Liveness Detection for ID Verification: Why It Matters for Online Signing

Liveness Detection for ID Verification header

Businesses now agree contracts, loans, property deals, employment terms and supplier agreements entirely online, often with people they have never met. A signature is only as trustworthy as the person behind it, and for high-value agreements that decides whether a deal stands up when it is challenged.

Liveness detection is a check that confirms the face in a selfie belongs to a live person who is physically present, and not a photo, screen, mask or video. It sits between the document check and the face match in ID verification, so the system compares the ID photo with a real person rather than an image of one.

For any business signing contracts or high-value documents online, it has moved from a nice extra to an essential step.

Key takeaways

  • Document checks and face matching alone can be beaten by forged IDs, stolen images and AI-generated video.
  • Liveness detection proves a real person is in front of the camera right now.
  • It protects against presentation attacks, deepfakes and injection attacks.
  • Passive liveness adds no extra steps for the signer. Active liveness adds a prompted gesture at the moment of signing.
  • Secured Signing layers liveness across ID Verification, Video Confirmation and the ID Trust Console.

Why are document and face checks no longer enough?

Remote identity checks have traditionally asked two questions: is this ID genuine, and does the face match the photo? A fraudster with a forged document, a stolen image or AI-generated video can now answer both convincingly.

The question that matters is a third one: is a real, living person in front of the camera right now? Liveness detection answers it.

What is the difference between active and passive liveness detection?

There are two broad approaches:

  • Active liveness asks the user to do something, such as turn their head, blink or follow an on-screen prompt. It is easy to explain, but it adds friction and can be gamed by synthetic video that responds to the prompt, which is why it works best alongside deepfake detection.
  • Passive liveness analyses the selfie in the background and asks for no extra action. It is usually faster and simpler for the person being verified, which matters when every extra step risks an abandoned process.

What attacks does liveness detection stop?

Document checks and face matching on their own can be beaten by three kinds of attack that liveness detection is designed to catch:

  • Presentation attacks. The fraudster holds a printed photo, a screen, a recorded video or a mask up to the camera. Secured Signing’s liveness test is built to prevent presentation attacks from printed images, masks, recorded video and synthetic video.
  • Deepfakes. AI tools can now generate realistic faces and videos of people who never agreed to be verified. Secured Signing’s Realify deepfake detection analyses a short video submitted before a signing takes place, to help confirm that the person recording is real and authentic.
  • Injection attacks. Rather than showing a fake to the camera, the attacker feeds a fake image or video stream straight into the verification flow, bypassing the camera altogether.

Forged and stolen documents are the other half of the problem. Strong document analysis helps, and Secured Signing runs up to 50 text and image tests on each ID. But a convincing document paired with a weak selfie check is a path to fraud. Liveness closes that gap by tying the transaction to a person who is present at that moment.

Why does liveness detection matter for online signing?

Liveness detection earns its place for four reasons:

  1. It stops fraud that other checks miss. A valid document and a matching face prove little if the face is a replay. Liveness matters most where the stakes are high, such as mortgage purchases, and when re-verifying someone on a new device or after a long gap, where it helps reduce account takeover.
  2. Regulators are moving toward requiring it. Supervisors in some markets now expect proof that a live person is behind remote onboarding, and some have extended that expectation to routes that did not previously need it after industry feedback about AI forgeries and deepfake-based identity theft. Independent testing is part of this picture: Secured Signing’s passive liveness test is iBeta compliant. Check the rules that apply in your own jurisdiction and sector.
  3. It protects the value of a signature. A signed record is only as trustworthy as the identity behind it. Secured Signing positions ID verification as a more robust form of signer authentication than a standard email link or SMS, and liveness confirms the person is genuinely there.
  4. It does not have to slow people down. A passive check asks the signer for nothing extra, and Secured Signing analyses captured images within seconds, which keeps genuine signers moving.

How does liveness detection work in Secured Signing ID Verification?

Secured Signing builds liveness into a simple capture flow for the signer. ID Verification works in three steps:

  1. Capture the ID. The signer captures an image of their government-issued ID. The image is analysed within seconds, with automatic cropping and detection of the ID type and size.
  2. Take a selfie. The selfie is compared with the photo extracted from the ID, such as a driver’s licence or passport, to verify a match and return a confidence score.
  3. Run the liveness test. An optional advanced passive liveness test runs on the selfie. It needs no action from the signer and prevents presentation attacks from printed images, masks, recorded video or synthetic video.

Behind this sits global ID document coverage: the platform can verify more than 16,000 identity documents across 220+ countries and territories, running up to 50 text and image tests on each. Data matching then compares the details captured from the ID with the details your client provided. You choose which parameters must match and how to proceed on a pass or fail. The result is a strong link between the verified person, their ID and the document they sign.

How does liveness detection work in Secured Signing Video Confirmation?

Video Confirmation adds an active liveness check at the exact moment of signing. When a signer clicks to sign, they are prompted to record a short video and perform a gesture, such as a big smile or raising their right shoulder. Video Confirmation captures the signer performing gestures specific to the document, and the recording is kept in the audit log.

Since the rise of deepfake threats, Secured Signing has paired the gesture check with its Realify deepfake detector, which analyses the submitted video to confirm that the person recording is real and authentic. A gesture requested on the spot is hard to meet with a recording made earlier, and deepfake detection covers the case where the video itself is synthetic. See how to use Video Confirmation with Realify.

How does liveness detection work in the Secured Signing ID Trust Console?

For online meeting rooms used for signing, the ID Trust Console runs regular checks throughout the meeting. It combines ID Verification and deepfake detection to assess whether the person in the meeting is authentic, fake or suspicious, and to confirm they are the same person who passed the checks before the meeting began.

If anything looks off, the console notifies the meeting host so they can act. The focus is on regular checks rather than continuous monitoring, which means a change of person or a deepfake appearing mid-meeting can still be flagged to the host.

Frequently Asked Questions

What is liveness detection in ID verification?

Liveness detection confirms that a selfie shows a live person who is physically present, and not a photo, screen, mask or video. It runs between the ID document check and the face match, so the face on the ID is compared with a real person.

Active liveness asks the user to perform an action, such as turning their head, blinking or making a gesture. Passive liveness analyses the selfie in the background and asks for nothing extra, which makes it faster and lower friction for the signer.

Liveness detection helps, and it works best alongside dedicated deepfake detection. Secured Signing pairs liveness checks with Realify, which analyses submitted video to help confirm that the person recording is real and authentic.

In a presentation attack, the fraudster shows a fake to the camera, such as a printed photo, screen, mask or recorded video. In an injection attack, the fake image or video is fed straight into the verification flow, bypassing the camera.

It depends on your market and sector. Supervisors in some jurisdictions now expect proof that a live person is behind remote onboarding, so check the rules that apply to you.