From startups to legacy brands, you're making your mark. We're here to help.
Key Links
Prepare for future growth with customized loan services, succession planning and capital for business equipment.
Key Links
Serving the world's largest corporate clients and institutional investors, we support the entire investment cycle with market-leading research, analytics, execution and investor services.
Key Links
Providing investment banking solutions, including mergers and acquisitions, capital raising and risk management, for a broad range of corporations, institutions and governments.
Your partner for commerce, receivables, cross-currency, working capital, blockchain, liquidity and more.
Key Links
A uniquely elevated private banking experience shaped around you.
Whether you want to invest on your own or work with an advisor to design a personalized investment strategy, we have opportunities for every investor.
Explore a variety of insights.
Key Links
Insights by Topic
Explore a variety of insights organized by different topics.
Key Links
Insights by Type
Explore a variety of insights organized by different types of content and media.
Key Links
We aim to be the most respected financial services firm in the world, serving corporations and individuals in more than 100 countries.
Key Links
Payments Unbound unites clients from a wide range of industries to bring you innovative insights that help you navigate the future of payments.
The text message on your phone purports to come from your utility company. It says that there’s a problem with your smart meter and asks you to click on a link. The message comes from a five-digit short code, but you don’t know how to find out who that code belongs to or whether it was spoofed. You look at the link, and it seems real, but you hesitate to follow it and find out, in case you end up having your bank account drained. So you delete it. Later, however, you discover it was in fact real and, understandably, you’re seriously frustrated.
Why is it that the problem of figuring out whether you are dealing with a real company or a fraudster is delegated to the consumer?
Digital identity (digital ID) is the link between things in the real world and things in computers: an online credential that verifies that someone or something is who they say they are when using an online service. The use cases we hear about typically have to do with people. In the payments world, for example, digital ID can help prevent fraudulent card use.
But the identity of businesses is just as important. The incidence of fraudsters impersonating organizations is on the rise, with such scams representing more than $1.1 billion of reported losses in the U.S. alone—three times what it was in 2020.1 This is not just about spoof text messages—it is also about corporate identity theft, something that is rising “alarmingly.”2 This involves a bad actor using information about a company obtained via a cyberattack—their business license, their tax ID—to defraud others.
It is obvious why this crime is growing so rapidly: As more companies conduct business online, they expose themselves to greater risk. And while advances in technology have enabled cybercriminals to undertake more sophisticated scams, businesses, especially small businesses, often lack the knowledge, countermeasures and strategies needed to protect themselves. Simple precautions, such as double-checking that an email from a supplier asking you to update their bank account details is really from that supplier, can make all the difference. But too often this doesn’t happen.
Hence the growing conversation around corporate digital ID. The new EU Electronic Identification, Authentication and Trust Services regulation provides a framework that encompasses corporate ID, and China recently announced it will adopt a digitized ID system for organizations pioneered by the Global Legal Entity Identifier Foundation. Meanwhile in the UK, the government-backed Centre for Finance, Innovation and Technology has recently partnered with leading banks and technology firms, as well as the Financial Conduct Authority and the Payment Systems Regulator, in an initiative to create a standardized and verified digital ID for businesses.
The ambition is to provide something like a digital “business driver’s license” that is interoperable with other financial systems for data cross-referencing, enhanced authenticity checks and additional fraud detection tools. This could thwart many common scams, making it harder for a fraudster to spoof a legitimate sender or impersonate a real vendor. Fraud could be stopped before it happens: If a business claiming to be a major supplier is requesting a payment, mismatched credentials mean the transaction can be halted automatically in real time.
Crucially, to protect privacy, the person or organization asking for the credentials only gets to view the ones that they are authorized to access. So, for example, a telecommunication company might be able to view the trading name of a business that wants to send a text message to its customers. A lawyer might be able to ask for the identities of beneficial owners, and a business partner might be able to ask for payment details.
This kind of idea will become increasingly important to combat new forms of fraud, such as deepfakes. Imagine you’re on a video call with the CEO of one of your suppliers, and they’re asking you to make a payment. In the age of generative AI, how do you know they are who they say they are? We can imagine a world where identity validation takes place automatically in the background by the ID system, providing reassurance that you are indeed talking to the CEO and not a hacker.
We have a long way to go to get there. Seventy-five percent of financial institutions still rely on internet searches to identify beneficial owners, annual filings and financial accounts in the process of verifying business identities.3 This is not just an efficiency problem; nine in 10 corporate treasurers have abandoned lengthy onboarding processes for business banking applications, leading to lost revenue and unhappy customers.
What businesses need is a digital identity not only to fight fraud, but also to make business more efficient and productive—something that a company can present to the bank to get an account, or to a payments company when it wants to send money to someone, and also to accountants, lawyers, leasing companies, procurement officers and everybody else.
When the next message purporting to come from the utility company shows up on your phone, it should either be in green (because the corporate digital identity has been checked and validated) or red (because it hasn’t).
If we really want to reduce friction and fraud, then it must be that simple.
By WIRED
SOURCES: WWW.JPMORGAN.COM/PAYMENTS-UNBOUND/SOURCES
ILLUSTRATION: KEITH LEE
MAGAZINE
Volume 6: Open Banking Is Just Getting Started Volume 5: Game Changer Volume 4: Ready Payer One Volume 3: Bank to the Future Volume 2: The New World of Commerce Volume 1: The Money Revolution Browse all articlesWEBINARS
View all webinarsYou're now leaving J.P. Morgan
J.P. Morgan’s website and/or mobile terms, privacy and security policies don’t apply to the site or app you're about to visit. Please review its terms, privacy and security policies to see how they apply to you. J.P. Morgan isn’t responsible for (and doesn’t provide) any products, services or content at this third-party site or app, except for products and services that explicitly carry the J.P. Morgan name.