I.D. RISK ALERTS Q3 2026 – BixeLab Newsletter

The latest edition of BixeLab’s I.D. Risk Alerts is now available.

This quarterly briefing provides independent analysis of identity fraud, biometric vulnerabilities, digital identity developments and emerging AI-enabled threats. Drawing on publicly reported incidents and global developments, it helps organisations understand evolving risks and consider practical mitigation strategies before vulnerabilities become incidents.

This quarter examines the growing use of deepfakes, biometric data harvesting, AI voice cloning and social engineering to target identity and authentication systems, alongside developments in testing, standards, certification and digital identity governance. The issue also looks at the increasing role of independent assurance as identity technologies face more sophisticated attack methods. The published Q3 issue covers these themes across its risk alerts and industry updates.

Sign up today to gain exclusive access to the most recent edition of the ID Risk Alerts Newsletter, providing key insights into worldwide identity and biometric vulnerabilities, threats, and the latest advancements in digital identity systems.  Subscribers receive each issue upon release, providing early visibility into real-world attack patterns, systemic weaknesses, and practical mitigation strategies.

☑️ Real-time deepfake face-swapping and forged identity documents used in attempts to defeat remote video identity verification in Spain. 

☑️ Mobile malware harvesting facial biometrics and identity documents, with GoldPickaxe variants targeting banking, e-KYC and digital identity systems. 

☑️ AI voice cloning used in impersonation scams, demonstrating how short voice samples can strengthen social-engineering attacks and exploit trusted relationships. 

☑️ Synthetic faces and camera manipulation tested against selfie-video enrolment, highlighting the need for stronger liveness, injection-attack and capture-integrity controls. 

☑️ Identity and authentication risks extending beyond biometrics, including cloud identity compromise through passkey- and MFA-themed social engineering. 

☑️ New standards and assurance developments covering injection attack detection, age assurance, the EUDI Wallet and the UK Digital Verification Services Trust Framework. 

☑️ Australia expands identity protection and user control, including IDLock and the national Digital ID and Verifiable Credentials Strategy. 

☑️ Identity verification provider data breaches remain a concern, with government-issued identity information potentially exposed through third-party cloud compromise.