---
title: "The fraud-friction paradox: Why stronger security should feel invisible"
description: "The post argues that the long-standing trade-off between security and seamless user experience is a false choice, especially as autonomous AI agents act across systems. High-friction measures such as passwords, CAPTCHAs, and one-time login checks can create insecure credential reuse and fail to govern over-permissioned agents or risks that emerge during a session. It proposes invisible, continuous risk evaluation using device, network, phone, email, communication, and behavioral signals, with event-triggered verification when an agent requests a consequential action. The approach also separates human authentication from agent identity and Know Your Agent (KYA), which define delegated authority, contextual rules, and time-bounded permissions while linking an agent to its deploying entity. Twilio is presented as a unified trust layer combining customer data, security intelligence, AI governance, and communication channels; the conclusion is that adaptive controls can protect users while making security largely invisible."
---

# The fraud-friction paradox: Why stronger security should feel invisible

[Twilio](https://yomu.fyi/company/twilio) · Anurag Dodeja, Reed Mcginley-Stempel, Catie Kolander · Aug 21, 2026

**Type:** Explainer

## Summary

The post argues that the long-standing trade-off between security and seamless user experience is a false choice, especially as autonomous AI agents act across systems. High-friction measures such as passwords, CAPTCHAs, and one-time login checks can create insecure credential reuse and fail to govern over-permissioned agents or risks that emerge during a session. It proposes invisible, continuous risk evaluation using device, network, phone, email, communication, and behavioral signals, with event-triggered verification when an agent requests a consequential action. The approach also separates human authentication from agent identity and Know Your Agent (KYA), which define delegated authority, contextual rules, and time-bounded permissions while linking an agent to its deploying entity. Twilio is presented as a unified trust layer combining customer data, security intelligence, AI governance, and communication channels; the conclusion is that adaptive controls can protect users while making security largely invisible.

## Context

The post addresses the perceived conflict between strong security and seamless user experience, arguing that passwords, CAPTCHAs, and other human-focused hurdles can encourage credential reuse while failing to control autonomous AI agents and changing risks during active sessions.

## Approach / What changed

It advocates continuous fraud-risk evaluation using device, network, phone, email, communication, and behavioral signals; event-triggered permission checks for consequential agent actions; and separate human authentication from agent identity and Know Your Agent (KYA) controls. Twilio is presented as a unified trust layer for these signals, governance, and communication channels.

## Takeaways

- Continuous trust checks are presented as necessary because a single OTP or magic-link login only establishes identity at the start of a session, while risk can change as activity unfolds.
- Know Your Agent (KYA) is described as a way to connect an AI agent to its deploying business or entity and enforce delegated authority, contextual rules, and time-bounded permissions.
- The proposed safety model uses phone messaging or voice to request explicit human permission when an AI assistant attempts a major task, rather than relying solely on front-door authentication.

**Tags:** [AI Agents](https://yomu.fyi/topic/ai-agents), [AI Governance](https://yomu.fyi/topic/ai-governance), [Authentication](https://yomu.fyi/topic/authentication), [Twilio](https://yomu.fyi/topic/twilio)

- Source: [Twilio](https://www.twilio.com/en-us/blog/insights/fraud-friction-invisible-security)
- Source URL: https://www.twilio.com/en-us/blog/insights/fraud-friction-invisible-security
- Ingested by Yomu: 2026-09-09T13:35:21.246Z

[Read original post](https://www.twilio.com/en-us/blog/insights/fraud-friction-invisible-security)