Skip to content

Topic

Identity Verification

KYC and identity-proofing systems that collect ID documents, selfies and biometric templates.

Current stories

securityOne report1 publisher

North Korean IT workers pay Americans to appear on camera and keep work laptops online

FBI says North Korean IT workers increasingly depend on witting and unwitting Americans to win jobs at U.S. companies. The bureau says no single indicator catches them, so employers have to weigh several signals together.

Publishers:ic3.gov

Reality

Evidence50
Adoption
Not scored
Hype gap
Not scored
Incentives
Not scored
Confidence55
buildOne report1 publisher

Japan tells companies to patch and harden logins after a Times Car leak exposed 6.6 million accounts

Japan's government told ministries, local authorities and companies to patch known flaws and tighten supplier security after 20-plus firms disclosed attacks. For operators the practical items are supplier maps, contractor logins and how long ID images are kept.

Publishers:dev.to

Reality

Evidence45
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence50
securityConfirmed15 publishers

Denmark says hackers reached 8.8 million people's records through a company's register access

Denmark says hackers used a Danish company's search access to the Central Person Register to reach names, addresses and ID numbers of 8.8 million people. Because that access is a service offered to businesses by design, every partner account with search rights is part of the register's security perimeter.

Perspective Coverage

15 publishers
Builder
Builder 24%
Operator
Operator 67%
Investor
Investor 9%

Reality

Evidence74
Adoption
Not scored
Hype gap+12
Incentives30
Confidence70
buildOne report1 publisher

Cloudflare's new fraud dashboard judges each account against its own login history

Cloudflare launched an Early Access fraud dashboard built on per-account login and signup histories, arguing AI-faked identities now beat one-time checks. How much it catches depends on how much of a site's login traffic Cloudflare's edge actually sees.

Reality

Evidence40
Adoption
Not scored
Hype gap+20
Incentives80
Confidence50
securityConfirmed2 publishers

Pindrop survey finds purpose-built deepfake defenses at 10% of US organizations

Pindrop's survey of more than 250 US security leaders found 74% faced or suspected a deepfake attack in the past year. The targets are live channels such as help-desk calls, job interviews and video meetings, and identity controls were not designed to verify who is on them.

Reality

Evidence40
Adoption10
Hype gap+25
Incentives
Not scored
Confidence45
securityOne report1 publisher

LinkedIn lets verified company pages hide impersonator accounts from search

LinkedIn now lets admins of verified Company Pages remove known impersonator accounts from search results under the company name. Companies that have not verified their page cannot use it, so fake-employee cleanup on LinkedIn starts with whoever controls that page.

Reality

Evidence40
Adoption20
Hype gap+5
Incentives65
Confidence50
investConfirmed4 publishers

Socure adds agentic fraud investigation at a valuation 16% above its 2021 round

Socure's round prices a 63% grower at roughly 14 times ARR, and the agentic investigation platform it bought sells an 80% cut in cost per case, which is a promise to deflate the budget it is sold into.

Perspective Coverage

4 publishers
Builder
Builder 21%
Operator
Operator 36%
Investor
Investor 43%

Reality

Evidence58
Adoption62
Hype gap+25
Incentives70
Confidence60
productConfirmed7 publishers

The counter scan that cleared a customer for entry is now for sale by name

Brian Krebs reports a hacker selling searchable access to 153 million US and Canadian licences, with suspicion pointing at the vendor IDScan.net. Any age gate built on a document scan owns that exposure.

Perspective Coverage

7 publishers
Builder
Builder 26%
Operator
Operator 56%
Investor
Investor 18%

Reality

Evidence62
Adoption66
Hype gap+22
Incentives50
Confidence60
securityConfirmed7 publishers

Nexus sells 153 million license scans that Krebs traces to a Louisiana IDV vendor

Every company that outsourced KYC document capture now owns an exposure it never inventoried, because the images being sold appear to come from the verifier rather than from any of its customers. The FBI opened the file in New Orleans.

Perspective Coverage

7 publishers
Builder
Builder 23%
Operator
Operator 49%
Investor
Investor 28%

Reality

Evidence62
Adoption65
Hype gap+15
Incentives55
Confidence60
productConfirmed5 publishers

IDScan.net's breach notice puts 153 million licenses in cloud accounts it kept after the check

IDScan.net says an unauthorized third party may have accessed or copied full names and government-issued ID numbers from customer accounts on its cloud, after 153 million driver's licenses appeared for sale on a dark web site.

Perspective Coverage

5 publishers
Builder
Builder 17%
Operator
Operator 65%
Investor
Investor 18%

Reality

Evidence68
Adoption70
Hype gap+28
Incentives60
Confidence64
productOne report1 publisher

LinkedIn hands resume checking to your old colleagues and your employer's page admin

The new vouching and brand-control tools give the checking work to colleagues who have known you for a year and to page admins clicking through profiles one at a time. LinkedIn says 115 million members are already verified.

Publishers:techcrunch.com

Reality

Evidence58
Adoption45
Hype gap+25
Incentives72
Confidence60
productOne report1 publisher

Papaya Global's case for AI workforce infrastructure rests on its own country counts

Market researchers put the workforce that labels data and reviews model outputs at about 3 million today and heading toward 35 million. The licence and enforcement counts Papaya presented to analysts are the company's own tally.

Publishers:thenextweb.com

Reality

Evidence45
Adoption32
Hype gap+30
Incentives78
Confidence45
productOne report1 publisher

Polymarket's signup flow treated a stolen SSN as a password

According to the Wall Street Journal, nearly 500 Polymarket US accounts were entered by people who typed in someone else's Social Security number. The flow's duplicate-identity check opened the account it matched instead of blocking the attempt.

Publishers:gizmodo.com

Reality

Evidence55
Adoption72
Hype gap−15
Incentives70
Confidence55
leadershipOne report1 publisher

Candidate fraud lands on recruiters while InfoSec, IT and legal stay out of the interview loop

A hiring podcast argues that state-backed operations now train workers to apply for remote jobs with stolen credentials and proxy interviewers. The guest making the case works for the vendor selling the fix.

Reality

Evidence20
Adoption
Not scored
Hype gap+55
Incentives85
Confidence58
productOne report1 publisher

A 20-app dating network sold coins so 25,000 people could message 4,700 AI personas

Anthropic's investigation counted 2.36 million messages over two weeks in April 2026. The operators put paid humans on video calls and let a second AI model draft their lines, so the face on the call and the words in the chat came from different places.

Reality

Evidence44
Adoption63
Hype gap+6
Incentives55
Confidence52
buildOne report1 publisher

Footprint raises $25M for compliance agents that log a citation and a timestamp per step

QED led the round and MUFG joined as one of four new investors. Under Trust Fabric, a human reviewer has to approve a finding before later investigations can reuse it.

Publishers:runtimewire.com

Reality

Evidence48
Adoption30
Hype gap+27
Incentives72
Confidence55
buildOne report1 publisher

An ICCID column is what makes the unverified Claro list worth acting on

A forum post on 13 September claimed 2,889,256 Claro Dominicana customer records, each carrying the serial number of the line's SIM. Nobody has verified it, and the SIM serial is the field that should drive the response.

Publishers:dev.to

Reality

Evidence22
Adoption
Not scored
Hype gap+14
Incentives25
Confidence40

Earlier coverage

  1. IDScan confirms breach in noindexed notice, as reports peg leaked database at 153 million licenses

    Security · September 10, 2026 · Confirmed6 publishers

  2. Stolen infrared and UV scans put the document check itself inside the IDScan.net breach

    Leadership · September 7, 2026 · Confirmed4 publishers