How Financial Groups Plan to Counter Artificial Intelligence Identity Attacks

Post Views: 1

A Comprehensive Plan to Combat AI-Facilitated Identity Attacks

The financial sector is facing a significant threat due to the increasing affordability of deepfakes generated by AI tools. Criminal and state-sponsored actors have exploited these capabilities to target the financial sector.

Projected Losses and Growing Concerns

According to Deloitte’s Center for Financial Services, projected AI-enabled fraud losses in the US will reach $40 billion by 2027, a staggering increase from $12.3 billion in 2023.

Ten Distinct Attack Categories Target Financial Institutions

These include deepfakes used against identity verification systems, AI-generated phishing campaigns, synthetic identity creation, real-time deepfake fraud, and the use of AI agents for account takeovers.

Phishing Resurgence and Legacy Authentication Vulnerabilities

Phishing has seen a significant resurgence, particularly with the advent of Large Language Models (LLMs), which can automate the entire phishing process, significantly reducing costs and increasing success rates.

“Alarmingly, sixty percent of individuals have fallen victim to AI-automated phishing.” — According to Deloitte’s Center for Financial Services

Comprehensive Plan Proposals

A task force led by the Treasury Department has proposed a comprehensive plan comprising four initiatives to address the growing threat:

Identity Proofing and Verification: Closing the gap between physical credentials and their digital equivalents through mobile driver’s licenses utilizing asymmetric public key cryptography.
Authentication: Promoting the adoption of phishing-resistant authentication methods such as FIDO security keys and passkeys, without imposing restrictions that hinder the use of data analytics for risk-based fraud detection.
International Cooperation: Engaging with EU counterparts on digital wallet interoperability and standards through collaboration between NIST, DHS, and Treasury.
Raising awareness about deepfake threats and the benefits of phishing-resistant authentication through a campaign targeting multiple sectors.

Legislative Proposals and Future Directions

Several legislative proposals, like HR 7270, the Stop Identity Fraud and Identity Theft Act of 2026, aim to address these concerns by providing funding for financial sector security and fraud prevention. The proposed plan aims to implement actionable solutions within the next two to three years.