Willbrand, a product expert who has worked for multiple identity companies, started his story by saying that he uses Perplexity AI.
I realize that many of you just fell off your chairs in shock. Because the first rule of Generative AI is that you ALWAYS talk about ChatGPT. Well, there are other generative AI tools. Deal with it.
Anyway, Willbrand was prompting Perplexity about shoes, and awaiting the responses.
Which were unreadable.
“Every result forced inserted an Apple map with shoe stores onto the response page. It was 2/3rds the screen. Now as a text based app primarily this is super annoying because you can’t see … The …. Text.”
Monetization gone bad
Should we be surprised? No.
Now I don’t fault software vendors for trying to make money. I have no sympathy for those who complain that Threads should never ever have ads because Facebook makes a bajillion dollars. If Threads isn’t making money for Meta, then Meta will kill it.
Where I DO have a problem is when a software vendor’s monetization efforts infringe with my ability to use the software.
This applies to some smartphone games in which you play the game for 30 seconds before you’re locked in to watching 60 seconds of ads.
And this also applies to what I fear will be the future format for generative AI responses.
“The best way to overcome a marketing challenge is to do something, rather than surrendering to paralysis. But before you begin…what would you do for a Klondike bar?”
Sadly I don’t make any money off this.
Repurposing
And yes, this blog post was repurposed from something I wrote on the Bredemarket Technology Firm Services LinkedIn page. Now I just need an idea for a video…
You are the CMO, marketing leader, or other leader at an identity, biometric, or technology firm.
You’ve made the decision to work with Bredemarket to create your content, proposal, or analysis.
You’ve gone to the https://bredemarket.com/cpa/ page and scheduled a “Free 30 minute content needs assessment” with me on my Calendly calendar. We will talk via Google Meet.
You’ve answered the preliminary questions I asked in the meeting request, including:
Because I have talked about differentiation ad nauseum, I’m always looking for ways to see how identity/biometric and technology vendors have differentiated themselves. Yes, almost all of them overuse the word “trust,” but there is still some differentiation out there.
And I found a source that measured differentiation (or “unique positioning”) in various market segments. Using this source, I chose to concentrate on vendors who concentrate on identity verification (or “identity proofing & verification,” but close enough).
Before you read this, I want to caution you that this is NOT a thorough evaluation of The Prism Project deepfake and synthetic identity report. After some preliminaries, it focuses on one small portion of the report, concentrating on ONLY one “beam” (IDV) and ONLY one evaluation factor (differentiation).
Four facts about the report
First, the report is comprehensive. It’s not merely a list of ranked vendors, but also provides a, um, deep dive into deepfakes and synthetic identity. Even if you don’t care about the industry players, I encourage you to (a) download the report, and (b) read the 8 page section entitled “Crash Course: The Identity Arms Race.”
The crash course starts by describing digital identity and the role that biometrics plays in digital identity. It explains how banks, government agencies, and others perform identity verification; we’ll return to this later.
Then it moves on to the bad people who try to use “counterfeit identity elements” in place of “authentic identity elements.” The report discusses spoofs, presentation attacks, countermeasures such as multi-factor authentication, and…
Well, just download the report and read it yourself. If you want to understand deepfakes and synthetic identities, the “Crash Course” section will educate you quickly and thoroughly, as will the remainder of the report.
Synthetic Identity Fraud Attacks. Copyright 2025 The Prism Project.
Second, the report is comprehensive. Yeah, I just said that, but it’s also comprehensive in the number of organizations that it covers.
In a previous life I led a team that conducted competitive analysis on over 80 identity organizations.
I then subsequently encountered others who estimated that there are over 100 organizations.
This report evaluates over 200 organizations. In part this is because it includes evaluations of “relying parties” that are part of the ecosystem. (Examples include Mastercard, PayPal, and the Royal Bank of Canada who obviously don’t want to do business with deepfakes or synthetic identities.) Still, the report is amazing in its organizational coverage.
Third, the report is comprehensive. In a non-lunatic way, the report categorizes each organization into one or more “beams”:
The aforementioned relying parties
Core identity technology
Identity platforms
Integrators & solution providers
Passwordless authentication
Environmental risk signals
Infrastructure, community, culture
And last but first (for purposes of this post), identity proofing and verification.
Fourth, the report is comprehensive. Yes I’m repetitive, but each of the 200+ organizations are evaluated on a 0-6 scale based upon seven factors. In listed order, they are:
Growth & Resources
Market Presence
Proof Points
Unique Positioning, defined as “Unique Value Proposition (UVP) along with diferentiable technology and market innovation generally and within market sector.”
Business Model & Strategy
Biometrics and Document Authentication
Deepfakes & Synthetic Identity Leadership
In essence, the wealth of data makes this report look like a NIST report: there are so many individual “slices” of the prism that every one of the 200+ organizations can make a claim about how it was recognized by The Prism Project. And you’ve probably already seen some organizations make such claims, just like they do whenever a new NIST report comes out.
So let’s look at the tiny slice of the prism that is my, um, focus for this post.
Unique positioning in the IDV slice of the Prism
So, here’s the moment all of you have been waiting for. Which organizations are in the Biometric Digital Identity Deepfake and Synthetic Identity Prism?
Deepfake and Synthetic Identity Prism. Copyright 2025 The Prism Project.
Yeah, the text is small. Told you there were a lot of organizations.
For my purposes I’m going to concentrate on the “identity proofing and verification” beam in the lower left corner. But I’m going to dig deeper.
In the illustration above, organizations are nearer or farther from the center based upon their AVERAGE score for all 7 factors I listed previously. But because I want to concentrate on differentiation, I’m only going to look at the identity proofing and verification organizations with high scores (between 5 and the maximum of 6) for the “unique positioning” factor.
I’ll admit my methodology is somewhat arbitrary.
There’s probably no great, um, difference between an organization with a score of 4.9 and one with a score of 5. But you can safely state that an organization with a “unique positioning” score of 2 isn’t as differentiated from one with a score of 5.
And this may not matter. For example, iBeta (in the infrastructure – culture – community beam) has a unique positioning score of 2, because a lot of organizations do what iBeta does. But at the same time iBeta has a biometric commitment of 4.5. They don’t evaluate refrigerators.
So, here’s my list of identity proofing and verification organizations who scored between 5 and 6 for the unique positioning factor:
ID.me
iiDENTIFii
Socure
Using the report as my source, these three identity verification companies have offerings that differentiate themselves from others in the pack.
Although I’m sure the other identity verification vendors can be, um, trusted.
I spend a lot of time on LinkedIn and therefore endure the regular assault from the so-called LinkedIn “experts.”
You know them.
The people who get all bent out of shape over this character—because it’s certain proof that you use “ChatGPT” (because there is no other generative AI tool) because no human ever uses em dashes.
And then in the next breath the LinkedIn “experts” slam people who don’t use “ChatGPT” to increase productivity. For example, jobseekers should use “ChatGPT” to “beat the ATS,” automatically fine-tune their resumes for every individual application, and apply to thousands of positions.
Oh, but the LinkedIn “experts” say you shouldn’t spray and pray. Tap into the hidden job market via our members-only gated website.
But that’s not the worst thing they say.
Formulate Safe Generic Pablum
When they’re not commanding you to avoid the em dash, the LinkedIn “experts” remind us that LinkedIn is a professional network. And that our communications must be professional.
No cat pictures.
No “life sucks” posts.
Nothing that would cause anyone any offense.
The ideal personal communication is this: “I am thrilled and excited to announce my CJIS certification!”
The ideal business communication is this:
Yes, the “experts” wish that businesses said nothing at all. But if they do say something, a statement like this optimizes outcomes: “WidgetCorp is dedicated to bettering the technology ecosystem.”
Such a statement is especially effective if all your competitors are saying the same thing. This unity of messaging positions you as an industry leader.
Which enables you to…argh, I can’t do this any more. I am hating myself more and more with each word I type. Can I throw up now? This is emotionally painful.
Derek Hughes just sent me an email that describes this generic pablum. It read, in part:
“Everything reads like it was written by a robot on decaf.
“Same recycled tips. Same recycled tone. Somehow, it’s all… grey.”
Obliterate Safe Generic Pablum
If your company wants conversions—and I assume that you do—avoid the generic pablum and say something.
This will bring your hungry people (target audience) to you.
And for the prospects that despise humanness and glory in generic pablum…if their focus is elsewhere, your focus won’t impede. Let them roam in the distance.
If you are a jobseeker on LinkedIn, you have probably seen people claim to be recruiters from well-known companies, when in truth they are nothing of the kind.
Faking your employer has existed for a long time. Just ask the Delaware State Police, who for some reason isn’t keen on people who impersonate police officers.
“[A] 23-year-old man from Laurel, Delaware…reported that he had been driving eastbound on Nine Foot Road, east of Laurel Road, when a white Dodge Magnum with Arizona registration pulled behind him and activated flashing red and blue lights. As the victim began to pull over, the Dodge passed him and continued driving.”
Because Arizona police officers patrol Delaware all the time.
The 23 year old was rightfully concerned, called 911, reported the incident, and described the vehicle. But that wasn’t the end of it.
“Shortly after, the driver of the Dodge pulled up next to the victim and verbally confronted him. The victim did not engage, and the suspect eventually fled the scene.”
After an investigation, the Delaware State Police arrested Blayden Rose of Selbyville, Delaware, for impersonating a police officer.
The real Blayden Rose, courtesy the Delaware State Police. The police like to take pictures of special people.
Not sure if Rose can get off on a technicality (“I wasn’t claiming to be a cop, I was just doing a strobe show”), but it reminds us that we have to trust, but verify.
Normally these blog posts are addressed to Bredemarket’s PROSPECTS, the vendors who provide solutions that use biometrics or other technology. Such as identity proofing solutions.
But I’ve targeted this post for another audience, the organizations that BUY biometrics and technology solutions such as identity proofing solutions. Who knows? Perhaps they can use Bredemarket’s content-proposal-analysis services also. Later I will explain why you should use Bredemarket, and how you can use Bredemarket.
So if you are with an organization that SELLS identity proofing solutions, you can stop reading now. You don’t want to know what I am about to tell your prospects…or do you?
When you buy an identity proofing solution, you take on many responsibilities. While your vendor may be able to help, the ultimate responsibility remains with you.
Here are some questions you must answer:
What are your business goals for the project? Do you want to confirm 99.9% of all identities? Do you want to reduce fraudulent charges below $10 million? How will you measure this?
What are your technology goals for the project? What is your desired balance between false positives and false negatives? How will you measure this?
How will the project achieve legal compliance? What privacy requirements apply to your end users—even if they live outside your legal jurisdiction? Are you obtaining the required consents? Can you delete end user data upon request? Are you prepared if an Illinois lawyer sues you? Do you like prison food?
A new Government Accountability Office (GAO) audit found the Internal Revenue Service (IRS) has not exercised sufficient oversight of its digital identity-proofing program…
As many of you know, the IRS’ identity proofing vendor is ID.me. The GAO didn’t find any fault with ID.me. And frankly, it couldn’t…because according to the GAO, the IRS’ management of ID.me was found to be deficient.
“IRS was unable to show it had measurable goals and objectives for the program. IRS receives performance data from the vendor but did not show it independently identified outcomes it is seeking. IRS also has not shown documented procedures to routinely evaluate credential service providers’ performance. Without stronger performance reviews, IRS is hindered in its ability to take corrective actions as needed.
“ID.me acknowledges that its identity-proofing process involves the use of artificial intelligence (AI) technologies. However, IRS has not documented these uses in its AI inventory or taken steps to comply with its own AI oversight policies. Doing so would provide greater assurance that taxpayers’ rights are protected and that the technologies are accurate, reliable, effective, and transparent.”
You would think the IRS had a process for this…but apparently it doesn’t.
Dead on arrival (DOA).
But I’m not the IRS!
I’ll grant that you’re not the IRS. But is your identity proofing program management better…or worse?
Do you know what questions to ask?
Let Bredemarket ask you some questions. Perhaps these can help you create relevant external and internal content (I’ve created over 22 types of content), manage an RFP proposal process, or analyze your industry, company, or competitors.