Apply DA Tag

Identity document verification safeguards the integrity of financial systems and protects consumers and organizations from fraud, money laundering and more.

The ability to verify customer identities is essential for financial institutions for numerous reasons: regulatory requirements, for the protection of their consumers and their business, mitigating risk and more. Being able to detect high-risk customers and large transactions is a critical component of Know Your Customer (KYC) strategies. In addition to being good business practices, this type of risk mitigation is also outlined in industry regulations. In an increasingly complex regulatory environment, companies may be faced with meeting multiple KYC and Anti-Money Laundering (AML) requirements. Actions taken to validate customers such as enhanced due diligence in KYC compliance have impacts spanning far beyond just regulatory compliance. As with any business, bottom line and budget are primary drivers for many financial institutions. Enhanced due diligence (EDD) can positively impact a business's bottom line by contributing to the reduction of fraud rates. And with increased security to discover potential fraudsters, organizations can protect both customers and reputational value. Enhanced due diligence explained: Why KYC, CIP and AML are critical in financial services EDD takes Customer Due Diligence (CDD) to the next level. Financial institutions conduct CDD to protect their organizations from financial crime. CDD is also a critical component of KYC steps to comply with AML laws. AML legislation requires financial institutions to validate their customers to ensure they aren’t part of explicitly illegal financial activity or funding terrorism. EDD is, as it sounds, a more involved form of due diligence, which encompasses additional procedures. EDD involves determining a customer’s risk, often requiring additional information and evidence to determine their viability. While CDD is performed on all customers, EDD is reserved for high-risk potential customers. Because EDD is often more costly and involved in terms of time and resources, a risk-based approach is recommended to flag only the instances when this additional level of validity is required. KYC references the mandatory process of identifying and verifying a client’s identity at account opening and over the course of their relationship with a company to ensure they are the person they say they are. KYC consists of three parts: Customer identification program (CIP), CDD and EDD. CIP requires, at minimum, that financial institutions provide four pieces of identifying information including name, date of birth, address and identification number. CDD consists of classifying the identifying information that was collected. After identifying who the client is (via CIP), CDD assesses the information to determine risk. Enhanced due diligence in KYC In order to establish a competent EDD program, you must improve your CIP and KYC programs. Objective, automated and efficient identity verification capabilities help you acquire profitable, legitimate customers and monitor them effectively over time to meet regulatory compliance expectations. How can EDD benefit your business? Failing to comply with EDD regulations can result in countless risks for financial institutions like fines and reputational losses. While many customers pose little to no risk, high-risk individuals must be flagged quickly and efficiently. The primary benefit of EDD is to protect both financial institutions and their customers from financial crimes such as money laundering and terrorist financing, but there are other risks as well. By mitigating potential risks associated with higher-risk customers, EDD can prevent financial institutions from incurring regulatory fines, legal action, and damage to their reputation. In turn, this ensures that customers have more trust in their financial service providers. Financial institutions can then gain a competitive advantage by offering more secure financial products and services that investors, businesses and customer demand. Access EDD from Experian Experian leverages our advanced analytics, reliable data sources, and team of experts to conduct objective, full and comprehensive due diligence with confidence and certainty. Our solutions, including flexible monitoring and segmentation tools, allow you to resolve discrepancies and fraud risk in a single step, all while keeping pace with emerging fraud threats with effective customer identification software. Improving your Customer Identification Program (CIP) and KYC programs In conclusion, Enhanced Due Diligence in KYC, CIP, and AML are critical components of the financial services regulatory compliance framework. EDD goes beyond the standard KYC, CIP, and AML checks to mitigate risks associated with higher-risk customers. Implementing EDD can help financial institutions comply with regulatory requirements, protect against potential risks, and prevent financial crimes. Ultimately, this benefits not only the institutions but also their customers and the broader economy. It’s vital that financial institutions understand and appreciate the importance of EDD and take appropriate measures to implement it effectively. Experian offers objective, automated and efficient identity verification solutions to help you acquire profitable, legitimate customers and monitor them over time to meet regulatory compliance expectations. Discover the power of CIP and KYC solutions. Learn more

52 percent of banks report high levels of concern about fraud, making fraud detection in banking top-of-mind. Banking fraud prevention can seem daunting, but with the proper tools, banks, credit unions, fintechs, and other financial institutions can frustrate and root out fraudsters while maintaining a positive experience for good customers. What is banking fraud? Banking fraud is a type of financial crime that uses illegal means to obtain money, assets, or other property owned or held by a bank, other financial institution, or customers of the bank. This type of fraud can be difficult to detect when misclassified as credit risk or written off as a loss rather than investigated and prevented in the future. Fraud that impacts financial institutions consists of small-scale one-off events or larger efforts perpetrated by fraud rings. Not long ago, many of the techniques utilized by fraudsters required in-person or phone-based activities. Now, many of these activities are online, making it easier for fraudsters to disguise their intent and perpetrate multiple attacks at once or in sequence. Banking fraud can include: Identity theft: When a bad actor steals a consumer’s personal information and uses it to take money, open credit accounts, make purchases, and more. Check fraud: This type of fraud occurs when a fraudster writes a bad check, forges information, or steals and alters someone else’s check. Credit card fraud: A form of identity theft where a bad actor makes purchases or gets a cash advance in the name of an unsuspecting consumer. The fraudster may takeover an existing account by gaining access to account numbers online, steal a physical card, or open a new account in someone else’s name.  Phishing: These malicious efforts allow scammers to steal personal and account information through use of email, or in the case of smishing, through text messages. The fraudster often sends a link to the consumer that looks legitimate but is designed to steal login information, personally identifiable information, and more. Direct deposit account fraud: Also known as DDA fraud, criminals monetize stolen information to open new accounts and divert funds from payroll, assistance programs, and more. Unfortunately, this type of fraud doesn’t just lead to lost funds – it also exposes consumer data, impacts banks’ reputations, and has larger implications for the financial system. Today, top concerns for banks include authorized push or wire transfer payment fraud, transactional fraud. Also, 33 percent of businesses encountered account takeover, first-party fraud, third-party fraud, and synthetic identity fraud last year. Without the proper detection and prevention techniques, it’s difficult for banks to keep fraudsters perpetrating these schemes out. What is banking fraud prevention? Detecting and preventing banking fraud consists of a set of techniques and tasks that help protect customers, assets and systems from those with malicious intent. Risk management solutions for banks identify fraudulent access attempts, suspicious transfer requests, signs of false identities, and more. The financial industry is constantly evolving, and so are fraudsters. As a result, it’s important for organizations to stay ahead of the curve by investing in new fraud prevention technologies. Depending on the size and sophistication of your institution, the tools and techniques that comprise your banking fraud prevention solutions may look different. However, every strategy should include multiple layers of friction designed to trip up fraudsters enough to abandon their efforts, and include flags for suspicious activity and other indicators that a user or transaction requires further scrutiny.   Some of the emerging trends in banking fraud prevention include: Use of artificial intelligence (AI) and machine learning (ML). While these technologies aren’t new, they are finding footing across industries as they can be used to identify patterns consistent with fraudulent activity – some of which are difficult or time-consuming to detect with traditional methods. Behavioral analytics and biometrics. By noting standard customer behaviors — e.g., which devices they use and when — and how they use those devices — looking for markers of human behavior vs. bot or fraud ring activity — organizations can flag riskier users for additional authentication and verification. Leveraging additional data sources. By looking beyond standard credit reports when opening credit accounts, organizations can better detect signs of identity theft, synthetic identities, and even potential first-party fraud.     With real-time fraud detection tools in place, financial institutions can more easily identify good consumers and allow them to complete their requests while applying the right amount and type of friction to detect and prevent fraud.   How to prevent and detect banking fraud In order to be successful in the fight against fraud and keep yourself and your customers safe, financial institutions of all sizes and types must: Balance risk mitigation with the customer experience Ensure seamless interactions across platforms for known consumers who present little to no risk Leverage proper identity resolution and verification tools Recognize good consumers and apply the proper fraud mitigation techniques to riskier scenarios With Experian’s interconnected approach to fraud detection in banking, incorporating data, analytics, fraud risk scores, device intelligence, and more, you can track and assess various activities and determine where additional authentication, friction, or human intervention is required. Learn more

Experian's identity and fraud report explores the evolving fraud landscape and influence on identity, the consumer experience, and business strategies.

Learn how high-quality data from multiple data sources can help drive business growth.

By leveraging an array of tools and technologies, businesses can tailor their fraud prevention strategies to suit the specific needs of their customers.

Business intelligence analytics can help financial institutions optimize their decisioning and uncover safe growth opportunities.

CrossCore named Overall Leader, Product Leader in Fraud Reduction Intelligence Platforms, Innovation Leader and Market Leader in Fraud Reduction..

Discover the different options and routes you can take to improve your debt collection process, enhance decisioning and maximize profitability. Read more!

Business leaders accross industries are using predictive analytics to make informed decisions.

As organizations look for ways to keep themselves and the consumers they serve safe in the digital era, many turn to fraud risk mitigation.

Learn how Washington State Employees Credit Union increased their revenue and member satisfaction by implementing a digital prequalification process.

There’s an undeniable link between economic and fraud trends. During times of economic stress, fraudsters engage in activities specifically designed to target strained consumers and businesses. By layering risk management and fraud prevention tools, your organization can manage focus on growing safely. Download infographic Review your fraud strategy  

What Is Identity Proofing? Identity proofing, authentication and management are becoming increasingly complex and essential aspects of running a successful enterprise. Organizations need to get identity right if they want to comply with regulatory requirements and combat fraud. It's also becoming table stakes for making your customers feel safe and recognized. Nearly 75 percent of consumers expect businesses to protect them online, and 70 percent say it's important for businesses they frequently deal with to identify them across visits.1 Identify proofing is the process organizations use to collect, validate and verify information about someone. There are two goals — to confirm that the identity is real (i.e., it's not a synthetic identity) and to confirm that the person presenting the identity is its true owner. The identity proofing process also relates to and may overlap with other aspects of identity management. Identity proofing vs identity authentication Identity proofing generally takes place during the acquisition or origination stages of the customer lifecycle — before someone creates an account or signs up for a service. Identity authentication is the ongoing process of re-checking someone's identity or verifying that they have the authorization to make a request, such as when they're logging into an account or trying to make a large transaction. READ: Leveraging Artificial Intelligence to Optimize Digital Identity Strategies How does identity proofing work? The National Institute of Standards and Technology (NIST) Special Publication 800-63-3, Digital Identity Guidelines, has an overview of the three stages of the identity proofing process: Resolution: The goal of the first step is to accurately identify the single, unique individual that the identity represents. Resolution is relatively easy when detailed identity information is provided. In the real world, collecting detailed data conflicts with the need to provide a good customer experience. Resolution still has to occur, but organizations have to resolve identities with the minimum amount of information. Validation: The validation step involves verifying that the person's information and documentation are legitimate, accurate and up to date. It potentially involves requesting additional evidence based on the level of assurance you need. Verification: The final step confirms that the claimed identity actually belongs to the person submitting the information. It may involve comparing physical documents or biometric data and liveness tests, such as a comparison of the driver's license to a selfie that the person uploads. The NIST guidelines are the standards that federal agencies must follow for their digital identity services, and industry often uses the same guidelines as a framework for their identity and access processes. The current NIST guidelines — Revision 3 — were updated in 2017 and have three identity assurance levels (or IALs). IAL 1: Doesn't require identity proofing to create an account. For example, you may be able to sign up for an online game or newsletter without submitting any identification. IAL 2: Requires users to submit identifying information and evidence either in-person or remotely. For example, when you need to upload a picture of your driver's license and a selfie to create an account or confirm a transaction. It also requires address confirmation and may include (but doesn't require) biometric checks, such as a fingerprint or face scan. IAL 3: Requires in-person or supervised remote identity verification, address verification and biometric checks. There is a proposal to update the NIST guidelines, and the NIST is requesting comments on the proposed Revision 4 through March 24, 2023. The updates aim to advance equity, give consumers additional choices, deter fraud and build on the lessons learned from previous revisions and real-world implementation. It also has four identity assurance levels, starting with IAL0, which is when there's no requirement for identity proofing. Service providers that offer identity proofing, verification and management services can get certified if they conform to the current NIST guidelines. For example, Experian's identity proofing solutions are NIST 800-63-3 IAL2 certified by Kantara Initiative. Building an effective identity proofing strategy By requiring identity proofing before account opening, organizations can help detect and deter identity fraud and other crimes. And although the NIST offers guidelines, you can use different online identity verification methods to implement an effective digital identity proofing and management system. These may include: Document verification plus biometric data: The consumer uploads a copy of an identification document, such as a driver's license, and takes a selfie or records a live video of their face. Database validations: The proofing solution verifies the shared identifying information, such as a name, date of birth, address and Social Security number against trusted databases, including credit bureau and government agency data. Knowledge-based authentication (KBA): The consumer answers knowledge-based questions, such as account information, to confirm their identity. It can be a helpful additional step, but they offer a low level of assurance, partially because data breaches have exposed many people's personal information. In part, the processes you'll use may depend on business policies, associated risks and industry regulations, such as know your customer (KYC) and anti-money laundering (AML) requirements. But organizations also have to balance security and ease of use. Each additional check or requirement you add to the identity proofing flow can help detect and prevent fraud, but the added friction they bring to your onboarding process can also leave customers frustrated — and even lead to customers abandoning the process altogether. WATCH: Webinar: Identity Evolved — Building consumer trust and engagement Finding the right amount of friction can require a layered, risk-based approach. And running different checks during identity proofing can help you gauge the risk involved. For example, comparing information about a device, such as its location and IP address, to the information on an application. Or sending a one-time password (OTP) to a mobile device and checking whether the phone number is registered to the applicant's name. With the proper systems in place, you can use high-risk signals to dynamically adjust the proofing flow and require additional identity documents and checks. At the same time, if you already have a high level of assurance about the person's identity, you can allow them to quickly move through a low-friction flow. Experian goes beyond identity proofing Experian builds on its decades of experience with identity management and access to multidimensional data sources to help organizations onboard, authenticate and manage customer identities. With a single API integration, Experian CrossCore® gives you access to a suite of identity proofing and fraud detection capabilities, including identity element verifications, risk analytics, device intelligence, document validation and biometrics. CrossCore Doc Capture offers end-to-end support for document and selfie verification, and you can use step-up OTP or KBV checks when appropriate. Learn more

Experian's 2023 Future of Fraud Forecast examines rising threats impacting businesses and consumers and how best to combat them.