ID Tech Digest – December 4, 2025

Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

Acuity’s 2025 Prism Flagship Puts “Resilient Trust” at the Center of Digital Identity

Acuity Market Intelligence’s 2025 Biometric Digital Identity Prism Flagship report introduces “Resilient Trust” as the organizing principle for digital identity in an era of deepfakes, synthetic identities, and tightening privacy rules. The study consolidates earlier Prism work into frameworks such as the Identity Hierarchy, Prism Lens, and Resilient Trust Maturity Ladder, and maps global trends across mobile ID, wallets, and passkeys. It positions converged privacy, compliance, and anti-fraud strategies as essential for governments, enterprises, and vendors building biometric-centric identity infrastructure.

UK Plans Nationwide Expansion of Police Facial Recognition

The UK government plans to expand live and retrospective facial recognition across police forces in England and Wales, extending deployments that have already supported hundreds of arrests in London. Officials describe the technology as a major investigative tool for matching suspects from CCTV, body-worn video, and other footage, including at large public events. Civil liberties groups warn the policy risks normalizing mass biometric surveillance without a dedicated legal framework, amplifying concerns about bias, governance, and the lack of clear statutory limits on police use.

Germany’s Gematik Approves Nect’s Automated Video ePass for HealthID Access

Germany’s e-health agency Gematik has approved Nect’s automated video-based identification with ePass for creating HealthIDs, opening a remote biometric route into electronic patient records and prescriptions. The Nect Ident with ePass flow combines document video capture, NFC chip reading, and a short selfie video with spoken prompts, backed by partial manual review. Regulators view it as a higher-assurance alternative to classical video-ident methods previously barred from healthcare, though critics caution that deepfake and coercion risks remain in image-driven remote identification.

OECD Publishes Detailed Guidance on Implementing Chile’s National Digital ID Strategy

The OECD has published a policy paper on implementing Chile’s national digital identity strategy, offering a governance and financing playbook that other governments may also reference. The report frames digital identity as critical infrastructure and structures its guidance around three pillars: governance, technological development, and funding. It emphasizes risk management, privacy, interoperability, and private-sector participation, positioning digital ID as a foundation for secure public and private services rather than just a login utility.

Philippines: Biometric Access and Timekeeping Procurements Signal Renewed Infrastructure Push

New tenders from the Philippines’ Toll Regulatory Board and other agencies are calling for biometric access control, door systems, and timekeeping platforms, signaling a modest but clear shift toward converged physical security and workforce management. The TRB tender focuses on an integrated solution for enrollment, entry control, and attendance tracking, while a separate contract covers access door hardware and biometric device deployment with multi-year maintenance. Together, they highlight growing demand for biometric access in government offices and the long-tail service opportunities that follow initial installations.

GoldFactory’s Evolving Identity Fraud Campaigns Intersect with AISURU’s Record-Breaking Botnet Firepower

Group-IB reports that the GoldFactory threat group is modifying legitimate banking apps across Southeast Asia to embed fraud modules that abuse accessibility features, capture balances, and harvest identity data from images of national ID cards. A related malware line, Gigaflower, supports live device streaming and spoofed update prompts to deepen account takeover attempts. In parallel, Cloudflare details AISURU, a massive botnet behind record DDoS attacks reaching nearly thirty terabits per second, illustrating how targeted mobile fraud and large-scale disruption capabilities are converging risks for financial institutions.

Identy.io Secures NIST ISO 30107-3 Level 2 PAD Certification

Identy.io’s Face SDK v6.3.0 has achieved ISO/IEC 30107-3 Level 2 PAD certification from iBeta, with testing showing a zero percent attack success rate across mid-sophistication spoof attempts. The evaluation covered both server-based and fully on-device liveness processing on Android and iOS devices. Identy highlights the combination of Level 2 assurance and on-device operation as suited to use cases in financial services, telecom, and public-sector digital ID where connectivity constraints and privacy requirements favor local biometric processing.

Freedom Mobile Breach Exposes Customer PII Through Subcontractor Account Compromise

Freedom Mobile has disclosed that a subcontractor account was used to access its customer account management platform, exposing personal data for an unspecified number of subscribers. The information includes names, addresses, dates of birth, phone numbers, and account numbers, but not payment data or passwords. The incident underscores the risks posed by third-party access to carrier back-end systems that underpin SIM management and account control, and raises concerns about downstream SIM swap fraud and identity attacks that rely on mobile numbers as an authentication factor.

LexisNexis Risk Solutions Upgrades IDVerse for Deepfake and Document Fraud Detection

LexisNexis Risk Solutions has released an enhanced version of its IDVerse platform that pairs AI-driven document authentication with biometric verification and deepfake detection in a streamlined six-screen onboarding flow. A video-based document capture process with Camera AI aims to improve text extraction and resist injected images, while server-side face checks and liveness detection are designed to spot synthetic media without adding steps for legitimate users. Through integration with the LexisNexis Dynamic Decision Platform, customers can orchestrate device risk, behavioral analysis, and identity verification in a single decisioning workflow.

India: Biometric Attendance Tenders Highlight Split Between Aadhaar and Non-Aadhaar Approaches

New tenders across India show diverging approaches to biometric attendance. Universities and state departments are issuing procurements for non-Aadhaar biometric systems that keep identity data local, while other agencies continue to expand Aadhaar-Enabled Biometric Attendance deployments. Chhattisgarh recently mandated Aadhaar-linked attendance for senior officials, and CHiPS issued an RFP for Aadhaar and allied services. The split underscores varying institutional priorities around privacy, governance, and national-ID integration.

–

By the ID Tech Editorial Team