The Identity Review

Nametag's expanded ServiceNow integration verifies the human behind an Interaction, preventing impersonation and social engineering attempts immediately at first contact.

Microsoft Entra is retiring security questions for self-service password reset (SSPR). What you choose as a replacement will determine your organization’s security posture for years to come.

Workforce identity risk touches IT, Security, HR, and Finance simultaneously, but rarely has a single owner. Here's how the cost distributes, why it's a common pattern, and what organizations are starting to do about it.

Recruiters are responding to AI-driven application volume in three ways, manual review, AI screening, and outbound sourcing. None of them answers the question that matters most. Here's what HR leaders are starting to recognize.

Standard account recovery verifies access, not people. A recent report details how Storm-2949 exploits this gap through self-service account recovery (SSPR) flows.

Your recovery queue carries costs that never appear in a ticket price. Here's where they're hiding.

Nametag Recruit gives HR teams clear, defensible proof that candidates are real people and the same people with Workday and Greenhouse integrations.

ServiceNow Knowledge 2026 conference put AI trust at the center of every keynote. We explore the identity question that didn't fully get answered and what it means for your helpdesk.

A passkey is only as trustworthy as the person who enrolled it. Learn how to gate passkey enrollment in Microsoft Entra ID with biometric identity verification using Nametag as an External Authentication Method.

Higher education has a data problem, and it runs deeper than recent headlines suggest. Student and faculty identity verification standards must adapt, or the breaches will keep coming.

Equifax caught a deepfake of their CEO. Most companies won't. Here's why detection alone isn't enough — and what it means to architect against impersonation.

AI agents can act faster than any human — and that's the problem. When something goes wrong, the question isn't whether an approval happened. It's whether the right person approved it.

AI is making impersonation cheap, scalable, and indistinguishable from the real thing. Most security stacks still verify accounts, not the humans behind them.

Identity security has long relied on three factors — something you know, have, and are. Learn why today’s threat landscape requires a fourth.

Unsurprisingly, AI was everywhere at RSA. But AI adoption is far outpacing security guardrails. The next phase of AI security will be defined by how well we can answer a simple question.

At RSAC 2026, Nametag CEO Aaron Painter sat down with Security Weekly to discuss a growing problem in enterprise security: organizations can no longer be certain who is actually behind a human or AI identity.

Nametag is transforming physical location into an auditable, first-tier security control––a huge step forward in the fight against employment fraud, including North Korean IT workers and laptop farms.

We’re thrilled to share that Nametag has secured two additional patents for foundational technologies which support keystone capabilities in workforce identity verification.

Headline stats from CrowdStrike’s 2026 Global Threat Report hide an important common thread: detection-based identity security is no longer sufficient.

In late 2025, the OPCOPRO "Truman Show" scam used familiar KYC workflows to establish trust before stealing funds and identity documents. This incident reveals a critical gap: identity verification designed for regulatory compliance falls apart when attackers leverage real peoples’ information and documents.

Nametag was built to strengthen digital trust. In this letter, we outline our deliberate and principled approach to privacy, consent, and lawful process.

Human judgment fails at detecting identity fraud under pressure. Learn why workforce identity verification replaces judgment calls with verified outcomes during hiring, recovery, and access decisions.

Nametag embeds workforce identity verification directly into ServiceNow ITSM, protecting service desk agents from AI-enhanced impersonation attacks.

Workforce impersonation thrives in the gaps between HR, IT, and security. When identity is assumed rather than continuously verified, enterprise risk compounds quietly over time.

Nametag’s Microsoft Marketplace listing helps Entra admins discover workforce identity verification solutions for Entra environments.

Learn how CrowdStrike’s 2025 Threat Hunting Report exposes identity-driven attacks and what organizations must do to secure workforce identity.

Ghosting in hiring isn’t about poor communication. It’s a signal of a deeper trust problem. Learn how identity verification helps HR and security teams close the gap between people, process, and digital risk.

AI hasn’t broken authentication—it’s bypassed it. As attackers impersonate trusted employees, enterprises must move beyond validating access to verifying the actual person behind every critical request.

Account recovery has become the top target for attackers. As AI makes impersonation easy, weak “self-service” flows put enterprises at risk. Verified identity is now essential to secure resets and stop recovery-based breaches.

Okta admins can embed Nametag identity verification (IDV) into Okta authentication flows, enhancing account security with workforce-grade identity assurance and improving user experiences.

AI-driven impersonation is blurring the line between real and fake, from job candidates to helpdesk requests. Protecting the enterprise now requires HR, IT, and security to work together around verified human identity.

As Microsoft retires legacy MFA and password reset policies, enterprises face a new challenge: stronger logins but weaker recovery. See what the shift means and how to keep trust intact.

Yubico is integrating Nametag identity verification to reduce friction and enhance security during YubiKey onboarding and recovery.

Generative AI has made impersonation an enterprise-wide threat, demanding a new approach to trust and identity.

Nametag’s partnership with Cloudflare helps combat hiring fraud by protecting one of the most critical stages in onboarding: the moment a new employee connects their new device to enterprise networks.

This article offers a complete playbook for IT, cybersecurity, and HR leaders tasked with combating insider threats like North Korean IT workers and other forms of hiring fraud.

In 2026, injection attacks, deepfakes and agentic AI are eroding outdated identity security strategies. Zero Trust must now be based on verifying the human being behind every user account, risky activity, and AI agent action.

Impersonation is the fastest-growing enterprise threat in 2025, with scams up 148% year over year according to the Identity Theft Resource Center. High-profile AI-driven cases show how attackers bypass systems and exploit trust. The next imperative for security leaders is workforce identity verification.

Our takeaways from this year's conference, including how Nametag is enabling Okta's AI identity governance by adding 𝘃𝗲𝗿𝗶𝗳𝗶𝗲𝗱 𝗵𝘂𝗺𝗮𝗻 𝘀𝗶𝗴𝗻𝗮𝘁𝘂𝗿𝗲𝘀 𝘁𝗼 𝗔𝗜-𝗶𝗻𝗶𝘁𝗶𝗮𝘁𝗲𝗱 𝗮𝗰𝘁𝗶𝗼𝗻𝘀 through our new solution for Okta.

Today we're introducing Nametag Signa™ to prevent agentic AI breaches and AI misuse by verifying the human behind every AI action. Signa works with Okta to ensure every AI action carries an auditable record of verified human approval.

Analyst recognition of Nametag in 2025 includes being named a Rising Star, an Honorable Mention in the Magic Quadrant™ for Identity Verification, and being named in The Identity Verification Solutions Landscape.

Nametag received an Honorable Mention in the Gartner® Magic Quadrant™ for Identity Verification for the second time in a row, noted for our focus on workforce identity verification.

Nametag CEO Aaron Painter spoke to The Register about the new SaaS-like business model transforming cybercrime.

Beyond the booths and briefings, here’s what we learned from dozens of conversations with some of the world’s foremost security executives and practitioners at Black Hat USA 2025.

Enterprise Credential Custody enables organizations to deploy secure onboarding and self-service password/MFA resets without sharing your directory credentials.

Companies with custom or on-premises Identity & Access Management (IAM) implementations can now benefit from Deepfake Defense™ identity verification and account protection.

The U.S. Department of Education (DoE) is cracking down on student aid fraud by requiring identity verification of certain applicants. Here's what colleges and universities need to know.

Scattered Spider has shifted its focus to the aviation industry with social engineering attacks on IT helpdesk agents. Here’s what aviation IT and cybersecurity teams need to know about this new threat, including proven ways to counter it.

Helpdesk social engineering attacks trick agents into resetting passwords and MFA. Preventing helpdesk social engineering requires a multifaceted approach including education, process and identity verification technology.

Organizations using Nametag can now host personally identifiable information (PII) within their own environments, such as AWS S3 buckets and Azure Blob Storage, eliminating the need for Nametag to store any PII.

Scattered Spider is attacking American insurance companies using deepfake-enhanced social engineering of IT helpdesks. Here's what you need to know, including 5 effective mitigations you can deploy today.

Cisco Duo is a popular security-first Identity & Access Management (IAM) platform that offers a variety of multi-factor authentication (MFA) solutions. Here's how to reset Duo MFA using the default options provided by Cisco Duo, and a better way to do it with Nametag.

How to reset your Microsoft Entra ID password with default options, how to reset Entra ID multi-factor authentication (MFA), and how Nametag enhances Microsoft Entra ID to reduce costs and improve security.

How to reset an Okta password or Okta MFA with default options, and how to enable self-service Okta MFA and password resets with Nametag Autopilot to improve experiences, reduce costs, and boost security.

We've joined the world's preeminent association for Identity & Access Management (IAM) practitioners to support the dedicated people solving some of the most complex challenges in modern digital identity.

Thousands of companies breached. Hundreds of millions of dollars stolen. North Korea’s IT worker schemes are ramping up, and most companies are unprepared. Here’s what you need to know and how to fight back.

Companies adopting mandatory multi-factor authentication (MFA) must proactively address the inevitable surge in user lockouts. Self-service MFA reset can be the answer, but be careful about how you implement it.

Nametag’s Adaptive e-ID Verification™ feature combines trusted Aadhaar digital IDs with Deepfake Defense™ to stop fraudsters and reduce friction for people in India.

Beyond Identity and Nametag are combining phishing-resistant multi-factor authentication (MFA) with Deepfake Defense™ identity verification to protect both the credential and its lifecycle, from enrollment through recovery.

Key questions and critical factors to help you evaluate and select workforce identity verification solutions or KYC verification software that fit your organization's needs.

Bad actors use deepfake IDs and stolen identities to get hired into remote IT jobs. Secure onboarding with Nametag VerifiedHire™ stops imposters with Deepfake Defense™ identity verification through self-service workflows.

Domain takeover fraud (domain hijacking) is when a fraudster assumes control over a website domain. Nametag stops domain takeovers with easy-to-use helpdesk verification built on Deepfake Defense™.

Microsoft Entra admins can now let users receive a Temporary Access Pass (TAP) in a Nametag-protected environment, preventing user impersonation while eliminating helpdesk tickets.

Nametag is now available as a Multi-Factor Authentication (MFA) method for Okta. Organizations using Okta for identity management and Nametag for account protection can achieve a greater level of assurance by using Nametag as the second MFA factor at high-risk moments.

The holidays are a terrible time to mount a response to a ransomware attack—which is exactly why hackers love this time of year. A blizzard of cyberattacks is imminent, even as support and IT teams are under-staffed and stressed out.

Legendary security and cryptography expert brings invaluable expertise, saying “Nametag’s technology is already leaps ahead of legacy remote identity verification systems.”

Elevate Microsoft Entra account security by using Deepfake Defense™ identity verification as a workforce-grade External Authentication Method (EAM).

Mergers & Acquisitions (M&A) Integrations are a hectic time, and an opportunity for fraudsters. Nametag ensures that your new employees are really who they claim to be at transition or onboarding into your environment.

In Thanksgiving terms, a “turnkey” solution is like buying a pre-stuffed and pre-cooked turkey. In cybersecurity, a turnkey solution is ready to go out of the box, with no months of building your own interfaces or fiddling with integrations or last-minute troubleshooting while your users get increasingly irritable.

We’re thrilled to be included in the Identity Security category of the 2024 Gartner Emerging Tech: Techscape for Startups in Security Software report and mentioned in the inaugural 2024 Gartner Magic Quadrant for Identity Verification.

The U.S. Department of the Treasury’s @Financial Crimes Enforcement Network (FinCEN) recently warned that bad actors are weaponizing generative #AI to fool outdated customer identification, identity verification, and customer due diligence (CDD) systems.

Like a cyber vampire slipping through your network's front or back door, today’s hackers don’t force their way in — they rely on charm, a good cover story, and an open invitation.

Today at Oktane we unveiled Nametag Deepfake Defense™, our next-generation identity verification engine, and our expanded partnership with Okta, making Nametag even more accessible to Okta customers globally.

Nametag is a proud sponsor of Oktane 2024, the Okta identity Conference! Come see us at booth #EM1 from October 15 to 17 at Caesars Forum in Las Vegas.

Self-service password reset (SSPR) allows people to reset their own passwords for their online accounts. But most SSPR tools use outdated verification methods that are insecure and frustrating.

Writing on Forbes, Nametag CEO Aaron Painter argues that the current focus on detecting deepfakes is a losing battle: by the time you detect them, it's often too late. Instead, the real challenge lies in preventing deepfakes from being used in the first place.

Nametag customers can now export data to their preferred Security Information & Event Management (SIEM) tool, empowering security teams with new insights and workflow automations based on Nametag’s rich identity verification data.

How to unlock an Okta account via default methods and how to securely automate the process with self-service Okta account unlocks via Nametag Autopilot.

Today we’re thrilled to announce that Nametag is available in Tines, putting Nametag’s automated, ultra-secure identity verification into the hands of security and IT teams around the world.

How to reset your OneLogin password or OneLogin MFA with default options, and how to do it with Nametag Autopilot, the first complete solution for secure self-service account recovery.

A deepfake attack is when a bad actor uses AI-generated or manipulated images, video, or audio to scam an individual or fool an identity verification system. This article explains how deepfake attacks work; why most identity verification (IDV) products are vulnerable to deepfakes; and how Nametag prevents deepfake attacks.

Visual verification (often referred to as ‘visual identity verification’) is the process of performing a visual inspection of a person’s identity, to ensure that they are indeed who they claim to be, before granting access. Visual verification can improve security and reduce the risk of account takeovers that lead to data breaches and ransomware.

Today we’re thrilled to announce that Nametag has been issued a patent relating to account recovery that, together with our identity verification platform, solves a critical challenge of multi-factor authentication (MFA).

In a recent episode of the Lights On Data Show with George Firican, Nametag’s CEO, Aaron Painter, explained cost-effective strategies for stopping the use of AI-generated deepfakes to deceive and defraud.

The U.S. Department of Health is warning health providers against threat actors using sophisticated, coordinated social engineering attacks on hospital IT helpdesks. Nametag CEO Aaron Painter breaks down the Sector Alert, including specific thing to keep in mind when implementing their recommendations.

The U.S. Department of Health is warning health providers against threat actors using sophisticated, coordinated social engineering attacks on hospital IT helpdesks. Nametag CEO Aaron Painter breaks down the Sector Alert, including specific thing to keep in mind when implementing their recommendations.

The story of the $25 million Hong Kong deepfake attack. Threat actors using live AI-generated deepfake video tricked an employee into wiring away $25 million. Cybersecurity experts are sounding the alarm about deepfakes, but what can we learn from this story?

RSA Conference 2024 has come and gone, and it's time to reflect. Artificial intelligence in cybersecurity was a major focus this year, with AI the subject of keynotes by Cisco, Microsoft, and even the U.S. Department of Homeland Security, among others.

Self-service account recovery (SSAR) enables users to securely reset their passwords and MFA tokens entirely on their own. Here's how to enable it for Microsoft Entra ID, Okta, Cisco Duo, and OneLogin.

As MFA adoption grows, more users get locked out, resulting in a surge in support tickets, frustrated employees and customers, and a cybersecurity nightmare. Self-service account recovery bridges this gap.

A third-party provider to Cisco Duo, a popular MFA app, has been compromised. Here's what you need to know if you were affected, or if you're worried about the security of your Duo user accounts.

We’re thrilled to unveil Nametag Autopilot, the world’s first secure solution for self-service account recovery that's already revolutionizing IT helpdesk operations at innovators like HubSpot.

Bakkt, a leading cryptocurrency exchange, uses Nametag to verify crypto transfers, resulting in big savings and user experience gains while proactively safeguarding their customers against emerging threats like AI-generated deepfakes.

What keeps security veteran and visionary CISO Eric Richard up at night? In a recent video for Nametag, Eric talks deepfakes, helpdesk social engineering, and his experience implementing Nametag.

Digital injection attacks are an increasingly common and extremely dangerous threat vector. Most identity verification products are vulnerable. Here's what you need to know.

Nametag CEO Aaron Painter recently joined Brian Thomas to explain how when employees feel heard and respected, so do the company’s customers.

In a recent episode of Dark Rhiino Security Confidential, Nametag CEO Aaron Painter discussed his journey into the cybersecurity and Nametag's approach to ID verification.

Here's a simple explanation of NIST 800-207, which provides guidelines and recommendations for implementing aero Trust Architecture (ZTA) cybersecurity.

The holidays are a terrible time to mount a response to a ransomware attack—which is exactly why hackers love this time of year. Defend yourself with Nametag.

Okta is having a rough 2023. How did we get here, and what should Okta customers do protect themselves?