The answer to AI-generated identity documents
Published
How we tackle AI-generated fake documents
We're all too aware that AI is making it easier for criminals to create convincing fake documents. So, how do we stay one step ahead? Our approach is simple, we look beyond what the eye can see. Instead of relying on optical checks, which can be vulnerable to high-quality fakes, we focus on the advanced cryptographic and biometric security features embedded within official documents.
Our primary defence is our Enhanced NFC ID check. We created this check in line with HM Land Registry’s Digital ID Standard, ensuring it provides the highest level of assurance.
Closing the loop on fakes
A visually convincing AI-generated fake has a fundamental flaw, it is just an image. It has no embedded electronic chip. Our Enhanced NFC check uses a smartphone to read this chip and performs an 'active authentication' process. This validates the document's unique cryptographic keys against the records of the issuing government. A document without a genuine chip cannot complete this verification process. This creates a fundamental barrier that a visual fake is not equipped to cross.
The UK government's guidance on verifying a person's identity states that evidence where, "all digital information (including biometric information) is protected by cryptographic security features," offer you the highest level of confidence.
The "safe harbour" standard
By meeting the stringent requirements of the HM Land Registry Digital ID Standard, our Enhanced NFC check provides conveyancers with "Safe Harbour." This means the check is recognised as a highly robust process for mitigating identity fraud.
The specific part of the guidance which references this is section 3.2.
3.2 Requirement 2: check the evidence
You must check that the evidence that meets the first requirement is genuine to ensure it has not been forged and is still current.
You should do this by using an identity check provider to verify for you that the documentary and cryptographic security features of the evidence are genuine.
The identity check provider’s system must read the chip within the evidence using Near Field Communication by providing any required cryptographic keys and then:
check the digital signature is correct for the organisation that issued the evidence
check the signing key belongs to the organisation and has not been revoked
extract the biometric information needed for requirement 3
Checking the evidence is genuine by just using a photograph of the document or the Machine Readable Zone does not meet the requirement.
Taken from Practice Guide 81.
Our protocols for preventing fraud
We have specific protocols in place designed to raise the barrier against "presentation attacks" (for example, presenting a fake image or video) and deepfakes.
Advanced liveness detection
To ensure the person completing the check is real, present, and the genuine owner of the ID, we use sophisticated liveness detection. Our Enhanced NFC check uses iProov’s patented Flashmark™ technology. This illuminates the user's face with a one-time, cryptographic sequence of colours. The system analyses the reflection to confirm it is a live human being authenticating in that moment. This creates an exceptionally high barrier for an attacker, as a pre-recorded video or standard deepfake would not be able to replicate the unique, real-time colour sequence.
Continuous AI model training
For our Original ID check, our partner, Onfido, continuously trains its machine-learning models on vast datasets of real and fraudulent media. This includes generating thousands of synthetic fakes to "teach" the model how to spot the subtle giveaways of digital forgeries and keep pace with emerging fraud techniques.
Our proactive stance on evolving threats
The security landscape is in a constant state of flux. Our strategy is therefore not to declare a problem "solved," but to remain proactive and resilient. We achieve this by:
Partnering with global leaders in chip-reading (ReadID), liveness detection (iProov), and document authentication (Onfido).
Adhering to the highest industry standards, like the HM Land Registry Digital ID Standard, which are specifically designed to counter advanced fraud.
Continuously investing in and reviewing our technology to ensure we are prepared for future threats.
The increasing sophistication of AI underscores the importance of using multi-layered checks that include chip-based verification, and we believe our approach provides an exceptionally high level of security against these evolving risks.
Subscribe to our newsletter
Subscribe to our monthly newsletter for recaps and recordings of our webinars, invitations for upcoming events and curated industry news. We’ll also send our guide to Digital ID Verification as a welcome gift.
Our Privacy Policy sets out how the personal data collected from you will be processed by us.
