HID Global Fraud Prevention Offering

Fraud is a growing, costly problem across industries, with global cybercrime costs projected to reach $10.5 trillion by 2025. While banking, finance, payments, and retail remain frequent targets, fraudsters increasingly focus on sectors such as insurance, gaming, telecommunications, healthcare, cryptocurrency exchanges, travel and hospitality, and real estate, partly because many online services now represent “monetary equivalents” and because financial services have improved defenses. Common fraud patterns include Account Takeover (ATO) driven by breached credentials and credential stuffing, malware-assisted takeover (man-in-the-middle/browser) and Remote Access Trojans, New Account Fraud (NAF) via synthetic identities assembled from stolen fragments of PII, and social engineering voice scams (Authorized Push Payment fraud) that manipulate victims into initiating fraudulent transfers.

A key mitigation approach is risk-based multi-factor authentication (MFA), enhanced by deeper transaction-context insight because even legitimate users under social engineering or compromised by malware may still pass MFA checks. Fraud Reduction Intelligence Platforms (FRIPs) strengthen risk-based MFA and transaction decisions by providing identity proofing, credential intelligence, device intelligence, user behavioral analysis, behavioral/passive biometrics, and bot detection/management. FRIPs typically integrate via APIs: customers send transaction context, the FRIP enriches and scores risk in real time based on customer policies, and the customer’s transaction logic acts on the score and insights.

HID Global positions its fraud prevention offering around these FRIP capabilities, combining identity proofing, device and credential intelligence, behavioral biometrics, UBA, bot detection, and secure transaction signing. Its services can be SaaS or on-premises, use a microservices architecture, support major clouds, and carry certifications such as ISO 27001 and SOC 2 Type 2 (SaaS). Strengths include robust identity proofing, trusted credential issuance for government agencies, intuitive analyst tooling, and secure SDK-based telemetry; challenges include limited advanced bot management, lack of external threat intel feeds, and no ITSM connectors.

• Total related cybercrime costs are estimated to reach $10.5 trillion globally by 2025.
• Account Takeover fraud often uses breached passwords and credential stuffing to execute unauthorized transactions.
• New Account Fraud is also referred to as Synthetic Fraud or Account Opening Fraud.
• Social engineering voice scams are also known as Authorized Push Payment fraud.
• FRIP solutions generally provide six major functions: identity proofing/vetting, credential intelligence, device intelligence, user behavioral analysis, behavioral/passive biometrics, and bot detection & management.
• HID Global is a subsidiary of ASSA ABLOY Group AB of Stockholm.
• HID Global’s U.S. headquarters is located in Austin, Texas.
• HID Global’s SaaS version is ISO 27001 and SSAE 18 SOC 2 Type 2 accredited.
• HID Global’s risk score output ranges from 0–1000 with four major action recommendations.
• Behavioral biometric retention is designed to consider the last ten sessions per user.

• “Fraud is a major cost to businesses worldwide.”
• “Fraud perpetrators also continually diversify their Tactics, Techniques, and Procedures (TTPs).”
• “One of the chief mitigation strategies against these types of fraud is risk-based multi-factor authentication (MFA).”
• “Thus, it is important to be able to have deeper insights into the context of each transaction.”
• “Risk-based MFA solutions operate optimally when integrated with or informed by Fraud Reduction Intelligence Platforms (FRIPs).”
• “Identity proofing is a collection of processes that aim to ensure that the person attempting to create a digital account is the person they are purporting to be.”
• “The HID Global Risk Management Solution addresses many of the most prevalent fraud types: ATO, synthetic fraud, banking overlays and other malware designed to obtain user credentials, and SIM swapping.”
• “Behavioral biometric data retention is designed to look at the last ten sessions per user, uniquely taking into consideration that human behavior changes over time.”
• “Customers construct policies using easy-to-follow flow chart representation within the policy authoring interface.”
• “No personal information is included in the push notification, which enables organizations to be compliant with data protection regulations around the world.”