Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
Facephi Launches Platform for Continuous Identity and Session Fraud Checks
Biometric and fraud prevention specialist Facephi has released the Facephi Intelligence Platform, an identity security solution engineered to maintain continuous session fraud checks and behavioral monitoring across digital banking channels long after initial onboarding. By synthesizing upfront biometric verification records with real-time device signals and ongoing user interaction patterns, the platform establishes a persistent identity profile that enables financial institutions to detect account takeover and remote-access malware even when an attacker operates within a properly authenticated session. The rules engine can sever unauthorized remote sessions instantly without interrupting the account holder’s legitimate mobile access, providing banks and fintechs with an integrated alternative to disparate point solutions amid INTERPOL warnings highlighting the growing profitability of automated, AI-driven financial fraud.
Token Launches Fingerprint Smart Card for Logins and AI Agent Approvals
Hardware authentication developer Token has unveiled the TokenCore Card, an on-device fingerprint smart card for passwordless enterprise logins and human verification of critical workflows initiated by autonomous AI agents. Introduced at the Authenticate U.S. 2026 conference, the FIDO2-certified credential pairs biometric matching with Bluetooth and near-field communication interfaces, ensuring biometric templates remain securely isolated on the card while completing enterprise single sign-on access in under two seconds. The solution integrates directly with IAM, SSO, and privileged access management systems across major desktop and mobile operating systems, requiring an enrolled employee’s physical fingerprint to authorize high-risk agent operations such as administrative permission adjustments or outbound wire transfers.
World Launches Banking Identity Suite With Human Proofs and Zoom Checks
Digital identity network World has launched a financial services suite centered on World ID, delivering proof of human verification and video call presence checks across internal workflows and customer-facing banking rails. Announced at Money20/20 with design partners including Bain Capital, Pantera Capital, and VanEck Funds, the platform links Orb-verified iris enrollment with device-level liveness detection and zero-knowledge attribute verification to defend transactions against deepfakes and automated account takeovers. The deployment incorporates a Zoom integration displaying verified Human Badges on participant video tiles alongside the beta AgentKit developer framework, which enables individuals to delegate cryptographic proof of personhood to autonomous software agents without revealing private underlying credentials.
KEPCO Leak Allegations Include Facial Data for 408 Employees
A sensitive data breach at state-run utility Korea Electric Power Corporation exposed facial recognition records belonging to 408 employees alongside network IP addresses, account IDs, and administrative passwords for 14,957 surveillance CCTV cameras. Disclosed through parliamentary records obtained by opposition lawmaker Yun Jae-ok, the breach significantly expands upon KEPCO’s initial October 4 announcement that limited the incident to basic employee contact information while denying that unique or sensitive records were compromised. The revelations follow historical internal audit findings documenting repeated unauthorized contractor access to internal systems using employee credentials, intensifying legislative scrutiny over the security posture protecting critical national infrastructure and workforce biometric access control systems.
Forter Adds Skyfire Agent Identity Signals to Checkout Fraud Decisions
Digital commerce fraud platform Forter has integrated Skyfire’s Know Your Agent protocol into its decisioning engine to incorporate agent identity signals into e-commerce checkout fraud assessments. The integration allows merchants to differentiate authorized automated shopping assistants acting on behalf of real consumers from malicious bot traffic without modifying their existing checkout workflows. Piloted with luxury retailer Jomashop—where the merchant’s agent checkout conversion rate climbed to nearly 100 percent with zero increase in chargebacks—the solution links Skyfire’s agent-level cryptographic verification directly into Forter’s fraud assessment infrastructure as agentic commerce transaction volume across the network expands more than fourfold.
Microsoft Tests Passwordless Windows Sign-In on Hybrid Entra Devices
Microsoft has initiated testing for passwordless lock-screen authentication on hybrid-joined enterprise workstations, expanding web sign-in to Entra hybrid joined devices within Windows 11 Insider Experimental Preview Build 26340.9750. The update enables employees in hybrid enterprise environments to sign in at the local Windows lock screen using FIDO security keys, mobile phone passkeys, or time-limited Temporary Access Passes, automatically provisioning a Kerberos ticket upon successful cloud authentication to maintain seamless connectivity with on-premises file shares and internal network infrastructure. The build also introduces an automatic display-brightening toggle within Windows Hello settings to improve facial recognition accuracy in dimly lit or dark operating conditions.
Norway Revises Planned Social Media Age-Limit Law to Cover Harmful Games and Messaging
The Norwegian government has overhauled its legislative proposal establishing online age restrictions, eliminating broad platform carve-outs to extend age-limit obligations to harmful games and messaging services. Applying a risk-of-harm standard evaluating platform designs, features, and exposure to inappropriate content, the revised policy expects services like TikTok, Roblox, and Snapchat to verify user ages under a threshold that extends until January 1 of the year a minor turns 16. The statutory framework is designed to align with enforcement mechanisms under the European Union’s Digital Services Act and the GDPR, obligating covered providers to deploy effective, privacy-preserving age assurance ahead of formal submission to the Storting later this year.
Sumsub Adds Liveness Checks and Data Filters to AI Agent Access Controls
Compliance provider Sumsub has introduced the KYA Module for MCP to enforce data filtering and biometric liveness checks on AI agent requests connecting to enterprise systems via the Model Context Protocol. Initially supporting Amazon Bedrock AgentCore Gateway, the software sits between autonomous agents and enterprise data stores to redact personally identifiable information and intercept high-risk tasks—such as sensitive file transfers or payments exceeding defined financial thresholds—until an authorized employee completes a real-time biometric liveness check. Backed by tamper-evident audit logging, the module establishes operational guardrails to mitigate enterprise security incidents caused by unmonitored automated agents accessing corporate networks.
Goodix Combines Fingerprint Matching and Secure Elements for AI Devices
Biometric semiconductor manufacturer Goodix has unveiled an advanced hardware architecture that integrates fingerprint matching with an embedded secure element to protect local credentials and authorize autonomous operations across AI-enabled smartphones, PCs, robotics, and connected devices. Representing the flagship tier of a three-level portfolio supporting capacitive, optical, and ultrasonic sensors, the module executes image capture, template extraction, and matching within the sensor hardware while using the secure element to isolate API keys and OAuth tokens. Communicating via FIDO2 standards, TLS 1.3 encryption, and the Secure Device Connection Protocol, the design ensures that cloud-based large language model requests and high-risk agent operations proceed only after a verified on-device biometric match.
–
By the ID Tech Editorial Team