## Resources and insights The latest industry news, interviews, technologies, and resources. .png)](/content/post/mula-x-passkeys-plus-thailand-digital-wallet/index.html) **Mula-X Chooses Passkeys+ to Replace SMS OTPs Across Its Digital Wallet Platform** Mula-X is rolling out Ideem's Passkeys+ across its Thailand digital wallet platform, replacing SMS-based OTPs with biometric, device-bound authentication built on the FIDO standard. Maranda Manning April 7, 2026 --- **Deepfake Voice Attacks Are Killing Call Center KBA — Push-to-Passkey Is the Fix** Pindrop's 2025 report documented a 1,300% surge in deepfake call attempts and $12.5B in 2024 contact-center losses, making KBA-based identity verification structurally indefensible. Push-to-passkey replaces it: the agent or IVR triggers a cryptographic signature on the customer's enrolled device, with optional transaction binding for high-value call-driven actions. Greg Storm June 2, 2026 --- **The True Cost of SMS OTP Telecom Bypass Attacks Hitting Banks in 2026** FBI 2024 data shows 982 SIM-swap complaints and $26M U.S. losses. The UK reported a 1,055% surge. A $33M arbitration against T-Mobile in March 2025 has priced the legal exposure. The 2026 economics of SMS OTP bypass attacks and what it will take to retire SMS from financial services authentication. Toby Rush June 2, 2026 --- **AiTM Phishing Attacks on Banks in 2026: How EvilProxy and Tycoon 2FA Bypass MFA** Adversary-in-the-Middle phishing kits are bypassing bank MFA in real time by relaying live traffic and stealing session cookies. What EvilProxy and Tycoon 2FA actually do, why traditional MFA falls down, and what stops them. Maranda Manning June 2, 2026 --- **Real-Time Payments Fraud: Authentication Requirements for UPI, PIX, and FedNow** Real-time payment systems settle transactions in seconds, eliminating fraud detection windows banks traditionally relied on. Mature instant payment markets show fraud rates 2-3x higher than traditional rails when authentication doesn't match settlement velocity. Maranda Manning May 6, 2026 --- **AI Account Takeover 2026: Deepfakes, AiTM, and Banking Fraud** Account takeover in 2026 looks different from 2022. AiTM phishing kits sell as a service, deepfake voice clones bypass call-center verification, and OTP and lone biometrics no longer hold up. Here is what works in 2026 and what does not. Greg Storm May 6, 2026 --- **The SMS OTP Exit Is Accelerating** The UAE mandated it. Regulators globally are signaling it. Telcos are moving away from it voluntarily. SMS OTP has become the weakest link in financial authentication — and the industry's pivot away from it is happening faster than most anticipated. Maranda Manning March 6, 2026 --- **48 Million Gmail Credentials Leaked: Why Your Password Policy is a Dead End** Toby Rush January 27, 2026 --- **Defeating AI-Powered Fraud: Why Cryptographic Authentication Is the Only Defense That Scales** AI has supercharged fraud. Voice cloning, deepfake KYC bypass, and LLM-crafted phishing all exploit one weakness: authentication built on shared secrets. Here's why cryptographic methods are the only ones AI can't beat. Maranda Manning February 10, 2026 --- **The Authentication Inflection Point: Why the ATO Arms Race Is One Banks Can Actually Win** The conventional wisdom says account takeover is an endless arms race. That's wrong. The asymmetry is finally shifting, and here's why. Greg Storm February 10, 2026 --- **Zero Trust in the Age of Generative AI** Maranda Manning November 26, 2025 --- **Real-Time Payment Scams: How Device Identity Can Stop Instant Fraud Before It Happens** Maranda Manning November 26, 2025 --- **Mule Accounts and Session Hijacks: The Next Fraud Challenge for Philippine Payments** Greg Storm November 26, 2025 --- **OTP Fatigue and AI-Driven Takeovers** Maranda Manning November 26, 2025 --- **First-Party Fraud in Digital Payments: How Social Sharing Fuels a New Wave of Abuse** Toby Rush November 26, 2025 --- **How Attackers Are Circumventing Old Multi-Factor Authentication Methods** Maranda Manning November 26, 2025 --- **OTP Fatigue and AI-Driven Takeovers** Toby Rush October 3, 2025 --- **APAC's Identity Fraud Surge** Greg Storm September 25, 2025 --- **Building AI Fraud-Resilient Authentication Strategies** Toby Rush September 25, 2025 --- **Surge in AI-Powered Crypto Scams** Maranda Manning September 16, 2025 --- **Advanced Fraud as a Service** Toby Rush August 25, 2025 --- **Password Complexity Doesn’t Matter**