This three-paper series was developed through three volunteer workshops at the Federal Identity Forum (FedID) in June 2024, each of which operated under “Chatham House Rules.” These papers compile insights and
recommendations from workshop participants, aiming to inform the 2024–2025 presidential transition teams on strategic actions to enhance identity security and public trust. Disclaimer: These papers reflect the
perspectives of workshop participants and do not represent the formal views of FedID organizers, including federal agencies, MITRE, and the Armed Forces Communications & Electronics Association International (AFCEA).
SEPTEMBER 2024
The Case for Action
Identity attacks are becoming increasingly sophisticated and widespread, driven by advancements in AI technologies
such as deepfakes and generative AI. The Federal Trade Commission (FTC) received 1.4 million identity theft reports in
the past year alone, nearly triple the number of 10 years ago, with cybercrime losses surging to an estimated $10.2 billion.
Technologies like biometrically enabled multi-factor authentication offer potential protections, but public acceptance and
adoption remain low due to a lack of understanding and confidence in the handling of personal information.
Immediate action is needed to ensure citizens have access to effective, user-friendly solutions that build trust with both
industry and government. It’s crucial to provide victims with readily available resources and assistance without shame or
stigma. Implementing and enhancing digital identity certifications can help combat evolving identity threats by ensuring
compliance and accountability. These steps will help create a secure and trustworthy digital environment for all citizens.
Key Challenges and Opportunities
Identity theft affects U.S. citizens across all demographic groups and generations.
Victims face significant emotional trauma and financial costs while trying to reverse the damage to credit scores and
compromised accounts and devices. The incoming administration has a unique opportunity to establish a nationwide
training and messaging campaign that emphasizes the importance of securing one’s identity, outlines practical steps for
protection, and provides clear guidance on where to seek help. This must be backed by public access to resources and
assistance.
The rapid advancement of AI capabilities, particularly deepfakes and generative AI, poses a major challenge.
These technologies enable bad actors to impersonate individuals using synthetically generated documents, voices, and
fingerprints. They facilitate identity theft through socially engineered phishing, unauthorized access to private accounts,
and fraudulent activities. Addressing these threats requires immediate and coordinated action.
A whole-of-government strategy is essential to provide effective privacy and sensitive information protection.
This strategy should include comprehensive policies and guidelines, adequate budget allocations for coordinated
executive branch actions, and industry certifications that ensure accountability and enforcement.
