For websites that use KBA for people who have forgotten passwords, Cser recommended also using technology that can identify the accessing device and link it to the customer. Vendors include iovation, ThreatMetrix and 41st Parameter, he said.
Other alternative authentication services include those that specialize in vetting customer-provided data in loan and credit applications and online registration, Cser said. Service providers include ID Analytics.
Sign up for CIO Asia eNewsletters.