A scam so calculated it’s hard to believe
It started with something that looked like an ordinary road accident. A motorcycle clipped a car belonging to a close friend of our CEO, Phil Bos. The other rider was apologetic, calm, and eager to sort things out. They exchanged licence details the way you’re supposed to after any minor incident.
Except it wasn’t an accident. It was a setup.
The entire collision had been engineered with one goal: to obtain legitimate identity documents from an unsuspecting target. Within days of exchanging those details, the criminals had used that information to impersonate Phil’s friend, infiltrate their financial accounts, and drain hundreds of thousands of dollars.
"The money was devastating. But watching someone try to rebuild who they are after their identity has been stolen — that stays with you."
The financial loss was catastrophic. But what followed was in some ways worse. Proving you are who you say you are, after someone else has been pretending to be you, is a bureaucratic nightmare that can consume months or years of a person’s life. Banks, government agencies, insurers — all requiring proof of identity from someone whose identity had been weaponised against them.
Phil helped his friend navigate it. And through that process, a question kept surfacing: why do we keep handing our most sensitive information to strangers, on paper, in ways that are this easy to steal and misuse?
The problem hiding in plain sight
Identity fraud isn’t rare. It’s one of the fastest-growing categories of financial crime across Australia and globally. And yet the systems most businesses rely on to verify who they’re dealing with are remarkably fragile.
$2.18B
Lost to scams in Australia in 2025 alone
1 in 4
Australians have been targeted by identity fraud
+13.1%
Increased identity theft reports
The conventional approach to identity verification creates a troubling paradox: in order to prove who you are, you hand over your most sensitive data to organisations that store it, often indefinitely, in databases that become targets. The more widely your identity data is shared and stored, the more exposed you become.
Phil saw this clearly. The solution couldn’t simply be better fraud detection after the fact. It had to be structural. It had to change the way identity itself was handled.
Building something that shouldn’t have needed to exist
From that moment, BlueKee was born — not as a product looking for a problem, but as a direct response to one that had already caused real harm to a real person.
The mission was clear: build a platform that allows businesses to verify the identity of their customers with complete confidence, without ever needing to store that identity data themselves. Your identity stays on your device, under your control. You share it when you choose to, and revoke access when you don’t. Businesses get the verification they need. You never have to hand over a photocopy of your licence to a stranger again.
Nothing Stored is Nothing Stolen
That’s not just a tagline. It’s the architectural principle at the heart of everything BlueKee builds. By keeping identity data on the user’s own device rather than in a central database, we eliminate the kind of exposure that made Phil’s friend a target in the first place.
The why drives everything
Businesses today face a genuine tension. They need to know who they’re dealing with — to comply with regulations, to prevent fraud, to protect themselves and their customers. But the traditional way of satisfying that need creates its own risks: databases of sensitive documents, liability for breaches, and friction that drives customers away.
BlueKee resolves that tension. Set up your verified identity once, in under three minutes, and use it across any channel that needs it — forever. Businesses get seamless, reliable verification. Customers get to stay in control of their own data. And the kind of exploitation that upended a friend’s life becomes significantly harder to pull off.
That’s why we built BlueKee. Not because identity verification was an interesting market. Because someone we cared about was hurt by the absence of something better — and we decided to build it.
Every feature we ship, every integration we build, every business we work with, is in service of that original why: a world where your identity is yours to share, not someone else’s to steal.
See how BlueKee protects your customers and your business.
