Yoti said its MyFace passive liveness technology has achieved iBeta’s highest Presentation Attack Detection (PAD) level (Level 3) under ISO/IEC 30107-3, positioning the result as a milestone for passive, single-selfie liveness checks used in remote identity verification.
According to the company, the MyFace capability is a passive approach designed to work from a single selfie capture rather than requiring users to perform active “challenge” motions. Yoti said the iBeta evaluation awarded a PAD Level 3 result under the ISO/IEC 30107-3 framework and described the outcome as the first time a passive, single-selfie liveness solution has met that top level.
PAD performance is a core metric for organizations deploying selfie-based onboarding and authentication, particularly in regulated or higher-risk environments where biometric matching must be paired with strong defenses against spoofing. A higher PAD level can be used as an indicator that a liveness system has been evaluated against more capable presentation attacks, which can influence vendor selection and risk acceptance decisions.
Yoti said the testing involved “high-end” presentation attacks, including advanced masks, and that the evaluation required a very low tolerance for false accepts. The company said its system detected all attacks under the criteria used in the assessment.
While the announcement is published by Yoti, the reference to iBeta and ISO/IEC 30107-3 points to a third-party test framework that is frequently cited in procurement requirements and assurance programs for biometric systems. For buyers, the details of the threat models and evaluation conditions can be as important as the headline level, particularly when comparing passive and active liveness approaches across different devices and operating conditions.
The announcement reflects continued competition among identity verification providers to demonstrate higher-assurance liveness performance as synthetic media, spoofing techniques, and fraud tooling evolve. Re-testing, red teaming, and monitoring for drift can also be important as attack methods and capture conditions change over time.
As liveness becomes increasingly standardized in RFP language, independently evaluated PAD results are likely to remain a differentiator in onboarding and authentication workflows, especially where organizations need to document assurance to regulators, auditors, or risk committees.
Sources: Yoti
—
By the ID Tech Editorial Team
