Colombia Tightens Checks Against Digital Fraud

Digital fraud in Colombia already includes phishing, identity theft, credential theft and attacks aimed at banking apps, according to El Colombiano. At the same time, identity providers and technology firms are pushing stronger controls, from forensic document analysis and facial biometrics with liveness checks to contactless biometric verification and validation against official databases.

What digital fraud risks were reported in Colombia?

The clearest case in the coverage is a set of threats aimed at both users and financial products. El Colombiano cited phishing, identity theft, credential theft and attacks aimed at banking apps, and recommended enabling multifactor authentication and checking credit history to spot unfamiliar products or transactions.

That advice reflects a practical problem, which is how hard it can be to notice an unauthorized account opening or transaction in time. Reviewing credit history can help surface early signs of fraud, while multifactor authentication adds another barrier to account and service access.

What are identity companies proposing?

Colombia Fintech said IONIX LATAM introduced a digital identity offering that combines forensic document analysis, facial biometrics with liveness checks, and digital risk signals to verify identity. The company argues that validating only a photo and a document is no longer enough as identity fraud grows.

In an analysis of account-opening fraud, Facephi said synthetic identities and injected deepfakes can individually defeat document verification, biometric checks and liveness testing. It therefore proposes combining those layers with injection attack detection and validation against official records.

According to Revista C-Level, TECH5 presented contactless biometrics for smartphones with real-time liveness detection. The technology was positioned as a way to reduce impersonation in banking, health care and telecommunications in Colombia.

What regulatory and legal changes are entering the debate?

PPU Legal said Law 2573 of 2026 would strengthen obligations tied to identity verification, digital security, complaint handling and correction of credit reports linked to impersonation. The firm also pointed to the lack of an integrated, interoperable digital identity system in Colombia.

Feedzai, for its part, said Colombian regulation and financial oversight are driving stronger identity controls, including biometric verification, liveness checks and comparisons against official databases. That claim, based on the material cited, would need direct confirmation in rules or documents from the Financial Superintendence.

The picture that emerges from these references is consistent. Reports on digital fraud, new verification schemes and legal warnings all point to the same issue, identity has become the center of both the problem and the control.

What scenario do the technical cases describe for identity fraud?

A technical and commercial article from TI Rescue described the use of deepfakes and synthetic videos to try to defeat liveness checks in Colombian digital wallets after a SIM swap. The material did not provide public forensic evidence or confirm which financial institution may have been affected.

The same type of risk appears in Facephi's analysis of synthetic identities and injection attacks. Taken together, the available sources show that checking a photo and a document is no longer presented as enough against more elaborate impersonation attempts.