South African businesses are facing growing pressure to strengthen their digital identity security as artificial intelligence (AI) makes it easier for criminals to impersonate customers, employees and business representatives.
New research released on 6 November 2026 by World Wide Worx, in partnership with digital identity verification company iiDENTIFii, highlights a widening gap between the growing sophistication of identity-related cyber threats and organisations’ ability to detect and prevent them.
The iiDENTIFii South African Identity Index 2026, based on a survey of 200 enterprises conducted by World Wide Worx, found that fewer than one in four South African businesses consider their identity verification systems highly effective at preventing fraud.
The findings raise important questions about how organisations are preparing for a digital environment in which criminals can use AI-generated images, cloned voices and sophisticated phishing techniques to deceive individuals and bypass traditional security measures.
AI-generated fraud becomes a growing business concern
According to the research, only 22.9% of participating organisations rated their identity verification processes as very effective in 2026. This represents a decline from 24.5% recorded in the previous 2024 study.
The research also found that 52.2% of businesses suspected or had directly observed attempts involving AI-generated phishing, voice impersonation or deepfakes.
Of those surveyed, 18.9% reported directly observing such incidents, while another 33.3% suspected that their organisations had experienced them.
The findings suggest that businesses are increasingly encountering threats that traditional identity verification systems may struggle to recognise.
Artificial intelligence has made it possible to create convincing digital representations of individuals, including fabricated images, manipulated videos and synthetic voices. Criminals can potentially use these technologies to impersonate legitimate customers or employees when requesting access to accounts, financial services or confidential information.
AI-driven fraud was identified as the leading emerging identity threat requiring preparation, with 76.6% of respondents highlighting it as a concern, compared with 59.2% in 2024.
Deepfakes and synthetic identities create new security challenges
One of the important developments highlighted in the Identity Index is the increasing concern surrounding synthetic identities.
These identities combine fabricated and genuine personal information to create profiles that can appear legitimate during digital onboarding and verification processes.
The research found that 66.2% of respondents identified synthetic identities as an emerging threat requiring preparation, compared with 42.8% in 2024.
Concern about deepfakes has also increased significantly. The proportion of businesses identifying deepfakes as a threat rose from 7.5% in 2024 to 21.9% in 2026.
These developments present challenges for organisations operating in industries where identity verification is central to business operations.
Financial institutions, insurance companies, telecommunications providers and online service platforms regularly rely on digital verification to confirm customer identities before granting access to accounts, processing transactions or approving applications.
As AI-generated impersonation becomes more convincing, organisations may need to reconsider whether their existing security procedures provide sufficient protection.
Smaller businesses face a significant protection gap
The research also highlights differences in identity security preparedness according to company size.
Among enterprises employing more than 1,000 people, 45.6% rated their identity verification processes as very effective.
However, the figure dropped to 17.1% among businesses employing between 201 and 500 people, and 17.8% among organisations with between 501 and 1,000 employees.
This suggests that smaller and medium-sized enterprises may face greater difficulties maintaining effective identity security systems.
Limited budgets, integration challenges and shortages of specialist cybersecurity skills can make it difficult for organisations to introduce advanced verification technologies.
For smaller businesses, the consequences of identity-related fraud can extend beyond immediate financial losses. A successful attack may also expose confidential information, disrupt operations and damage relationships with customers.
The findings highlight the importance of treating identity protection as a business priority rather than an IT issue that can be addressed only after an incident occurs.
Businesses plan to increase investment in identity verification
Despite the challenges, the research indicates that organisations are increasingly recognising the need to strengthen their security capabilities.
The proportion of businesses planning to increase investment in identity verification technology over the next 12 to 24 months rose from 34.8% in 2024 to 54.7% in 2026.
However, implementation remains a challenge.
Cost was identified as the most significant obstacle, cited by 53.7% of respondents. User acceptance followed at 47.3%, while 38.8% highlighted the complexity of integrating new verification technologies into existing business systems.
The findings indicate that organisations must balance stronger security requirements with affordability, customer convenience and operational efficiency.
One area requiring additional attention is biometric verification.
Only 27.9% of participating organisations reported updating or strengthening facial liveness detection or biometric matching controls to address AI-driven and deepfake fraud.
Liveness detection is designed to establish whether a real person is physically present during a biometric verification process, helping organisations identify attempts involving photographs, recordings or manipulated digital representations.
However, technology alone cannot eliminate every security risk. Organisations also need appropriate monitoring, testing procedures and incident response capabilities.
The importance of stronger identity governance
Another concern emerging from the research is the lack of formal preparedness when identity compromise occurs.
Only 22.9% of participating businesses reported having formalised and tested response procedures for biometric fraud or identity compromise.
A further 29.4% relied on informal processes, while 36.3% indicated that they had no defined procedures.
This highlights an important gap in organisational cybersecurity planning.
Businesses need to establish clear processes for identifying suspicious activity, responding to compromised accounts, protecting affected customers and investigating potential fraud incidents.
Regular security assessments can also help organisations understand whether their verification systems remain effective against changing attack techniques.
Industry collaboration is another area requiring improvement. Although 60.2% of respondents indicated that they wanted better cooperation to address identity fraud, only 14.4% reported frequent collaboration with industry groups, regulators or law enforcement.
Preparing South Africa’s digital economy for the next phase of AI
The findings of the South African Identity Index 2026 demonstrate that the growing adoption of artificial intelligence brings both opportunities and security challenges.
As businesses expand their use of digital services, automated customer onboarding and online transactions, reliable identity verification will become increasingly important.
For South African organisations, the challenge is no longer simply identifying whether someone has supplied the correct personal information. It is establishing confidence that the individual interacting with a digital service is genuinely who they claim to be.
The increase in AI-driven impersonation threats makes continuous verification, stronger biometric controls, employee awareness and tested incident response procedures important considerations for business leaders.
The research also highlights the need for organisations of different sizes to invest in security measures that reflect their operational risks and available resources.
As artificial intelligence continues to reshape the cybersecurity landscape, the ability to establish and maintain digital trust will become an important factor in protecting customers, business operations and the wider economy.
For South Africa’s technology industry, strengthening digital identity security will be essential to ensuring that innovation and digital transformation progress without undermining public confidence in online services.
Read more: https://www.worldwideworx.com/iidentifii-south-african-identity-index-2026/
