Blog Categories | Ideem
Resources and insights
The latest industry news, interviews, technologies, and resources.
.png)](/content/post/mula-x-passkeys-plus-thailand-digital-wallet/index.html)
Mula-X Chooses Passkeys+ to Replace SMS OTPs Across Its Digital Wallet Platform
Mula-X is rolling out Ideem's Passkeys+ across its Thailand digital wallet platform, replacing SMS-based OTPs with biometric, device-bound authentication built on the FIDO standard.
Maranda Manning
April 7, 2026
Deepfake Voice Attacks Are Killing Call Center KBA — Push-to-Passkey Is the Fix
Pindrop's 2025 report documented a 1,300% surge in deepfake call attempts and $12.5B in 2024 contact-center losses, making KBA-based identity verification structurally indefensible. Push-to-passkey replaces it: the agent or IVR triggers a cryptographic signature on the customer's enrolled device, with optional transaction binding for high-value call-driven actions.
Greg Storm
June 2, 2026
The True Cost of SMS OTP Telecom Bypass Attacks Hitting Banks in 2026
FBI 2024 data shows 982 SIM-swap complaints and $26M U.S. losses. The UK reported a 1,055% surge. A $33M arbitration against T-Mobile in March 2025 has priced the legal exposure. The 2026 economics of SMS OTP bypass attacks and what it will take to retire SMS from financial services authentication.
Toby Rush
June 2, 2026
AiTM Phishing Attacks on Banks in 2026: How EvilProxy and Tycoon 2FA Bypass MFA
Adversary-in-the-Middle phishing kits are bypassing bank MFA in real time by relaying live traffic and stealing session cookies. What EvilProxy and Tycoon 2FA actually do, why traditional MFA falls down, and what stops them.
Maranda Manning
June 2, 2026
Real-Time Payments Fraud: Authentication Requirements for UPI, PIX, and FedNow
Real-time payment systems settle transactions in seconds, eliminating fraud detection windows banks traditionally relied on. Mature instant payment markets show fraud rates 2-3x higher than traditional rails when authentication doesn't match settlement velocity.
Maranda Manning
May 6, 2026
AI Account Takeover 2026: Deepfakes, AiTM, and Banking Fraud
Account takeover in 2026 looks different from 2022. AiTM phishing kits sell as a service, deepfake voice clones bypass call-center verification, and OTP and lone biometrics no longer hold up. Here is what works in 2026 and what does not.
Greg Storm
May 6, 2026
The SMS OTP Exit Is Accelerating
The UAE mandated it. Regulators globally are signaling it. Telcos are moving away from it voluntarily. SMS OTP has become the weakest link in financial authentication — and the industry's pivot away from it is happening faster than most anticipated.
Maranda Manning
March 6, 2026
48 Million Gmail Credentials Leaked: Why Your Password Policy is a Dead End
Toby Rush
January 27, 2026
Defeating AI-Powered Fraud: Why Cryptographic Authentication Is the Only Defense That Scales
AI has supercharged fraud. Voice cloning, deepfake KYC bypass, and LLM-crafted phishing all exploit one weakness: authentication built on shared secrets. Here's why cryptographic methods are the only ones AI can't beat.
Maranda Manning
February 10, 2026
The Authentication Inflection Point: Why the ATO Arms Race Is One Banks Can Actually Win
The conventional wisdom says account takeover is an endless arms race. That's wrong. The asymmetry is finally shifting, and here's why.
Greg Storm
February 10, 2026
Zero Trust in the Age of Generative AI
Maranda Manning
November 26, 2025
Real-Time Payment Scams: How Device Identity Can Stop Instant Fraud Before It Happens
Maranda Manning
November 26, 2025
Mule Accounts and Session Hijacks: The Next Fraud Challenge for Philippine Payments
Greg Storm
November 26, 2025
OTP Fatigue and AI-Driven Takeovers
Maranda Manning
November 26, 2025
First-Party Fraud in Digital Payments: How Social Sharing Fuels a New Wave of Abuse
Toby Rush
November 26, 2025
How Attackers Are Circumventing Old Multi-Factor Authentication Methods
Maranda Manning
November 26, 2025
OTP Fatigue and AI-Driven Takeovers
Toby Rush
October 3, 2025
APAC's Identity Fraud Surge
Greg Storm
September 25, 2025
Building AI Fraud-Resilient Authentication Strategies
Toby Rush
September 25, 2025
Surge in AI-Powered Crypto Scams
Maranda Manning
September 16, 2025
Advanced Fraud as a Service
Toby Rush
August 25, 2025
Password Complexity Doesn’t Matter