Fighting online fraud: New tactics require new defenses

June 25, 2024 by Adam Bacia

Mitek Duplicate Identity Scan protections combat sophisticated fraud attacks

Today, the question isn’t whether your customers’ personal information is available online. It’s how to best protect your company and your customers from its nefarious use.

Duplicate IDThe amount of stolen information available from data breaches, social media sites, and the dark web is staggering. Taking advantage of this wealth of information, organized fraud rings are now using high-quality fake identity documents to quickly submit fictitious identities in rapid succession for the purpose of creating new accounts on a company’s platform.

That means a person’s stolen personal information or an image from an online website or official document may suddenly appear in dozens – or hundreds – of fake documents presented to bolster fraudulent account opening applications. Using an actual victim’s image is a common, traditional fraud tactic. However, with many digital systems now testing for liveness, fraudsters have begun using their own images paired with stolen PII to bypass more sophisticated identity verification checks.

Key behaviors we see in advanced fraud ring attacks include:

  • Repeated use of stolen personally identifiable information with the same or similar portraits
  • Large scale volume requests (bots completing the application process in rapid succession)
  • Sophisticated fraud tactics, such as testing an IDV service once before bulk attacking

To prevent these types of attacks, Mitek’s new Duplicate Identity Scan (DIS) functionality spots rapid attack cycles and provides defensive measures to stop fraudsters from exploiting stolen or manipulated identity information to create fake accounts.

Particularly valuable as an add-on to a company’s new account opening workflows, DIS provides an additional layer of always-on fraud protection to stop template attackers from reusing the same portrait image to quickly create multiple new accounts. Even better, it creates a growing library of fraudulent selfies and portrait images for even faster rejections if – or when – fraudsters try again.

DIS ChartBy combining Face Velocity, to identify repeat verification attempts using the same image over a period of time, with the DIS Gallery Scan, which compares new images against a gallery of known fraudsters, companies can gain a powerful tool to stop template attacks before they gain momentum.

By adding Duplicate Identity Scan to your identity verification toolkit, you can:

  • Fight organized fraud. Spot fraud ring activity on your platform as it’s happening by instantly analyzing the frequency that a face has been seen during onboarding and flagging it if it exceeds reasonable thresholds.
  • Decrease template fraud. Continuous analysis of selfies and portrait images thwarts bad actors using the same selfie and altered document data to create fake accounts.
  • Improve operational efficiencies. Develop a growing database of fraudulent images and reduce costs by instantly rejecting known fraudsters before running full IDV workflows on them.

The fight against fraud is work that Mitek is committed to long-term. Our mission is to make the online world safe, and that means developing and deploying the newest and most effective technologies to thwart online criminals today – and tomorrow. DIS is a powerful new tool to help us do just that.

 

 

To learn more on Duplicate Identity Scan and other evolving fraud types:

 

Register for the new webinar, How to combat organized crime rings and identity fraud