October 2025 Summaries

Socure’s Workforce Verification integration with Ashby uses RiskOS orchestration to bring identity validation to the earliest stages of hiring, addressing rising application fraud that may affect one in four applications by 2028. The no-code integration can reportedly be configured in under 10 minutes, automatically assessing identity risk when candidates apply and requesting document verification when offers are accepted, with results displayed in Ashby and detailed reviews available through RiskOS case management. By correlating personal information and allowing low-risk candidates to proceed without added friction, the system aims to identify 80% to 85% of fraudulent applicants at resume submission while reducing recruiter workload, unnecessary background-check costs, late-stage rework, and time to offer. It also supports compliance through sanctions and watchlist checks, reason codes, and AI-generated explanations that create auditable decision records.

Socure and Docusign have announced a strategic partnership intended to strengthen trust in digital agreements amid growing threats from AI-generated deepfakes, synthetic identities, document forgery, and account takeovers. The integration uses Socure’s AI-powered identity graph, drawing on signals such as email, phone, address, device, behavior, fraud history, and watchlists, to assess a user’s identity risk passively before additional verification is requested. Docusign’s Risk-Based Verification then adjusts the process accordingly, allowing lower-risk users to proceed with minimal interruption while applying measures such as document or biometric checks to higher-risk cases. The companies say the approach can reduce fraud, support KYC, AML, and sanctions compliance, limit manual reviews and post-signature investigations, and preserve a smoother experience for legitimate users by replacing broadly applied, higher-friction methods such as knowledge-based authentication with targeted checks.

Beginning in March 2026, Nacha will introduce expanded ACH fraud-monitoring rules that distribute responsibility among originating and receiving banks, third-party senders, service providers, fintechs, and other payment participants. The changes respond to growing social-engineering, authorized push-payment, business email compromise, and government-benefit fraud by requiring risk-based processes designed to detect both unauthorized transactions and payments made under false pretenses. Building on earlier WEB debit requirements introduced in 2011 and strengthened in 2021, the rules will now cover ACH debits and credits, require annual reviews of fraud controls, and obligate receiving institutions to monitor incoming credits for anomalies and suspicious transaction velocity. Implementation begins March 20, 2026, for large institutions and high-volume participants, with all remaining covered organizations required to comply by June 22, 2026. The shift raises expectations beyond basic account validation toward account ownership verification, identity and behavioral analytics, and coordinated monitoring throughout the ACH ecosystem, while Socure presents its Account Intelligence and RiskOS platform as tools that can support these requirements.

Socure describes a rise in AI-enabled “synthetic employees” using fabricated résumés, stolen identities, and deepfake interviews to bypass conventional hiring controls, overwhelm recruiters, and create risks including payroll fraud, data theft, and reputational harm. After receiving a more than 3,000% increase in applications for some hard-to-fill roles, the company deployed its Workforce Verification system at the start of the application process, using RiskOS, SocureID, and passive device and behavioral signals to assess identity confidence and flag suspicious activity; more than 1,200 potentially fraudulent submissions were identified in the first week. The approach emphasizes persistent identity verification throughout hiring and employment, flexible risk thresholds, model-bias governance, and complementary late-stage background checks, allowing recruiters to focus on genuine candidates while maintaining audit trails and reducing wasted interviews, rescinded offers, and late discoveries.