Independent testing by BixeLab achieved CEN/TS 18099 Substantial-level validation with zero successful attacks across 900 attempts and a false rejection rate of just 0.67%.

COURBEVOIE, France, Oct. 5, 2026 /PRNewswire/ — IDEMIA Public Security, the leading provider of secure and trusted biometric-based solutions, today announced that its WebCapture SDK has successfully completed an independent assessment designed to test its ability to detect and block increasingly sophisticated biometric fraud attacks, including deepfakes and AI-generated identities.

The assessment, conducted by Bixelab, an independent testing firm, evaluated whether attackers could trick the system by injecting fake biometric data into the identity verification process. Across 900 attack attempts, none successfully bypassed the system. These tests included 10 different injection attack instrument species across multiple attack methods, including deepfakes, face swaps, replay attacks, morphing, and avatar reenactment attacks. BixeLab concluded that, within the defined evaluation scope, WebCapture SDK v3.38 satisfied the requirements of CEN/TS 18099:2024 aligned Level 2 (Substantial) assessment for the tested injection attack instruments and methods.

“As deepfakes and injection attacks become more sophisticated and accessible, independent testing is increasingly important to ensure biometric systems can withstand real-world threats,” said Ted Dunstone, CEO of BixeLab. “Testing against recognized standards such as CEN/TS 18099 provides organizations with objective evidence that these protections work in practice.”

In addition to blocking fraudulent attempts, the technology maintained strong performance for genuine users. During the bona fide baseline testing, only two classification errors were observed across 300 legitimate user transactions, resulting in a bona fide classification error rate (BPCER) of 0.67%.

“As AI-driven fraud continues to evolve, organizations need confidence that their identity verification systems can keep pace,” said Virginie Flam, SVP and Global Head of Smart Biometrics, IDEMIA Public Security. “This independent validation demonstrates our commitment to helping organizations protect against emerging threats while maintaining a simple experience for legitimate users.”

The evaluation was performed in alignment with CEN/TS 18099 framework at the substantial assurance level, a leading industry standard for assessing resistance to biometric injection attacks. The results demonstrated strong protection against a wide range of known attack methods.

As fraudsters increasingly use AI-generated content to impersonate real people, organizations are looking for stronger defenses against deepfakes and other synthetic identity attacks. IDEMIA Public Security’s identity verification technology combines biometric liveness detection with advanced fraud prevention capabilities to help ensure that the person completing an identity verification process is physically present and authentic. The independent evaluation provides evidence of the solution’s resistance to the biometric injection attack methods and instruments tested.

By combining trusted biometrics, advanced liveness detection, and fraud prevention capabilities, IDEMIA Public Security helps organizations verify identities with confidence while delivering secure, seamless digital experiences. To learn more about how IDEMIA Public Security is helping organizations build trust in an increasingly digital world, click here.

About IDEMIA Group
IDEMIA Group is a global technology leader with more than 10,700 employees worldwide. Its two market-leading divisions deliver mission-critical solutions that simplify and secure interactions in the physical and digital realms:

• IDEMIA Public Security (IPS) is a trusted provider of government-grade and secure biometric-based solutions for 600 government, state and federal agencies, as well as organizations requiring identity and access solutions across physical and digital environments. With decades of experience in biometric technologies, IPS enables safer, frictionless and fairer ways to secure travel, access, and citizen protection. Separately, two other government-related activities are conducted by the IDEMIA Group: civilian identity issuance in North America and road safety.
• IDEMIA Secure Transactions (IST) is the leading technology provider making it safer and easier to pay and connect. With unmatched expertise in cryptography and credential issuance, IST is trusted by over 2000 financial institutions, mobile operators, automotive manufacturers, and IoT providers worldwide. Every day, IST secures billions of essential transactions, ensuring the highest levels of data protection and convenience.

For more information, please visit www.idemia.com.

Media contact:
Genevieve de Vera
IDEMIA Public Security
(978) 808-7047
genevieve.devera@ps-idemia.com

View original content to download multimedia:https://www.prnewswire.com/news-releases/idemia-public-securitys-webcapture-sdk-earns-independent-validation-against-deepfake-and-biometric-fraud-attacks-302898441.html

SOURCE IDEMIA