Welcome to the latest edition of Privacy Matters, your trusted source for updates on KYC, AML, fraud prevention, and privacy-enhancing technologies. Here’s what’s been happening recently:
Sedicii Insights: Why Email-Based Age Verification Falls Short
In our latest article, we explore why estimating user age from email metadata is a fundamentally weak approach – emails say nothing reliable about a person’s date of birth and can be easily manipulated or borrowed, allowing minors to bypass restrictions. We distinguish this speculative “age assurance” method from true age verification, which confirms dates of birth against trusted documents, and advocate for privacy-preserving solutions like zero-knowledge proofs that meet regulatory standards without exposing unnecessary personal data.
Read the Full Article here and let us know your thoughts!
Barcelona Cybersecurity Congress: Rob Leslie to Showcase Secure Data Collaboration Breakthrough
At the Barcelona Cybersecurity Congress 2025 (13 – 15 May), Rob Leslie, CEO of Sedicii, will demonstrate a breakthrough in secure data collaboration, using zero-knowledge proofs to verify attributes without exposing raw data, highlighting Sedicii’s vision for privacy-preserving digital ecosystems.
Beyond Digital Wallets: Why Trust Infrastructure Is Essential
Digital wallets alone can’t guarantee credential acceptance – trust networks (defining issuance rules, governance, and standards) and acceptance networks (managing integrations, workflows, and interfaces) form the infrastructure that makes credentials usable and scalable. Trust networks answer “Can I trust this credential?”, while acceptance networks answer “Can I trust it for this purpose right now?”, unlocking value for issuers, holders, verifiers, and developers across interoperable ecosystems.
19 Billion Compromised Passwords Fuel Credential-Stuffing Epidemic
A new analysis reveals 19,030,305,929 compromised passwords drawn from email-linked leaks across 200 security incidents between April 2024 and April 2025, yet only 6 percent were unique, meaning 94 percent are reused across multiple accounts. With 42 percent of these passwords just 8 – 10 characters long, this massive hacking arsenal powers automated credential-stuffing and account-takeover attacks – underscoring the urgent need for strong, unique passwords and multi-factor authentication.
Explore the Fraud Kill Chain
An interactive resource from FraudKillChain.com maps the ten stages of fraud – from reconnaissance through money laundering – providing real-world examples of threats like romance scams, phishing, and device takeovers. By revealing the end-to-end fraud lifecycle, it enables security teams to pinpoint vulnerabilities at each phase and implement targeted defenses, from user education and anomaly detection to robust transaction monitoring and AML controls.
Deeper Harms of Deepfakes: Lack of Control Over Likeness Magnifies Abuse
Analysis by the Ada Lovelace Institute shows that deepfakes go far beyond financial scams, enabling identity theft and non-consensual pornography that inflict lasting psychological trauma, especially on women and girls. With AI-generated videos approaching CGI-level realism, the old “uncanny valley” protections are vanishing, while legal safeguards and detection tools remain woefully inadequate. Experts urge restricted model access, responsible AI licensing, and robust regulations to hold platforms and perpetrators accountable.
Ofcom’s New Child Safety Measures for Sites & Apps
Ofcom has finalised over 40 practical child-safety measures under the UK Online Safety Act that all sites and apps likely to be used by UK children must apply by 25 July 2025. Providers must complete and record risk assessments by 24 July 2025; configure safer feeds to filter content on self-harm, eating disorders, pornography, and hate speech; enforce robust age checks; enable fast-action takedowns; and offer enhanced controls and reporting tools for young users. Non-compliance risks fines up to 10 percent of global revenue or even service bans in the UK.