Onfido and Trulioo shape US e-KYC market as AI deepfake detection gains traction

A US electronic know-your-customer market trends report confirms AI-powered fraud detection and deepfake resistance have moved from experimental to operational priority. Onfido and Trulioo lead the vendor landscape as regulatory pressure from FinCEN, the OCC and BSA enforcement actions force financial institutions to upgrade biometric verification infrastructure. The report documents liveness detection as table stakes for remote onboarding.

• Regulator's line: FinCEN and OCC guidance on BSA/PATRIOT Act compliance now explicitly addresses synthetic identity and presentation attack risks in biometric systems.
• The number: Onfido and Trulioo command the largest market share among major US institutions deploying e-KYC at scale across retail and commercial banking segments.
• What changed: Liveness detection moved from optional enhancement to mandatory control for remote onboarding in competitive compliance frameworks across the banking sector.
• For compliance teams: Audit your current e-KYC vendor's deepfake detection thresholds and false-positive rates against your institution's risk appetite and customer friction tolerances.

The market shift reflects regulatory reality. FinCEN's recent guidance on synthetic identity exploitation and OCC enforcement actions have made presentation attack mitigation a compliance expectation, not innovation. Most major institutions now treat AI-driven fraud detection capability as mandatory due diligence on vendors. Review your e-KYC SLA with your current provider this quarter. Establish clear metrics on deepfake detection performance and liveness test false-positive rates. Document your risk decision on any gaps between vendor capability and your regulatory assessment.

The US Office of Foreign Assets Control imposed a $7.5 million civil penalty on State Street on 1 May 2026 for violations of Russian sanctions regulations. The fine reflects breaches of OFAC's Specially Designated Nationals List and Russian sanctions programme requirements across the bank's operations.

• Regulator's line: OFAC enforcement action signals continued focus on sanctions compliance gaps among large custodians handling cross-border payments and asset servicing.
• The number: $7.5 million penalty places this violation mid-range for financial institutions, smaller than recent mega-bank settlements but material enough to signal serious deficiency.
• For compliance teams: Review your OFAC list matching protocols, especially refresh cadence and coverage of beneficiary ownership layers in custody operations.

State Street's penalty underscores that custodian banks face heightened scrutiny on sanctions screening given their role in processing trillions in daily transactions. Compliance teams should audit whether OFAC list updates propagate in real time across all payment rails and whether screening captures indirect ownership structures. Expect regulators to continue targeting operational gaps rather than policy intent.

The US Treasury's OFAC added Iranian nationals Nasser Ghasemi Rad and Masoud Mohammad Rezaei to the Specially Designated Nationals List on May 1, 2026 for Iran-related sanctions violations. The designations trigger secondary sanctions exposure for entities conducting business with either individual. OFAC simultaneously issued General License W, permitting wind-down transactions for the designated persons through a defined compliance framework.

• The designations: Both individuals added to SDN List for Iran sanctions breaches; secondary sanctions now apply to any entity engaging with them.
• General License W scope: Wind-down authorization allows existing contractual obligations to be completed under OFAC supervision within specified parameters.
• For compliance teams: Immediate SDN list screening updates required; review existing Iran-related counterparty exposure and document wind-down transaction justification.

The General License W signals OFAC's continued use of graduated enforcement rather than blanket prohibitions. Compliance teams should verify counterparty Iran connections immediately and distinguish between new transactions (blocked) and authorized wind-down activity. Document all OFAC license reliance carefully. Secondary sanctions exposure means even indirect dealings carry regulatory risk.

Real-time transaction monitoring has moved from best practice to regulatory requirement across digital banking and fintech platforms worldwide. Regulators now expect instant detection and reporting of suspicious activity, with compliance gaps resulting in enforcement action. The shift reflects growing volumes of digital payments and higher risk of money laundering across borderless platforms.

• What changed: Digital banks and fintechs must deploy real-time monitoring systems to flag suspicious transactions instantly, not batch-process alerts at end-of-day.
• Supporting measures: Enhanced CDD and eKYC using biometric verification and government database checks are now standard; cryptocurrency exchanges face mandatory KYC and blockchain tracking requirements.
• For compliance teams: Audit your transaction monitoring thresholds, API latency, and alert triage procedures to confirm you meet sub-minute detection windows.

This is not a suggestion. Regulators including the FATF have signalled that real-time capability is now expected, especially for cross-border and crypto flows. Legacy batch systems create regulatory exposure. Test your infrastructure against live transaction volumes and confirm your third-party vendors meet latency requirements. Document your architecture for examinations.