Research Report
Published April 2026

The State of Human Verification 2026

Executive Summary

The internet's trust crisis has reached a breaking point. Bots now generate 51% of all web traffic. Deepfake fraud losses tripled to $1.1 billion. Identity fraud costs Americans $27.2 billion annually. CAPTCHAs are solved by AI 100% of the time. The biometric verification market will hit $17.8 billion by 2030 as platforms scramble to prove their users are real humans. The need for a universal proof of personhood protocol has never been more urgent.

51%
Of all internet traffic is now bots
Imperva Bad Bot Report 2025
$1.1B
U.S. deepfake fraud losses in 2025
Surfshark / Deloitte
$27.2B
Annual U.S. identity fraud losses
Javelin Strategy 2024
100%
AI success rate solving CAPTCHAs
Academic Research 2025

01

The Bot Crisis

For the first time in the history of the internet, automated traffic has surpassed human traffic. The majority of requests hitting your servers, viewing your pages, and interacting with your forms are not coming from real people.

51%
Of all internet traffic is now generated by bots
Imperva Bad Bot Report 2025
37%
Of all web traffic is bad bots specifically - up from 30% in 2023
Imperva / Thales 2025
187%
Growth in AI-driven bot traffic from January to December 2025
HUMAN Security
8x
Automated traffic is growing 8x faster than human traffic
HUMAN Security 2026

02

Identity Fraud by the Numbers

Identity fraud is no longer a fringe crime. It is a mainstream economic force affecting tens of millions of Americans every year - and the numbers are accelerating.

$27.2B
Total U.S. consumer losses in 2024 - up 19% year-over-year
Javelin Strategy & Research
1.16M
Identity theft cases through Q3 2025 - already exceeding all of 2024
Federal Trade Commission
75M
Americans (31%) report being identity theft victims
Security.org
$7,600
Average loss per identity fraud victim in 2025
IPX1031 / Javelin

03

The Deepfake Threat

Generative AI has given fraudsters the ability to fabricate realistic faces, voices, and video in real time. The financial impact has grown from a nuisance to a billion-dollar problem in under two years.

$1.1B
U.S. deepfake-related losses in 2025 - tripled from $360M in 2024
Surfshark / Deloitte
$40B
Projected annual losses from generative AI-enabled fraud by 2027
Deloitte
60%
Of U.S. companies reported increased fraud losses from 2024 to 2025
Keepnet Labs

04

Data Breach Economics

Every organization that collects and stores personal data is a target. The cost of a single breach continues to climb, and the time to detect one remains measured in months - not minutes.

$4.44M
Global average cost per data breach in 2025
IBM Cost of a Data Breach Report
$10.22M
Average breach cost for U.S. companies - an all-time high
IBM
$7.42M
Average breach cost for healthcare - highest sector for 14 consecutive years
IBM
241 days
Mean time to identify and contain a data breach
IBM Cost of a Data Breach Report

05

CAPTCHAs Are Dead

The primary tool the internet has used for decades to distinguish humans from bots has been completely defeated. AI can now solve every major CAPTCHA format faster and more accurately than humans can. For a full breakdown of modern replacements, see our guide to the best CAPTCHA alternatives in 2026.

100%
AI success rate solving traffic-image and grid CAPTCHAs
Academic Research 2025
90%+
Bypass rate demonstrated against hCaptcha
Checkmarx 2025
20%
Bot success rate on drawing-based CAPTCHAs - the only format showing resistance
CHEQ 2025

06

Account Takeover and Synthetic Identity

Attackers are not just stealing identities - they are creating entirely new ones. Synthetic identity fraud combines real and fabricated data to build identities that pass traditional verification checks, while account takeover attacks compromise existing accounts at scale.

$17B
Projected global account takeover losses in 2025
Veriff / SpyCloud
74%
Of organizations experienced an account takeover attack in 2024
Abnormal Security
$3.3B
U.S. synthetic identity exposure
BIIA 2026
$23B
Projected synthetic identity losses by 2030
Equifax

07

The Compliance Burden

Regulation is catching up to the fraud crisis - but the cost of compliance is staggering. Banks and financial institutions spend tens of millions annually on KYC processes that are slow, expensive, and increasingly ineffective against synthetic identities.

$60M
Average annual KYC spend per bank
Fenergo
$1.5K-$3K
Cost per individual client KYC review
Fenergo
$23.4B
Potential savings from AI-powered compliance automation
Napier AI

08

The Market Response

The verification industry is experiencing explosive growth as every platform, marketplace, and financial institution scrambles to prove their users are real. Biometric verification - including biometric liveness detection - is emerging as the definitive solution. See how the leading providers compare in our best Persona alternatives guide.

$8.88B
Biometric verification market size in 2025
MarketsandMarkets
$17.81B
Projected market size by 2030 at 14.9% CAGR
MarketsandMarkets
2-10s
Typical identity verification time - industry benchmark
Industry Benchmark
<50ms
POY Verify response time - with zero data collection
POY Verify

09

The Path Forward

The verification industry is at an inflection point. Legacy approaches - document scanning, knowledge-based authentication, CAPTCHAs - are failing against AI-powered attacks. The next generation of human verification must be:

Privacy-First
Zero data collection. No biometric templates stored on servers. No databases to breach.
Biometric
Hardware-level liveness detection using device Secure Enclave processors.
Instant
Sub-second verification. No document uploads. No waiting.
Universal
No government ID required. Accessible to the 1.4 billion people without formal identification.

POY Verify was built for this moment. By processing biometric liveness checks entirely on-device inside the Secure Enclave, it delivers definitive human verification with zero privacy cost, zero data liability, and zero exclusion. The architecture does not collect, transmit, or store any personal data - because the system was designed from the ground up to never need it.

Methodology

All statistics cited in this report are sourced from publicly available reports published between January 2025 and April 2026. Primary sources include IBM Cost of a Data Breach Report, Imperva Bad Bot Report, Javelin Strategy and Research, Federal Trade Commission, Deloitte, MarketsandMarkets, Fenergo, HUMAN Security, Equifax, Abnormal Security, Checkmarx, CHEQ, Keepnet Labs, Surfshark, Veriff, SpyCloud, BIIA, Napier AI, Security.org, IPX1031, and peer-reviewed academic research institutions. All dollar figures are in U.S. dollars unless otherwise noted.

Prove You Are Real

POY Verify is the privacy-first human verification layer for the internet. No data collected. No identity required. Just proof you are human.

JOIN THE WAITLIST