identy.io

Biometric Authentication: What It Is, Methods & How It Works

Rodrigo Ramos — Sat, 25 Jul 2026 11:07:25 +0000

Biometric authentication confirms a returning user’s identity through a unique biological trait (face, fingerprint or palm) instead of a password or token. Because the credential is the person, it cannot be phished, shared, reused across services or forgotten. This guide explains how biometric authentication works, the main methods and their trade-offs, how it differs from identity verification, and what it takes to deploy it on any smartphone without special hardware.

Detect Deepfakes before they become a Threat

Deepfakes are becoming more sophisticated, increasing the risk of fraud and identity manipulation in digital environments. Download our 10-step guide to learn how to detect threats early and protect your organization with proven best practices.

What Is Biometric Authentication?

Biometric authentication is the second half of the digital identity lifecycle. Verification establishes who you are once, at onboarding; authentication proves you are still you every time you return. Technically, a live biometric sample is captured, converted into a mathematical template, and compared against the template enrolled at verification. A match above threshold grants access; everything else is rejected or escalated.

Three properties make biometrics superior to knowledge-based credentials: they are unique to each individual, always present (nothing to remember or carry), and when protected by liveness detection hard to steal in usable form, because a photo of a face is not a face.

How Biometric Authentication Work

Enrollment. During onboarding, the user’s biometric trait is captured and transformed into an encrypted template. Raw images are discarded; templates are stored on-device or in a secure enclave depending on the privacy architecture.
Capture. On each login or transaction, the user presents the trait to the device camera or sensor.
Liveness check. The system confirms a live human is present, blocking photos, replays, masks and deepfakes — the anti-fraud layer we cover in depth in our guide to liveness detection software.
Matching. The fresh template is compared to the enrolled one; a similarity score above threshold authenticates the user in under a second.

Experience Identy.io in action

Get a tailored demo of our contactless biometric platform and see how it fits your specific use case.

Biometric Authentication Methods

Facial recognition

The most frictionless method: the front camera captures the face passively during app use. Modern engines handle pose, lighting and aging, and pair with passive liveness for spoof resistance. Developers integrate it through a facial recognition SDK.

Fingerprint recognition

The most established modality. Beyond capacitive sensors, contactless fingerprint capture photographs the fingerprints with the standard rear camera and matches them against sensor-enrolled or card-enrolled prints, enabling deployment on any device — see the finger biometric SDK.

Palm recognition

Palm prints offer a large, stable trait that captures well at a distance with a phone camera, tolerating dirt and minor injuries better than fingerprints — a strong fit for workforce and financial-inclusion scenarios via the palm biometric SDK.

Other modalities and combinations

Iris and voice recognition serve niche high-security and hands-free contexts. Combining two or more traits raises assurance further; we analyze that approach in multimodal biometrics, the future of digital authentication.

Biometric Authentication vs Passwords, OTPs and Tokens

Passwords fail through phishing, reuse and credential-stuffing; SMS OTPs fail through SIM-swap; hardware tokens are costly and losable. Biometrics eliminate the shared secret entirely: there is nothing to intercept that can be replayed, provided the system enforces certified liveness. This is why frameworks such as NIST SP 800-63B recognize biometrics as an authentication factor when bound to a device and protected by presentation attack detection, and why passwordless initiatives from the FIDO Alliance lean on device-bound biometrics.

Security: Anti-Spoofing and Privacy

Two questions decide whether a biometric system is trustworthy. First, can it be spoofed? Only solutions independently tested against ISO/IEC 30107-3 — such as Identy’s PAD Level 2 certified engine — can substantiate anti-spoofing claims. Second, where does the data live? Privacy-first architectures keep templates encrypted on-device, process matching locally where possible, and never store raw biometric images, aligning with GDPR’s treatment of biometric data as a special category.

Use Cases

Banking and fintech: passwordless login, transaction signing and step-up authentication — detailed in face and fingerprint identification in banking and fintech.
Government services: citizen authentication for benefits, tax portals and digital ID programs.
Enterprise workforce: shared-device login in retail, logistics and healthcare without badge or password friction.
High-risk actions: payment release, account recovery and privilege escalation guarded by a biometric step-up.

Implementing Biometric Authentication with an SDK

Deployment reduces to one decision: hardware-dependent or contactless. Contactless SDKs use the existing smartphone camera for face, fingerprint and palm, which means every user’s device is already compatible. Evaluate accuracy benchmarks (NIST testing), liveness certification, on-device processing options, offline support and integration effort. The Identy biometric SDK covers all three modalities with passive liveness in native mobile and web packages.

Experience Identy.io in action

Get a tailored demo of our contactless biometric platform and see how it fits your specific use case.

Frequently Asked Questions

What is biometric authentication?

The process of confirming a returning user’s identity using a unique biological trait — face, fingerprint or palm — by comparing a live sample against a previously enrolled template.

What are the main biometric authentication methods?

Facial recognition, fingerprint recognition (including contactless capture), palm recognition, iris and voice. Multimodal systems combine several traits for higher assurance.

Is biometric authentication more secure than passwords?

Yes. Biometric traits cannot be phished, reused or forgotten, and certified liveness detection makes them resistant to spoofing — unlike passwords, the leading cause of account compromise.

What is the difference between biometric authentication and identity verification?

Verification happens once at onboarding against an official document; authentication happens on every return visit to confirm the same person is back.

Can biometric authentication work without special hardware?

Yes. Contactless SDKs capture fingerprints, palms and faces with the standard smartphone camera, extending biometric security to every device.

NIST SP 800-63B — Digital Identity Guidelines: Authentication and Lifecycle Management. https://pages.nist.gov/800-63-4/
NIST — Face Technology Evaluations (FRTE/FRVT). https://www.nist.gov/programs-projects/face-technology-evaluations-frtefate
FIDO Alliance — User Authentication Specifications (passwordless / passkeys). https://fidoalliance.org/specifications/
ISO/IEC 30107-3 — Biometric presentation attack detection, Part 3. https://www.iso.org/standard/79520.html
EDPB / GDPR Art. 9 — Processing of special categories of personal data (biometric data). https://gdpr-info.eu/art-9-gdpr/

La entrada Biometric Authentication: What It Is, Methods & How It Works se publicó primero en identy.io.

Biometric verification solutions are strengthening security for telecommunications

Rodrigo Ramos — Tue, 21 Jul 2026 15:15:17 +0000

The rapid digitization of financial, administrative, and telecommunications services in Latin America has accelerated the adoption of biometric verification solutions and advanced biometrics for telecommunications to combat the growing rise of digital fraud and identity theft. In Mexico alone, nearly 16 million people could fall victim to some form of digital fraud by 2026, according to estimates based on data from the National Commission for the Protection and Defense of Financial Services Users (CONDUSEF), while the Federal Telecommunications Institute warns that more than 95.5% of the country’s mobile phone users are exposed to phenomena such as SIM swapping if they do not implement additional security measures beyond authentication via SMS or phone calls.

At the same time, countries such as Peru and Colombia also face significant challenges related to both digital security and technological inclusion: according to data from the Crime and Violence Observatory, more than 2.7 million Peruvians experienced some form of identity theft in 2025, while a study by Accenture reveals that 32% of Peruvian business leaders currently consider identity theft to be their top concern.

Among the most frequent types of fraud in telecommunications are:

Fake call centres: Criminals pose as bank or telecommunications company employees to convince victims to install remote access applications, taking full control of the phone and accessing banking apps or personal data.
Non-existent prizes: Criminals resort to supposed prizes or fake promotions to pressure users into sharing confidential information or making immediate payments.
Virtual kidnappings: Criminals use calls manipulated with ambient sounds and leaked internet data to generate panic and demand urgent transfers.

These scam methods demonstrate how telecommunications fraud no longer depends solely on technical vulnerabilities, but also on the attackers’ ability to exploit people’s identity and trust.

Biometric verification solutions as a new barrier against telecommunications fraud

The growth of phone scams and identity theft attempts has forced the telecommunications sector to adopt stronger biometric verification solutions and more secure biometrics for telecommunications authentication mechanisms. In an environment where criminals resort to emotional manipulation and the use of artificial intelligence to deceive users, biometrics is establishing itself as one of the most effective tools for protecting both users and organisations. In this case, biometric verification technologies significantly reduce the risks associated with identity theft by ensuring that the person accessing a service, authorising an operation, or requesting a procedure is truly who they say they are.

The process begins with digital onboarding, where biometric verification solutions allow users to capture their fingerprints or facial features using their own mobile phone to generate secure digital credentials. From that moment on, these credentials can be used to validate the user’s identity against official databases, allowing for 1:1 and 1:N authentication processes with high levels of reliability. Furthermore, these solutions allow for the issuance of biometric QR codes containing validated user information, which can be used to authenticate or share specific data in a controlled manner, allowing each person to decide what information they share, when, and with whom.

This approach is particularly relevant for biometrics for telecommunications, where many scams occur precisely through fake calls, line change requests, SIM swaps, or fraudulent access to user accounts. Thanks to biometrics, it is possible to add a layer of security that is practically impossible to replicate using traditional methods based solely on passwords, SMS, or security questions, which are often vulnerable to social engineering attacks or data leaks.

Unlike the basic biometric systems integrated into many mobile devices, Identy.io’s biometric verification solutions are not limited to checking that the face or fingerprint matches those previously stored on the phone. The technology compares the user’s biometric information against verified credentials and authorised databases, ensuring the real authenticity of the digital identity and considerably raising the level of protection against sophisticated fraud attempts.

Passive liveness and on-device architecture in biometric verification solutions

One of Identy.io’s differentiating elements is the use of passive liveness detection technology, designed to detect fraud attempts without adding complexity to the user experience. Unlike other systems that require specific movements, such as blinking, smiling, or turning the head, this technology works transparently and automatically, analysing factors such as skin micro-movements, facial patterns, depth, or light reflections to confirm that the person interacting with the system is real and not a photograph, a video, a mask, or an AI-generated deepfake.

This is especially important in the current context, where cybercriminals increasingly use artificial intelligence tools to create synthetic identities or simulate real voices and images with a high degree of precision. Thanks to the use of advanced AI algorithms and proprietary biometric models, these solutions are capable of identifying anomalies imperceptible to the human eye and blocking fraudulent access before it can compromise the security of the user or the telecommunications operator.

Added to this layer of security is a completely on-device architecture, in which all the user’s biometric information is processed and stored directly on the mobile phone itself. This means that sensitive data does not need to be constantly sent to external servers to validate identity, drastically reducing the risks associated with leaks, interceptions, or attacks on centralized databases. Furthermore, this approach eliminates the dependency on a permanent internet connection and allows the solution to work even on low-end devices that only need a camera and a flash to capture biometric information.

In a context where phone scams and identity theft evolve at the same pace as technology, biometrics for telecommunications are becoming essential for protecting users without creating friction in their digital experience. Advanced biometrics, combined with secure architectures and user-centric privacy models, is emerging as one of the most solid responses to this new threat landscape. Through technologies such as passive liveness, digital credentials, and on-device biometric authentication, Identy.io demonstrates how biometric verification solutions can help telecommunications companies build more secure, accessible, and reliable digital ecosystems.

La entrada Biometric verification solutions are strengthening security for telecommunications se publicó primero en identy.io.

Liveness Detection Software: Stop Spoofing, Deepfakes & Biometric Fraud

Matus Kapusta — Fri, 17 Jul 2026 08:09:58 +0000

Biometric verification is only as strong as its ability to know a real human is in front of the camera. Liveness detection software is the anti-fraud layer that makes that determination — rejecting printed photos, screen replays, 3D masks, synthetic identities and injected deepfakes before they ever reach the matching engine. If you are new to the concept, start with our foundational explainer on what a liveness check is and why it matters in facial biometrics; this page focuses on how the software works, how it is certified, and how to evaluate it.

Detect Deepfakes before they become a Threat

Why Liveness Is the Core of Biometric Fraud Prevention

Face matching answers ‘is this the same person?’. Liveness answers a prior and more important question: ‘is this a person at all?’ Fraud rings no longer need to defeat the match — they need to defeat presence. Generative AI has industrialized that attack: deepfake tools can animate a stolen selfie in minutes, and virtual camera software can inject that video directly into an onboarding flow. Without certified liveness, a biometric system is a lock that accepts photographs of keys.
The financial impact is measurable across account opening fraud, account takeover, synthetic identity fraud and money-mule onboarding — the four attack patterns that liveness directly interrupts.

The Attacks Liveness Detection Software Stops

Print attacks: photographs of the victim presented to the camera — the entry-level spoof.
Replay attacks: videos or photos displayed on a phone, tablet or monitor.
3D mask attacks: silicone or resin masks reproducing the victim’s facial geometry (the Level 2 test threshold).
Deepfake presentation: AI-generated video of the victim shown on screen. See how it works in deepfake biometric verification.
Injection attacks: synthetic media injected via virtual cameras or intercepted APIs, bypassing the physical camera entirely — the fastest-growing vector and the reason camera-integrity signals now matter as much as image analysis.

Experience Identy.io in action

Get a tailored demo of our contactless biometric platform and see how it fits your specific use case.

Active vs Passive Liveness Detection

Active liveness

The user performs challenges: blinking, turning the head, following a dot. Effective against basic spoofs but adds friction, increases abandonment in onboarding funnels, and — counterintuitively — gives attackers a predictable script that deepfake puppeteering can follow.

Passive liveness

A single frame or a short passive capture is analyzed for texture, depth cues, micro-reflections, moiré patterns and signs of synthesis. The user does nothing. Passive liveness is now the industry direction because it combines lower abandonment with equal or better presentation attack detection, and it extends naturally beyond face to contactless fingerprint and palm capture.

Certification: ISO/IEC 30107-3 and PAD Levels

Vendor claims about anti-spoofing are only meaningful when tested by an accredited third party against ISO/IEC 30107-3, the international standard for presentation attack detection (PAD). Independent labs such as iBeta test at two levels:

PAD Level 1: printed photos, screen replays and basic 2D artifacts.
PAD Level 2: 3D masks and sophisticated artifacts with a larger attack budget — the enterprise benchmark.

Identy’s technology has passed ISO 30107-3 PAD Level 2 evaluation with a 0% penetration rate; the details are on our PAD Level 2 certification page.

How to Evaluate Liveness Detection Software

Certification: ISO/IEC 30107-3 Level 2 by an accredited lab, not internal testing.
Attack coverage: presentation AND injection attacks, including deepfake detection — compare options in our review of the best deepfake detection software.
User experience: passive capture, sub-second decisions, low false rejection on real users across demographics and devices.
Modality breadth: face, contactless fingerprint and palm liveness from a standard smartphone camera.
Deployment model: on-device SDK vs server API, offline capability, and data-privacy architecture (templates never leaving the device where required).
Integration effort: native mobile and web SDKs with clear documentation — explore the biometric SDK suite.

Experience Identy.io in action

Get a tailored demo of our contactless biometric platform and see how it fits your specific use case.

Frequently Asked Questions

What is liveness detection software?

It is software that confirms the biometric sample presented to a camera comes from a live, physically present person — not a photo, replay, mask or deepfake. It is the anti-fraud layer of any biometric verification or authentication flow.

What is the difference between active and passive liveness detection?

Active liveness asks the user to perform actions; passive liveness analyzes the capture with no user action. Passive delivers lower abandonment with equal or better attack detection.

What is ISO/IEC 30107-3 PAD certification?

The international standard for testing presentation attack detection. Accredited labs test at Level 1 (photos, replays) and Level 2 (3D masks and sophisticated artifacts). Level 2 is the enterprise benchmark.

Can liveness detection stop deepfakes?

Yes. Modern engines combine texture, depth and motion analysis with injection-attack detection to catch synthetic media, whether presented on a screen or injected into the camera feed.

Bibliography

ISO/IEC 30107-3 — Biometric presentation attack detection, Part 3: Testing and reporting. https://www.iso.org/standard/79520.html
iBeta Quality Assurance — Biometrics PAD testing (Levels 1 & 2). https://www.ibeta.com/biometrics-testing/
NIST — Face Analysis Technology Evaluation (FATE) / PAD track. https://www.nist.gov/programs-projects/face-technology-evaluations-frtefate
Europol (2024) — Facing reality? Law enforcement and the challenge of deepfakes / AI and policing reports. https://www.europol.europa.eu/publications-events/publications
FATF (2020) — Guidance on Digital Identity. https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Guidance-on-digital-identity.html

La entrada Liveness Detection Software: Stop Spoofing, Deepfakes & Biometric Fraud se publicó primero en identy.io.

Security and greater convenience as a key to integrating biometrics into the user experience at the Football World Cup

Rodrigo Ramos — Wed, 15 Jul 2026 13:35:09 +0000

The Football World Cup is, without a doubt, one of the major sporting and social events of the decade. Until July 19th, 48 national teams will be competing for victory in a tournament which, for the first time in history, is held across three different host countries (Mexico, Canada and the United States). This edition was also one of the most popular in terms of visitor numbers, as more than 5.5 million spectators turned out to watch their favorite teams in action over the course of just three weeks.

Brazil is one of the countries—along with the three host nations—with the most fans in the stands: more than 500,000 Brazilians traveled to the United States, where their group stage matches were played. In the case of Colombia, the 120,000 fans traveled to two countries, as its matches were played in Mexico City and Guadalajara, Mexico, as well as in Miami, United States. This posed a significant logistical challenge for the visitors, who had to travel between venues by plane or by road and faced various border controls during their stay.

From a technological standpoint, this event also brought about significant innovations in the way visitors interact with authorities, in stadium access, and in the check-in process at their accommodations, to name just a few examples. In fact, digital transactions increased considerably during the tournament, which in turn led to a notable rise in fraud attempts. Therefore, it was necessary to verify fans’ identities to prevent fraud or identity theft in a manner that was fast, secure, and convenient enough not to cause any friction that might mar their experience. Biometrics thus became increasingly important as a means of streamlining many of the procedures visitors went through upon arrival in the cities where their national teams’ matches were played.

Biometrics as a tool to improve efficiency across all procedures during the World Cup

In a tournament that attracts millions of fans, being able to verify the identity of a user booking a room, buying a ticket for a particular match or simply attempting to pass through a border control is essential. In this regard, biometrics has established itself worldwide as a tool that significantly boosts the overall efficiency of all the processes in which it is used, whilst reducing friction and improving the overall user experience.

However, for this technology to be truly useful, it is important to carry out a few preliminary steps. The first of these is the onboarding process, through which the user captures their digital credentials – that is, their fingerprints or facial features – so that they can identify themselves correctly or validate their identity when necessary. In the case of the solutions developed by Identy.io, this process takes just a few seconds using the user’s own smartphone, by following the on-screen instructions. It is a simple and quick process in which the user does not need to perform any predefined actions, such as moving their head in a certain direction or blinking a certain number of times; instead, the system itself, thanks to the passive liveness check and its AI algorithms, is able to detect when the person in front of the camera might be a deepfake or a third party using a mask or a high-definition photograph to try to circumvent the system. This information is then cross-checked against centralised databases to verify the user’s identity (1:N identification) and ensure that the person is who they claim to be (1:1). Once it has been verified that the user is indeed who they claim to be, the user’s personal information is stored directly on their device under the strictest encryption protocols available on the market.

Once these digital credentials have been stored on the visitor’s mobile phone, they can be used for all kinds of digital procedures, even at times when, due to the large number of fans, there may be faults or outages in the connectivity service or the Wi-Fi systems in place. One of the areas where biometrics can prove most effective is in pre-border clearance, which will reduce waiting times for completing formalities and ease congestion at entry points in the countries visited. Government bodies will also benefit directly from the use of this technology, as it will drastically reduce potential cases of theft or identity theft, since it enables them to verify, almost in real time and with great accuracy, the identity of individuals attempting to cross a border or pass through an airport security checkpoint, by validating the user’s digital credentials against their centralised database and thus determining whether the tourist is indeed the person they claim to be.

To make it easier to use these digital credentials, visitors can choose to generate, using Identy.io’s solutions, a biometric QR code that embeds all their personal information once it has been validated. This QR code is particularly useful at digital check-in kiosks in hotels, for example, as a way of speeding up the check-in process. Thanks to these codes, visitors can choose which personal information to share, without needing an internet connection at that moment.

Biometrics to combat ticket reselling and as a way of speeding up entry to stadiums

Access to the stadiums where the matches were played also underwent a significant change thanks to biometrics. Until now, it was necessary to purchase physical tickets for each match, which increased the risk of counterfeiting or resale attempts. However, this World Cup pioneered the use of biometrics to streamline security checks at entry points and make them more efficient. When purchasing a ticket, users link their identity to it using their previously registered digital credentials. This way, in addition to being able to present their digital ticket at the stadiums directly from their cell phones, the risk of resale is eliminated, since only properly accredited individuals will be able to enter the stadiums.

In an increasingly digitized environment, and with one of the most heavily attended sporting events in history, ensuring spectator safety, enhancing their overall experience, and, in turn, reducing the incidence of fraud and identity theft are key to ensuring the smooth running of this and future World Cups. And biometrics is already a strategic ally in this regard.

La entrada Security and greater convenience as a key to integrating biometrics into the user experience at the Football World Cup se publicó primero en identy.io.

Identity Verification: How It Works, Methods & Use Cases

Antony Vendhan — Sun, 12 Jul 2026 06:55:05 +0000

Identity verification is the process of confirming that a person is who they claim to be. It combines three layers of evidence: something the person has (a government-issued ID document), something the person is (a biometric trait such as face, fingerprint or palm), and data that can be checked against authoritative sources. In a digital economy where account opening, payments and public services happen remotely, identity verification is the control that stands between a legitimate user and a fraudster. This guide covers what identity verification is, how digital identity verification works step by step, the main verification methods, the industries and regulations that require it, and the criteria to evaluate when comparing identity verification providers.

Detect Deepfakes before they become a Threat

What Is Identity Verification?

Identity verification (often shortened to IDV) is a one-time process that establishes a trusted link between a real person and a digital identity. It answers the question: is this person real, and are they who they say they are? It is distinct from authentication, which happens on every subsequent login and answers a different question: is this the same person we verified before? A robust verification flow validates three things: the document is genuine and unaltered, the person is physically present (not a photo, mask, replay or deepfake), and the biometric match between the live person and the document photo is positive.

How Digital Identity Verification Works

Modern digital identity verification runs entirely on a smartphone or web browser and completes in seconds. A typical flow has five steps:

Document capture. The user photographs the front and back of a government ID. Software checks security features, fonts, MRZ codes and tamper signals.
Data extraction. OCR and NFC (for chipped documents) extract name, date of birth and document number for downstream checks.
Biometric capture. The user takes a selfie or scans a fingerprint or palm directly with the phone camera — no external hardware required with contactless biometric SDKs.
Liveness detection. The system confirms a live human is present, blocking spoofing attempts such as printed photos, screen replays, 3D masks and injected deepfakes. See our explainer on what a liveness check is and why it matters.
Match and decision. The live biometric is compared against the document photo; combined with database and watchlist checks, the system returns a verified / rejected / review decision.

Experience Identy.io in action

Get a tailored demo of our contactless biometric platform and see how it fits your specific use case.

Identity Verification Methods

Document-based verification

Validates passports, national IDs and driving licences using forensic checks on security features and machine-readable zones. It is the regulatory baseline for KYC but, on its own, cannot confirm the person presenting the document is its legitimate holder.

Biometric verification

Compares a live facial image, fingerprint or palm print against the document photo or an enrolled template. Contactless fingerprint and palm capture through a standard smartphone camera extends biometric identity verification to devices without dedicated sensors, which is decisive for financial inclusion programs and government services.

Database and watchlist checks

Cross-references extracted identity data against civil registries, credit bureaus, sanctions lists and PEP databases. Strong for compliance screening; weak against synthetic identities unless paired with biometrics.

Knowledge-based and OTP methods

Security questions and SMS one-time passwords are legacy methods. Data breaches and SIM-swap fraud have degraded their reliability, which is why regulators and analysts increasingly treat them as supplementary signals rather than primary verification.

Where Identity Verification Is Required

Banking and fintech. KYC and AML regulation makes verification mandatory at onboarding. Biometric flows reduce abandonment while meeting compliance — see how face and fingerprint identification work in banking and fintech.

Government digital services. National ID programs, benefit distribution and e-government portals use biometric identity verification for government digital services to deliver services remotely without fraud leakage.

Telecommunications, healthcare, gig platforms and crypto. SIM registration mandates, patient identification, worker onboarding and travel-rule compliance all depend on fast, reliable remote verification.

Regulations Driving Identity Verification

KYC / CDD: customer due diligence rules (e.g., FinCEN CDD Rule in the US, AMLD in the EU) require firms to verify customer identity before establishing a relationship.
eIDAS 2.0 and the EU Digital Identity Wallet: establishes a framework for interoperable, high-assurance digital identities across the EU.
FATF Digital Identity Guidance: endorses risk-based use of digital ID systems with certified biometrics and liveness for remote onboarding.
ISO/IEC 30107-3: the international testing standard for presentation attack detection; certification at Level 1 and Level 2 is the de facto bar for anti-spoofing claims.

How to Choose an Identity Verification Solution

Evaluate accuracy (independent benchmarks such as NIST testing), certified liveness (ISO/IEC 30107-3), modality coverage (face, fingerprint, palm), device reach (does it work on any smartphone camera?), integration model (SDK vs API), data privacy architecture, and total cost per verification. We break down the leading vendors in our comparison of the best identity verification software.

Experience Identy.io in action

Get a tailored demo of our contactless biometric platform and see how it fits your specific use case.

Frequently Asked Questions

What is identity verification?

Identity verification is the process of confirming that a person is who they claim to be, typically by validating a government-issued ID document, matching a live biometric sample against it, and checking the data against authoritative sources.

How does digital identity verification work?

It captures an ID document and a live biometric through a smartphone or web camera, runs liveness detection, validates the document, and matches the live sample against the document photo — remotely and in seconds.

What is the difference between identity verification and authentication?

Verification establishes who a person is the first time (account opening); authentication confirms a returning user is the same verified person.

Is biometric identity verification secure?

Yes, when combined with certified liveness detection. Solutions tested against ISO/IEC 30107-3 can reject photos, masks, replays and deepfakes, making biometrics significantly more secure than knowledge-based methods.

What industries require identity verification?

Banking and fintech (KYC/AML), government digital services, telecommunications, healthcare, gig economy platforms, crypto exchanges and online marketplaces.

Bibliography

NIST — Face Technology Evaluations (FRTE/FRVT), National Institute of Standards and Technology. https://www.nist.gov/programs-projects/face-technology-evaluations-frtefate
ISO/IEC 30107-3 — Information technology, Biometric presentation attack detection, Part 3: Testing and reporting. https://www.iso.org/standard/79520.html
FATF (2020) — Guidance on Digital Identity. https://www.fatf-gafi.org/en/publications/Fatfrecommendations/Guidance-on-digital-identity.html
European Commission — eIDAS 2.0 / European Digital Identity Wallet framework. https://digital-strategy.ec.europa.eu/en/policies/eudi-wallet
FinCEN — Customer Due Diligence (CDD) Final Rule. https://www.fincen.gov/resources/statutes-and-regulations/cdd-final-rule

La entrada Identity Verification: How It Works, Methods & Use Cases se publicó primero en identy.io.

Biometrics as the key to ensuring digital financial security worldwide

Marta Gomar — Thu, 25 Jun 2026 15:05:10 +0000

Over the past few years, the internet has become one of the main tools facilitating financial inclusion. So much so that financial transactions conducted remotely now far outnumber those conducted in person. For example, in Colombia, it is estimated that eight out of ten financial transactions are now conducted online, according to data from the Financial Superintendency.

In Peru, the situation is very similar. At a time of rapid digitalization in the country—driven, among other factors, by more than $80 million in financing from the Inter-American Development Bank to promote inclusion and public participation in the digital economy—it is estimated that nine out of ten users of financial services in Peru already use digital wallets as an everyday tool.

Although this trend toward an increasingly interconnected world has significantly heightened many people’s interest in technology and the myriad possibilities it offers, the reality is that it has also multiplied the risks faced by both users and public and private entities alike. In Colombia alone, for example, so far in 2026 there have already been more than 5,000 cases of fraud and identity theft in the financial sector, in addition to the more than 62,000 reports of cybercrimes from last year.

Although in some cases the end user remains the entry point for these crimes—according to the Superintendency of Banking, Insurance, and Pension Fund Administrators, nearly half of users still store their banking passwords on their mobile phones—the very advancement of technology, particularly artificial intelligence, has multiplied the risks of these crimes occurring. Indeed, due to the exponential growth of cases involving the use of digital doubles or deepfakes, traditional security measures—such as passwords or security codes sent via SMS to the user’s cell phone—are no longer sufficient.

Biometric Technology as an Additional Layer of Security Against Fraud

In a context where it is becoming increasingly necessary to verify a user’s identity remotely—and to do so with the highest possible standards of security and efficiency—biometrics is establishing itself as an essential tool for users and both public and private entities. This technology, which quickly and easily captures a user’s fingerprints or facial features, has already become an additional layer of security that complements existing measures and directly helps reduce cases of fraud involving theft or identity theft.

In this regard, Identy.io has opted to develop on-device technology, meaning it uses the user’s own mobile device to capture biometric information, with all data stored on the device itself under the strictest security standards. This not only enhances user security—since users no longer need to visit their bank’s offices, for example, to complete any transactions—but also has a direct impact on financial institutions’ bottom line, as they no longer need to invest large sums of money in third-party servers or cloud infrastructure to store their users’ data. Thanks to this on-device architecture, facial data or fingerprints never leave the user’s phone, making security breaches on servers virtually impossible, while also reducing reliance on constant connectivity—a factor that is particularly relevant in areas where internet access is limited.

The entire biometric validation process begins with the onboarding process, during which your digital credentials are generated. The system captures the user’s fingerprint or facial feature data and stores it on their mobile device using the world’s most stringent security and encryption protocols. From then on, this information can be used to verify your identity by querying a centralized database (1:N) and ensuring that the person carrying out a specific transaction—financial, for example—is who they claim to be (1:1). Additionally, Identy.io’s biometric solutions enable the issuance of QR codes (BioCode), which the user can present as credentials and which contain all their personal information, allowing them to control what data they share, when, and with whom at all times. This critical data can also be stored in a digital wallet (ID Wallet) under the most stringent encryption standards on the market.

At a time when it is increasingly common to access financial services through tools such as digital wallets or mobile apps, it is essential to ensure that there is no unauthorized access to users’ critical information. Only through this additional layer of security can the financial well-being of the population be guaranteed.

La entrada Biometrics as the key to ensuring digital financial security worldwide se publicó primero en identy.io.

How Identy.io is Redefining Identity Protection in the Age of AI-Driven Fraud

Rodrigo Ramos — Tue, 23 Jun 2026 14:40:35 +0000

Identy.io highlights its multi-layer approach to combating AI-driven identity fraud through injection attack prevention, deepfake detection, multimodal biometrics, and on-device authentication.

DOVER, Del., June 23, 2026 — Identy.io, leading international company in touchless biometric identification and digital credential management solutions, has been featured in the newly released 2026 Injection Attack Detection Market Report & Buyer’s Guide, published by Biometric Update in partnership with Goode Intelligence. The report examines the growing threat of injection attacks, a rapidly evolving form of biometric fraud in which attackers bypass biometric capture devices and insert manipulated, synthetic, or AI-generated content directly into identity verification workflows. As organizations increasingly adopt remote onboarding and biometric authentication, injection attack detection (IAD) is emerging as a critical layer of identity assurance and fraud prevention.

In this context, Identy.io highlights how the fraud landscape has evolved beyond traditional presentation attacks involving printed photos, screens, or masks. Today, attackers can combine camera injection techniques with AI-powered deepfake generation to create highly convincing biometric forgeries capable of bypassing conventional liveness and presentation attack detection systems. To address this challenge, Identy.io has developed a defense strategy based on two independent security layers. The first focuses on injection attack prevention, protecting the integrity of the biometric capture pipeline by ensuring that biometric samples originate from a genuine physical camera and trusted execution environment. The second layer leverages passive liveness detection together with deepfake detection techniques to analyze biometric content, helping organizations verify the presence of a genuine user while identifying signs of AI-generated, manipulated, or synthetic facial imagery.

These complementary controls are designed to provide defense-in-depth against increasingly sophisticated attacks, ensuring that compromising one layer does not automatically compromise the other. Identy.io also emphasizes the importance of multimodal biometrics as a long-term response to the growing exposure of facial biometric data. With billions of facial images publicly available online, face biometrics have become a primary target for identity fraud. To strengthen identity assurance in high-security use cases, Identy.io enables fingerprint capture using standard smartphone cameras, adding an additional biometric factor that is significantly more difficult for attackers to obtain and replicate at scale.

Beyond addressing specific attack vectors, Identy.io views biometric security as a cornerstone of digital trust. As digital interactions increasingly replace in-person verification, organizations must ensure that users can prove their identity securely while maintaining control over their personal data. By combining advanced biometric technologies with reusable digital credentials, Identy.io helps organizations strengthen identity protection throughout the entire user journey, from onboarding and authentication to ongoing account access and transaction approval.

The company also believes that effective fraud prevention requires multiple layers of protection working together rather than relying on a single authentication factor. This is where multimodal biometrics plays a critical role. By combining facial biometrics with fingerprint authentication captured through standard smartphone cameras, organizations can significantly increase resilience against identity fraud while improving trust in digital services. This layered approach helps reduce the risk of account takeover, synthetic identity fraud, and AI-driven impersonation attacks, providing stronger security for both businesses and end users.

The report also discusses architectural approaches to biometric authentication. In this regard, Identy.io outlines the advantages of performing biometric matching directly on the user’s device rather than relying exclusively on centralized server-side comparisons. By executing the authentication process locally and matching against biometrics stored on the device, organizations can significantly reduce the feasibility of large-scale remote attacks. Traditional server-centric architectures create an environment in which any connected device can capture and submit biometric data for verification against centrally stored templates, increasing the potential attack surface. In contrast, a match-on-device approach requires the authentication process to take place on the specific device where the user’s biometric credentials are registered. This architecture limits opportunities for remote manipulation and makes large-scale fraud campaigns considerably more difficult to execute.

As stated by Jesús Aragón, CEO of Identy.io, “The inclusion of Identy.io in this report reflects the work we have been doing to stay ahead of the rapidly evolving threat landscape driven by AI-generated fraud. As deepfakes, camera injection attacks, and synthetic identities become increasingly sophisticated, organizations need more than traditional liveness checks. Our approach combines injection attack prevention, passive liveness detection, deepfake detection, multimodal biometrics, and on-device authentication to provide a stronger foundation for digital trust and identity assurance.”

As injection attacks and AI-generated identity fraud continue to evolve, Identy.io continues strengthening the integrity of both biometric capture and biometric matching processes, which will be essential for organizations seeking higher levels of identity assurance. By combining on-device authentication with injection attack prevention, deepfake detection, and multimodal biometrics, the company aims to provide a more resilient framework for defending against emerging threats.

La entrada How Identy.io is Redefining Identity Protection in the Age of AI-Driven Fraud se publicó primero en identy.io.

The new paradigm of the retail sector: biometrics as a guarantor of hyper-personalisation

Rodrigo Ramos — Mon, 22 Jun 2026 15:39:25 +0000

The global retail sector is at one of the most momentous points in its history. In Mexico, this sector already contributes approximately 10% of the country’s GDP, while in Brazil, its economic weight exceeded $231.08 billion by 2025. In Colombia, the sector reached $117.48 billion last year, compared to $65 billion in Peru.

Despite this significant economic impact, the sector is facing a new paradigmatic revolution. While until only a few years ago all eyes were on the importance of launching new e-commerce models to expand the target audiences of each business, the current model focuses on greater personalisation of services to maximise user loyalty. In today’s landscape, where consumers enjoy a vast range of different products and services, competition in the retail sector is no longer just about the need for greater visibility, but above all, about fostering a smoother and more efficient shopping experience and offering increasingly rapid responses to customer expectations.

In this context, more and more companies are opting to hyper-personalise their services as a way to differentiate themselves from the competition. A report by the consultancy McKinsey mentions an increase of up to 15% in revenue for companies in the sector that use this technique, while 71% of consumers expect a more personal interaction focused on their interests, leading 76% to feel frustrated when this does not happen. Factors such as the user’s location, purchase intent, preferred channel, or the moment of interaction are becoming increasingly relevant for retail companies, allowing for the activation of relevant offers and recommendations even before the consumer starts their purchase.

Biometrics: a new ally for the retail sector

As in other sectors, these personalisation needs require the storage and use of large volumes of users’ personal information. This includes not only their habits and shopping preferences but also the transactions they have carried out or the payment methods they have used. Going further, some loyalty programmes also allow for the accumulation of points that can be redeemed for new services or physical products, sometimes of great value. This is why biometrics has established itself as a true ally for the sector, by ensuring that the user accessing certain services is truly who they say they are.

Consequently, entities like Identy.io have worked on developing new ways to manage user identity and facilitate digital transactions more securely and efficiently through biometric solutions, which allow users to manage their digital credentials to authenticate and authorise operations. In these solutions, digital credentials—the user’s personal information—are cryptographically signed and stored on their own device, allowing the user to retrieve and use them at any time, even when they do not have a reliable or stable internet connection.

Biometrics as the key to reducing digital fraud

Biometric solutions allow for the generation of a unique QR code which, acting like an electronic wallet, gathers all the information necessary to authorise payments, verify the user’s age, or interact with retail loyalty programmes. All of this is done simply and conveniently from the user’s mobile device. The user only needs to authenticate themselves in the solution using their fingerprints or facial features, without the need for passwords or complex processes. With this verified data, companies minimize the risks of forgery or identity theft, especially in situations where fraudsters might try to create fake accounts to take advantage of welcome promotions or illegitimately accumulate points. As these digital credentials are linked directly to the legal user’s identity, companies reduce the mass creation of ghost accounts or the improper redemption of points for high-value products, thus minimising losses from account takeovers.

Identy.io proposes a decentralised digital identity model based on a privacy-by-design concept. All user information is stored solely on their mobile device, without using third-party servers or clouds. All of this is done with maximum compatibility with international standards for verifiable credentials (W3C VC) and regulatory frameworks such as eIDAS 2.0 in Europe or the progress of CUID in Mexico. Users can choose at any time what personal information they share, when, and with whom, in the most secure way thanks to passive liveness detection with AI algorithms, which prevents fraud, identity theft, and credential forgery.

As we can see, incorporating biometrics into the retail user experience goes beyond the use of a simple conventional wallet. By enabling secure payments, access to discounts, rewards, or participation in loyalty programmes, this technology becomes a strategic solution for the sector. At a time when user experience is becoming one of the pillars underpinning the industry’s growth, the ability to offer secure transactions, privacy, and hyper-personalised shopping experiences is key to generating value for both users and companies in the sector.

La entrada The new paradigm of the retail sector: biometrics as a guarantor of hyper-personalisation se publicó primero en identy.io.

ISO/IEC 30107-3 PAD Level 2: Biometric Buyer Guide

Antony Vendhan — Fri, 12 Jun 2026 08:26:23 +0000

Biometric authentication is only as strong as its ability to tell a real person from a spoof. As attackers shift from printed photos to 3D silicone masks and deepfakes, presentation attack detection (PAD) — the technology that stops these spoofs — has become a core requirement for any serious identity verification system.

ISO/IEC 30107-3 is the international standard that defines how PAD is tested, and its Levels 1,2,and 3 conformance is the threshold regulated industries — banking, government, telecom — now treated as the baseline. Identy.io’s facial biometric technology has been independently certified to ISO/IEC 30107-3 Level 1 and 2 by iBeta with a perfect score (0% Imposter Attack Presentation Match Rate). This page explains what that means, how the standard works and why it matters when you are choosing a biometric vendor.

Detect Deepfakes before they become a Threat

What is ISO/IEC 30107-3?

ISO/IEC 30107-3 is part of the ISO/IEC 30107 family of standards on biometric presentation attack detection. The family has three parts:

Part 1 (ISO/IEC 30107-1): Framework — defines the concepts and terminology of presentation attacks.
Part 2 (ISO/IEC 30107-2): Data formats — specifies how PAD-related data is exchanged between systems.
Part 3 (ISO/IEC 30107-3): Testing and reporting — the methodology testing labs use to measure whether a biometric system can reliably distinguish a real human from a spoof. Part 3 is the one that matters for certification. It defines the metrics, the testing protocol and the categories of attacks (“Presentation Attack Instruments”, or PAIs) that a system must withstand. Without a common methodology, vendor claims of “anti-spoofing” could not be compared objectively.

The standard applies to all major biometric modalities: face, fingerprint, iris, voice and palm. The most common certification today is for facial recognition and facial liveness, because face is the most-attacked modality.

Two core metrics measure PAD performance under ISO/IEC 30107-3:

IAPMR (Imposter Attack Presentation Match Rate): the share of spoof attacks the system wrongly accepts as genuine. Lower is better.
BPCER (Bona Fide Presentation Classification Error Rate): the share of legitimate users the system wrongly rejects. Lower is better.

A system performs well only when both numbers stay low at the same time.

PAD Level 1 vs Level 2: What's the Difference?

The Levels refer to the sophistication of the attacks a system is tested against. Both levels use the same underlying metrics; the difference is the difficulty of the PAIs and the bar for passing.

Aspect	Level 1	Level 2
Attack types tested	Basic — printed photos, screen replays, simple paper or rubber masks	Advanced — 3D silicone and resin masks, high-resolution custom prints, dynamic video replays, deepfake-style synthetic media
Effort and cost to produce the spoofs	Low; consumer-grade materials	Significant; specialized fabrication and expert effort
What passing proves	The system resists casual or opportunistic spoofing	The system resists organized, professional and well-funded attacks
Typical use cases	Consumer applications, low-risk authentication	Banking onboarding, government digital identity, telecom KYC, high-value transactions
Common buyer requirement	Sufficient for low-risk consumer products	The de facto standard for regulated industries

In practice, Level 1 is the entry tier and Level 2 is what buyers in regulated sectors actually require. A determined attacker with a modest budget can usually defeat a Level 1 system. Level 2 is designed to stop the kind of attacks a fraud ring would actually invest in: a $2,000 silicone mask, a high-end deepfake pipeline, a coordinated replay attack.

To pass Level 2, a system must detect every spoof in the tested PAI categories — the bar for a perfect score is 0% IAPMR — while keeping false rejections of legitimate users low.

Experience Identy.io in action

Get a tailored demo of our contactless biometric platform and see how it fits your specific use case.

Who Tests ISO 30107-3? Understanding iBeta and NIST

There is frequent confusion about who actually issues ISO 30107-3 certifications, so clarity matters here.

ISO 30107-3 conformance testing is performed by independent testing laboratories. The most widely recognized in the biometric industry is iBeta Quality Assurance, a US-based lab accredited by NIST under the National Voluntary Laboratory Accreditation Program (NVLAP) for biometric testing.

The process is straightforward:

The vendor submits its biometric SDK to the lab.
The lab attempts a battery of presentation attacks at the relevant level (1 or 2), using a defined range of PAIs.
The lab records the system’s response and computes IAPMR and BPCER.If the system
meets the conformance criteria, the lab issues a Letter of Conformance referencing ISO/IEC 30107-3 and the level achieved.

A few clarifications buyers often need:

NIST does not directly issue ISO 30107-3 certifications. NIST accredits labs (such as iBeta) that perform the testing. A vendor’s reference to “NIST” in this context normally means tested by a NIST/NVLAP -accredited lab to the ISO 30107-3 standard.
ISO 30107-3 conformance is distinct from NIST FRTE/FRVT. NIST runs its own face recognition evaluations, which measure recognition accuracy rather than anti-spoofing. Both are reputable; they measure different things.
Conformance letters are dated and scoped. When evaluating vendors, ask for the letter and check the test date and the specific PAI categories included.

Why ISO/IEC 30107-3 Level 2 Matters for Procurement and Compliance

This is where the standard moves from a technical detail to a business requirement.

In regulated industries, ISO 30107-3 Level 2 has become the procurement baseline for biometric identity verification:

Banking and financial services. Anti-money-laundering (AML) and know-your-customer (KYC) regulations increasingly require demonstrable anti-spoofing capability for remote onboarding. ISO 30107-3 Level 2 is the standard evidence requested in RFPs.
Government and digital identity. National digital ID programs, eGovernment services and electoral systems require deepfake-resistant identity proofing. Level 2 closes the procurement question on PAD.
Telecom. SIM activation, customer onboarding and SIM-swap prevention are regulated in most countries. National regulators and GSMA guidelines push toward standardized PAD testing.
Enterprise security and workforce identity. As AI-driven account takeover grows, security teams now require Level 2 PAD for high-privilege access and remote workforce authentication.

A common mistake during vendor selection is treating “we have liveness” as equivalent to “we have ISO 30107-3 Level 2.” They are not the same. Many vendors implement liveness detection without ever submitting it to independent testing — or test only at Level 1.

When evaluating a biometric vendor, the practical questions to ask are:

Has the system been tested under ISO/IEC 30107-3? At what level?
Which laboratory performed the testing, and is it NIST/NVLAP or FIDO accredited?
What was the test date and scope (which PAI categories, which biometric modalities)?
Can you share the conformance letter?
Does the certification cover the specific component (face, fingerprint, etc.) you intend to deploy?
A vendor that can answer these clearly belongs on the shortlist. A vendor that cannot, should not.

How Identy.io Achieved a Perfect-Score Level 2 PAD Certification

Identy.io’s facial liveness technology — integrated across our facial recognition SDK and identity verification platform — has been independently tested by iBeta to ISO/IEC 30107-3 Level 1 andLevel 2 with a perfect-score result: 0% IAPMR across the tested PAI categories.

In practical terms, every spoof presented to the system during testing was correctly identified, including:

3D silicone and resin masks (hyper-realistic, custom-fabricated)
High-resolution printed and screen-replayed images
Dynamic video presentation attacks
Synthetic media including deepfake-style attacks
The certification covers Identy.io’s facial liveness component, which is available across the Identy biometric SDK family — including the Finger SDK, Facial Recognition SDK and Palm SDK — and as part of our full identity verification platform.

What this means for our customers:

Banking, government and telecom buyers can deploy Identy.io confident that the anti-spoofing layer meets the standard their regulators expect.
Security and procurement teams can document compliance with reference to an independent conformance letter.
The same certified liveness underpins Identy.io’s broader work on deepfake detection, closing the loop on AI-driven identity fraud.

Experience Identy.io in action

Get a tailored demo of our contactless biometric platform and see how it fits your specific use case.

Frequently Asked Questions about ISO/IEC 30107-3 PAD Level 2

What is ISO/IEC 30107-3?

ISO/IEC 30107-3 is the international standard that defines how to test and report on biometric presentation attack detection (PAD). It specifies the metrics, testing methodology and Presentation Attack Instruments (PAIs) used to measure whether a biometric system can reliably distinguish a real human from a spoof.

What’s the difference between PAD Level 1 and Level 2?

Level 1 tests biometric systems against basic, low-cost spoofs such as printed photos and screen replays. Level 2 tests against far more sophisticated attacks, including 3D silicone masks, custom prints and deepfake-style synthetic media. Level 2 is the de facto requirement in regulated industries such as banking, government and telecom.

Is ISO 30107-3 the same as NIST certification?

No. NIST does not issue ISO 30107-3 certifications directly. NIST accredits independent labs such as iBeta under the NVLAP program, and those labs perform the ISO 30107-3 conformance testing. NIST also runs its own separate face recognition evaluations (FRTE/FRVT), which measure recognition accuracy rather than anti-spoofing.

How long is ISO 30107-3 certification valid?

ISO 30107-3 conformance letters reference a specific test date and scope. There is no formal expiration, but the biometric industry generally treats certifications older than two to three years as outdated, given how quickly attack techniques evolve. Vendors typically retest as their systems are updated.

Does ISO 30107-3 cover deepfakes?

Yes, at Level 2. The PAI categories tested at Level 2 include synthetic and video-based presentation attacks, which encompass deepfake-style spoofing. Level 1 testing generally does not cover these.

Which biometric modalities can be certified under ISO 30107-3?

The standard applies to all major biometric modalities — face, fingerprint, iris, voice and palm. Face is the most commonly certified modality today because it is the most-attacked.

How do I verify a vendor’s ISO 30107-3 claim?

Ask the vendor for the conformance letter issued by the testing laboratory. The letter should reference the standard (ISO/IEC 30107-3), the conformance level achieved, the test date, the PAI categories tested and the specific biometric component covered. A NIST/NVLAP or FIDO-accredited lab name on the letter confirms the testing was independent.

Is ISO 30107-3 Level 2 required for banking or government?

Increasingly, yes. Specific requirements vary by jurisdiction, but regulators and procurement teams in banking, fintech, government digital identity, electoral systems and telecom widely treat Level 2 as the baseline expectation for anti-spoofing in any biometric onboarding or authentication system.

Bibliography

The standards, regulatory guidance and testing methodology referenced on this page are available from the following primary sources.
International Organization for Standardization. ISO/IEC 30107-3:2023 — Information technology — Biometric presentation attack detection — Part 3: Testing and reporting. iso.org/standard/79520.html
International Organization for Standardization. ISO/IEC 30107-1:2023 — Information technology — Biometric presentation attack detection — Part 1: Framework. iso.org/standard/83828.html
International Organization for Standardization. ISO/IEC 30107-2:2017 — Information technology — Biometric presentation attack detection — Part 2: Data formats. iso.org/standard/67380.html
iBeta Quality Assurance. ISO 30107-3 Presentation Attack Detection Confirmation Letters. ibeta.com
National Institute of Standards and Technology. National Voluntary Laboratory Accreditation Program (NVLAP). nist.gov/nvlap
National Institute of Standards and Technology (2025). NIST Special Publication 800-63, Revision 4 — Digital Identity Guidelines. pages.nist.gov/800-63-4
Busch, C. & Thieme, M. The ISO/IEC 30107-3 standard for testing of Presentation Attack Detection. International Biometric Performance Testing Conference, NIST. nist.gov

La entrada ISO/IEC 30107-3 PAD Level 2: Biometric Buyer Guide se publicó primero en identy.io.