Okta, a cloud-based identity and access management company, announced that it has introduced mandatory identity verification through Persona for employee onboarding and account recovery processes.
In a statement, the company said the change is intended to reduce risks tied to fraudulent or stolen identities being used in employment applications, particularly at cybersecurity firms where access to sensitive systems may be targeted.Â
Okta added that Persona is its first integrated identity-proofing vendor and that verification is now required for both onboarding and account recovery workflows. The process includes government-issued photo ID checks matched against live, attention-based selfies, along with additional country-level screening for sanctions compliance.
Synthetic identity fraud continues to be a major concern for financial and technology sectors.Â
The Deloitte Center for Financial Services projects annual losses from such fraud could reach at least $23 billion in the United States by 2030. Companies reported median global losses of about $145,000 per employee-related fraud incident in 2024.Â
Persona, which serves as a third-party data processor, verifies government-issued IDs against live selfie images while limiting the amount of personal data shared with client platforms. According to its privacy documentation, the company does not sell user data or use it for AI model training.
Broader fraud trends continue to escalate. The Federal Trade Commission reported U.S. consumers lost more than $12.5 billion to fraud in 2024, a 25% increase from the prior year. Industry data shows deepfake attempts occurring roughly once every five minutes during the year, while digital document forgery increased 244% year over year.Â
Persona says it operates under GDPR and CCPA compliance frameworks, supports customizable retention and deletion rules for clients, and offers configurable verification tools that can flag identities resembling known threat actors while reducing false positives from minor inconsistencies.
Okta, based in San Francisco, provides cloud identity and access management services for workforce and customer authentication. The company reported approximately $2.6 billion in revenue in fiscal 2026 and said it continues to emphasize phishing-resistant authentication alongside expanded identity verification measures for its workforce systems.
