February 2026 Summaries

Age assurance is shifting from weak self-attestation methods toward a core product and compliance requirement as governments and platforms seek stronger protections for minors. Expanding concerns across social media, adult content, creator tools, and AI have prompted increasingly stringent but fragmented regulations in U.S. states and jurisdictions including the U.K., EU, Australia, and Brazil, making simple age checkboxes insufficient. Platforms such as Instagram and OpenAI are introducing age-related controls before being compelled by uniform rules, reflecting a broader recognition that age must be established rather than assumed. Rather than requiring the most intrusive verification for every user, organizations are increasingly expected to use proportional, context-sensitive systems that balance risk, privacy, user experience, and varying regional requirements. Companies that treat age assurance as an adaptable, ongoing capability rather than a one-time compliance exercise will be better positioned as enforcement expectations continue to rise.

Bank account verification is evolving from a basic confirmation that an account exists and is controlled by a user into a broader real-time risk assessment process, driven partly by 2026 Nacha ACH rule changes that emphasize understanding ownership and risk before debits occur. Effective solutions should cover the diverse institutions consumers use, minimize friction by avoiding redirects, credential entry, and micro-deposit delays, and incorporate fraud intelligence alongside account and ownership checks. Examples involving diverted payroll and loan stacking illustrate how valid accounts can still facilitate fraud when behavioral signals, ownership alignment, and cross-application risk are not considered. Socure positions its Bank Account Verification product as an automated alternative that combines account coverage in more than 30 markets with identity, device, behavioral, and fraud insights to reduce payment failures and losses while maintaining a streamlined customer experience.

Introduced in February 2026 by Senators Bernie Moreno and Ruben Gallego, the proposed SCAM Act would require online platforms to strengthen verification of commercial advertisers in response to widespread fraudulent advertising and substantial global consumer losses. The proposal follows reports that major platforms have hosted large volumes of scam-related ads, while research indicates that 57% of adults encountered scams in the prior year and 23% lost money. Rather than relying solely on ad moderation, the bill would mandate Know Your Business and identity-verification measures to confirm business legitimacy, identify beneficial owners, detect synthetic identities, and prevent repeat offenders through shared fraud intelligence. The text argues that platforms across social media, marketplaces, dating, and job sites need integrated, real-time verification systems and proactive reviews of existing advertisers, including a 72-hour investigation requirement, and presents Socure’s RiskOS, synthetic-fraud detection, and portfolio-screening products as tools intended to support compliance.

Super Bowl 60 created a major stress test for online gaming and prediction-market identity systems, with new account applications rising 300% between Saturday and game day as betting interest intensified. Socure reports that the surge included increased attempts by minors to bypass age restrictions through “age laundering,” such as altering birth dates or combining their own information with identity details from older relatives or friends; applications with date-of-birth discrepancies increased 244%, from a 12% pre-game average to 26% by the trophy ceremony. The company says layered verification systems using identity records, digital footprints, device ownership, phone and email history, behavioral signals, and risk indicators such as proxies can identify these inconsistencies while limiting false declines for legitimate adults. Applicants flagged for risk may be routed to ID verification, where Socure observed a further 300% increase in mismatched birth dates on game day. It argues that industries newly adopting age controls can learn from gaming by using automated, risk-based verification that escalates from low-friction checks to rapid ID analysis when needed.

RiskOS, launched following Socure’s February 2025 acquisition of Effectiv, aims to replace fragmented identity, fraud, compliance, authentication, and device-intelligence tools with a unified programmable decisioning platform. During its first year, it processed more than 122 million decisions for over 100 enterprise customers, with monthly volume growing to more than 25 million calls by January 2026. The platform combines Socure’s Identity and Device Graphs with customer and third-party data, supports more than 180 partners, and has expanded into global business verification, workforce verification, age assurance, and localized risk intelligence. Socure reports that customers have improved fraud detection, increased automation, and reduced implementation timelines, while Hosted Flows enables faster deployment of branded onboarding experiences. RiskOS has also added an AI suite to assist analysts, optimize rules, explain decisions, and adapt workflows as fraud tactics evolve. Future plans include self-service activation, greater transparency and optimization, and expanded use of proprietary identity and device intelligence for proactive fraud prevention.

Age verification is receiving increased scrutiny as regulators, parents, and platforms seek stronger protections against underage access to unsuitable online spaces, but many existing systems remain easy to circumvent through common workarounds such as borrowed credentials, shared devices, or reused images. The passage argues that single-signal methods, including checkboxes, selfie-based age estimation, and document verification, cannot reliably establish that the current user is both live and the person whose age or identity is being assessed. It attributes these weaknesses to static, one-time checks, insufficient confidence thresholds, and designs that overlook ordinary user behavior rather than sophisticated attacks. More effective systems should use layered and adaptive approaches that begin with low-friction contextual signals, escalate to selfies, documents, or consent processes when confidence is low, and incorporate device intelligence and behavioral patterns. Framing age verification as a safety decision rather than a compliance requirement, the passage concludes that meaningful protection depends on matching assurance levels to risk while accounting for real-world edge cases.

Contact centers have evolved from service-focused operations into critical defenses against fraud as attackers increasingly target support channels to bypass stronger login protections through social engineering, account recovery requests, refund claims, and information gathering. Criminal networks use automation, AI-generated conversations, device emulators, and proxy networks to conduct scalable attacks across chat, voice, email, and automated workflows, exploiting agents’ service-oriented training and limited visibility into users’ devices, networks, and behavioral histories. Traditional security questions are often ineffective because personal information may be compromised, while passive digital intelligence can assess device legitimacy, network risk, and identity consistency before an agent handles a request. Applying these signals allows organizations to route or block high-risk interactions, accelerate service for trusted customers, reduce fraud losses and agent workload, and maintain efficient customer support without adding unnecessary friction.