June 2024 Summaries

eCBSV is a Social Security Administration service that, with consumer consent, verifies whether an individual’s name, date of birth, and Social Security number match SSA records in real time, helping organizations combat synthetic identity fraud and verify hard-to-confirm populations such as Gen Z. The passage states that rising SSA costs and operational requirements have led some vendors to discontinue support, and positions Socure as an alternative provider offering eCBSV through its ID+ platform. Socure claims its approach combines eCBSV with broader identity and synthetic-fraud tools, can reduce the amount of SSN information collected from consumers, provide possible explanations for no-match results, and improve verification rates for consumers who cannot otherwise be verified. It also says the platform supports lower-cost verification, consent documentation, privacy compliance, technical integration, recordkeeping, and audit requirements, while using previous verifications and fraud-model intelligence to reduce duplicate checks and improve risk detection.

Knowledge-based authentication, long used for online identity proofing, is criticized as increasingly unreliable because it relies on static personal information that has been widely exposed through data breaches and is readily obtainable by fraudsters. The passage notes that KBA can both deny legitimate users and allow fraudulent users to pass, prompting NIST to deprecate its use in its identity guidelines, though it remains common in public-sector services such as motor vehicle registration and government portals. It argues that using KBA as a fallback method creates an exploitable route into centralized state systems and recommends stronger alternatives including biometric checks, behavioral analytics combined with other methods, ongoing verification during high-risk account actions, and user security education. Citing studies by identity-verification provider Socure, the passage claims that passive, risk-based evaluation of submitted personal information improved approval rates for legitimate applicants who failed KBA while identifying suspicious identities that KBA had allowed, presenting modern, adaptive identity proofing as a means to reduce fraud and improve user access.

Browser cookies have long supported fraud prevention by linking users, devices, sessions, and online behavior, but Chrome’s planned restrictions on third-party cookies and broader privacy requirements are weakening traditional cross-site tracking methods. Financial institutions and other organizations are therefore exploring privacy-conscious alternatives such as device intelligence, machine learning-based fingerprinting, and biometric authentication, while needing to maintain transparent data practices and regulatory compliance. The passage presents Socure’s Entity Profiler as a server-side machine learning system that combines digital footprints, session signals, historical behavior, and authoritative data to build persistent identity profiles without depending on conventional cookies. By evaluating factors such as repeated PII usage, device attributes, IP geolocation, browser settings, and transaction history over time, it aims to identify anomalies and make identity proofing more difficult for fraudsters to manipulate, while adapting to evolving browser and privacy standards.