CLEAR Becomes TSA PreCheck Enrollment Provider, Expands Biometric Pods

Summary: CLEAR is now an authorized TSA PreCheck enrollment provider, rolling out biometric enrolment pods and deeper integration with TSA’s facial-ID checkpoints at U.S. airports.

CLEAR gained TSA approval to enroll travelers into PreCheck using its airport pods.

Biometric Credential Authentication Technology units with facial matching continue expanding at TSA checkpoints.

Move tightens the link between commercial identity services and federal aviation security flows.

CLEAR is extending its footprint in U.S. aviation security after being authorized to enroll passengers in TSA PreCheck through its airport kiosks. The pods capture identity data and biometrics, feeding enrollment into TSA’s risk-based screening program.

TSA is simultaneously widening deployment of facial-matching Credential Authentication Technology units at checkpoints, reducing reliance on boarding passes and increasing touchless identity checks. Together, the moves deepen biometric dependencies in airport flows and raise questions about data governance and traveler choice.


FBI Seeks Next-Gen Biometric Algorithms for NGI Upgrade

Summary: An FBI RFI calls for vendors to provide next-generation fingerprint, face, iris, and tattoo algorithms to modernize the Next Generation Identification (NGI) system.

Request spans tenprint, latent, face, iris, and tattoo matching for large-scale identification workloads.

Vendors are expected to participate in NIST testing and supply performance data.

Signals continued NGI modernization and potential procurement roadmap.

The FBI issued a new request for information seeking next-generation biometric matching algorithms to upgrade the NGI platform. The RFI covers tenprint and latent fingerprints, face, iris, and tattoo recognition, emphasizing scalability and validated performance.

Vendors are asked to align with NIST evaluation regimes and provide metrics suited to federal identification workloads, signaling a procurement track for refreshed multimodal capabilities inside NGI.


Indonesia Launches Walk-Through Biometric Border ‘Seamless Corridors’

Summary: Jakarta and Bali airports now let eligible travelers clear border control while walking through facial-recognition corridors paired with e-passport checks.

Walk-through lanes perform facial recognition and e-passport verification without stopping at a booth.

Initial rollout targets Indonesian citizens and pre-vetted travelers, with expansion planned.

Program aligns with broader seamless travel initiatives like IATA One ID.

Indonesia’s immigration service introduced “Seamless Corridor” lanes at Soekarno-Hatta (Jakarta) and Ngurah Rai (Bali), letting pre-approved passengers clear border checks while walking. Cameras perform facial matching against e-passport data and watchlists, aiming to lift throughput and cut queues.

Officials say the system will expand beyond the initial traveler cohorts after validation, positioning the corridors as part of global seamless travel efforts and raising governance questions around accuracy, retention, and vendor access.


Oracle Identity Manager Zero-Day Actively Exploited (CVE-2025-61757)

Summary: A pre-authentication flaw in Oracle Identity Manager is being exploited for remote code execution, threatening downstream access governance across enterprises.

Bug allows unauthenticated REST requests to invoke a Groovy script endpoint, leading to RCE.

CVE-2025-61757 was patched in October 2025, but many deployments remain exposed.

Compromise of identity governance tier can cascade to connected enterprise apps.

Oracle Identity Manager installations are under active attack via CVE-2025-61757, a pre-auth flaw that lets remote actors trigger Groovy execution through a mis-filtered REST endpoint. Successful exploitation yields code execution on the identity tier that provisions access to downstream systems.

Oracle issued a fix in the October 2025 Critical Patch Update, but lagging patch adoption leaves many enterprises exposed. Security teams are urged to patch immediately and hunt for abuse across connected applications.


UK Companies House to Begin Mandatory Identity Checks for Directors and PSCs

Summary: Companies House will require identity verification for company directors and persons with significant control (PSCs), with checks beginning November 18, 2025, as part of ECCTA reforms.

Mandatory ID checks for directors and PSCs from Nov 18, 2025

Part of Economic Crime and Corporate Transparency Act measures

Expected to use GOV.UK One Login for verification

The introduction of mandatory checks is intended to deter fraud and improve data integrity in the UK company register while aligning with broader government digital identity initiatives.


DCSA ‘Identity Exchange’ Targets Verified Business Digital Identity in Container Shipping

Summary: The Digital Container Shipping Association introduced an ‘Identity Exchange’ to share verified business identity data across the shipping ecosystem, aiming to streamline trust and reduce fraud.

Sector initiative for verified business identity

Supports cross‑party interoperability in shipping

Business‑to‑business credential sharing can reduce onboarding friction and fraud, especially when based on interoperable verifiable credential profiles.


Gentex Acquires BioConnect to Form New ‘Security & Access Control’ Division

Summary: Gentex acquired BioConnect and established a dedicated Security & Access Control division, signaling continued consolidation around biometric access and identity‑centric physical security.

Acquisition creates new access‑control division

Expands portfolio into identity‑centric access

Biometric access control vendors continue consolidating as enterprises favor unified identity stacks across physical and logical domains.


India Operationalizes Digital Personal Data Protection Act with ‘SARAL’ Rules

Summary: India finalized ‘SARAL’ rules to operationalize the DPDP Act, clarifying obligations on consent, processing, and redress that affect digital identity onboarding and verification workflows.

Rules complete the DPDP Act’s operational framework

Impacts consent and retention in ID flows

Raises compliance stakes for IDV providers

Clear privacy rules influence how digital ID systems capture and retain attributes, driving changes to consent UX, audit logging, and data minimization.


Somalia’s E‑Visa Platform Hit by Cyber Incident, Exposing Traveller Data

Summary: Somalia acknowledged a cyber incident affecting its e‑Visa platform that exposed traveler information, prompting remediation steps and scrutiny of e‑government security controls.

Exposure involved traveller data on e‑Visa system

Authorities confirmed incident and launched fixes

Highlights security debt in border‑ID digitization

Digitized border systems concentrate sensitive data; robust access controls, auditability, and incident response are essential to mitigate risk.


Sumitomo Mitsui Trust Bank Moves Mobile Customers to FIDO Cloud Authentication with OneSpan

Summary: Sumitomo Mitsui Trust Bank is migrating mobile users to phishing‑resistant, FIDO‑based cloud authentication with OneSpan, replacing passwords with passkeys built on WebAuthn/FIDO2.

Bank‑scale rollout of passkeys for mobile customers

Cloud authentication built on WebAuthn/FIDO2

Targets stronger security and simpler sign‑in

FIDO passkeys replace shared secrets with device‑bound cryptographic keys, reducing credential phishing and reuse while keeping the login experience simple for mobile users.


CLEAR Highlights Q3 Growth and eGate Expansion

Summary: CLEAR reported continued revenue growth alongside new airport partnerships and expanded eGate deployments, signaling steady scaling of face‑based traveler processing.

Additional eGates and lanes at major airports

Face‑based identity checks continue to expand in travel

Focus on throughput and passenger experience

CLEAR’s quarterly update emphasized growth in airport deployments and eGate coverage, reflecting ongoing momentum for face‑based identity checks in travel. The company points to improved throughput and user experience as drivers for adoption.

Face recognition at the edge of border and travel flows is becoming table‑stakes, with operators extending deployments to more terminals and partners.


HUB Cyber Security Introduces HUB Token for SSI on Trvsthub

Summary: HUB Cyber Security unveiled the HUB Token, a software credential designed for self‑sovereign identity workflows on Trvsthub, enabling selective disclosure and standards‑based verifiable credentials.

Targets SSI/VC use cases with selective disclosure

Positions Trvsthub as an issuance and verification hub

Aims to streamline cross‑border compliance and onboarding

HUB Cyber Security announced the HUB Token for the Trvsthub ecosystem, bringing standards‑aligned verifiable credentials and selective disclosure to digital identity workflows. The token is positioned for compliance‑sensitive onboarding and cross‑border use cases where cryptographic proofs reduce data exposure.

The effort underscores a broader push toward portable credentials that organizations can verify instantly—without collecting more data than necessary.


MoneyGram Taps Oscilar’s Cognitive Identity Intelligence

Summary: MoneyGram selected Oscilar’s risk and identity engine to strengthen fraud detection and onboarding decisions, incorporating behavioral signals and ML‑driven orchestration across the customer journey.

Combines behavioral signals with identity and risk data

Supports KYC/AML decisioning and step‑up flows

Designed to reduce false positives while catching fraud

MoneyGram is adopting Oscilar’s Cognitive Identity Intelligence to enhance real‑time risk decisions during onboarding and transactions. The approach fuses behavioral telemetry with identity and device data to improve precision, triggering step‑up checks only when risk rises.

For global money movement, this kind of orchestration aims to preserve user experience while tightening anti‑fraud controls.


Secured Signing Adds Reality Defender ‘Realify’ Deepfake Checks for RON

Summary: Secured Signing partnered with Reality Defender to offer ‘Realify,’ a deepfake detection add‑on that strengthens liveness and fraud controls in Remote Online Notarization workflows.

Deepfake and spoof detection integrated into RON sessions

Complements selfie match and liveness checks

Aims to reduce synthetic‑ID and impersonation risk

Secured Signing introduced ‘Realify,’ an integration of Reality Defender’s deepfake detection that runs alongside existing identity checks in Remote Online Notarization (RON). By flagging manipulated media and suspicious capture conditions, the add‑on provides an extra assurance layer for high‑trust signatures.

Vendors across identity workflows are incorporating PAD and deepfake defenses as synthetic media risks rise.


UK One Login Explores Fraud & Contact Validation Providers (RFI)

Summary: The UK’s Government Digital Service issued an information request to source fraud and contact validation capabilities for One Login, seeking signals across email, phone and device to prevent misuse.

Focus on contact and fraud signals to harden One Login

Targets improved onboarding assurance and account integrity

Early market engagement ahead of formal procurement

GDS is assessing providers that can supply fraud and contact validation signals to strengthen One Login. The goal is to raise assurance during onboarding and sign‑in without adding excessive friction, using layered signals like email, phone and device risk.

The request signals continued expansion of One Login’s capabilities as the service scales across agencies.


DHS Finalizes Nationwide Biometric Exit Rule

Summary: Final rule removes ‘pilot’ limits and authorizes facial image collection for departing non‑citizens at all ports of exit.

Effective December 26, 2025; comments on process due November 26, 2025

Expands CBP authority from limited pilots to all airports, land and sea ports

Builds on Simplified Arrival; 178M travelers processed via face match in 2024

The U.S. Department of Homeland Security published its final rule establishing a permanent biometric entry–exit framework. The text explicitly removes the prior “pilot program” limitation for exit checks, authorizing facial image capture for departing non‑citizens at airports, land borders, and seaports.

The rule codifies what CBP has already deployed for entry and opens the door to broad expansion at exit, with the agency estimating a three‑to‑five‑year build‑out to reach full coverage. CBP is soliciting targeted public comments on the specific collection process and cost–benefit assumptions even as the final rule moves forward. citeturn2view0


Ring to Add ‘Familiar Faces’ Facial Recognition

Summary: Amazon’s Ring will enable on‑device facial recognition for doorbells and cameras, arriving in December with opt‑in controls.

Feature is opt‑in and processed on device, per Ring

Launch slated for December with phased rollout

Marks major consumer‑market shift toward face unlock/alerts at the edge

Ring announced “Familiar Faces,” bringing facial recognition to select doorbells and cameras. According to the company, matching happens on the device, with users able to opt in and manage face profiles. The feature is scheduled to arrive in December with a staged availability across models and regions.

While phones have normalized local face unlock, always‑on home cameras using facial recognition have been slower to reach mass adoption. Ring’s move signals a broader mainstreaming of edge‑based face recognition beyond mobile devices. citeturn2open3


USCIS Sets $85 Biometric Services Fee

Summary: New USCIS fee structure establishes a standard $85 biometric services charge across affected immigration forms.

Fee applies where biometrics are required; part of broader USCIS fee update

Aligns processing costs for background checks and identity capture

USCIS finalized a standardized $85 biometric services fee applicable to petitions and applications that require identity capture and checks. The move folds disparate charges into a single line item tied to biometrics collection, clarifying costs for applicants and sponsors. citeturn2open4


Germany Moves Government Services to Passkeys

Summary: Germany announced a program to replace passwords for government services with passkeys, aligning with WebAuthn standards to improve security and usability.

Government accounts to support passwordless login

Built on WebAuthn/FIDO2 platform authenticators

Part of a broader digital identity modernization agenda

Passkeys bind accounts to device-based cryptographic keys, reducing credential phishing and reuse while keeping login flows simple for end users.


Australia Registers New eSafety Industry Codes With Age-Assurance Provisions

Summary: Australia registered expanded eSafety industry codes that include stronger age‑assurance expectations for online services, formalizing obligations to limit minors’ exposure to harmful content.

Codes registered by the eSafety Commissioner on Sep 9, 2025

Codifies age‑assurance across covered online services

Implementation details to vary by risk and service type

Age‑assurance techniques range from document, biometric, and signal‑based checks to privacy‑preserving attestations; suitability depends on risk, accuracy, and proportionality.


Hopae Connect Becomes EU‑Registered eIDAS 2.0 Intermediary

Summary: Hopae Connect launched as one of the first private‑sector intermediaries registered under eIDAS 2.0 to support routing and interoperability for EUDI Wallet deployments.

Registered intermediary to bridge issuers, wallets, verifiers

Supports EUDI Wallet rollout across EU markets

Positions private sector roles in the eIDAS 2.0 ecosystem

Intermediaries can provide trust, routing, and policy enforcement services that simplify cross‑border credential use while meeting regulatory requirements.


Kenya Reinstates Biometric Identity for Public Healthcare Access

Summary: Kenya dropped one-time passwords and reinstated biometric identity checks for access to public healthcare services, citing fraud risks and the need for higher assurance.

OTP-only access replaced by biometric verification

Authorities cited fraud and impersonation risks

Re-introduces face and fingerprint checks at point of service

Higher-assurance identity checks at the point of service can reduce impersonation in healthcare systems, though they require inclusive enrollment and fallback options to handle failures and edge cases.


U.S. and Chile Deepen Biometric Border Cooperation Through BITMAP

Summary: The U.S. and Chile have signed an agreement to expand participation in the Biometric Identification Transnational Migration Alert Program (BITMAP), increasing biometric data sharing for border and migration risk screening.

BITMAP enables collection and sharing of biometric and biographic data on high-risk travelers and migration cases.

The new agreement formalizes Chile’s cooperation with U.S. agencies on biometric screening and watchlist checks.

Program reflects a broader trend toward cross-border biometric information exchange for migration control.

The BITMAP agreement between the United States and Chile expands biometric data sharing to support border and migration risk assessments, including fingerprint and face matching against U.S. systems. Chilean authorities can submit biometric records collected at borders or during investigations for checks against U.S. holdings.

By deepening cooperation under BITMAP, both countries aim to identify high-risk travelers, disrupt transnational crime, and strengthen the integrity of their border management processes using shared biometric intelligence.


Sumsub Integrates With Solana for Reusable Digital ID

Summary: Sumsub announced an integration with the Solana ecosystem to enable reusable digital identity, allowing users to re-present verified credentials across supported services.

Reusable credentials can be re-presented within Solana-integrated apps

Aims to reduce repeated KYC while preserving assurance levels

Ties Web3 flows to established digital identity verification

Reusable digital identity lets a previously verified user present the same credential for subsequent checks. The Solana integration connects credential presentation with on-chain services, while the underlying verification remains off-chain.


W3C VC 2.0 Incorporates TruAge Contributions for Age Verification

Summary: The W3C Verifiable Credentials 2.0 effort incorporated age‑verification contributions from the TruAge initiative, supporting privacy‑preserving proof of age.

VC 2.0 adds patterns for age attestations

Enables selective disclosure of age without full identity

Supports reusable credentials across services

Age proofs built on VCs can minimize data exposure by revealing only what’s necessary (e.g., over‑18) rather than full DOB or identity details.


OpenID Foundation to Demo Next‑Gen Digital ID Interoperability

Summary: The OpenID Foundation announced demos of next‑generation digital ID technologies with major partners, highlighting interoperability across credential issuance and wallets.

Focus on OpenID specifications for credential flows

Ecosystem demos with multiple industry partners

Supports emerging EUDI wallet implementations

Interoperability testing across wallet, issuer, and verifier components is essential for portable credentials to work reliably across jurisdictions and vendors.


China Bans Mandatory Facial Recognition for Routine Business ID Checks

Summary: China has issued new rules prohibiting companies from forcing customers to use facial recognition for everyday identity verification, narrowing acceptable use to specific security and compliance scenarios.

Businesses can no longer make facial recognition the only option for routine customer authentication.

Permitted uses are limited to defined high-security or public safety contexts under data protection rules.

Policy responds to overuse of biometric data in retail, property access, and online services.

Chinese regulators have moved to curb the routine use of facial recognition in consumer services, barring companies from making face scans a mandatory condition for basic identity checks. Instead, organizations must offer non-biometric alternatives for standard customer onboarding and access.

The rules still allow facial recognition in tightly scoped contexts—such as critical infrastructure, public safety, or specialized security zones—but emphasize minimization and proportionality in biometric data collection.


Pakistan Launches All-in-One Digital ID Kit With Multimodal Biometrics

Summary: Pakistan has introduced a portable digital ID kit that combines fingerprint, face, and iris capture with backend verification, enabling field enrollment and authentication for its national identity system.

Kit integrates multimodal biometric capture with secure connectivity to Pakistan’s national ID backend.

Designed for mobile use in field enrollment and verification scenarios, including remote communities.

Supports a broader push to expand inclusion and tighten the assurance level of national ID credentials.

Pakistan’s new all-in-one digital ID kit combines fingerprint, face, and iris capture hardware with software that connects to the national identity database for verification. Authorities can enroll or verify citizens in the field without permanent infrastructure, extending coverage to underserved areas.

The deployment underscores how multimodal biometrics and portable form factors are becoming a standard pattern for strengthening national ID programs while supporting inclusion and fraud reduction goals.


Kurdistan Region Rolls Out Digital ID–Based Payroll for Public Employees

Summary: The Kurdistan Regional Government (KRG) is shifting public-sector salary disbursement to a digital identity–enabled payroll platform, linking verified ID records to bank accounts and mobile channels.

Payroll reform ties civil servant salary payments to verified digital identity records.

System is designed to reduce ghost employees and duplicate salary payments.

Initiative is part of a broader KRG digital transformation agenda spanning MyAccount and e-government services.

The Kurdistan Regional Government is implementing a digital identity–enabled payroll system that links civil servants’ verified identity records to bank and mobile payment channels. The move is aimed at reducing fraud and ghost employees while creating a more auditable, transparent salary process.

The payroll upgrade sits within a wider digital transformation push that includes the MyAccount platform and other e-government services, positioning digital identity as the backbone for how residents authenticate and receive state benefits.