The Global Risks Alliance (GRA)
Every financial relationship starts with identifying the customer: proving who they are, checking them against sanctions and risk lists, and authenticating them each time they return. Digital onboarding has widened access and cut cost, but it has also industrialised identity fraud, from synthetic identities to deepfake-assisted account opening. Checks that are too rigid exclude people who lack documents. This page sets out how identity risk develops in finance, how it is measured, and who sets the rules.
GRA · Established · service level R0
Digital onboarding is the remote process by which a financial firm identifies a new customer, checks them against sanctions and risk lists and sets up authentication. It has widened access and cut cost, and it has opened attacks: synthetic identities, deepfakes against remote proofing and mule accounts, while rigid checks can exclude people without documents.
For financial identity, in GRA's spatial-finance reading, the map opens on night lights and population density with night lights tonight from NASA GIBS, framed on East Africa; every other NASA layer, live feed and forecast waits in the layer list.
The interactive map needs JavaScript; the layer list and sources are below.
Layers 2
Connected activity, for this page
Keyboard, with the map focused
Hold Ctrl or ⌘ and scroll to zoom
Latest available
NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth
Loading the latest NASA imagery.
Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.
For financial identity, in GRA's spatial-finance reading, the map opens on night lights and population density with night lights tonight from NASA GIBS, framed on East Africa; every other NASA layer, live feed and forecast waits in the layer list.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place; claim ceiling INTEGRATED.
Layers and dates
Onboarding, fraud and exclusion. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.
Fraudsters combine real and invented details into identities that pass onboarding, build a clean history over months, then draw credit and disappear. No real victim complains, so losses surface late and are often booked as defaults.
Face matching and liveness checks face injected video, generated documents and cloned voices. Each improvement in attack detection is met by new tools, so proofing assurance decays unless it is tested continuously.
Scam and fraud proceeds pass through accounts opened by recruited or impersonated people. Weak onboarding and slow monitoring let mule networks move money across institutions before freezes take effect.
Document requirements that low-income, migrant, displaced or rural people cannot meet push them out of formal finance. Tiered, risk-based due diligence and trusted digital ID can widen access without lowering integrity.
Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.
| Term | Definition |
|---|---|
| Customer due diligence | Identifying and verifying customers and understanding their risk, required under FATF Recommendation 10. |
| Synthetic identity | A fake identity built from a mix of real and invented data. |
| Presentation attack | An attempt to fool biometric verification, such as with a mask, photo or deepfake. |
Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.
| Indicator | Unit | Cadence | Source type | Label |
|---|---|---|---|---|
| Identity fraud at onboarding | attempts and confirmed cases per thousand applications | monthly | Firm fraud records | OBSERVED |
| Account takeover incidents | cases per million active accounts | quarterly | Firm and industry fraud reporting | REPORTED |
| Presentation attack detection error rates | attack and bona fide classification error rates | per evaluation | Independent biometric testing | OBSERVED |
| Remote onboarding completion and abandonment | percent of started applications | monthly | Firm records | OBSERVED |
| Adults without an account citing lack of documents | percent of adults without an account | per survey round | Global Findex | ESTIMATED |
| Population with a foundational ID | percent of population | periodic | ID4D dataset and national registers | ESTIMATED |
| Suspicious transaction reports linked to identity fraud | count per year | annual | Financial intelligence unit reports | OFFICIAL |
The topic as a computational graph: named sources feed the methods, an evidence review gates the outputs, and the decisions stay with the authorities that hold them.
Fig. 02Nodes carry their type, two metric rows and a state; connectors show what feeds what; dashed frames name the owners; the timeline is the cadence. Design of the pipeline, not a record of a run.
Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.
| Source | What it gives | Licence class |
|---|---|---|
| World Bank Global Findex Database | Account ownership and barriers to access, including lack of documentation, by country and group | Free and open, attribution (CC BY) |
| World Bank ID4D Global Dataset | Coverage of foundational identification systems by country | Free and open, attribution |
| NIST face recognition and presentation attack evaluations | Independent accuracy and attack-detection results for biometric algorithms | Public domain |
| FBI Internet Crime Complaint Center reports | Reported identity theft, impersonation and fraud losses | Public domain |
| Financial intelligence unit annual reports | Suspicious transaction reporting trends and typologies | Public records, terms per unit |
| FATF guidance on digital identity and mutual evaluation reports | Assessments of customer due diligence regimes and guidance on reliance on digital ID | Free, terms per FATF |
Fintech Nexus prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.
| Who decides | The question | Evidence this page serves |
|---|---|---|
| Financial intelligence units and AML supervisors | Which customer due diligence approaches satisfy the rules, and where simplified measures are allowed | Assurance-level mapping, typology notes, inclusion evidence |
| National identity authorities | Whether and how financial institutions may rely on the national digital ID for onboarding | Assurance mapping, coverage gaps, fraud and error records |
| Bank and fintech boards | Which proofing, liveness and monitoring controls to fund, and how much customer friction to accept | Fraud at onboarding, attack detection results, abandonment rates |
| Standards bodies (FATF, ISO, NIST) | Which levels of identity assurance and authentication fit financial use | Independent test results, incident typologies, cross-jurisdiction comparisons |
Know-your-customer requirements oblige financial institutions to identify and verify customers and assess the risk they pose. Digital onboarding uses document scanning, biometric matching, database checks and device signals. Strength of verification varies, and attackers exploit the weakest methods. Synthetic identity fraud combines real and fabricated information to create identities that pass checks; account takeover uses stolen credentials or social engineering; and generative AI enables convincing fake documents and voice or video impersonation.
Exclusion is the other side of the problem. Many people lack formal identity documents or proof of address, and rigid requirements can deny them access to accounts, credit and payments. Risk-based approaches allow simplified due diligence for lower-risk products, and national digital identity systems can widen access, but they raise privacy and surveillance concerns and can exclude those not enrolled.
Identity is also a systemic dependency: when a widely used identity provider fails or is compromised, onboarding and authentication can stop across many institutions.
Recovery of identity after compromise is an under-studied problem. Victims of identity theft may spend long periods restoring access and credit standing, and systems designed for onboarding often lack equally strong processes for re-establishing a person's identity.
Studying attack methods and detection; data are fragmented across firms.
Measuring who is excluded and why; under-documented people are hard to reach in surveys.
Assessing privacy-preserving designs such as selective disclosure.
Limits: fraud data are sensitive and inconsistently defined, and the effects of identity rules on inclusion are hard to separate from other barriers.
The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.