Feedzai has expanded its Digital Trust product to help banks detect AI agents accessing customer accounts. The update adds stronger device persistence, a fraud score built on Feedzai’s network view and shared intelligence, and cryptographic device binding, which ties a session to a known customer and device.
Digital Trust combines endpoint, device, behavioral and network signals to assess risk before login and throughout the customer journey. Feedzai said a successful login does not mean a session can be trusted, because AI agents can sign in with valid credentials and criminals exploit compromised devices, account recovery and social engineering.
To recognize an agent, the system combines the signals the agent declares about itself with device fingerprinting and behavioral signals that reveal automated activity. Once an agent is recognized, banks can trust returning relationships between a customer and the agent they use, and avoid challenging them again where their policies allow, while deciding which agent activity is permitted and how customer consent is handled. Feedzai said it will add more agent detection capabilities in the coming months.
“Personal and malicious agents can look very similar. Our latest advancements in Digital Trust help banks tell them apart, blocking unwanted agents and trusting the ones their customers choose to use,” said Pedro Barata, Feedzai’s chief product officer.
The update also covers human authentication. With cryptographic device binding, a trusted device can act as a possession factor, reducing banks’ reliance on one-time passcodes sent by SMS. Feedzai said Digital Trust also protects passkeys against bypass attacks by confirming that a registered device is present and checking it for signs of compromise or social engineering, at login, account recovery, new device enrollment and call center authentication linked to a digital session.
Feedzai reported that using shared signals detected 44 percent more fraud in the highest-risk 0.1 percent of sessions without increasing false positives, and that the product produced 6,000 fewer unnecessary authentication challenges per million logins than competing technology and 41 percent fewer SMS one-time passcodes.
Vatsal Sharma, a director analyst at Gartner, said 95 percent of banks use multifactor authentication, with SMS one-time passwords the method Gartner clients cite most often, and that social engineering, SIM swapping and phishing can bypass such protections.
Sources: Feedzai
–
By the ID Tech Editorial Team
