People / P2P

The cryptographic answer to social engineering.

They share a verified ID. You see who they are. Real-time, cryptographic, deepfake-immune.

Finally, a defense

A verified ID, signed by the device that holds the key.

Presenter shows a code. Verifier types it. Presenter picks what to share. Verifier sees the verified card. Five seconds.

Presenter shares a verified ID card to the verifierSarah Chen, the verifier, types a 5-digit code on her phone. She waits while Alex Rivera, the presenter, picks which fields to share. A cryptographic signal travels from Alex's device to Sarah's. Sarah's phone reaches a success state: a green check, Identity Verified, and Alex's verified ID card with name, role, company, and key contact fields, each marked verified or self-reported.VERIFIERPRESENTER9:41CHECK IDEnter the 5-digit code72841Tap to verifyCHECK IDWaiting for them to sharePresenter is choosing what to share.Identity VerifiedAlex shared their identity with youARAlex RiveraEngineering DirectorTechStart IncEmailalex.rivera@techstart.comPhone+1 555 234 5678DepartmentEngineeringLocationAustin, TXCODE . P2P . 9:41 AM5/7 verifiedVerifiedSelf-Reported9:41VERIFICATION REQUESTSCSarah ChenAcme CorpSHARING . WORKPhotoNameCompanyJob TitleWork EmailPersonal EmailPersonal PhoneShare & ContinueShared5 fields with Sarah ChenSIGNED . 9:41 AMPresenter shares a verified ID card to the verifierSarah Chen, the verifier, types a 5-digit code on her phone. She waits while Alex Rivera, the presenter, picks which fields to share. A cryptographic signal travels from Alex's device to Sarah's. Sarah's phone reaches a success state: a green check, Identity Verified, and Alex's verified ID card with name, role, company, and key contact fields, each marked verified or self-reported.VERIFIERPRESENTER9:41CHECK IDEnter the 5-digit code72841Tap to verifyCHECK IDWaiting for them to sharePresenter is choosing what to share.Identity VerifiedAlex shared their identity with youARAlex RiveraEngineering DirectorTechStart IncEmailalex.rivera@techstart.comPhone+1 555 234 5678DepartmentEngineeringLocationAustin, TXCODE . P2P . 9:41 AM5/7 verifiedVerifiedSelf-Reported9:41VERIFICATION REQUESTSCSarah ChenAcme CorpSHARING . WORKPhotoNameCompanyJob TitleWork EmailPersonal EmailPersonal PhoneShare & ContinueShared5 fields with Sarah ChenSIGNED . 9:41 AM

The presenter's device holds the key. The verifier sees only the signed proof. Nothing replayable. Nothing forgeable.

Three modes. Wherever they reach you.

Attackers reach you through every surface where a human decides. ScrambleID rides the same surfaces. Three modes, one guarantee.

In-person

QR code.

Display a code, the other party scans. Security desks, meeting rooms, loading docks. Defeats fake badges and shoulder surfing.

Audio

Spoken code.

Read the 5-digit code aloud. Phone calls, conference rooms. Defeats voice cloning and deepfake audio.

Digital

Deeplink.

Send a one-time link, the other party taps. Chat, email, SMS, support tickets. Defeats phishing and pretexting.

All three carry the same cryptographic proof.The mode follows the conversation. The guarantee doesn't change.

AI made impersonation cheap.

Voice cloning costs less than a streaming subscription. Deepfake video is consumer-grade. Pretexting is automated. What was a craft is now a commodity, aimed at every channel where humans still decide who to trust.

Business Email Compromise: reported losses, 2019 to 2023

BEC alone is approaching $3 billion a year. Wire-transfer fraud, vendor impersonation, executive impersonation. Each starts with someone believing the wrong person.

BEC losses by yearBar chart showing FBI IC3 reported BEC losses: 2019 $1.8B, 2020 $1.9B, 2021 $2.4B, 2022 $2.7B, 2023 $2.95B.$3.0B$2.5B$2.0B$1.5B$1.0B$0.5B$0$1.8B$1.9B$2.4B$2.7B$2.95B20192020202120222023

SOURCE . FBI INTERNET CRIME REPORT, ANNUAL EDITIONS

Voice cloning

Three seconds of audio. Sub-$10 a month.Voice biometrics no longer measures who's on the line. It measures how well the attacker cloned them.

Deepfake video

$25M moved on a single video call.Arup, Hong Kong, February 2024. The CFO and several colleagues on the call were all synthetic. Visual ID checks no longer prove identity.

Helpdesk vishing

100+ enterprises. One phone call each.Scattered Spider has breached more than 100 major enterprises by vishing IT helpdesks. Casinos, retailers, telecoms, banks, multiple Fortune 100s. Every modern defense, walked past with a phone call.

Knowledge-based auth

The answers are already in the breach data.NIST deprecated KBA in SP 800-63A-4. Mother's maiden name, last four of SSN, prior addresses: all of it has been public for years.

Voice, face, and knowledge are no longer evidence of identity. Cryptographic device-bound proof is what's left.

Three places this becomes load-bearing.

Those attacks land at your helpdesk, on your video calls, at your loading dock. Each depends on a human knowing another human.

HELPDESK / IT SUPPORT

The "employee" calling for a password reset isn't who they say they are.

A social engineer pretexts your IT helpdesk. The agent has no real way to verify them. Old answer: security questions a breach already exposed. New answer: a verification request to the registered device. Right person verifies in seconds. Impersonator can't.

FINANCE / EXEC OPS / FRAUD

The CFO on the video call asking for a wire transfer might not be the CFO.

Voice and face are no longer evidence. The real CFO opens the app. You scan their code. You see a verified card signed by their device. The deepfake has none of that.

FACILITY / SECURITY DESK

The contractor at your data-center loading dock is, or isn't, the one you scheduled.

A printed work order is paper. A vendor badge is plastic. Both fake easily. The scheduled tech opens the app, the desk scans the code, the desk sees verified employer, role, photo. Mismatch with dispatch? They don't get in.

Verified, but selectively.

The presenter picks what to share, every time. The verifier sees only what was shared. Each field tagged Verified or Self-Reported. Nothing else moves.

PRESENTER

Alex picks what to share with Sarah

  • Photo

  • Name

    Alex Rivera

  • Company

    TechStart Inc

  • Job Title

    Engineering Director

  • Work Email

    alex.rivera@techstart.com

  • Personal Email

    alex.r@personal.com

  • Personal Phone

    +1 555 876 5432

VERIFIER

Sarah sees only what Alex shared

  • Photo

    Verified
  • Alex Rivera

    Verified
  • TechStart Inc

    Verified
  • Engineering Director

    Verified
  • alex.rivera@techstart.com

    Verified

Five shared, two not. Sarah sees what Alex chose. Nothing else. Next verification, he chooses again.

SELECTIVE DISCLOSURE

Picked each time.Work, personal, or custom. Defaults are conservative.

CONSENT-LED

Verifier sees only what was shared.No "show all" backdoor. The presenter's choice is the boundary.

VERIFIED OR SELF-REPORTED

Each field shows its provenance.Verified: attested. Self-Reported: not. Two states, no ambiguity.

Every other way of confirming a stranger is failing.

Knowledge-Based Auth

Deprecated. Answers are in breach data.

Visual ID Check

Deepfakes pass video. Fake IDs pass desks.

Call-Back Through a Known Number

Only works for parties you already know.

The hard cases are between strangers. No prior trust, no shared secret, no time for a heavy ID-proofing flow.

Cryptographic device-bound proof handles the hard case in seconds.

Real-time, privacy-preserving, deepfake-immune, and works between people who have never met.

Swipe sideways to compare. ScrambleID is the highlighted column.

MethodSpoofable in 2026Works for strangersPrivacy-preservingReal-time
Knowledge-based questionsMother's maiden name, employee ID, last four of SSNYesAnswers in breach data and OSINTYesNoSensitive data exposed every timeYes
Visual ID checkDriver's license, badge, video face matchYesDeepfakes and fake IDsYesNoFull document exposed to verifierYes
Call-back via known channelHang up, dial the number on the back of the cardNoNoRequires a pre-existing trusted channelYesSlowAdds minutes per verification
Identity verification servicesVeriff, Onfido, Persona, ID.meNoYesNoDesigned to expose full ID documentsNoBuilt for onboarding, minutes per check
ScrambleIDCryptographic challenge signed by the presenter's registered deviceNoPrivate key never leaves the deviceYesNo prior relationship neededYesSelective disclosure, per-verificationYesFive seconds end to end

Who this is for.

Anyone who can be socially engineered. Anyone whose authority can be impersonated. That's more of your organization than it sounds.

Edge cases

How it handles the obvious "but what if" questions.

The other party doesn't have ScrambleID.

Treat the verification as inconclusive. Fall back to whatever escalation you'd have applied with no proof at all. Untrusted by default is the safe state.

The verifier is anonymous (a security desk, a fraud team).

Supported. The presenter sees the verifier's role and organization without a personal name. Selective disclosure cuts both ways.

No personal phones in our facility.

The presenter completes the cryptographic exchange before entering. The phone goes in the locker. Verification good for the session.

Our dispatch record disagrees with the verified card.

That's a signal. The verifier sees a real person but the wrong assignment. Deny entry, call dispatch. Identity proof, not work-order proof.

A presenter's device is lost or stolen.

Revoked through identity proofing. Compromised device's signatures stop being honored within seconds. New device, new key, history preserved.

The verifier is on a desktop, no phone in hand.

The desktop app on Windows and macOS handles the same flow. Type the code, see the verified card.

Architectural questions.

What security architects, fraud leads, and privacy counsel ask before deploying.

How is this different from a digital ID wallet (Apple Wallet ID, mobile driver's licenses)?

Wallets are document containers; they show your driver's license, signed by the state. ScrambleID is identity-as-credential, signed by your registered device, with selective disclosure built in. Wallets handle consumer ID. ScrambleID handles enterprise verification across employees, contractors, executives, customers, and vendors.

How does this work with our existing IdP?

ScrambleID overlays your IdP. It doesn't replace Okta, Entra, Ping, or ForgeRock. The directory still owns identities and lifecycle. ScrambleID adds the verification layer for human-to-human trust events. A "Verified" badge means your IdP confirmed the field.

What is the audit trail?

Every verification produces a signed, timestamped record bound to both accounts, the registered device, and the fields shared. Streamable to your SIEM. Persists per your retention policy. The architecture page covers the full format.

Privacy posture for GDPR, CCPA, BIPA?

Selective disclosure is the structural answer to data minimization. ScrambleID never transmits or stores biometric templates; biometrics only unlock local key material in the secure enclave. Both parties can access records of what was shared, with whom, and when.

Is the verifier's identity also disclosed to the presenter?

Yes by default. The presenter sees who's requesting before choosing what to share. For verifier roles that represent a function (security desk, fraud team), an anonymous mode shows organization and role without a personal name. Presenter still chooses.

What if a presenter's device is compromised?

The verification is bound to the device's secure enclave; an attacker needs physical access plus the user's biometric or PIN. Lost or stolen devices are revoked through identity proofing. Auditable, attributable, revocable.

How does ScrambleID know the presenter is who they claim in the first place?

Enrollment establishes the device-to-person binding through your IdP's identity-proofing posture, which you already trust. Per-verification, the device's private key signs the challenge, proving continuity from enrollment forward. Verification is no stronger than enrollment, by design.

Does ScrambleID for the people surface work for workforce, B2B partner and vendor, and consumer verification?

Yes. ScrambleID for the people surface is one cryptographic verification layer across all three. Workforce verification covers internal scenarios: HR onboarding, security desk access, executive identity confirmation on video calls, and incident-response peer verification. B2B partner and vendor verification covers cross-organization trust events: vendor field engineers at customer sites, partner executives in video meetings, supplier representatives at security checkpoints. Consumer verification covers customer-facing trust events: contact center callbacks, in-branch banking, healthcare front-desk identity confirmation, and high-value transaction approvals. Same selective-disclosure model, same signed audit record, same IdP overlay across Okta, Microsoft Entra, Ping, or ForgeRock. No audience needs a separate trust stack.

Does this cover customers, vendors, and partners, not just employees?

Yes. The presenter doesn't need to be your employee. A customer can verify themselves when your contact center calls. A vendor's field engineer can verify at your security desk. A partner's executive can verify on a video call. Same cryptographic substrate; what differs is which attributes carry attestation.

What's the deployment effort?

Days to a working pilot. Weeks to production. The mobile app is the cryptographic anchor; IdP integration is OIDC-shaped. No CCaaS plumbing, no IVR work. The architecture page covers deployment patterns.

Can voice biometrics or behavioral signals layer on top?

Yes, as confidence signals. Voice biometrics, geolocation, behavioral analytics can add or subtract trust from a verification already cryptographically anchored. Layered, they defang the deepfake risk that breaks each method alone.

Proof of person

P2P proves a real human, not a synthetic, is the one consenting.

That's what the in-the-loop gate needs: a person the rail can prove, deepfake-immune, signing what they agreed to.

How the rail gates an action

Where to go next.

Stop trusting names, voices, and faces. Trust the device that signed.

Pilot in days. Production in weeks. One credential, every surface, real cryptographic proof.

Pilot ScrambleID →