In an exclusive interview, iProov Chief Technology Officer Dominic Forrest shed light on the evolving role of biometric authentication, the rising risks posed by deepfakes, and iProov’s vision for digital identity in the Philippines. Known for its advanced facial biometric technology, iProov focuses on building a secure, cloud-based digital identity system that verifies “Are you really you?” to address the needs of a digital-first world.
Forrest explained the vulnerabilities inherent in device-based biometric security methods, like fingerprint and facial recognition on smartphones, which are susceptible to spoofing by images, videos, and increasingly, AI-generated deepfakes. To counter this, iProov’s cloud-based biometric authentication system emphasizes “liveness detection” to accurately differentiate between genuine individuals and fraudulent attempts, even those created by sophisticated cybercriminals.
“Attackers are well-organized, well-funded, and highly skilled. If they intend to target a bank in the Philippines, they likely won’t start with a direct attack on that bank. Instead, they’ll investigate who provides the biometric authentication services — perhaps for ear biometrics, for instance — and then test their methods on other clients of that provider. To avoid detection, they may first attack customers in South America, then North America, Europe, and Australasia. Once they’re confident their method works, they’ll focus on the primary target. We observe these attack groups operating worldwide, closely tracking their attempts to breach our systems and those of our clients. Often, attackers try to blend in with routine transactions to evade detection, making it challenging to identify malicious activity,” Forrest highlighted. He noted that iProov tackles these threats with a multi-faceted security approach that includes:
- Cloud-based protection – Preventing attackers from accessing offline versions of their software, making unauthorized testing and manipulation harder.
- Global threat monitoring – Tracking cyberattack patterns worldwide to proactively identify and mitigate potential risks.
- Proactive threat research – Utilizing a “red team” that simulates attacks to find and fix vulnerabilities before criminals can exploit them.
- Threat intelligence – Engaging with forums where attackers exchange information to stay ahead of new tactics.
The iProov CTO also emphasized the importance of accessibility in biometric technology. iProov’s solutions are the only facial biometric tools certified to WCAG 2.2 AA standards, ensuring usability for those with visual, cognitive, and other accessibility needs. This inclusive approach is essential to their goal of creating digital identity solutions that work effectively on low-cost devices with minimal connectivity requirements — key factors for promoting financial inclusion in the Philippines.
According to Forrest, trusted digital identity systems hold substantial economic promise for the Philippines, potentially boosting GDP, as World Bank studies suggest. He shared that iProov is in talks with financial institutions, government entities, and private organizations across the Philippines to support the development of secure digital identity solutions tailored to local needs.
“We would be absolutely delighted to be part of solutions that may be rolled out,” Forrest remarked, expressing hope that the Philippines could replicate the success of other countries, such as the UK, US, Australia, and Singapore, which have all implemented robust digital identity programs.