rose 180% year over year to 28% of detected attacks, underscoring why firms are being pushed to demonstrate KYC, AML and fraud controls more visibly, according to SumSub. Public recognition may shape trust, but it does not replace governance, evidence, or continuous assurance.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Sumsub Rewards Companies with Risk Intolerant Badge to Celebrate Digital Trust while Sharing Best Practices”.
By the numbers:
- 40% of global businesses reported being victims of fraud, according to SumSub 2025 Fraud Exposure Survey.
- The share of sophisticated fraud increased by 180% over 2024-2025, reaching 28% of all detected attacks, according to SumSub 2025 Fraud Exposure Survey.
Key questions
Q: How should compliance teams treat public trust badges in fraud programmes?
A: As supplementary assurance, not as evidence of lasting control effectiveness.
Q: Why do fraud and AML badges fail as proof of ongoing security?
A: Because they are usually point-in-time signals.
Q: What are the signs that a public compliance claim is overstating reality?
A: Look for vague scope, missing assessment dates, unclear control criteria, and language that implies future protection rather than current recognition.
Practitioner guidance
- Define badge scope and evidence boundaries Document exactly which controls, populations, and time windows are covered before any external trust signal is displayed.
- Review KYC, AML, and fraud evidence currency Check whether the latest assessment still reflects current onboarding, monitoring, and escalation practices, especially where AI-enabled fraud has changed the threat profile.
- Set expiry and withdrawal rules for public trust claims Require re-assessment, expiration, and removal criteria so a recognition badge cannot continue after control conditions change.
Bottom line: Risk-intolerant badges turn fraud and compliance performance into a visible trust signal, but they are not a substitute for evidence-backed governance.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
11/06/2026 2:41 am
Public trust badges are becoming a governance layer, not just a marketing layer. Once a company turns fraud and compliance posture into a visible signal, it creates a new accountability surface for the identity programme. The badge is not the control, but it does force teams to prove that the control story is coherent across KYC, AML, fraud monitoring, and audit evidence. The practitioner conclusion is simple: if you cannot evidence the control, you cannot safely externalise the claim.
A few things that frame the scale:
- 72% of organisations have experienced or suspect they have experienced a breach of non-human identities, according to The 2024 ESG Report: Managing Non-Human Identities.
- Enterprises that have experienced a compromised NHI averaged 2.7 separate incidents in the past 12 months.
A question worth separating out:
Q: How can teams tell whether fraud controls are actually keeping up?
A: Look for evidence that detection, investigation, and policy updates are moving at the same pace as attack change. If new fraud patterns appear repeatedly in incident reviews but never change governance controls, the programme is reactive rather than adaptive.
👉 Read our full editorial: Risk-intolerant badges turn compliance into public identity proof
12/06/2026 4:15 am
Public trust badges create a new governance layer, not a new control. The article is really about converting internal compliance evidence into external credibility, which is a different discipline from passing an audit or meeting a threshold. That matters because reputation signals travel faster than the controls that support them. Practitioners should treat badge claims as a governed artefact, not as a substitute for control assurance.
A question worth separating out:
Q: What should organisations do if a trust badge no longer reflects current controls?
A: They should retire or refresh it immediately, then revalidate the controls behind it. Keeping an outdated badge visible creates reputational risk and can mislead partners into assuming stronger fraud or compliance posture than actually exists.
👉 Read our full editorial: Risk-intolerant badges turn compliance into public identity proof
This post was modified 1 day ago by NHI Mgmt Group