July 2026 delivered a $1B+ machine-identity raise, a Supreme Court green light for Texas app-store age verification, Australia's 80,000-entity AML Tranche 2, the EUDI Wallet moving to production, and a deepfake-driven fraud surge — all pointing to one shift: identity is being rebuilt around continuous trust, not point-in-time verification.
The past few weeks produced one of the most concentrated bursts of identity, fraud, and compliance news in recent memory. A billion-dollar raise. A Supreme Court decision on app-store age verification. A continent-wide AML expansion. And a fraud landscape that keeps getting harder to recognize in the rearview mirror. Here is what identity leaders should be paying attention to.
A Billion Dollars Into Machine Identity
Keyfactor closed a $1B+ investment led by Summit Partners this month. The company manages billions of machine identities and serves roughly half of the largest banks in the US and Europe. The thesis reads as a clean statement of where the industry is heading: AI is generating identity sprawl faster than any human team can track, certificate lifespans are shrinking by regulatory decree, and post-quantum cryptography migration has stopped being a theoretical future problem. The capital is earmarked for global expansion, product, hiring, and strategic M&A. Watch who they acquire.
The Supreme Court Just Made Age Verification Real
On July 6, the U.S. Supreme Court declined to block Texas's App Store Accountability Act, letting enforcement begin while the First Amendment challenge works through the Fifth Circuit. The law requires app stores to verify users' ages and obtain parental consent before minors can download apps or make purchases. The significance runs beyond Texas: at least 20 states have enacted or begun enforcing age-verification laws, moving quickly from legislative text to audit standards and enforcement. For anyone building or selling age assurance, the US market just became materially larger and more urgent.
Australia's AML Tranche 2: 80,000 New Regulated Entities
On July 1, Australia's Tranche 2 AML/CTF reforms went live. Lawyers, accountants, conveyancers, real-estate agents, and dealers in precious metals now fall under AUSTRAC oversight for the first time, covering an estimated 80,000 businesses. Core obligations include customer due diligence, sanctions and PEP screening, and suspicious-matter reporting within three business days. The gatekeeper-profession trend is accelerating, and the EU's AMLR pushes in the same direction.
The EU's Digital Identity Wallet Is No Longer Abstract
The European Commission published final enrollment rules for the EUDI Wallet rollout in April (CIR 2026/798), and Member States must have at least one certified wallet available by December 24, 2026. Around that mandate an ecosystem is forming in real time: Wultra raised EUR 6.8M to scale post-quantum EUDI Wallet integration, Authologic added Google Wallet verifiable-credential support, and Persona expanded to natively support sovereign digital-identity wallets and bank-backed NFC tokens.
The Fraud Landscape: AI vs. AI
Sumsub's Identity Fraud Report puts the iGaming fraud rate at 1.53% in Q1 2026, up 18% year over year, and deepfakes now account for roughly 11% of first-party fraud globally, rising to 41% in Europe. Jumio reported a 700% year-over-year jump in injection attacks and has made injection defense the centerpiece of its 2026 roadmap. The consensus across Entrust, AU10TIX, Mitek, and Socure is that AI-generated identities are no longer an edge case: they build credit histories over years before attempting large-scale fraud. With AI-facilitated losses forecast to reach $40B in the US by 2027, the response has to be AI-native, continuous, and applied well past onboarding.
Notable Deals and Partnerships
Veriff acquired Vespia, expanding from identity verification into KYB. Inference: Union Investment selected Fenergo for an enterprise-wide KYC/CLM overhaul, a signal of how large asset managers are preparing for the EU AMLR. Reap partnered with Sumsub for reusable KYC across new markets. Concentrix and Napier AI announced AI-powered AML across Australia and New Zealand. And Bretton AI (formerly Greenlite) raised $75M Series B to scale agentic AI for financial-crime operations.
What We're Watching
The through-line: the identity stack is being rebuilt around continuous trust rather than point-in-time verification. Regulation is expanding the surface area, AI is attacking every seam, and investment is flowing to infrastructure that can monitor, adapt, and respond. Inference: The companies winning right now treat identity not as a checkbox but as a living signal. Counter-read: Some companies may still find success with traditional identity verification methods, especially in regions with less regulatory pressure. What would change this conclusion: A significant regulatory rollback or a breakthrough in identity verification technology that reduces the need for continuous monitoring.