Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
Study Finds Older Personas Face Higher Online Scam Exposure
A field study deploying decoy browser profiles across senior-living communities found personas modeled on older users encountered malicious or scam elements on ~1.5 percent of rendered pages versus <1 percent for other profiles. While methodology details are limited, the results suggest demographic traits can shape attacker targeting and elevate credential compromise risk via tailored phishing, malvertising, and social engineering. Enterprises should extend risk-based authentication to incorporate demographic and behavioral indicators, enforce hardware-backed MFA or device-bound passkeys for higher-risk cohorts, harden browsers with extension control and sandboxing, and tailor awareness training to tech-support and benefits-themed lures. Findings align with broader FTC reporting on fraud exposure among older adults and underscore the need to tie identity policies to user risk.
Pindrop and BT Forge Strategic Partnership to Combat AI-Driven Voice Fraud in UK Call Centers
BT will embed Pindrop’s fraud detection and passive voice authentication across its enterprise contact-center portfolio, responding to sharp increases in call-center fraud and deepfake activity. Pindrop Protect analyzes raw audio, device, and network signals in real time to score risk and flag non-live or synthetic voices, while Pindrop Passport authenticates genuine customers by voice to reduce handle times and friction. With one in 106 calls now showing signs of deepfake characteristics, the partnership provides UK organizations—especially in regulated sectors—a ready distribution path for AI-resilient call-center defenses that both improve user experience and block session hijacking and impersonation.
Synaptics and Qualcomm Announce Strategic Engagement to Advance Touch and Fingerprint Tech for AI PCs and Mobile
Synaptics and Qualcomm will co-validate Synaptics’ touch/display controllers with Qualcomm’s 3D Sonic ultrasonic fingerprint sensors and compute platforms, creating a pre-optimized stack for premium phones and AI PCs using thin, flexible OLED displays. The reference path is meant to reduce noise, space, and tuning challenges for under-display biometrics, shortening OEM design cycles. Leveraging Synaptics’ S3930-series touch controllers and Qualcomm’s ultrasonic mapping—stronger against spoofs than 2D optics—the collaboration also targets on-device AI features for context awareness and enhanced spoof detection, paving a faster route to secure, bezel-lite designs.
BIO-key Partners with Dubai-Based VaporVM to Expand IAM and Biometric Distribution in Middle East and Africa
BIO-key named VaporVM a regional distributor and integrator for the MEA market, extending access to the PortalGuard IAM platform (SSO, MFA, self-service password reset) and BIO-key’s biometric products, including Identity-Bound Biometrics, WEB-key, and FBI-certified USB scanners like EcoID III and PIV-Pro. VaporVM will provide local sales, 24/7 support, and cloud-native deployments across AWS, Azure, and GCP. The alliance gives BIO-key an immediate channel into government, banking, telecom, and healthcare tenders where VaporVM already holds approved-vendor status, supporting device-independent biometric authentication alongside FIDO2 and PIN-based methods.
Critical Triofox Flaw Under Active Attack, Mandiant Warns
Mandiant disclosed CVE-2025-12480, a critical authentication bypass in Gladinet Triofox exploited as a zero-day since August by UNC6485 to gain SYSTEM-level code execution. Attackers spoof the HTTP Host header to “localhost” to bypass a locked-down setup page, create a native admin account, then repoint the antivirus engine path to a malicious script that executes with high privilege. Post-exploitation has included installing legitimate RMM tools, lateral movement, and SSH tunneling. Admins should upgrade to 16.7.10368.56560 immediately, audit for rogue admin accounts and AV-engine path changes, and hunt for unusual RMM activity.
Andreessen Horowitz Urges US Treasury to Adopt Decentralized Digital ID for Crypto AML
In comments to Treasury/FinCEN, a16z urged recognition of decentralized identifiers and verifiable digital credentials for AML/CIP, arguing current data-collection models create breach-prone honeypots without improving outcomes. The proposal separates identity verification from use via credentials issued by trusted entities and presented from a user wallet with zero-knowledge proofs to answer yes/no policy checks (e.g., sanctions, age, residency) without revealing personal data. a16z asks regulators to clarify that non-documentary digital identity methods can satisfy CIP, aiming to create a privacy-preserving path for compliant crypto and DeFi onboarding aligned with emerging DID/VC standards.
Ant Group Unveils Iris-Payment Smart Glasses at Singapore Fintech Festival
Ant International debuted Alipay+ GlassPay, smart glasses with on-device iris recognition and optional voiceprint that enable hands-free “look and pay” transactions. Built on the gPass framework with on-device processing, active liveness, and anti-spoofing, the system analyzes 260+ iris points and targets retail, transport, access control, and AR-assisted shopping experiences. Partnerships with Xiaomi and Meizu aim to bring the tech to market at scale across the Alipay+ network. The approach minimizes biometric data exposure and positions iris-based wearables as a high-assurance alternative to phone-based NFC/QR payments.
–
By the ID Tech Editorial Team