The problem
The internet broke. Here are the receipts.
AI made it cheap to fake anyone. Identity gets re-verified at every onboarding, every product line, every vendor refresh, and it still does not answer the only question that matters: is a real, unique human actually here. Five markets, every number sourced.
Higher education and federal student aid
Federal aid is being disbursed to students who do not exist.
Fraud rings apply with stolen or synthetic identities, enrol, collect a disbursement and vanish before the first assignment is due. The Department of Education has been running real-time fraud detection on FAFSA since April 2026, which changed the problem rather than solving it: ED flags the applicant, and the institution has to resolve it. Resolving it means proving a real, unique human is actually there, which is not something a transcript or a document check can do.
$350M+
In federal student aid tied to identity fraud, the sourced figure for what has already gone out the door.
ABC News
$19,900
The federal aid eligibility a single ghost student can claim in one year. One undetected applicant, every year they are not caught.
Federal student aid eligibility, per applicant per year
5,700+
Title IV institutions in the United States, every one of them disbursing federal aid and every one of them carrying the same exposure.
IPEDS Fall 2025 data release memo, NCES · nces.ed.gov
April 2026
When ED’s real-time FAFSA fraud detection went live. H.R. 7892, the No Aid for Ghost Students Act, passed the House on June 10, 2026 and is pending in the Senate.
U.S. Department of Education · H.R. 7892, 119th Congress
Where Fuzzy fits
ED flags. The school resolves. Fuzzy is the resolution layer. An applicant proves once that they are a real, unique human, and the credential travels with them through enrolment, aid disbursement and every term after, so the school is not re-running an identity check it was never equipped to run. Barry University has been doing this in production since July 2026. And because access to education is the thing at stake, Fuzzy asks every school to commit that no student is ever blocked for not completing a check. Anyone who cannot finish it routes to an in-person or video alternative instead.
Enterprise hiring and remote workforce
The hiring funnel is now the attack surface.
State-sponsored actors, primarily from the DPRK, have industrialised employment fraud against US companies. Video interviews, background checks and document review are all defeated by generative AI and stolen identities. KnowBe4 was fooled after four rounds of interviews and verified references.
220%
year over year growth in North Korean IT worker infiltrations, with over 320 companies hit in 12 months.
CrowdStrike 2025 Threat Hunting Report
Hundreds
of Fortune 500 organisations have unknowingly hired DPRK IT workers, Mandiant said at RSAC 2025, with nearly every CISO admitting at least one.
CyberScoop 2025
$800M
generated by the DPRK IT worker scheme in 2024 alone. The November 2025 DOJ action yielded 4 guilty pleas and $15M+ in civil forfeitures across 136+ victim companies.
US Treasury, DOJ
1,000 to 10,000
fake employees are estimated to be embedded at companies globally, with a single operative often holding six to seven simultaneous jobs.
Fortune 2025
Where Fuzzy fits
Before the first interview, every candidate presents a Fuzzy credential proving they are a unique, real human with a verified government-issued ID and a live biometric match. Stolen identities, AI-altered photos and synthetic personas fail at the gate. The same credential carries forward to laptop provisioning, access grants and periodic re-credentialing.
Consumer and retail banking
The bank’s hardest job is the first 30 seconds and the next 30 years.
Banks know who their customer was at onboarding. They are increasingly unsure who is logging in today. Re-running KYC at every product line burns customer trust, and generative AI made synthetic identities trivially cheap at scale.
$3.3B
US lender exposure to suspected synthetic identities at year-end 2024, an all-time high.
TransUnion H1 2025 State of Omnichannel Fraud Report
23%
of surveyed institutions were hit by account takeover, a 7 point year over year jump.
Federal Reserve 2026 Risk Officer Report, Q4 2025 survey of 400+ risk professionals
75%
of surveyed financial institutions reported debit card fraud attempts in 2025, accounting for 40% of total payments fraud losses.
Federal Reserve 2026
8,600
FDIC-insured banks and federally insured credit unions in the US, the credit unions alone serving 144.7M members.
FDIC Q4 2025, NCUA Q4 2025
Where Fuzzy fits
A high assurance human credential at account opening replaces patchwork KYC and stops synthetic identity at the door. Re-present the credential at the high risk moments: wire initiation, large transfer, password reset, beneficiary add. No dragging the customer through another full KYC, and one verification reused across checking, credit card, auto loan, mortgage and wealth.
Global payments
Payment rails were built for a world where you knew your counterparty.
Synthetic vendors, rerouted invoices and impersonated executives get cheaper to manufacture every quarter. Issuers, acquirers, processors and corporates keep re-running KYC at every onboarding. Counterparties pay in friction. Institutions pay in chargebacks, write-offs and brand damage.
$3.046B
in reported US business email compromise losses in 2025, the second highest cybercrime category behind investment fraud.
FBI Internet Crime Complaint Center, 2025 Annual Report
86%
of those funds moved by wire or ACH, landing inside live treasury workflows. The average incident exceeded $122,000.
FBI IC3 2025
6.37M
small employer businesses in the US, every one of them a target running wire and ACH.
US Small Business Administration Office of Advocacy 2025
Where Fuzzy fits
A counterparty verified for one payment relationship presents the same credential to the next, with the issuing institution’s signal intact. The counterparty produces a live Fuzzy credential before a payment instruction is honoured. It works across ACH, wire, card-not-present, real-time rails and cross-border corridors.
Wealth management and institutional securities
Wealth runs on relationship trust, and generative AI is dismantling it in real time.
Firms verify at onboarding, then trust voice, video and email across decades of relationship moments worth seven, eight and nine figures. The whole stack assumes the person on the other end is who they say they are. That assumption is now the soft target.
$2.95B
in FTC-reported losses from imposter and impersonation scams, the most-reported consumer fraud category in 2024.
FTC 2024, via Morgan Stanley
$25M
lost in a single deepfake CFO video call, when employees were tricked into wiring funds to a fraudster impersonating their CFO.
HBKS Wealth Advisors 2026
147,000+
elder financial fraud victims in 2024, the wealth segment’s core demographic, at an average loss of approximately $83,000 each.
FTC 2024, via Morgan Stanley
168%
year over year spike in detected money laundering accounts at US financial institutions in 2025, with impersonation scams now one of the two most common scam types nationally.
BioCatch 2025
Where Fuzzy fits
A high assurance credential at the start of every wealth relationship, re-presented at the moments that move money or change instructions: wire requests, beneficiary changes, address updates, large withdrawals, trusted contact designations. Clients can also verify that the person on the call is the actual adviser at the actual firm, which shuts down brand impersonation at the point of contact.
One credential, and it travels.
The same proof works at enrolment, at hire, at account opening and at the wire. That is the whole idea, and it is the reason verifying once is worth more than verifying often.