Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
Kazakhstan Schools Move to Support Palm-Vein Biometrics Platform Alaqan Mektep
Schools in Kazakhstan’s Akmola region are tendering for maintenance and licensing of the Alaqan Mektep palm-vein biometric system, signaling that deployments are moving from pilot use to routine school operations across access control, attendance, and payments. Notices from two schools indicate ongoing investments in hardware and software maintenance, while additional tenders for system licenses suggest continued expansion across Kokshetau. Alaqan’s broader platform now spans around 140 schools, reflecting the rise of vertically integrated biometric stacks for education, though the scale of children’s biometric use raises governance, privacy, and vendor-lock concerns.
New Zealand Prepares Digital Identity Services Marketplace Channel Under Trust Framework
New Zealand’s Department of Internal Affairs is preparing a new Digital Identity Services channel on its Pae Hokohoko Marketplace to streamline procurement of authentication, verification, and biometric-binding solutions under the Digital Identity Services Trust Framework. The channel will categorize offerings across authentication, binding, information, and verification support services, complementing existing systems like RealMe and Identity Check. By creating a structured procurement route with clear Trust Framework expectations, New Zealand positions biometrics, passkeys, and modular verification tooling as core components of its future digital identity ecosystem.
Zendesk SSO Phishing: Lapsus$-Linked Actors Register 40+ Fake Domains
A Scattered Lapsus$ Hunters-linked group is impersonating Zendesk environments through more than 40 typosquatted domains designed to harvest SSO credentials and infiltrate helpdesk workflows. Attackers are pairing lookalike login pages with malicious ticket submissions to compromise support agents and escalate into enterprise systems. The campaign underscores helpdesk platforms as identity perimeters and highlights the need for phishing-resistant MFA, domain monitoring, and tighter controls over external links and attachments inside support tickets.
Bhutan’s National Digital ID on Ethereum, Plus New State Staking Move
Bhutan has begun staking government-owned ether while progressing toward launching a national digital ID system anchored to Ethereum by early 2026. Officials recently staked 320 ETH through Figment, signaling long-term alignment with the network supporting Bhutan’s decentralized NDI platform. The program will issue privacy-preserving credentials rooted in Ethereum proofs while keeping personal data off-chain, raising important questions on key management, verifiable credential design, and the implications of tying national identity infrastructure to a single public blockchain’s technical and economic trajectory.
Wultra Expands Post-Quantum Authentication Footprint in APAC
Wultra has opened a Singapore office to support adoption of its post-quantum authentication solutions across APAC’s financial sector. The expansion follows a €3 million funding round and growing regulatory pressure on banks to roadmap quantum-safe cryptography. Wultra’s offerings combine passwordless authentication, device binding, and quantum-resistant cryptographic primitives, reflecting a shift from long-term research to near-term deployment planning as financial institutions prepare staged migrations away from vulnerable algorithms.
China Drafts Stricter Data Rules for Large Online Platforms
China’s Cyberspace Administration has released draft rules imposing stricter personal information governance requirements on large online platforms, including those processing biometric data, under the Personal Information Protection Law. The provisions mandate Chinese-national data protection officers, dedicated privacy departments, local data storage, and tighter rules for cross-border transfers. Platforms using biometrics for authentication or fraud prevention will face heightened scrutiny and operational constraints, especially foreign vendors operating within domestic ecosystems.
Crypto Exchange Fivexs Introduces Multi-Layered Account Security Framework
Crypto exchange Fivexs has unveiled an Account Security Framework consolidating identity verification, multi-factor authentication, and transaction-monitoring controls into a unified security model. The framework strengthens onboarding checks, expands MFA options, and introduces enhanced monitoring for suspicious login or withdrawal activity. The move mirrors broader regulatory expectations that exchanges demonstrate mature identity governance and formalized controls against account takeover and fraud.
Extreme Heat Slows Fingerprint Voter Verification in Kenya By-Election
Extreme temperatures in northern Kenya slowed fingerprint voter verification during a by-election in Turkana West, with election staff reporting that heat affected scanner performance and lengthened queues. The incident highlights environmental constraints common to biometric deployments in the field and reinforces the need for hardened devices, climate-aware procedures, and fallback processes to prevent disenfranchisement during adverse conditions.
Edmonton Police Use AI-Generated Face Image in Death Investigation, Raising Concerns
Edmonton Police have released an AI-generated facial reconstruction to identify a woman whose remains were found in 2024, prompting debate over consent, accuracy, and the ethics of synthetic likenesses tied to real individuals. While the image was reviewed internally and externally before release, experts warn that photorealistic AI outputs risk misrepresentation and highlight the absence of formal governance frameworks for generative imagery in sensitive forensic contexts.
–
By the ID Tech Editorial Team