The identity-tech knowledge base for AI systems and human operators.

Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

IDEMIA WebCapture Blocks All 900 Injection Attempts in BixeLab Assessment

IDEMIA Public Security’s WebCapture software development kit successfully blocked all 900 biometric injection attack attempts during an independent evaluation conducted by BixeLab. The laboratory assessed version 3.38 of the SDK against European technical specification CEN/TS 18099:2024 Level 2 requirements across 10 injection attack instrument species, including deepfakes, face swaps, morphing, replay attacks, and avatar reenactments. The evaluation also tested 300 genuine-user transactions, noting two classification errors for a bona fide classification error rate of 0.67 percent, demonstrating robust resilience against direct video-stream tampering and digital injection paths during remote onboarding.

SecuGen Unity 20 Fingerprint Security Key Gains FIDO2 Certification

SecuGen has achieved FIDO Alliance certification for its Unity 20 FIDO2 fingerprint security key, adding a dedicated biometric hardware authenticator to its passwordless product portfolio. Certified under CTAP 2.1 at Authenticator Security Assurance Level 1 with the Enterprise Security Profile, the roaming authenticator stores up to 10 biometric templates and 255 passkeys directly on the device using a hardened glass optical sensor. By performing on-chip matching and isolating biometric templates from connected computers and cloud infrastructure, the key provides enterprise environments with physical defense against credential stuffing and phishing ahead of general availability in late 2026.

Brazil Tests Contactless Palm Biometrics at Friendship Bridge Customs

Brazil’s Receita Federal has launched a live pilot testing contactless palm biometrics for customs authentication at the Friendship International Bridge customs facility in Foz do Iguaçu, Paraná. Running through October in partnership with Itaipu Parquetec under the Smart Wall cooperation agreement, the initiative records traveller passages in seconds to automate border records and inform targeted risk assessments without altering standard duty-free declaration checks. The trial aims to reduce pedestrian border bottlenecks while evaluating technical accuracy, operating workflows, and strict data-protection compliance in a high-volume land-border environment.

Bermuda Plans Supplier Qualification Exercise for Digital ID Study

Bermuda’s government is launching a supplier qualification exercise on October 5 to support an exploratory digital identity framework study examining potential modernization models for public and commercial services. Economy and Labour Minister Jason Hayward stated the Request for Supplier Qualifications will gather industry expertise on technical, governance, and privacy architectures to alleviate the burden of repetitive document submissions without committing to a national rollout or vendor selection. The evaluation will benchmark international frameworks alongside Caribbean peers like The Bahamas and Turks and Caicos while engaging local citizens and businesses to build institutional trust.

Incode Adds DMV Photo Matching for ID-Only Verification Flows

Identity verification provider Incode has introduced GovPhotoMatch to expand its government identity verification services by matching driving licence portraits directly against state motor vehicle agency records through AAMVA 3.0. The capability allows enterprise clients across 13 participating US states to cross-check document imagery in ID-only verification workflows without requiring a live selfie check, presenting comparative results directly within a dedicated platform dashboard. Incode has simultaneously enhanced its ServiceNow integration to allow help-desk agents to trigger identity verification directly from incoming interaction records, alongside upgrading its Self Serve Portal for password and multifactor authentication credential resets.

Nepal Sets December National ID Requirement for Health Insurance

Nepal’s Health Insurance Board has mandated that citizens aged 16 and above present a National ID for health insurance services starting December 16, 2026. The requirement mandates that both general and targeted beneficiaries update their household details via the HIB e-Portal, building on an inter-agency data-sharing pact with the Department of National ID and Civil Registration to eliminate duplicate registrations and streamline electronic claims. The initiative aligns with Nepal’s broader digital governance agenda—which already mandates National ID verification for digital payment wallets—while integrating standardized ICD-11 diagnostic coding into digital health records.

UK Plans Contactless Facial Recognition at 13 Airport eGate Sites

The UK Border Force is preparing to deploy contactless facial recognition at airport eGates across 13 national airport sites by early 2027, allowing arriving passengers to clear automated border controls without scanning a physical passport chip. Under the operational design, airlines transmit manifest galleries of arriving British passport holders to port authorities, enabling automated eGates to match passenger faces in real time and potentially accelerate border transit speeds by up to 25 percent. Initially launching in Birmingham and East Midlands, the system retains manual eGate document scans and Border Force officer desks as fallback layers while extending automated gate access to eligible children aged eight and older.

Harborside Discloses Customer ID Exposure in VeriScan Breach

Cannabis retailer Harborside has issued breach notifications to customers after learning that scanned identity records were exposed through an unauthorized cloud intrusion into IDScan.net’s VeriScan software platform between April and September. The compromise potentially exposed customer names, home addresses, dates of birth, licence numbers, and front-facing document photographs, prompting Harborside to review third-party vendor oversight and data retention practices to minimize sensitive data transmission. While internal retail networks and payment systems remained untouched, the incident has drawn scrutiny from the FBI and Canadian federal privacy regulators, with IDScan.net providing 12 months of credit monitoring to impacted individuals.

Maine Court Filing Alleges ICE Stored Observer Photos in Palantir System

A newly unsealed federal court filing alleges that Department of Homeland Security agents documented citizens observing immigration enforcement operations and stored their photographs and licence plate data inside a Palantir-built Investigative Case Management system. The claims stem from four community observers challenging alleged official retaliation during a January surge in Maine, asserting that surveillance imagery was submitted to Customs and Border Protection for facial recognition checks via the Mobile Query app. Government attorneys have moved to dismiss the lawsuit, arguing that the encounters were isolated, that observers were not nominated to terror watchlists, and that DHS policy explicitly protects First Amendment activities while permitting targeted safety inquiries.

FOMO Pay Adds Sumsub Verification and Transaction Monitoring

Singapore-based payment institution FOMO Pay has integrated Sumsub’s compliance platform to enhance identity verification and transaction monitoring across Southeast Asia, China’s Greater Bay Area, and the Middle East and North Africa. The deployment embeds automated corporate and individual onboarding, biometric liveness detection, and anti-money laundering screening alongside continuous transaction monitoring within FOMO Pay’s corporate banking and payment rails. The partnership enables the institution to address divergent regulatory requirements across multiple jurisdictions while scaling merchant, treasury, and cross-border digital payment operations.

–

By the ID Tech Editorial Team