Blog
Insights on identity verification, compliance, and building trust in business.
The Future of Identity Verification in the UK
From paper documents to reusable digital credentials — the UK identity verification landscape is transforming. Here's what businesses should prepare for.
Whistleblowing and Compliance: When Employees Speak Up
Most compliance failures are known internally before regulators find them. Creating a speak-up culture is your best early warning system.
Identity Verification APIs: What Businesses Should Know
Building identity verification into your product or workflow? Here's what to look for in an API provider — and what most businesses get wrong.
Contractors vs Employees: Different Compliance Obligations?
Many businesses assume RTW checks only apply to employees. If you engage anyone personally to do work, the obligation likely applies to you.
Modern Slavery Due Diligence: What Your Business Must Do
Modern slavery exists in UK supply chains today. The law requires due diligence — but most businesses don't know what that means in practice.
Multi-Site Compliance: When Your Records Are Everywhere
Multiple locations mean scattered records, inconsistent processes, and compliance gaps invisible to head office. Here's how to fix that.
Schools and Universities: DBS and RTW Compliance Guide
Education has the strictest pre-employment checks in the UK. Gaps in your single central record will be found — by Ofsted, parents, or the press.
Zero Trust Starts with Identity: Lessons from Cybersecurity
Cybersecurity adopted zero trust years ago. Businesses should apply the same principle to physical identity — never assume, always verify.
Do Company Directors Need Right to Work Checks?
Company directors and partners who receive payment need right to work checks. Many businesses skip this — especially for foreign-national co-founders.
AI-Generated Documents: The Next Frontier of Employment Fraud
AI can now produce photorealistic passports and bank statements for under £50. Visual document inspection is no longer enough for employers.
What a Compliance Officer Actually Needs: A Practical Guide
The compliance officer role is growing fast but remains under-resourced. Here's what the job actually requires and what tools close the gap.
Fake Candidates Are Applying for Your Jobs Right Now
Recruitment fraud is surging: fake CVs, stolen identities, proxy interviews. A US firm found 300+ fraudulent applications in one quarter.
Who's Really on That Video Call? Meeting Verification
In remote work, you regularly meet people you've never seen in person. Meeting identity verification closes a gap most organisations ignore.
RTW Checks and Discrimination: Walking the Legal Line
You must check everyone's right to work. But checking inconsistently is discrimination. Here's how to get the balance right.
Seasonal Workers: The Compliance Challenge in Agriculture
~45,000 seasonal workers arrive annually for UK agriculture. Short tenure, rural sites, and rapid onboarding create serious compliance gaps.
Phishing Has Evolved. Has Your Verification?
Phishing attacks now use AI, social engineering, and deepfakes. Email-based verification is fundamentally broken. Here's what comes next.
Health and Care Worker Visa: A Sponsor's Compliance Guide
The Health and Care Worker visa drives care recruitment but carries the same compliance burden. One in three sponsor revocations comes from care.
Ghost Employees and Payroll Fraud: An Identity Problem
Ghost employees cost UK businesses millions each year. At the root of every case is the same failure: identity verification that stops at onboarding.
Protecting Vulnerable Adults from Doorstep Identity Fraud
Doorstep fraud costs £57M+ a year and disproportionately targets the elderly. Legitimate service providers have a duty to fix this.
UK Visa Types: What Every Employer Needs to Know
A reference guide to the UK visa categories that affect employers. Get the wrong one wrong, and your compliance fails before it starts.
Skilled Worker Visa: Your Obligations as a Sponsor
The Skilled Worker visa is the most common sponsorship route. Here are the obligations most employers get wrong — and how failures lead to licence revocation.
Identity Fraud in the UK: The 2025-26 Numbers
Identity fraud cases rose 22% to over 237,000 in the UK last year. Synthetic identities and AI-generated documents are driving the surge.
Compliance Culture vs Compliance Theatre
Many businesses have compliance processes that look good on paper but catch nothing in practice. That is compliance theatre — and it will not survive an audit.
EU Settled Status: How Employers Should Verify It
An EU passport alone is no longer proof of right to work in the UK. Here's how to check settled and pre-settled status correctly.
Cleaning Contractors: The Workforce You Never Verified
Cleaning staff access offices, schools, and hospitals unsupervised. Most businesses have no idea who actually shows up to clean their premises.
Social Engineering at Work: Why Your Team Is the Target
93% of data breaches involve social engineering. AI has made these attacks harder to detect — and training alone is not enough to stop them.
DBS Checks vs Right to Work Checks: What's the Difference?
DBS and right-to-work checks serve different legal purposes. Getting them confused — or thinking one covers the other — is a compliance failure.
CEO Fraud and Deepfake Impersonation: The New Threat
CEO fraud losses exceed £1.2B annually in the UK. Deepfakes have turned a social engineering attack into an identity attack.
Agency Staff in Care Homes: The Compliance Risk No One Owns
Care homes rely on agency staff to fill gaps. Agencies say the home should check. Homes say the agency already did. CQC holds the home responsible.
UK Immigration Enforcement in Numbers: 2024-25 Data
Civil penalty notices up 74%, total fines exceeding £88M. The immigration enforcement data tells a clear story about where the Home Office is heading.
The Business Case for Automating HR Compliance
Manual RTW checks take 45 minutes each and break at scale. Here's the ROI case for compliance automation — with real numbers.
Biometric Identity Verification: How It Works in 2026
Facial recognition, liveness detection, document OCR and NFC — here's how biometric identity verification actually works and where it falls short.
Supply Chain Worker Verification: Your Hidden Liability
Under the Modern Slavery Act and FWA, businesses have duties for workers in their supply chain — not just direct employees. Here's the exposure.
RTW Checks and Data Protection: What You Can (and Can't) Keep
RTW checks collect sensitive personal data. GDPR and the UK Data Protection Act set strict rules on what you keep, how long, and where.
Right to Rent Checks: What Landlords Must Do in 2026
Landlords face civil penalties up to £10,000 per occupier for failing right to rent checks. Here's the full guide to staying compliant in 2026.
Follow-Up RTW Checks: When, Why, and How Often
The initial right to work check is just the start. For time-limited workers, employers must follow up — or lose their statutory excuse entirely.
Domiciliary Care Workers: The Verification Blind Spot
Home care workers visit vulnerable adults alone. Unlike residential care, there's no supervisor at the door. How do you verify who actually shows up?
Can You Spot a Deepfake on a Video Call? Probably Not.
Research shows humans detect deepfakes at near-chance levels. Here's why 'just look carefully' is not a security strategy.
Which Documents Prove Right to Work? The Full List
A comprehensive guide to the documents UK employers can accept as proof of right to work — List A, List B, and the most common mistakes.
Agency Workers: Who's Responsible for the RTW Check?
When you use agency workers, who holds the RTW compliance obligation — the agency or the end hirer? The answer is more complicated than you think.
Sponsor Management System (SMS): A Practical Guide
The SMS is how sponsors manage certificates and report to the Home Office. Most underuse it. Here's what you need to know.
Remote Hiring and Identity Verification: Closing the Gap
Remote hiring created a verification gap that adjusted checks only partially filled. Here's how to verify identity when you've never met someone.
The Employer's Duty to Prevent Illegal Working
Section 15 of the 2006 Act creates a strict duty on employers to prevent illegal working. Ignorance is not a defence. Here's what it means.
Hiring Graduate Visa Holders: What Employers Need to Know
The Graduate visa lets international graduates work for 2 years without sponsorship. But employers must understand the rules and the clock.
Construction Worker Verification: The On-Site Blind Spot
Construction sites have layers of subcontractors and transient workers. Verifying who is actually on site is harder than most realise.
What Is a Statutory Excuse? Your RTW Legal Defence
A statutory excuse is the only legal defence against a civil penalty for illegal working. Here's exactly how to establish and maintain one.
Right to Work in Hospitality: High Turnover, High Risk
Hospitality accounts for 18% of sponsor licence revocations. High turnover and rapid hiring make RTW compliance uniquely difficult.
How to Spot Fraudulent Documents: A Guide for Employers
AI-generated forgeries are getting harder to detect. Studies show humans catch fewer than half. Here's what employers need to know.
CQC and Workforce Compliance: What Care Homes Get Wrong
CQC inspectors now scrutinise workforce compliance more closely than ever. Here's what they look for and where care homes fall short.
7 Right to Work Mistakes Small Businesses Keep Making
SMEs without HR teams make the same RTW errors repeatedly. These 7 mistakes carry fines of up to £60,000 per worker.
Visa Expiry Tracking: The Compliance Gap Most Employers Miss
Most employers check right to work at hiring and never again. With ~1.2M workers on time-limited visas, that's a compliance time bomb.
AI Deepfakes Are Now a Business Problem, Not a Tech Demo
Deepfakes cost Arup $25M and are now available for $20/month. Here's why AI identity fraud is an operational business risk, not a novelty.
Right to Work Penalties in 2026: Fines, Prosecution, Risk
Penalties for employing illegal workers trebled in 2024 to £45k-£60k per worker. Here's the full breakdown of fines, prosecution, and how statutory excuse works.
Why Recruitment Agencies Carry More Compliance Risk
Agencies supply workers but retain compliance obligations. The 'who checked?' problem leaves 1.1 million temp workers in a verification gap.
The Sponsor Licence Compliance Calendar You Need
Most sponsors don't know all their obligations. Here's a month-by-month calendar of every recurring duty, reporting deadline, and audit task.
Digital vs Manual Right to Work Checks: Which Is Safer?
Digital right to work checks via IDSPs create stronger audit trails. Manual checks still have a role. Here's when to use each and why it matters.
Right to Work Compliance for Care Providers: A Guide
Care is the #1 sector for sponsor licence revocations at 33%. Here's why care providers face unique compliance challenges and what to do about them.
What Happens During a Home Office Compliance Visit
Home Office compliance officers can arrive unannounced. Here's exactly what happens during a visit, what they inspect, and what triggers further action.
The Compliance-First Employee Onboarding Checklist
Most onboarding processes put compliance at the end. That's backwards. Here's a step-by-step checklist that puts legal requirements first.
Right to Work Checks in 2026: What's Changed
Right to work rules have shifted significantly since 2024. Here's what UK employers need to do differently in 2026 to stay compliant.
What a B-Rated Sponsor Licence Means — and How to Fix It
A B-rated sponsor licence means the Home Office found failures in your compliance. Here's what triggers it and how to recover.
3,100 UK Businesses Lost Their Sponsor Licence Last Year
Sponsor licence revocations surged 1,155% in two years. Most failures aren't fraud — they're record-keeping gaps.
The Trust Layer Is Missing: Why Identity Verification Is the Infrastructure Problem of Our Time
We built infrastructure for payments, communications, and cloud computing. We never built it for trust. That's about to change.
The Deepfake Playbook: How Real-Time AI Video Cloning Works
Real-time deepfakes can now impersonate anyone on a video call. Here's how the technology works, what it costs, and why traditional defences can't detect it.
Enterprise Compliance at SME Prices: Why Verification Shouldn't Cost £50 Per Check
5.5 million UK SMEs face the same £60,000 fines as FTSE 250 companies. But they can't afford £50-200 per background check. Something has to give.
How to Prepare Your Business for a Walk-In Compliance Audit
The Fair Work Agency can arrive unannounced and demand your employment records. Here's a practical checklist to make sure you're ready.
The Doorstep Problem: £57 Million in Annual Fraud That Starts With a Knock
Doorstep crime costs UK victims £57 million a year. The average victim is over 75. The conviction rate is below 5%. It's time to verify who's at the door.
The Real Cost of a Bad Hire: Time, Money, and Compliance Risk
A bad hire doesn't just cost you a salary. It costs weeks of interviews, months of onboarding, and potentially £60,000 in fines.
From KYC Fatigue to Living Identity: Why Static Checks Are Failing
You verify your identity to open a bank account, get a phone contract, start a job, and rent a flat. Every time, from scratch. There's a better way.
Voice Cloning in 30 Seconds: Why Phone Calls Are No Longer Proof of Identity
It takes 30 seconds of audio to clone a voice with 99.8% accuracy. That means the phone call you just received from your CEO may not have been your CEO.
The Safeguarding Gap: How Agency Staff Rotate Through Care Homes Unchecked
39% of safeguarding concerns in care involve staff or volunteers. Yet most care homes have no way to verify who's actually on shift.
Platform Agnostic Verification: Why Your Identity Solution Can't Be Locked to One App
Identity fraud doesn't stay on Zoom. So why does your verification solution? The case for platform-agnostic identity.
The Recruiter's Nightmare: Deepfake Candidates in Remote Interviews
You interviewed him on Tuesday. He started Monday. By Wednesday, you realised it wasn't the same person. Welcome to the era of deepfake hiring.
Audit Trails That Actually Work: Why "We Asked and They Said Yes" Isn't Compliance
When the regulator arrives, they want documentation. 'We asked and they said yes' is not an audit trail. Here's what is.
What Is Identity-as-Infrastructure? The Next Category in Enterprise Trust
Cloud infrastructure transformed how we build software. Identity infrastructure will transform how we build trust. Here's what that means.
The Temp Worker Loophole: 1.1 Million Workers, Almost Zero Verification
Five agency workers arrive Monday morning. One says 'Dave couldn't make it — I'm covering.' He gets a lanyard and building access. Nobody checks.
Care Home Staffing: When "Who's Looking After Mum?" Has No Good Answer
1.5 million people work in UK social care. Many rotate between sites. Families rarely know who's actually looking after their loved ones.
Why Trade Platforms Can't Tell You Who Actually Showed Up
Checkatrade verifies the business. But when someone knocks on your door, the platform has no idea if that's the person you booked — or someone else entirely.
The $25 Million Deepfake: What the Arup Attack Means for Every Business
In early 2024, a finance worker at Arup transferred $25 million after a video call with deepfake versions of his colleagues. Here's what went wrong — and what it means for your business.
5 Signs Your Hiring Process Has a Right-to-Work Gap
Most UK businesses think their right-to-work process is solid. Most are wrong. Here are five warning signs.
Two-Way Verification: What It Is and Why One-Way Systems Are No Longer Enough
You prove your identity to your bank every day. But when did your bank last prove its identity to you? That's the problem with one-way verification.
The Identity Verification Gap: Why Businesses Still Trust Strangers
Every day, businesses let unverified people into their buildings, onto their systems, and into their hiring pipelines. Here's why that's a problem — and what's changing.
The Fair Work Agency: What Every UK Business Needs to Know Before April 2026
The Fair Work Agency launches in April 2026 with walk-in audit powers. Here's what it means for your business and how to prepare.
Welcome to Certifyd
We're building the identity layer for businesses that can't afford to get it wrong. Here's why.
Biblical Armageddon: When AI Attacks Get Intelligent
Dr. Rigoberto Garcia on why state-sponsored cognitive neural networks are driving a new wave of attacks most security teams aren't ready for.
A Million Hacking Attempts Per Second
A cybersecurity veteran explains why AI voice cloning, shadow AI, and the death of the junior developer are the threats keeping him up at night.
Who's Really at Your Door? The Hidden Risk of Letting Strangers Into Your Home
You verify your identity to board a plane. But to let a stranger into your home? You rely on hope. Here's why that needs to change.
20 Years in Cybersecurity and I Almost Got Scammed
A Field CTO with two decades in cybersecurity reveals how a phone scam nearly got him — and why the real defence is culture, not technology.