Is voice biometrics in banking secure enough?

Gur Geva, CEO iiDENTIFii

In an era where digital interactions reign supreme, calling a bank provides a seemingly human touch for consumers wary of the digital landscape. However, with the surge in banking fraud and the advancements in generative AI voice cloning tools, questions arise about the safety of voice banking.

Rising Threat of Impersonation Attacks

Impersonation attacks, a prevalent method employed by fraudsters, have seen a staggering 264% increase in the first five months of 2022 compared to the previous year, according to the Southern African Fraud Prevention Service (SAFPS). Criminals exploit personal details or AI-generated voices to gain unauthorized access to consumer bank accounts.

Gur Geva, founder of iiDENTIfii, attributes the rise in impersonation attacks to the affordability and accessibility of technology. Criminals can now easily assume aspects of an individual’s identity.

Vulnerability of Voice Impersonation

Voice recognition systems in banking, relying on unique phrases or passwords, face vulnerability to synthetic AI-generated voices. MIT and Google highlight that generative AI voice cloning tools can create nearly indistinguishable replicas with just a minute of voice data, often sourced from social media.

Despite these challenges, voice recognition in banking offers accessibility and efficiency. It caters to diverse consumers, streamlining tasks via phone lines and expediting voiceprint identification.

The Appeal and Risks of Voice Recognition in Banking

While historically viewed as an intimate and reliable part of identity, voice biometrics now faces threats from voice cloning. Financial institutions must remain vigilant to prevent fraud in voice-based interfaces, where scammers could potentially clone voices and conduct transactions on behalf of consumers.

However, the article suggests that doing away with voice authentication altogether may not be necessary. Many banks are investing in multi-layered biometric authentication protocols, combining voice recognition with additional remote digital verification methods for enhanced security.

Mitigating Risks through Multimodal Identity Verification

Geva emphasizes the importance of adopting multimodal identity verification, especially for sensitive transactions. Despite the growing sophistication of identity theft and AI-enabled cybercrime, Geva believes that face biometrics remains a robust form of identification. Face matching against a government-issued ID document provides an additional layer of trust compared to voice biometrics.

In conclusion, while voice cloning poses a potential threat, banks equipped with up-to-date, enterprise-grade biometric authentication processes can mitigate risks and protect consumers effectively. Geva reassures that, at iiDENTIfii, face biometrics remains a trusted and strong form of biometrics, favored by leading South African banks.