The global landscape of digital security reached a significant turning point this month as identity and location intelligence leader GBG announced a comprehensive partnership with Darwinium, a specialist in behavioral and intent intelligence. This strategic alliance is designed to address one of the most pressing challenges in modern cybersecurity: determining whether the actions of a verified individual—or an autonomous AI agent acting on their behalf—remain consistent with legitimate intent throughout the entire digital customer journey. As the "agentic era" of the internet begins to take shape, where software agents increasingly perform tasks and financial transactions for humans, the ability to distinguish between authorized automation and malicious exploitation has become a critical requirement for global enterprises.
The collaboration integrates GBG’s extensive global identity data and location technology with Darwinium’s continuous behavioral monitoring platform. This combined offering provides a multi-layered defense mechanism that moves beyond traditional "point-in-time" verification. While verifying that a person is who they claim to be remains a fundamental pillar of security, the rise of sophisticated social engineering and AI-driven fraud means that even a verified, legitimate identity can be used to facilitate a crime. By monitoring intent and behavior continuously, the partnership aims to protect more than 20,000 GBG customers worldwide from the evolving tactics of digital criminals.
The Shift Toward Continuous Intent Intelligence
For decades, the standard for digital trust was established at the "front door" of an application. Once a user successfully navigated the Know Your Customer (KYC) process and authenticated their identity, they were generally trusted to perform any action within the platform. However, the fraud landscape has shifted toward post-authentication exploitation. Scammers now frequently use "authorized push payment" (APP) fraud and other social engineering tactics to manipulate verified customers into performing fraudulent transactions themselves.
Darwinium’s technology addresses this vulnerability by evaluating behavioral, device, and journey-level signals in real-time. Unlike traditional tools that might only flag a suspicious login attempt, Darwinium monitors the entire session to identify deviations from a customer’s typical behavior or an authorized agent’s specific mandate. When integrated with GBG’s identity and location capabilities, businesses gain a holistic view of the user. They can see not only that the identity is valid and the location is plausible but also that the actions being taken align with the expected intent of that specific user.
This approach is particularly vital as AI agents become more prevalent. These agents—autonomous or semi-autonomous software programs designed to interact with websites and services on behalf of a human—are becoming a staple of the digital economy. While they offer immense convenience, they also present a new attack vector. Fraudsters can deploy "undeclared" AI agents to mimic human behavior, bypass traditional bot detection, and execute high-speed fraudulent transactions.
A Chronology of Innovation and Partnership
The partnership between GBG and Darwinium is the result of several years of technological evolution within both firms. GBG, headquartered in Chester and publicly traded on the London Stock Exchange, has been a cornerstone of the identity intelligence industry since its founding in 1989. Over three decades, the company has expanded its footprint to include document authentication, biometric verification, and sophisticated geolocation compliance.
In recent years, GBG has actively sought to enhance its ecosystem through strategic collaborations. Earlier this month, the company announced a referral partnership with GeoLocs, a geolocation compliance platform. This move was aimed at introducing gaming and betting operators to GBG’s identity verification suite, highlighting the company’s commitment to sector-specific security needs.
Darwinium, though a younger entity, has rapidly established itself as a disruptor in the fraud prevention space. Founded in 2021 in San Francisco, the company was built on the premise that traditional security perimeters are no longer sufficient. Darwinium most recently demonstrated the efficacy of its platform at FinovateFall 2026. During the showcase, the company revealed how its technology can identify undeclared AI agents operating through a browser—agents that are frequently missed by point-in-time device fingerprinting and standard behavioral biometrics.
By analyzing agent-to-browser interaction signals that are difficult for AI to suppress, Darwinium provides a probabilistic method for distinguishing humans from software. This technical milestone was a primary catalyst for the partnership with GBG, as it provided the missing "behavioral context" required to secure the next generation of digital interactions.
Supporting Data and the Economic Impact of Fraud
The urgency of this partnership is underscored by the escalating costs of digital fraud globally. According to data from the Federal Trade Commission (FTC), consumers reported losing more than $10 billion to fraud in 2023, a 14% increase over the previous year. A significant portion of these losses is attributed to imposter scams and sophisticated social engineering, where the "identity" of the victim is technically verified, but the "intent" behind the transaction is fraudulent.
Furthermore, the rise of the "agentic economy" is expected to complicate the fraud landscape significantly. Market analysts predict that by 2028, a substantial percentage of e-commerce and banking interactions will be initiated by AI agents rather than human clicks. Without the ability to differentiate between a "trusted agent" (such as a personal AI assistant) and a "malicious bot," businesses risk either suffering massive fraud losses or creating excessive friction that alienates legitimate users.
In the United Kingdom, where GBG is headquartered, the Payment Systems Regulator (PSR) has introduced new mandatory reimbursement requirements for APP fraud. This regulatory shift puts the financial burden of fraud on the institutions, making it more important than ever for banks and fintechs to have tools that can spot suspicious behavior before a transaction is finalized. The GBG and Darwinium partnership provides a direct response to these regulatory pressures by offering a more robust, behavior-based defense.
Executive Perspectives on the Agentic Era
Leadership from both organizations has emphasized that the partnership is a proactive move to stay ahead of the "agentic" shift in technology. Michael Rodriguez, Chief Operating Officer at Darwinium, noted that while GBG has built a strong foundation in global identity, Darwinium adds the necessary behavioral layer to complete the picture of trust.
"Businesses need to distinguish a trusted customer using a trusted agent from fraudsters and malicious automation without simply blocking AI-driven traffic," Rodriguez explained. He emphasized that the goal is not to stop the use of AI agents, but to enable them safely. "Together, GBG and Darwinium create a much richer picture of trust and give businesses the confidence to embrace new forms of digital interaction without compromising security or customer experience."
Gus Tomlinson, GBG’s Chief Product & Technology Officer, echoed these sentiments, highlighting the importance of context in the modern digital journey. "Identity remains fundamental to digital trust. As AI agents become an increasingly important part of the customer experience, businesses also need the context to understand what is happening after identity has been established," Tomlinson stated. He noted that the integration allows customers to make more informed decisions by combining "who" the user is with "how" they are behaving.
Broader Implications for Digital Trust and Security
The implications of this partnership extend beyond simple fraud prevention. It represents a shift in the philosophy of digital identity—from a static attribute to a dynamic, continuous state. This model of "continuous trust" is likely to become the blueprint for future cybersecurity frameworks.
- Enhanced Resilience for Financial Institutions: Banks and credit unions are the primary targets for AI-driven fraud. By implementing Darwinium’s browser-level signal detection alongside GBG’s biometric and location data, these institutions can better protect their assets and their customers’ savings from sophisticated takeover attempts.
- Reduced Friction for Genuine Users: One of the greatest challenges in security is the "false positive"—blocking a legitimate customer because their behavior looks suspicious to a primitive algorithm. The high-fidelity data provided by this partnership allows for more nuanced decision-making, ensuring that genuine humans and authorized agents can transact without unnecessary hurdles.
- Preparedness for Regulatory Evolution: As governments worldwide move toward stricter liability laws for digital fraud, the ability to demonstrate a "complete view of trust" across the customer journey will become a legal and compliance necessity for global enterprises.
- The Normalization of AI Agents: For the agentic economy to thrive, there must be a secure environment for agents to operate. This partnership provides the infrastructure needed for businesses to say "yes" to AI-driven interactions, knowing they have the tools to spot malicious intent in real-time.
As digital crime becomes more automated and identities become easier to spoof or manipulate through deepfakes and social engineering, the combination of identity intelligence and behavioral intent intelligence is no longer a luxury—it is a requirement. The alliance between GBG and Darwinium serves as a critical defense for the 20,000 organizations relying on their technology to navigate the complexities of the modern, AI-augmented digital world.
