Identity verification has long relied on the assumption that a person can be distinguished from an impostor through evidence of who they are. But synthetic identities, deepfakes and increasingly sophisticated fraud techniques are putting that assumption under pressure.