Shufti Achieves iBeta PAD Level 3 Passive Liveness Certification with Zero Errors on iOS and Android

Shufti, a London-based biometric identity verification provider, has passed iBeta Quality Assurance’s Presentation Attack Detection (PAD) Level 3 evaluation for its passive biometric liveness detection technology on both Android and iOS platforms, achieving a zero percent Attack Presentation Classification Error Rate and zero percent Bona Fide Presentation Classification Error Rate on each. Shufti becomes the first European company to achieve iBeta Level 3 conformance for passive biometric liveness detection across both major mobile platforms.

Testing ran from March 27 to April 24, 2026, using Android SDK version 1.9.8 on a Pixel 4 running Android 12 and iOS SDK version 1.3.42 on an iPhone 12 Pro running iOS 16.6.1. The Level 3 protocol follows ISO/IEC 30107-3 and uses sophisticated attack artefacts including silicone, urethane, and resin masks, running up to 450 attack presentations per device alongside genuine presentations. In total, 900 professional-grade mask attacks were blocked with no errors recorded. Critically, the evaluation was conducted on mainstream consumer smartphones rather than custom hardware, reflecting real-world deployment conditions. The iBeta Level 3 result builds on Shufti’s performance in the DHS RIVR selfie verification rally, where it was among only five vendors to meet all performance goals in the U.S. government’s liveness testing programme.

Shufti’s passive liveness approach requires no user prompts. A single selfie frame determines real human presence and detects spoofing attempts, with no blinks, smiles, or head turns required. The company previously completed iBeta Level 1 evaluation in October 2024 and Level 2 in April 2025.

Shufti’s achievement arrives as the iBeta liveness market has shifted as Level 2 became the norm, with 55 confirmation letters issued in 2025 alone. Shufti’s confirmation letter will be added to iBeta’s registry of approved liveness detection solutions, the industry reference used by procurement teams in regulated identity verification markets.

CEO Shahid Hanif stated: “We are the first European company to independently achieve iBeta Level 3 conformance on both iOS and Android, with zero errors and no extra steps for the user.” Hanif also noted: “We achieved this on mainstream consumer phones, the same devices people actually use to sign up, not custom hardware engineered for the test.”

Sources: GlobeNewswire, iBeta Quality Assurance