What is iBeta certification?

iBeta certification is an independent biometric testing program that certifies Presentation Attack Detection (PAD) systems against ISO/IEC 30107-3, the international standard for biometric anti-spoofing. Testing is performed by iBeta Quality Assurance, an independent laboratory accredited by NVLAP (NIST). iBeta certification is required by major biometric buyers: banks, fintech companies, governments, and FIDO Alliance vendors, to verify that a liveness detection system can resist real-world spoofing attacks before it is deployed in production

The iBeta certification list covers three levels of Presentation Attack Detection testing under ISO/IEC 30107-3: Level 1 tests 2D attacks such as photo prints, cutouts, and display replays; Level 2 tests 3D mask attacks including silicone, latex, wrapped 3D paper, and cloth 3D masks; Level 3 tests the highest-fidelity custom-manufactured 3D masks (rubber and resin). Each level has stricter APCER, BPCER, and ACER thresholds than the previous

iBeta Level 2 certification tests biometric liveness systems against 3D presentation attacks - the attack class most commonly encountered in real-world fraud. Under ISO/IEC 30107-3 Level 2, systems must correctly identify spoofs including silicone masks, latex masks, wrapped 3D paper masks, and cloth 3D masks. APCER (Attack Presentation Classification Error Rate), BPCER (Bona Fide Presentation Classification Error Rate), and ACER thresholds are stricter than at Level 1. iBeta Level 2 is the most commonly pursued certification for fintech, KYC providers, and banking onboarding applications

iBeta certification typically takes 4–12 weeks end-to-end, depending on the certification level and how prepared your liveness model is before submission. The testing phase alone usually takes 2–6 weeks. Most delay comes from pre-submission preparation, gathering diverse training data, improving model accuracy, and iterating on failed attack types. Companies that prepare with comprehensive training datasets upfront tend to pass on first attempt; those that don't often need 2–3 submission cycles, significantly extending timeline and cost

iBeta certification fees typically range from $10,000 to $50,000+ per submission, depending on the certification level and attack types tested. Level 1 is the most affordable; Level 3 is the most expensive. However, the submission fee is often the smaller cost: failed attempts, re-submissions, and extended engineering time to improve model performance frequently exceed certification fees by 3–5x. Investing in comprehensive training data before submission is typically the highest-ROI decision in the certification process

To prepare for iBeta certification, your liveness model needs training data covering all attack types tested at your target level. For iBeta Level 1 - photo prints, cutouts, and display replays. For iBeta Level 2 - silicone, latex, wrapped 3D paper, and cloth 3D mask attacks. For iBeta Level 3 - high-fidelity rubber and 3D resin masks. 21% of companies that passed iBeta certification in 2025 are Axon Labs clients, who prepared their models using comprehensive attack-type coverage before submission

iBeta maintains a public list of certified vendors across all PAD certification levels. The list includes identity verification providers, fintech companies, KYC platforms, and biometric authentication vendors. Here are the reports on iBeta certification in 2024 and 2025