Research NoteJuly 2026
Module 01Point-in-time gate — triggered at account opening
Identityverification
Is this a real person, physically present, who is who they claim to be — and are they safe to do business with?
Document capture & forensics
Is the ID genuine? OCR, barcode analysis, template matching, AI-generated forgery detection. An arms race — near-perfect counterfeit passports now cost ~$30.
Biometric face match
Does the selfie match the document photo? Facial similarity scoring, independently benchmarked via NIST FRVT.
Liveness & deepfake detection
Is a real person present — or a photo, replay, mask, or injected deepfake stream? The GenAI battleground: 1 in 7 deepfakes now bypass single-layer liveness checks. Independent testing via ISO 30107-3 / iBeta PAD.
PII matching & consortium check
Does the claimed name / DOB / SSN combination exist, cohere, and carry fraud history across the network? Where identity-graph data moats do their work — synthetic identities die here.
Sanctions & PEP screening
Is this verified person on OFAC / UN / HMT lists, politically exposed, or in adverse media? A compliance obligation, not a fraud check — triggered by the same event.
Who plays here
Socure, Jumio, Entrust (Onfido), Sumsub, Veriff, Incode, Persona, Mitek, GBG · Liveness: iProov · Screening: ComplyAdvantage, LexisNexis