Fraudsters Turn to AI as Identity Attacks Escalate

South African businesses are facing a new generation of identity fraud driven by artificial intelligence, deepfakes, synthetic identities, and stolen personal data, according to the 2026 Identity Fraud Report released by VerifyNow.

The report combines public fraud statistics, industry research, and VerifyNow’s analysis of the growing verification challenges facing organisations across the country. It highlights a significant shift in criminal tactics, with fraudsters increasingly relying on impersonation rather than traditional cyberattacks.

Fraud Moves Beyond Hacking

According to the report, criminals no longer need to breach systems to commit fraud. Instead, they are using stolen personal information, AI-generated documents, deepfake videos, voice cloning, and social engineering techniques to pose as legitimate customers during onboarding, login, payment, and compliance processes.

This evolution is creating new risks for businesses that continue to rely on manual reviews or document-based verification methods.

AI Accelerates Fraud at Scale

Generative AI is making fraud cheaper, faster, and more accessible to criminals. Fraudsters can now create convincing fake identities, forged documents, cloned voices, and personalised phishing campaigns with minimal technical expertise.

The report cites industry research showing a dramatic rise in AI-enabled fraud threats, including a reported 3,000% increase in deepfake-related fraud attempts in 2023. Emerging risks include AI document forgery, synthetic identities, video injection attacks, and voice-based impersonation schemes.

Key Fraud Trends

The report highlights several trends impacting South African organisations:

• Digital banking fraud losses reached approximately R1.888 billion, with incidents continuing to rise.
• Banking applications account for the largest share of digital banking fraud cases.
• AI tools are accelerating impersonation fraud through deepfakes, voice cloning, and synthetic identity creation.
• Vishing, stolen personal data, weak document verification, and account takeover attempts are becoming increasingly common.
• Legacy identity formats, including South Africa’s Green ID book, remain vulnerable to abuse.
• Businesses relying solely on uploaded documents or manual verification face growing exposure to sophisticated fraud.

Identity Fraud Becomes a Business Risk

“Fraud has changed. Criminals are not only trying to break into systems anymore. They are trying to pass as real people,” said Ru Foster, CEO of VerifyNow.

He warned that AI allows fraudsters to create increasingly convincing identity profiles, documents, voices, and images at a scale that was previously impossible.

“As a result, identity verification can no longer be treated as a simple administrative process. It has become a critical part of an organisation’s fraud prevention strategy,” he said.

Closing the Verification Gap

The report argues that many organisations are still using verification processes that were not designed for today’s fraud landscape. VerifyNow recommends strengthening identity controls through real-time identity verification, biometric face matching, passive liveness detection, bank account verification, AML and sanctions screening, audit-ready reporting, and ongoing risk monitoring.

It also stresses the need for businesses to verify identities against authoritative data sources, detect biometric manipulation, and maintain comprehensive evidence trails for compliance and fraud investigations.

As AI-driven fraud continues to evolve, organisations will need more advanced verification capabilities to stay ahead of increasingly sophisticated identity-based attacks.