Bank of America has disclosed plans to introduce a redesigned digital identity verification experience for corporate administrators on its CashPro treasury management app, with the enhancement scheduled to arrive later in 2026 alongside a separately redesigned payment approval workflow.
The disclosure came in a performance update for the CashPro platform, which reported that app sign-ins grew 20 percent year-over-year and that clients approved a record $1.2 trillion in payment value through the platform over the past year, an average of $38,000 per second. The redesigned identity verification process will build on the app’s existing cybersecurity protections and its patented integrated mobile token, according to Bank of America’s announcement. The bank did not disclose the specific identity verification method to be used, whether biometric authentication will be a component, or whether a third-party identity vendor is involved.
CashPro is used by more than 35,000 companies globally and serves corporate and commercial banking clients who use the platform to approve high-value payments, manage cash positions, and control treasury operations. Corporate administrators hold elevated permissions within the platform, making identity assurance for that administrator access tier a significant security consideration at a platform processing that volume of payments. The identity verification redesign and a separately announced payment approval workflow update are both expected later in 2026 without a more specific date.
The CashPro redesign continues a pattern of expanding mobile biometric authentication that Bank of America has pursued across its app portfolio for several years. Bank of America introduced biometrics to CashPro Mobile for treasurer login in 2018, making the 2026 identity verification redesign an evolution of an established biometric authentication framework on the platform rather than a first deployment of the technology.
Corporate treasury platforms are a high-value fraud target; account administrator access is a vector exploited in business email compromise and payment fraud schemes.
Sources: Bank of America Newsroom, PRNewswire
–
By the ID Tech Editorial Team
