For decades, the systems that governments, banks, universities, and public institutions built to verify who someone is rested on a single foundational assumption that personal information, documents, and physical characteristics were difficult to convincingly fake. A Social Security number combined with a date of birth and a driver's license was, for most practical purposes, enough to establish identity.
That assumption has now been broken. The US recorded its highest number of data breaches in 2025 since tracking began, identity theft reports to the Federal Trade Commission rose nearly 20% year over year, and global fraud losses now exceed $534 billion annually. Generative AI, the same technology powering productivity tools and creative applications across the economy, has become a force multiplier for those seeking to deceive digital systems at scale. The speed, sophistication, and accessibility of these tools mean that the problem is no longer confined to the margins of financial crime. It has moved to the centre of a broader question about whether the digital infrastructure modern states depend on to function is as reliable as they have assumed.