Balancing Security and Inclusion in the UK’s Identity Journey

Medical records, tax filings, and benefits all depend on proving identity without slowing people down or shutting out legitimate users. That tension has led government bodies toward new partnerships, like the one between TransUnion with AU10TIX, that combines bureau data, biometric checks, and fraud-detection tools to strengthen both security and confidence.

“The typical journey is designed to help protect health data and other sensitive personal data,” said James Crawshaw, ID & Fraud Solutions Consultant at TransUnion (pictured). “Most organisations that we support use a combination of automated processes in line with GPG45 guidance to provide the relevant level of assurance and answer key questions: Does the person exist? Can you trust the person? Is the person who they say they are? Should you trust the information being provided?”

That journey usually starts with bureau checks and document scans, adds proof-of-address and liveness tests, and relies on fraud analytics behind the scenes to spot manipulated images or synthetic identities. This framework underpins almost every interaction, from signing up for NHS services to accessing tax portals.

The challenge is making systems tough on fraud without making life harder for legitimate users. “Accessibility and user experience are top of mind for government bodies when designing the ID verification journey,” Crawshaw explained.

TransUnion applies what it calls a “friction-right” approach: let people through quickly if the signals are clean, escalate only when risk indicators appear. “This cuts down on unnecessary friction and gets most people through in seconds.”

Digital by default, though, cannot mean digital only. Local government hubs remain in place for those who struggle online, ensuring accessibility stays part of the design. “Government bodies need to use the most secure methods without excluding those who require frontline services. To carry out this function, government bodies need to use best-in-class providers, reliable solutions, and innovative services,” Crawshaw said.

That’s where partnerships come in. TransUnion’s data intelligence, combined with AU10TIX’s forensic-level document and biometric checks, enables high-assurance verification that’s both streamlined and secure. “AU10TIX brings over 40 years of expertise originating in airport security and today processes millions of verifications monthly for brands like Payoneer, AliExpress, and TikTok. Their capabilities, paired with TransUnion’s data, provide a unique combination of trust and scale for UK government use cases,” Crawshaw added.

Where the UK stands

The UK is fortunate to have one of the world’s most established credit information markets which we can leverage for ID verification.

This robust data infrastructure in the credit information market in the UK means we can support people with almost instant online access to key services.  Other countries, such as our closest international neighbour France, take a different approach to credit information reporting meaning it is not sufficient for ID verification. However other countries have also advanced further in rolling out digital identity documents. Scandinavia, India, and the Philippines for example have long made digital IDs a mainstream part of daily life, while e-visas and e-driving licences are also now being phased in. “Where we could learn more is with digital ID issuance and verification,” said Crawshaw.

By leveraging its global presence and partners, TransUnion is ready to help the UK pivot quickly when the demand for digital ID verification scales.

“Working alongside AU10TIX, which already supports large-scale digital ID rollouts worldwide, we see clear opportunities to accelerate adoption and ensure these systems are both fraud-proof and accessible,” said Crawshaw.

What sectors can learn from each other

Finance and fintech have been quicker to adopt advanced ID verification driven by compliance and fraud costs. They use layered defences, behavioural analytics, and fast-moving AI models.

Healthcare and government, on the other hand, put accessibility first, often at the expense of speed or cohesion. The result is patchwork systems and heavy reliance on manual reviews, which Crawshaw calls the biggest source of risk: “Human error, inconsistent decisions, and long processing times all leave gaps.”

Cross-sector learning could raise the bar: public services can borrow layered defences from finance, while finance can learn from the government’s focus on inclusion.

Fraud is scaling up

Fraudsters are moving fast. Au10tix has tracked a 33 percent year-on-year rise in repeat attempts, with deepfakes and synthetic IDs now a staple tactic. Automated defences adapt quickly; manual teams can’t keep pace.

That makes automation less a luxury and more a necessity.

Artificial Intelligence (AI) sits at the heart of both the problem and the solution. Deepfake videos and AI-manipulated documents are now part of fraudsters’ toolkits. But AI is also central to detecting those attacks. “Our services provide government bodies with AI defences. This includes deepfake detection capabilities to identify when someone is using technology to present as a different person or when they have used AI to manipulate a document,” said Crawshaw.

A recent IBM survey found that 13 percent of organisations have already suffered breaches of AI models or applications – 97 percent of which lacked proper AI access controls. That figure highlights both the power and vulnerability of the technology.

Identity management is fast becoming a top priority in the age of rapid AI adoption. For organisations, staying ahead of fraudsters means continuous improvement, rapid updates, and global collaboration.

Building trust into the future

The future of ID verification depends upon both smarter tech and user trust. People need to know their data is protected, the systems are fair, and access isn’t gated by digital literacy.

“Progressive trust models mean checking only what’s necessary, but stepping up when fraud signals are there,” said Crawshaw. “It’s about improving services in line with evolving threats and staying aligned with GPG45 guidance.”

Ron Atzmon, AU10TIX Founder & Chairman, put it this way: “Trust is at the centre of identity. Security, speed, and inclusion aren’t trade-offs; they have to move together.”

Identity verification has shifted from a compliance step to a cornerstone of digital society. Get it right, and people gain both security and access. Get it wrong, and trust breaks.