June 2025 Summaries

Tariff changes in 2025 are increasing costs, disrupting supply chains, and pressuring small businesses, which may lead companies to switch suppliers, establish new entities, or alter operating structures more rapidly. These shifts create added Know Your Business (KYB) risks for banks, lenders, fintechs, and online marketplaces, including shell companies, falsified goods-origin records, customs fraud, opaque ownership, and misrepresented business locations. The text identifies consumer electronics, automotive parts, apparel, renewable energy, industrial equipment, and e-commerce as especially exposed sectors because of their international supplier networks and rapid vendor turnover. Although FinCEN’s beneficial-ownership requirements have not changed, the text argues that stronger and continuous due diligence is increasingly important amid heightened customs enforcement, including verification of ultimate beneficial owners, operating locations, industry risk, financial health, sanctions exposure, and adverse information. It advocates automated, real-time KYB systems, such as Socure’s RiskOS, to monitor changing business risk profiles and combine identity, registry, trade, and sanctions data.

Socure is introducing GenAI Explainability, a secure, internally hosted capability that provides plain-language explanations for risk scores, identity matches, and document verification results across its AI-driven identity, compliance, and fraud platform. The feature does not change decision outcomes but aims to help fraud, compliance, and support teams understand the reasoning behind them faster, reduce escalations, improve consistency, and retain auditable explanations alongside decision data. Beginning June 26, “Explain” buttons will be available in RiskOS and ID+ for products including identity and synthetic fraud detection, verification, document verification, contact-risk scores, and global watchlist monitoring. Building on Socure’s earlier Compliance AI Assistant, planned Q3 2025 enhancements include end-to-end workflow summaries and a conversational agent for case-specific investigation support, as the company expands its focus on transparent and actionable AI.

Socure recounts how a fraudster impersonated its HR team using a lookalike domain, copied employee identities, and conducted a fake remote-job hiring process that persuaded a job seeker to deposit counterfeit checks and buy Apple gift cards, ultimately costing her nearly $8,000 while exposing her personal and banking information. The victim discovered the scam after an Apple Store employee raised concerns and her credit union confirmed that the checks had been returned, after which she reported the incident to federal and state agencies and changed banks. The account places the incident within a broader rise in employment scams, citing FTC data showing roughly $450 million in reported U.S. losses from fake job scams in 2023. It argues that employers should register lookalike domains, clearly communicate legitimate recruiting practices, monitor job boards, promptly remove fraudulent postings, and support suspected victims, while job platforms should verify businesses, beneficial owners, and individual posters. It also calls for stronger domain-registration rules, registrar accountability, faster fraud-reporting and takedown processes, and greater collaboration among companies, regulators, and law enforcement.

Socure has launched One-Time Password and Silent Network Authentication capabilities within its RiskOS platform, using its Identity Graph and persistent SocureID tokens to assess identity, device, phone, and behavioral signals in real time. The company positions the tools as an adaptive response to rising account takeovers, SIM swaps, and synthetic identity fraud, arguing that conventional static OTP and app-based multifactor methods can add friction while missing evolving threats. Silent Network Authentication verifies phone and device possession through carrier-level data in milliseconds without user interaction, while OTP serves as a risk-based fallback when silent verification is unavailable or suspicious signals require additional assurance. The combined approach is intended to support onboarding and identity prefill, high-risk account changes and password resets, and ongoing multifactor authentication by allowing trusted users to proceed with less friction while applying visible verification steps when risk increases.

“Ghost student” fraud, in which stolen identities are used to enroll in community colleges and obtain financial aid, is described as a growing threat that has reportedly affected California and other U.S. college systems. Socure’s analysis of more than 6,000 applications flagged as fraudulent or high risk between late 2024 and early 2025 found patterns suggesting organized, sophisticated activity, including previously unseen or breach-exposed Gmail addresses, VPNs and proxies, mobile-business IP addresses, incomplete apartment addresses, unverified or omitted phone numbers, and personal data linked to real individuals, including some deceased people. The company argues that most cases appear to involve identity theft rather than wholly synthetic identities and that similarities across several college systems may indicate coordinated actors, potentially operating from outside the United States with bots or AI tools. To reduce fraud, the text advocates layered identity verification at application and enrollment, document and selfie checks for high-risk applicants, device and location intelligence, continuing monitoring through identity-access systems, and faculty reporting of suspicious nonparticipation. Socure states that its tools identified up to 98% of fraudulent applications in its analysis, while emphasizing that institutions need complete identity data and coordinated safeguards to protect aid resources and access for legitimate students.