Incode Achieves iBeta Level 3 Liveness Conformance on iOS and Android

Incode Technologies has achieved iBeta Level 3 Presentation Attack Detection (PAD) conformance for its face liveness technology on iOS and Android. For fintech professionals, this represents a critical validation of passive biometric security, proving that high-level defense against sophisticated 3D masks can be achieved without increasing user friction during onboarding.

What was announced

Incode Technologies has achieved iBeta Presentation Attack Detection (PAD) Level 3 conformance under the ISO/IEC 30107-3 standard. This certification applies to Incode’s face liveness technology on both iOS and Android platforms. The testing, conducted by iBeta Quality Assurance, reported a perfect score with 0% Attack Presentation Classification Error Rate (APCER) and 0% Bona Fide Presentation Classification Error Rate (BPCER). This means that during the evaluation, no sophisticated spoofing attempts were incorrectly accepted, and no legitimate users were incorrectly rejected.

The technology is designed for digital onboarding and remote identity verification, functioning as a passive system. Unlike "challenge-based" systems that require users to smile, blink, or turn their heads, Incode’s solution completes the verification process using a single selfie capture. This approach is intended to defend against account takeovers and synthetic identity fraud while maintaining a low-friction user experience.

The company’s progression toward this standard began in 2019 when it became the first vendor to pass iBeta Level 1 with a passive approach. By 2022, the system was updated to address 3D mask attacks, leading to Level 2 conformance in early 2023. The latest 2026 achievement marks the highest level of iBeta testing, which simulates well-resourced attackers using specialized fabrication techniques and hyper-realistic masks.

"We are the first company to independently achieve iBeta Level 3 conformance on both iOS and Android – with zero errors and without adding friction to users,"

said Ricardo Amper, Founder & CEO at Incode.

The companies involved

Incode Technologies is a global leader in identity security and fraud prevention. The company has established a significant footprint in the financial services sector, powering identity decisions for eight of the top ten U.S. banks and the top three global neobanks. Beyond banking, its technology is utilized by eight of the top nine telecom companies and four of the top five global marketplaces. To date, the firm has processed more than 7.1 billion trust checks.

iBeta Quality Assurance operates as a testing laboratory that provides critical third-party validation for biometric systems. Its Presentation Attack Detection (PAD) testing is conducted under the ISO/IEC 30107-3 standard, which is the industry benchmark for determining the effectiveness of liveness detection technologies against spoofing attempts. By achieving Level 3 conformance, a vendor demonstrates that its system can withstand sophisticated attacks from well-resourced adversaries using advanced fabrication techniques, such as hyper-realistic 3D masks.

What FF News has reported before

FF News has closely tracked Incode’s role in the evolving fraud landscape. In August 2026, the publication covered how Agentic Fraud to Exceed 90% of All Attacks by 2028 as Incode Warns of AI-Driven Surge, highlighting the company's warnings regarding the rapid escalation of automated, AI-powered threats. This focus on high-level security follows earlier reports on the company’s expansion into diverse sectors, such as when Hudini and Incode Technologies Enter Strategic Partnership to Digitally Transform the Hospitality Experience in 2022. These reports underscore a consistent trajectory from sector-specific identity verification to addressing the systemic risks posed by generative AI and sophisticated spoofing techniques in the global financial ecosystem.

What this means

The achievement of Level 3 conformance with zero errors on both major mobile platforms signals a shift in the biometric "arms race." As generative AI makes high-quality spoofing tools more accessible, the industry is under pressure to move beyond basic 2D detection. The fact that this was achieved through a passive, single-selfie model challenges the long-held assumption that higher security requires more user friction. Competitors relying on "active" liveness—requiring users to perform gestures—may find themselves at a disadvantage as banks and marketplaces prioritize both conversion rates and defense against hyper-realistic 3D masks. This raises the bar for the entire identity verification sector.