Digital account creation puts banks and fintechs in a bind. Nearly everyone who applies is exactly who they say they are and just wants to start using the new account. A small slice, though, is hiding something.
If you treat every applicant the same heavy-touch way, you'll frustrate the genuine majority into abandoning their application halfway through. Strip the process down to make onboarding effortless for everyone, and the bad actors you actually needed to catch walk right through with them.
Risk-based onboarding gets around that trade-off by reading the signals collected during onboarding in real time and deciding case by case who can move quickly and who needs a harder look.
Identity verification platforms that can fast-track low-risk banking customers and escalate suspicious applications include GBG, Alloy and Persona.
Fast-tracking a low-risk customer means they clear KYC with fewer steps (not zero scrutiny). The difference is that strong initial signals let the platform skip checks a riskier applicant would need to go through.
A low-risk applicant is typically someone whose supplied identity details match authoritative database records and whose device and behavioral signals raise no red flags. That confidence lets the platform stop at database and background checks instead of asking for more.
Suspicious or inconclusive applications require a different approach. If identity details can't be corroborated across databases, fraud signals point to elevated risk, or the results of different checks conflict, the platform escalates the application to gather more evidence.
Note: Being unable to verify someone isn't the same as suspecting them. An applicant who can't be verified through database checks alone may just have a thin credit file or a recent address change. That calls for another way to confirm who they are, while a strong fraud signal calls for a firmer response.
"It's all about understanding who the customer is and then applying the right level of verification for that person," says Darren Neil, KYC Specialist at GBG.

Read more: Automated KYC verification and customer onboarding
Not every escalation needs a human analyst. Sending every exception to manual review creates big backlogs and drives up the cost of each account you open, so good platforms put automated steps between fast-tracking and manual investigation. If the initial database checks come back inconclusive, for example, the system can request another verification method on its own.
Depending on why the application was escalated, the customer might be sent to one of these step-ups:
If automated checks can't resolve an application, it goes to a human. Analysts work faster when they get the full picture instead of a generic failure message: the risk signals that triggered the review, the evidence collected, and the history of earlier verification outcomes.
You also need a complete audit trail across automated and manual decisions. When auditors ask why an applicant was fast-tracked or escalated, your risk team has to be able to show which rules fired and what evidence supported the final decision.
|
GBG |
Alloy |
Persona |
|
|
Risk-based workflows |
Dynamic journeys tailored by risk score, jurisdiction, and customer type |
Configurable workflows varied by risk tier, channel, and product |
Conditional branching logic paths based on verification signals |
|
Verification ecosystem |
110+ identity, fraud, and risk modules managed in-house |
Open orchestration connecting with 270+ third-party data providers |
Proprietary verification tools plus third-party integrations |
|
Ongoing risk management |
Continuous risk monitoring and transaction monitoring after account opening |
Identity and risk checks across the customer lifecycle |
Workflows and re-verification responding to risk over time |
|
Differentiator |
Combines customizable risk orchestration with a broad suite of native verification modules |
Vendor-neutral orchestration giving banks freedom across third-party sources |
Customizable branching logic for automated actions and reviews |
GBG is an identity verification and KYC & KYB solution with a lot of customers in the banking and financial services sector, from HSBC to BNP Paribas Personal Finance or AmBank.
The GBG Go platform adjusts each applicant's verification path in real time based on risk score, jurisdiction, customer category, and more. Here's how it handles each stage:
The GBG Go solution supports configurable risk thresholds, so you can define what evidence is required for different customer profiles before an application begins.
The platform gives you access to 110+ identity, fraud, and risk modules, but each onboarding journey runs only the ones each customer profile needs. Low-risk applicants skip the unnecessary steps and are far less likely to abandon the application.
"If your onboarding journey is painful, with extra steps, document uploads, and waiting, people could just go to a competitor where it is quicker," says Stefan Gajewski, Head of Product – Identity at GBG.
When initial checks reveal inconsistencies or elevated risk, GBG Go changes the applicant's path on the spot. In the background, GBG Go looks at identity history, age and credit activity and calculates a score that flags constructed identities before the applicant is approved.
From there, the step-up depends on what was found and on your own risk thresholds and onboarding logic.
As an example:
Your risk and compliance teams can change verification rules and thresholds in GBG Go's no-code drag-and-drop workflow builder, without filing an engineering request. They set the rules and thresholds themselves and decide how applicants move between the identity, fraud and risk modules. For example, you can:
When an application needs human review, GBG Go's built-in case management gives analysts that context in one dashboard: the risk score, the specific failure reasons and the full verification history.
Read more: How to build a compliant global KYC program
Alloy and Persona also offer orchestration that adjusts onboarding paths based on applicant risk. Here's how each one works:
Alloy is an identity platform often used by banks and fintechs. Risk teams build custom workflows that set how applicants move through verification, based on the risk thresholds they define.
You can line those sources up in sequence, or waterfall them, until an application is resolved. If the primary database can't verify an applicant, Alloy can query a secondary provider before escalating to manual review.
Persona also offers identity verification and workflow automation tools that route applicants based on risk signals and verification outcomes.
With Persona Workflows, you build branching logic that decides an applicant's path as data comes in:
Persona combines its native verification modules with data from external risk vendors, so outside fraud signals can influence workflow decisions.
You can set custom alert thresholds, and crossing one opens an investigation case with the collected evidence attached.
The right platform lets you fast-track genuine customers, step up the uncertain ones, and send only what's left to a human, under rules your own team can change.
Compare providers on how well they handle each of those stages for your customer mix.
Platforms evaluate multiple background signals during the initial seconds of onboarding, including database match rates, device intelligence, IP location and synthetic identity risk scores. Applicants whose details match authoritative records and show clean fraud signals are categorized as low risk, while those with conflicting data or elevated risk indicators are flagged for step-up verification.
Not necessarily. Fast-tracking should be done in such a way that low-risk applicants still satisfy all regulatory requirements, but they avoid high-friction tasks when background evidence provides sufficient confidence.
If an automated step-up check (such as querying a secondary database or requesting an ID upload) fails to resolve an application, the platform routes the case to a compliance dashboard for manual review. GBG Go typically attaches all gathered evidence, risk scores, and check histories to the case file so risk analysts can investigate without repeating previous steps.
*Disclaimer: Information relating to third-party products and companies referenced in this article is based on publicly available sources and official publications at the time of writing.
While reasonable efforts have been made to ensure accuracy, product features, positioning and company information may change and GBG does not guarantee that all information remains current or complete. Nothing in this article constitutes an endorsement, recommendation or ranking of any third-party provider. Readers should consult each provider’s official website and conduct their own assessment before making any purchasing decisions.
To request an update or correction, please contact press@gbg.com.*
Sources: