Continuous Trust: Mastercard & Trulioo on Evolving Identity Verification
The traditional model of trust in financial services – a one-time checkpoint established through KYC reviews – is proving increasingly inadequate in a digital environment. As personal and financial lives migrate online, a continuous assessment of risk is becoming essential, driven by the escalating sophistication of fraud, account takeovers, and synthetic identities. Fragmented payments data is a key vulnerability, hindering the ability of banks and FinTechs to maintain a holistic view of customer risk.
The Erosion of Static Trust
For years, opening an account and clearing know-your-customer (KYC) checks served as a sufficient threshold for establishing trust. Once a customer was onboarded, they were largely considered legitimate unless clear evidence of wrongdoing emerged. However, this “binary gate” approach is no longer viable. As PYMNTS reported, trust is now a dynamic “profile,” requiring constant evaluation. This shift is driven by the increasing prevalence of sophisticated fraud techniques that can bypass initial verification measures.
Kurt Weiss, Vice President of Product at Mastercard, and Kiran Kumar, Vice President of Product at Trulioo, recently discussed this evolving landscape. They highlighted the need for institutions to move beyond one-time KYC and build continuous, risk-based trust across all stages – onboarding, authentication, and payments. The core problem? Siloed data.
The Problem with Silos
“Gone are the days where trust was treated like a binary gate at the point of account opening. Trust was an event; now, it’s a profile,” Kumar explained. The challenge lies in the operational reality of fragmented infrastructure. Organizations often struggle to ingest multiple data signals, interpret them quickly, and govern subsequent actions effectively. Weiss emphasized that when data is siloed, organizations lose the ability to connect the dots – to recognize that “the person who came in door A is the same as the person who came in door B.”
This data fragmentation also limits the potential of artificial intelligence (AI). “We can’t take advantage of AI if we don’t have well-labeled data,” Weiss stated. Without a unified view of customer interactions, it’s tough to train AI models to accurately identify and prevent fraudulent activity. Kumar echoed this sentiment, noting that siloed systems prevent risk signals from “talking to each other,” hindering effective trust management. Plaid details how strong KYC practices are essential for mitigating these risks, including steep fines and loss of consumer trust.
The Rise of Synthetic Identities
The stakes are rising as the nature of fraud evolves. Synthetic identities – fabricated personas built from a mix of real and fake data – are becoming increasingly sophisticated, scalable, and democratized. Unlike traditional fraud, these identities are designed to pass initial checks and build credibility over time. Detecting them requires a shift from simple verification to “verification as interrogation,” a deeper, context-driven analysis that goes beyond surface-level checks.
Mastercard, processing billions of transactions, has a unique vantage point on these evolving patterns. Weiss explained the company’s goal is to identify key inputs from different lifecycle events and standardize their collection to provide greater insight and security across the entire ecosystem. This involves tracking how identities perform over time, identifying anomalies, and proactively mitigating risk.
Orchestration: Connecting the Dots
The operational challenge lies in orchestrating the vast array of signals needed to build a comprehensive identity profile. Behavioral patterns, device intelligence, transactional data, and digital footprints must be layered together to produce actionable insights. “It’s about orchestration of these signals and creating context to that entity,” Kumar said, emphasizing that the profile isn’t just about confirming *who* someone is, but whether they remain consistent over time. “Are they still who they said they are? Are they behaving consistently? Has their risk posture changed? And letting those signals dynamically update the confidence score.”
However, intelligence alone is insufficient without the infrastructure to act on it. Weiss pointed to a gap in many organizations: the inability to translate risk signals into real-time decisions. “Could you actually deliver a risk score there? Could you action on that?” he asked. “Often that is limited because the infrastructure isn’t quite extending to all of these lifecycle events.” Many enterprises still operate with identity verification, authentication, and fraud detection as separate workflows, each with its own data models and ownership.
Trust as a Product, Not Just a Control
Historically, identity and compliance were viewed primarily as defensive functions, necessary constraints on growth. The emerging perspective is more expansive. Trust is not only a control problem; it’s also a product problem, a customer-experience problem, and a revenue problem. Financial institutions are increasingly designing onboarding experiences that evolve alongside the user’s relationship with the brand.
“What is the consumer experience that you want to provide?” Weiss asked. “And how can you insert some of these interrogations not as friction, but as things that create sense?” This represents a shift in emphasis, from solely preventing fraud to recognizing and rewarding fine customers. Kumar succinctly summarized this evolution: “Trust is really relational. It’s not transactional.”
The London Stock Exchange Group highlights that KYC extends beyond legal requirements, serving as a cornerstone of trust in financial ecosystems. Institutions adopting stringent KYC procedures can foster secure relationships and mitigate risk.
Looking ahead, the ability to build and maintain trust will be a critical differentiator for financial institutions. Those who can effectively orchestrate data, leverage AI, and create seamless, risk-aware customer experiences will be best positioned to thrive in an increasingly complex and interconnected digital world.