AI in KYC and Identity Verification Quiz

Answers and explanations appear as you take the quiz.

1. How does KYC differ from transaction monitoring?
   • KYC watches account activity for suspicious patterns, while transaction monitoring checks IDs
   • KYC establishes who a customer is at sign-up, while transaction monitoring watches account activity afterward
   • They are two names for the same process
   • KYC applies only to crypto, and transaction monitoring only to banks
2. What makes an injection attack different from a presentation attack?
   • Injection attacks use printed photos held up to the camera
   • Injection attacks only target paper documents
   • Injection attacks require the fraudster to be physically present at a bank
   • Injection attacks skip the camera and feed pre-recorded or AI-generated video through virtual cameras, emulators or tampered devices
3. What is passive liveness detection?
   • Analyzing texture, depth cues and motion to detect spoofs without asking the user to do anything
   • Asking the user to blink, smile or turn their head
   • Having a human agent watch every sign-up live
   • Checking the user's device battery level
4. Why is reading an ePassport's chip over NFC stronger evidence than a photo of the data page?
   • The chip contains a video of the holder
   • NFC works without the passport being present
   • The chip data is cryptographically signed by the issuing country
   • Photos of passports are illegal to take
5. In presentation attack detection testing, what does APCER measure?
   • The share of real users wrongly rejected
   • The share of spoof attempts wrongly accepted
   • The speed of document scanning
   • The percentage of sign-ups completed on mobile
6. Why doesn't a strong selfie-to-document face match prove a person's identity by itself?
   • It does not prove the document is genuine or that the identity is not synthetic
   • Face matching only works on passports
   • Selfie matches are never used in KYC
   • Face matching models ignore the document photo
7. Why do providers need separate controls beyond ISO/IEC 30107-3 presentation attack testing?
   • The standard applies only to fingerprints
   • The standard bans liveness checks
   • The standard requires human review of every sign-up
   • The standard focuses on presentation attacks, so injection attacks need other defenses such as device attestation and virtual camera detection
8. What shift does the guide describe for the future of identity verification?
   • Replacing all digital checks with in-branch visits
   • Relying only on selfies with no documents
   • Moving from judging images toward verifying digital signatures on credentials such as mobile driver's licenses and digital identity wallets
   • Removing liveness detection entirely