Coming soon
Veriff Identity Fraud Report 2027: The zombie identity economy
Built on Veriff data and our fraud experts’ investigations, the 2027 report exposes the lifecycle of “zombie identities”: real, verified credentials that are stolen, rented, and reused across platforms. Learn how to break the cycle and protect your business. Be the first to read it when it launches in November 2026.
Reserve my copy
What’s inside the Veriff Identity Fraud Report 2027?
A stolen identity is an event. A zombie identity is a lifecycle. The 2027 report maps exactly how real, verified credentials circulate through criminal ecosystems to bypass standard checks. Discover where these identities come from, the true cost of their reuse, and how your business can break the cycle.
-
Trace where fraud assets come from
See how criminals steal, coerce, or buy real identities before they reach your onboarding flow.
-
Map the zombie identity lifecycle
See how identities are aged, used, blocked, and reused to pass KYC checks.
-
Uncover the flaw in point-in-time verification
Learn why a single check isn’t enough to spot identities reused across platforms.
-
Protect your growth and bottom line
Discover strategies for adding checks across the customer lifecycle to stay ahead of fraud in 2027.
What is a zombie identity?
A zombie identity is a real, verified identity that keeps passing checks after its owner has lost control of it. It starts with a real person, real documents, and genuine verification. Then control changes hands through a data breach, coercion, or for cash. The identity keeps working because nothing about the documents is fake, so standard onboarding checks may not flag it.
The Veriff Identity Fraud Report 2027 follows this journey: where zombie identities come from, how they stay useful, and why they’re so hard to retire.
How does a blocked identity come back?
A blocked identity can return in two ways:
Resurrection. After being flagged, the identity goes quiet. Fraudsters wait for the cool-down period to end and its history to fade, then use it again when it looks dormant and low-risk.
Rental and fan-out. The same verified identity is shared across a fraud ring and used on several platforms, for example, a buy-now-pay-later app, neobank, and ride-hailing service within a short period.
Neither requires a new document. Both can go undetected when each platform can only see its own activity.
FAQs
What is a zombie identity?
A zombie identity is a real, verified identity that keeps passing verification after its owner has lost control of it. The documents and biometrics are genuine, which is why standard onboarding checks clear it. Control is lost in one of three ways: taken in a data breach, pressured out of someone, or rented and sold.
How is a zombie identity different from synthetic identity fraud?
A synthetic identity is assembled from invented or mixed details, with no single real person behind it. A zombie identity is entirely genuine. It belonged to a real person and passed real checks before it was stolen, sold or handed over. That history is what makes it hard to spot: the underlying data checks out.
Why does fraud come back after an account is blocked?
Blocking an account removes one instance of fraud, not the identity or the tools behind it. Those assets get resold and reused across unrelated platforms, and each platform sees the identity for the first time. Without visibility across a network, the same identity passes onboarding again and again.
What’s in the Veriff Identity Fraud Report 2027?
Where fraudulent identities come from, how they’re reused across platforms, what Veriff network data shows about the patterns behind them, and what fraud and risk teams can do in response. It also includes explicit predictions for 2027, each backed by data.
What data is the report based on?
Veriff’s own identity verification network. Findings come from real verification patterns rather than survey opinion, analyzed by Veriff’s fraud research team.
Is the report free?
Yes. The Veriff Identity Fraud Report 2027 is free. Sign up with a work email to get access.
When does the report come out?
November 2026, and everyone who signs up here gets it on launch day, before it’s published publicly.
Who should read it?
Fraud, risk, compliance, trust and safety, product and growth leaders in buy now pay later, lending, neobanks, mobility and ride-hailing, and marketplaces. It assumes identity checks are already in place and focuses on what happens after one passes.
Why does this report matter?
The next identity fraud challenge isn’t always a fake identity. It can be a genuine identity that has fallen out of trusted control. Once control changes hands, a verified identity can continue to pass checks and be reused across platforms, allowing fraud to persist beyond the account where it was first detected. For businesses, this creates more than a verification gap: it can translate into fraud losses, operational costs and a growing challenge to maintain trust over the identity lifecycle.