Banks and other institutions increasingly allow customers to set up accounts remotely using an onboarding app on a mobile device along with the potential customer’s identity documents. Digital onboarding, also known as electronic Know Your Customer or eKYC, is a great convenience to customers but creates an opportunity for fraud starting with the presentation of the identity document. Is the document physically there? Or, is the person displaying a photo of a real or digitally manipulated document on their mobile phone or computer monitor?
Identity document fraud using a digitally-displayed image is called a document screen replay attack. Screen replay attacks are accelerating, yet many onboarding systems cannot reliably detect them. Often the spoofed document is not discovered until much later in the customer lifecycle when other red flags trigger an audit. ID R&D’s new product, IDLive Doc, detects a screen replay at the time of the attack, preventing fraud before it can causes damage.