Redefining Trust: Entrust's Gambit in the AI Identity War

MINNEAPOLIS, MN – June 24, 2026

The digital landscape is no longer just a battlefield; it's an arena of sophisticated deception, supercharged by artificial intelligence. In January 2024, a finance worker at a multinational firm was duped into transferring over $25 million after attending a video call with what he believed were his senior executives. In reality, he was interacting with AI-generated deepfakes. This incident is not an outlier; it's a stark harbinger of a new era in cybercrime, one where the very concept of identity is under siege. In response to this escalating threat, global security leader Entrust has unveiled a new biometric authentication solution, signaling a strategic shift from merely guarding digital doors to verifying the living, breathing human attempting to open them.

The Soaring Cost of Digital Deception

The urgency behind such innovations is underscored by staggering financial and security metrics. The threat is no longer abstract. According to recent industry analysis, global businesses are hemorrhaging an average of 7.7% of their annual revenue to fraud. For a significant portion of these losses, the culprit is account takeover (ATO), which in the U.S. alone accounts for 31% of reported fraud incidents. The consumer cost of ATO fraud soared to $15.6 billion in 2024, a 26% increase in just one year.

Fueling this explosion is the democratization of generative AI, which has lowered the barrier to entry for creating convincing deepfakes and executing complex scams. Research indicates that one in five biometric fraud attempts now involves an AI-generated deepfake, with voice deepfake incidents skyrocketing by 680% year-over-year. Attackers are moving past simple password theft, which still accounts for a majority of breaches, and are now targeting the high-risk moments in a user's digital journey: account recovery, device changes, and large financial transactions. It is in these moments of vulnerability that a simple password or one-time code is no longer sufficient.

Beyond the Password: Verifying the Human

Entrust's new strategy directly confronts this reality. The company is championing an identity-centric approach that pivots away from the traditional focus on authentication at login. “Too many organizations are treating authentication as a login problem, but attackers have already moved beyond access,” said Mike Baxter, Chief Technology & Product Officer at Entrust. “Preventing account takeover in the age of AI requires confirming the person behind every interaction.”

This philosophy is embodied in the new Entrust Biometric Authentication solution, which combines biometric verification with adaptive, risk-based authentication. The system is designed to apply the right level of identity assurance at the right moment. It offers a tiered suite of tools to do so:

• Biometric Passkey: Leveraging the FIDO standard, this method binds authentication to a verified human identity on a personal device, creating a phishing-resistant alternative to passwords for high-risk moments.

• Face Authentication: Designed for everyday verification and step-up challenges, this replaces insecure one-time passcodes with a quick biometric check, enhanced with liveness detection to thwart basic spoofing attempts.

• Motion Authentication: For the highest-assurance use cases, this method employs advanced liveness detection that is conformant with ISO 30107-3 PAD (Presentation Attack Detection) Level 1 & 2. This certification, independently tested by labs like iBeta Quality Assurance, confirms the system's ability to resist sophisticated presentation attacks, including video replays and deepfakes, by analyzing subtle user movements.

By anchoring every interaction to a trusted identity established at enrollment, the solution aims to create a consistent, high-confidence security posture across the entire user lifecycle.

A Unified Front in a Fragmented War

The introduction of this solution highlights a critical challenge for many organizations: a fragmented security stack. Businesses often rely on disparate point solutions for onboarding, authentication, and fraud prevention. This creates security gaps and operational inefficiencies that sophisticated attackers are adept at exploiting. Entrust's competitive play is to offer a unified platform that extends a single, verified identity from the moment of enrollment through every subsequent access point and interaction.

This strategy places the company in a crowded and dynamic market, competing with IAM giants like Okta and Microsoft, as well as specialized identity verification providers such as Socure and Onfido. The key differentiator Entrust is banking on is its deep-rooted expertise in identity-centric security, moving beyond simple access management to offer a holistic assurance framework. By focusing on the 'real human' and providing certified defenses against deepfakes and injection attacks, the company is positioning itself not just as a technology vendor, but as a partner in maintaining digital trust.

The Trust Paradox: Convenience vs. Control

For businesses and their customers, the promise of this new technology is a double-edged sword. On one side, it offers a path to a more secure and frictionless digital world. Eliminating passwords reduces user frustration, minimizes support calls for account lockouts, and can streamline transactions. Users may feel more secure knowing their accounts are protected by advanced biometrics rather than a fallible string of characters.

On the other side lie significant challenges and profound ethical questions. For organizations, implementation involves more than just a software license; it requires deep integration with legacy systems, careful data management, and robust change management to ensure user adoption. More importantly, the collection and storage of biometric data—the very essence of our unique identity—raises the privacy stakes to an unprecedented level. Unlike a password, a compromised biometric template is compromised forever. Concerns about potential for surveillance, algorithmic bias in recognition systems, and the need for explicit user consent under regulations like GDPR in Europe and state-level biometric privacy acts in the U.S. are paramount.

The path forward requires a delicate balance. As AI continues to evolve both as a tool for innovation and a weapon for deception, businesses are forced to make critical decisions about the technologies they deploy and the trust they place in them. Solutions like Entrust's represent a crucial step in the technological arms race, but they also serve as a reminder that in the quest for security, the protection of individual privacy and identity must remain the ultimate goal.