Strengthen Identity Controls as AI and Telco Fraud Rise

What happened

HID announced an Australian showcase featuring modular Signo readers, new Mercury S4 I/O modules, and cloud credential issuance alongside card printers. The lineup is designed to let organisations unify physical and digital credentials without full estate replacement, making phased migration operationally realistic. Watch vendor interoperability and whether procurement teams are asked to accept vendor‑managed licence models or narrow integration APIs

Why the category manager should care

Treat this as a practical supplier capability expansion that narrows technical excuses for not standardising credentials; require interoperability up front

Key facts

• Signo Décor reader range due to launch in Australia
• Mercury S4 I/O Modules (open‑architecture access control)
• FARGO HDP5000e card printer with FARGO Connect cloud issuance

What happened

Reporting highlights that AI agents and copilots are being embedded across enterprise workflows faster than central governance can track. The most important operational detail is that these agents often connect to HR, finance and customer systems with broad permissions, creating a shadow layer outside normal access controls. Procurement should treat AI‑connected integrations as a formal point of control and mandate observability or termination rights in supplier scopes

Why the category manager should care

Treat AI agent deployments as integration points requiring the same governance as any external connector or supplier integration

Key facts

• AI agents embedded by employees, developers and business units into workflows
• Connections reported into HR, finance and customer management systems
• Shadow AI layer operating outside traditional security controls

What happened

Vertech warns that AI makes phishing and scams harder to spot by producing highly plausible, context‑aware messages across email, SMS, voice and media. The key operational point is that traditional red flags like poor grammar are no longer reliable, so detection must shift toward provenance, sender verification and behavioural signals. Procurement should prioritise phishing simulation tools and vendor SLAs that cover synthetic‑media incident support

Why the category manager should care

Increase emphasis on provenance checks and supplier obligations to help validate and block synthetic‑media attacks

Key facts

• AI expands scam channels to text, audio, images and video
• Reported anecdote of a salesperson interacting extensively with a convincingly AI‑generated i

What happened

Truyu analysed nearly 25,000 identity checks and found a reproducible pattern where telco verification checks often precede broader unauthorised identity misuse. The operational detail to note is the measurable sequence and reuse behaviour that lets procurement treat telco checks as an upstream fraud signal. Buyers should consider telemetry and notification requirements from verification suppliers as part of fraud reduction sourcing criteria

Why the category manager should care

Treat telco verification steps as actionable fraud telemetry and require suppliers to provide alerts or data feeds where available

Key facts

• Analysis based on nearly 25,000 identity checks flagged through the app
• App activity covers identity checks responsible for approximately 63% of checks in Australia
• Pattern identified where telco checks often precede broader unauthorised checks