Preventing account takeover requires more than one control at the login screen. An Account Takeover Prevention Framework for Digital Businesses should connect authentication, device...
Routine and consequential digital actions should not always rely on identical checks. The answer to ‘Should Every Digital Action Require the Same Identity Check?’...
How Should Organisations Evaluate Continuous Facial Recognition with Liveness? The assessment should begin with a defined identity-related risk and a clear digital action, not...
How Does Continuous Facial Recognition with Liveness Work? It builds on an existing identity check by comparing the person present during an active digital...
Can Continuous Facial Recognition with Liveness Replace Existing Authentication? No. Passwords, one-time PINs, biometrics and multi-factor authentication still have important roles in deciding whether...
Which in-app actions need additional identity assurance? The strongest candidates are actions that can move or redirect value, change who controls an account, expose...
How to identify higher-risk actions in a digital journey begins with consequence. An action deserves closer attention when it can move value, redirect a...
When should banks apply additional identity assurance? Banks should consider it when an in-app action can move money, change account control, redirect future payments...
The transaction gap in digital banking is the period between an identity check and a later in-app action with meaningful consequences. A customer may...
Should every digital action require the same identity check? No. The level of identity assurance should reflect what the user is doing, the potential...