Liveness detection
A control meant to guarantee that a real, present human stands before the camera, the digital substitute for physical presence.
In August 2023, Hong Kong police broke up a ring that filed online loan applications with stolen identity cards and got past the lenders' facial recognition with AI-generated face swaps. During remote onboarding, liveness detection has to establish that the captured face belongs to a person who is actually there, and not to a replayed image. The market adopted it on a massive scale once remote onboarding became the norm, to replace physical presence at the counter. Deepfakes attack it head on (face swaps, virtual cameras, injection attacks), and the substitute turns out more fragile than what it replaced. Improving detection indefinitely is a race lost in advance. The defense is layering: passive and active liveness, injection detection, biometric binding to the document, continuous behavioral analysis.
Textbook case: a security firm recorded more than eight thousand attempts to bypass the liveness controls of a single financial institution in a few months.
Follow the research
One letter a week. First, the week's underwriting note, when one is published: a dated, argued decision, signed by Paul Bernardski. Then what the observatory published on cyber risk, political risk and insurance. No account, no tracking.
No spam, one-click unsubscribe, no data ever sold.