Trust Stamp Waives Fees for Banks After Massive IDScan Data Breach
The identity verification firm is accelerating onboarding for its DLDV service as millions of leaked documents fuel global fraud risks.
Trust Stamp (Nasdaq: IDAI) is waiving setup fees and accelerating the onboarding process for financial institutions transitioning to its identity verification service. The move follows a massive data breach at IDScan.net that exposed millions of identity documents to the dark web.
The breach, first reported by Krebs on Security on September 1, 2026, involved the leak of a vast trove of scanned identity documents. While reports on the exact volume vary, Trust Stamp cited approximately 166 million leaked documents, while Biometric Update reported the figure exceeded 170 million, including 153 million driver's licenses. The FBI opened an investigation into the IDScan breach on the same day the leak was first reported.
The Risk of Image Storage
Traditional identity scanning systems often store raw images of documents to verify security features. However, the IDScan incident highlights the systemic vulnerability of this approach. When these images—which can include infrared and ultraviolet scans—are leaked, they provide bad actors with the precise data needed to create sophisticated forgeries capable of bypassing standard banking security checks.
Trust Stamp is positioning its AAMVA Driver's License Data Verification (DLDV) service as a secure alternative to these legacy systems. Unlike traditional scanners, the DLDV service verifies identity information against DMV databases in real-time. Crucially, the process does not require the storage of identity document images, removing the primary target for hackers.
Industry Implications
For the financial sector, the scale of the IDScan breach creates an immediate and significant fraud risk. By offering free onboarding, Trust Stamp is leveraging this security failure to push the industry toward Privacy Enhancing Technologies (PETs). These technologies aim to eliminate the need for institutions to hold sensitive biometric or document images on their own servers or those of their vendors.
"Trust Stamp has always been committed to providing Privacy Enhancing Technologies (PETS)," said Gareth N Genner, CEO of Trust Stamp. He noted that the AAMVA DLDV service provides government-backed identity trust across physical and digital environments without compromising security by storing user images.
What to Watch
As the FBI investigation continues, the industry will be watching to see if other identity verification providers face similar vulnerabilities. While the total volume of leaked documents remains slightly disputed between sources, the core risk to financial institutions is clear. The primary focus for banks now shifts to whether real-time database verification can fully replace the traditional image-based verification model without introducing new bottlenecks in the onboarding process.