ID Tech
Back to Data Cards

Data Card

GSA seeks device fingerprinting for Login.gov to separate people from AI agents

The General Services Administration issued a request for information seeking device fingerprinting technology to defend Login.gov against account takeover, synthetic identities, and automated agents.

2026-08-26CC-BY-4.0login-govdevice-signalsagentic-aiaccount-takeover

About

Digital ID

Key Facts

  • The RFI seeks real-time risk scoring across browser and device signals.
  • Stated threats include account takeover, synthetic identities, and agentic AI, naming LLM agents from ChatGPT, Claude, and Gemini.
  • Fingerprinting must recognise returning devices despite evasion such as VPNs and incognito browsing; responses were due September 11, 2026.

Card Text

Distinguishing a human from an automated agent is emerging as a requirement distinct from authenticating an identity, since a valid credential can now be driven by software. Device and browser signals are being asked to carry that separation because identity proofing alone does not establish who is at the keyboard.

Sources