GBG and Darwinium target agentic-era fraud with intent intelligence

GBG and Darwinium unite identity and behavioural intelligence to close the trust gap opened by AI agents acting on behalf of verified users.

By Disrupts Editorial Team Wed, 21 October 2026 AI level 2 of 5

AI level 2 of 5: drafted by our AI editorial assistant from the company's announcement; fact-checked, edited and signed off by Mark Walker, Editorial Director. What the levels mean

A brightly lit data center aisle features parallel rows of black server racks displaying glowing teal digital waveforms and blue data patterns.

GBG, the London Stock Exchange-listed identity and location intelligence group, has formed a commercial partnership with San Francisco-based Darwinium to layer continuous behavioural and intent monitoring onto verified digital identities. The move targets a structural weakness in fraud prevention that is becoming materially more acute as AI agents take on transactional roles that were previously reserved for human customers.

Traditional fraud stacks are built around a moment: verify the identity, assess the risk, grant or deny access. That model functioned adequately when the entity on the other side of a digital interaction was always a human. It is already straining under social-engineering scams that manipulate legitimate account holders into authorised-push-payment fraud. It is likely to break further as agentic AI systems, acting with delegated authority, conduct payments, place orders and manage accounts at machine speed and scale. A verified identity says nothing about whether the agent acting in its name is doing what the account holder actually authorised.

Bridging the post-verification trust gap

Darwinium's platform deploys at the network edge of an organisation's digital environment, ingesting device intelligence, behavioural biometrics and journey-level signals across web, mobile, API and agent interaction channels simultaneously. Rather than a single point-in-time risk score, it maintains a continuous read on whether observed behaviour remains consistent with the intent of the verified identity behind it. When signals diverge, the system can apply graduated friction without blocking the interaction outright.

GBG, which processes billions of identity verification events annually for more than 20,000 customers across 70-plus countries, contributes what it knows about who a person or entity is. Darwinium contributes the contextual layer of what that person or agent is actually doing. Gus Tomlinson, GBG's Chief Product and Technology Officer, framed it as completing the trust picture: "It allows us to combine what we know about an identity with how a human or agent is actually behaving, helping our customers make more informed fraud decisions while continuing to deliver fast, low-friction digital experiences."

Darwinium's founding team, led by Alisdair Faulkner, previously built ThreatMetrix, an early digital identity and device intelligence company that was acquired by LexisNexis Risk Solutions in 2018 for approximately $820m. That heritage gives the startup credibility in enterprise fraud circles, where switching costs are high and buyer scepticism of "AI-era" claims runs deep.

The agentic economy's fraud surface

The convergence angle here is broader than a two-company partnership announcement. The rapid deployment of agentic AI across financial services, retail and enterprise software is creating an entirely new fraud attack surface that sits between cybersecurity and fintech infrastructure. Fraud systems designed around human session behaviour cannot natively distinguish a trusted AI agent from a malicious bot or a compromised automation workflow. The incumbents in identity verification, GBG included, face structural pressure to extend their remit beyond the authentication handshake.

The capital markets have noticed. Intent intelligence and continuous authentication sit at the intersection of the cybersecurity, fintech and AI-infrastructure investment theses. Enterprise security spending has proved resilient even as broader tech valuations have compressed, and the agentic-AI use-case is attracting dedicated venture interest from funds that previously focused exclusively on either fraud prevention or AI infrastructure. Whether smaller intent-intelligence specialists such as Darwinium pursue that capital independently or become acquisition targets for identity incumbents seeking to close the post-verification gap is a question investors in the fraud-prevention stack are already pricing.

For cross-sector strategists, the signal is directional: as AI agents proliferate across customer-facing digital journeys, the identity verification market will expand upward into continuous behavioural monitoring. That shift creates both competitive pressure for point-solution fraud vendors and a new procurement category for enterprise risk and technology buyers to navigate.