Why Utility Companies Are Easy Targets for Identity Fraud, and How to Close the Gap
Key takeaways
- Utility accounts are easier to open fraudulently than bank accounts, because onboarding checks are typically weaker and billing cycles delay detection for 30 to 60 days.
- Synthetic identity fraud, AI-personalized scam outreach, and deepfake attacks on verification systems are all accelerating at the same time.
- Weak verification costs utilities in chargebacks, regulatory exposure, and eroded customer trust, and the exposure compounds for utilities operating across multiple state-regulated territories.
- The fix is real-time verification at signup: a government-issued ID checked against a live selfie or liveness check.
- Lightico's identity verification (IDV) capability, part of its broader journey orchestration platform, closes this gap by verifying customers in real time inside the utility's own website, app, or contact center flow.
Opening a utility account is often easier than opening a bank account, and that is exactly the problem. Fraudsters have noticed.
Utility companies are attractive targets for identity fraud because account-opening checks are typically weaker than a bank's, and billing cycles delay detection for weeks after an account is opened. Research reported by Utility Dive found that utilities face this exposure for a combination of technical, regulatory, and structural reasons, and that fraud rings are increasingly using both stolen and synthetic identities to open utility accounts. For a company operating across multiple state-regulated service territories, the same gap shows up in every jurisdiction, and it compounds each time an account moves between territories without a fresh identity check.
Closing that gap doesn't require new laws or slower signups. It requires verifying identity at the moment an account opens, the approach behind Lightico's identity verification (IDV) product, which this piece explores in more detail below.
Why utilities are attractive fraud targets
Three structural gaps make utility accounts an easier mark than most other regulated services.
Weak identity checks at onboarding
Compared to banks, many utilities still use limited identity verification. In the absence of strong "know your customer" rules, criminals can easily open accounts using stolen or synthetic identities. A new service connection often asks for little more than a name, an address, and a Social Security number, none of which is independently confirmed against a government-issued ID at the point of signup.
Slow detection
Billing cycles stretch 30 to 60 days, giving scammers weeks of service before red flags appear. By the time an account looks suspicious, the fraudster has already had a month or two of free electricity, gas, or water, and has often moved on to the next identity.
Regulatory protections that cut both ways
Consumer protections like shutoff moratoriums exist to keep vulnerable customers connected during hardship or extreme weather. Fraudsters know this too, and use it to stretch out service on an account before it gets flagged or disconnected.
AI is escalating fraud on multiple fronts
Three developments are raising the stakes for utilities specifically.
Synthetic identity fraud blends real personal data, such as a valid Social Security number, with fabricated names and details. It is difficult to catch precisely because it does not map to a single real victim who can report it. That absence of a victim is part of what makes it so persistent across industries, utilities included.
AI is also making customer-facing scams sharper and cheaper to run. Fraudsters are now using AI to analyze a potential victim's online presence and personalize scam outreach, and to generate geographically targeted online ads that appear when people search for keywords related to their energy bills. AARP's Director of Fraud Prevention Programs, Kathy Stokes, has described this shift as giving scam operations an industrial-scale leap in capability.
AI is being turned against verification systems as well, not only against customers. The Financial Action Task Force's December 2025 Horizon Scan on AI and deepfakes found that fraud detection has not kept pace with generative AI, and that deepfake images, video, and audio can pass through liveness and biometric checks undetected until later in the review process. For a utility, that means the same ID-and-selfie check built to stop fraud can itself become a target, which is why the quality of the liveness detection behind a verification flow matters as much as having one at all.
As customer-facing scams increase, legitimate utility verification requests are increasingly mistaken for phishing, which can leave a customer hesitant to complete a signup that was never a scam in the first place.
What weak verification actually costs utilities
The cost isn't only the value of stolen service. It shows up in a few places at once:
- Chargebacks and unrecoverable losses on accounts that never should have opened in the first place.
- Regulatory and compliance exposure, particularly where state commissions require documented verification steps for deposits, payment agreements, or assistance enrollment, and particularly for utilities managing different rules across multiple service territories.
- Erosion of customer trust when a utility's own legitimate verification request gets mistaken for the scam it's trying to prevent.
What closing the gap looks like
Closing the gap comes down to verifying identity once, correctly, at the moment an account opens, in place of detection that happens weeks later after the damage is done.
That means checking a government-issued ID against a live selfie or liveness check at signup, in place of relying on static data points like a name and a billing address. Lightico's identity verification flow works this way: a customer uploads a driver's license and a selfie through a secure, branded step embedded directly in the utility's own website or app, so the check happens inside the channel the customer already trusts, avoiding a redirect that looks like the kind of link a scam text would send. Agents can trigger the same flow from the contact center for phone-initiated signups, so verification covers self-service and agent-assisted traffic alike. IDV sits inside Lightico's broader journey orchestration platform, which also handles e-signatures, document collection, and workflow automation across the same customer interaction, so a utility can move a customer from identity check to signed agreement without switching tools.
That same platform also applies AI-powered document collection and processing to the paperwork utilities collect around identity, not just the ID itself. Proof of income, proof of residence, and other supporting documents needed for assistance program enrollment can be captured, classified, and validated the same way, through intelligent document processing (IDP), rather than reviewed by hand one attachment at a time.
A familiar before-and-after
Consider a large electric utility that, until recently, asked new customers to email a photo of their driver's license and a selfie before service could be activated. Those images sat in a shared inbox until an agent had time to review them by eye, with no automated check that the face matched the ID or that the ID itself was genuine, and no reliable way to know how many fraudulent applications slipped through while the request waited. Moving that same check into a real-time, guided flow at the moment of signup turns a slow, unvalidated manual step into an automated one that happens before the account is ever created.
Utilities including Southern Company and PECO already use Lightico's identity verification product for this kind of onboarding check.
Done this way, verification replaces manual document review and emailed attachments with a guided flow that takes minutes, delivering a stronger identity check and a faster signup together.
See how utilities are verifying customer identity in real time, without adding friction to onboarding: Lightico Identity Verification.
Ready to see it on your own onboarding flow? Request a demo.
Frequently asked questions
Why are utilities targeted by identity fraud?
Utility onboarding typically requires less identity verification than banks require, and billing cycles delay fraud detection by 30 to 60 days, giving fraudsters weeks of service before anyone notices.
What is synthetic identity fraud?
Synthetic identity fraud combines real personal data, such as a valid Social Security number, with fabricated names and details to create a new identity that doesn't belong to any single real victim, which makes it harder to detect and report than traditional identity theft.
How can utilities verify identity without adding friction?
By running a real-time ID and selfie or liveness check inside the utility's own website or app at the moment of signup, the approach Lightico's identity verification product uses, rather than relying on emailed documents or a third-party redirect that a customer may not trust.
Does stronger verification slow down customer onboarding?
Not when it's built into the signup flow itself. A guided, mobile-friendly verification step typically takes minutes and replaces slower manual processes like reviewing emailed IDs, rather than adding a separate slow step on top of them.
Glossary
Identity verification (IDV)
The process of confirming that a person opening an account is who they claim to be, typically by checking a government-issued ID against a live selfie or liveness check. For utilities, IDV is the step that closes the onboarding gap described above, and it's one of the core capabilities within Lightico's journey orchestration platform, alongside e-signatures, document collection, and workflow automation.
Know your customer (KYC)
A set of identity verification requirements originally built for banking, designed to confirm a customer's identity before opening an account or providing a service. Utilities have historically operated without KYC-grade checks, which is part of why they're an easier fraud target. More on KYC and compliance.
Synthetic identity fraud
A form of fraud that combines real personal data, such as a valid Social Security number, with fabricated names and details to create a new identity that doesn't belong to any real victim. It's one of the most common ways fraudsters open utility accounts, since a name-and-SSN check alone can't catch it.
Liveness check
A verification step that confirms a selfie or video was captured in real time by a live person, rather than a photo of a photo or a static image, to prevent spoofing. This is what lets a utility verify a new customer remotely, over a phone camera, without requiring an in-person visit, and it's the mechanism behind Lightico's identity verification flow.
Deepfake
AI-generated or AI-manipulated image, video, or audio built to convincingly mimic a real person or document, increasingly used in attempts to spoof identity verification and liveness checks. As utilities move more onboarding online, this kind of attack is why the quality of the liveness detection behind a verification flow matters as much as having one at all.
Chargeback
A reversal of a payment, or an unrecoverable loss a company absorbs, when a transaction, such as a fraudulently opened utility account, turns out to be invalid. Verifying identity at signup is what keeps a fraudulent account from being opened in the first place, which is where chargeback exposure starts.
Shutoff moratorium
A regulatory rule that temporarily prohibits utilities from disconnecting service, often during extreme weather or financial hardship, intended to protect vulnerable customers. It's a utility-specific protection that fraudsters can exploit to stretch out service on an account before it's flagged, part of why utilities face a different fraud profile than other regulated industries.
Onboarding
The process of signing up a new customer and opening their account, from initial application through activation of service. It's also the single point where identity verification, done well, closes the fraud gap described throughout this piece.
About Lightico
Lightico is a journey orchestration platform that helps regulated industries, including utilities, banking, auto finance, insurance, and telecommunications, complete complex customer interactions in a single digital session. Its capabilities include identity verification, e-signatures, document collection, and workflow automation, letting businesses move a customer from first contact to a completed, compliant transaction without switching tools or channels. Utilities including Southern Company, PECO, and BT rely on Lightico to modernize onboarding, billing, and compliance workflows across self-service and contact center channels. Learn more at www.lightico.com.
