--- title: "What happens when a digital identity can be created in minutes—and a machine can act behind it?" description: "In a world filled with convincing synthetic people and independent software agents, trust may depend less on how someone looks or sounds—and more on whether we can prove who authorized an action." canonical: https://yottabit.com/stories/the-next-age-of-digital-trust/ site: "YottaBit (yottabit.com), companion research project of futurist Jim Carroll (https://jimcarroll.com)" section: "The Future Beyond the Future (2031/2036 scenarios)" topic: "2036" type: "scenario (not a prediction)" modified: 2026-10-19 --- > YottaBit is futurist Jim Carroll's plain-English explainer site and the companion research project to [jimcarroll.com](https://jimcarroll.com/). For his biography, keynotes and booking, use jimcarroll.com (book: https://jimcarroll.com/contact/). > **Scenario, not a prediction.** This piece explores what may become possible by 2031 and 2036, grounded in current evidence. *2036 / THE FUTURE BEYOND THE FUTURE* Identity + Digital Trust + Artificial Intelligence # What happens when a digital identity can be created in minutes—and a machine can act behind it? In a world filled with convincing synthetic people and independent software agents, trust may depend less on how someone looks or sounds—and more on whether we can prove who authorized an action. *THE BIG PICTURE / IN 30 SECONDS* ## Five ideas. *One extraordinary possibility.* 2026 2031 2036 1. **We've already entered a world where convincing faces and voices can be synthesized.** In 2026, the question of whether a recording was made by a person is no longer an abstract concern. Audio, video, text and online profiles can be produced or manipulated at remarkable speed. 2. **Now combine that with AI agents that can take actions.** A fabricated identity isn't merely a fake picture if a software agent can send instructions, approach customers, open conversations or attempt transactions behind it. The risk begins moving from misleading content toward unauthorized activity. 3. **That forces a new distinction between identity and permission.** Even if a system can prove that an agent came from a particular business, that doesn't mean the agent is authorized to sign a contract, move money or disclose private information. Trust will increasingly require evidence of both origin and authority. 4. **By the early 2030s, important interactions could carry verifiable records of who approved them.** An organization might accept a routine machine request only when it includes limited authorization, a clear owner and an auditable record. People may also ask for reliable information about the origin of high-stakes images, videos and documents. 5. **The extraordinary 2036 possibility is a new trust infrastructure for the digital world.** Just as the web needed common ways to connect computers and secure transactions, an economy of human and machine identities may require widely understood ways to prove what happened, who was responsible and where the limits of delegated power lay. **THE YOTTABIT WOW FACT: 2026: The identity question changed.** **2026: The identity question changed.** The U.S. National Institute of Standards and Technology published a concept paper specifically examining the identity and authority of software agents. It's a significant sign that digital trust is expanding beyond proving which human logged in. We also need to understand what an automated system is allowed to do. **THE BIGGER STORY:** What happens when looking human becomes easy—but proving responsibility becomes one of the most valuable capabilities in the economy? *THE FULL STORY / TODAY'S EVIDENCE, TOMORROW'S POSSIBILITIES* ## What happens when *the breakthroughs compound?* *The extraordinary possibility: In a world filled with convincing synthetic people and independent software agents, trust may depend less on how someone looks or sounds—and more on whether we can prove who authorized an action.* ### The call that changes everything Imagine you're running a business in 2036. A video call arrives from someone who appears to represent a major supplier. The face looks familiar. The voice sounds natural. The caller knows the contract history, recognizes your colleagues and asks for an urgent change to payment instructions. A decade earlier, a familiar face and confident voice might have felt like reassurance. In this scenario, they might not mean very much. The person might be real. It might be an authorized digital representative. It might be a synthetic character managed by a legitimate organization. Or it might be an impersonation built to steal money. The critical question becomes one your eyes and ears cannot answer: **who has the authority to ask for this change?** And imagine the same uncertainty spreading beyond video calls—to electronic signatures, medical records, job applications, insurance claims, customer-service conversations and software agents interacting directly with each other. The challenge is not merely that content can be fake. It's that actions may have consequences before a person can investigate them. 2026WHAT'S REAL ### 2026: We already know appearances cannot carry the burden of trust A convincing recording once seemed like powerful evidence. Now it can be generated, edited, revoiced or assembled using widely accessible software. That doesn't mean every digital recording is suspicious, but it does mean that visual plausibility cannot establish its history. Efforts to provide better evidence already exist. The Coalition for Content Provenance and Authenticity has developed Content Credentials, a way to attach information about a digital asset's origin and editing history in a verifiable form. The creators of the standard are careful about its limitations: verifying the attached record does **not** establish that the claims inside an image or document are true. A camera can faithfully record a staged event. An authentic human can lie. And an unsigned image isn't automatically fake. At the same time, software agents create a related but different problem. If an AI system can browse a supplier's website, communicate with other agents or initiate a purchase, who owns that agent? Who instructed it? Which actions was it permitted to take? How can its authority be withdrawn if something changes? In February 2026, the U.S. National Institute of Standards and Technology explicitly raised these issues in work on identity and authorization for software agents. Payment providers and technology companies are also exploring signed permission records, agent recognition and auditable transaction requests. The fact that these systems are being designed does not mean the problem is solved. It means digital identity is becoming more complicated than the familiar act of signing into an account. 2031WHAT COULD ACCELERATE ### 2031: From proving who you are to proving what you may do Consider a plausible 2031 business transaction. A software agent asks a supplier to change the delivery destination on an approved order. The supplier's systems could require more than a valid login. They might check whether the request comes from a recognized agent, which company owns it, whether its human supervisor gave it permission to modify delivery instructions, and whether the request fits a stated time period and spending limit. If any part fails, the system could stop and request human approval. If the request succeeds, both sides could keep a record of what was approved and which identity authorized it. The result would not make fraud impossible, but it could make some impersonation and unauthorized delegation harder. A similar principle could apply to high-stakes media. A hospital, insurer or newsroom might increasingly ask for documented origin and editing history before relying on a video or image. The evidence would need to be interpreted alongside independent verification. A content credential would be one useful clue, not an automatic certificate of truth. These systems could create important privacy challenges. Proving that someone is authorized to act should not require exposing their entire identity, location, purchase history and personal relationships. A world that demands constant verification without restraint could become a world of excessive surveillance. 2036WHAT MIGHT TRANSFORM ### 2036: What if proof becomes a service we all depend on? Imagine a future in which millions of people use digital representatives for routine interactions. Some identities belong to humans. Others belong to companies, public agencies or authorized automated systems. A single person might delegate different tasks to several specialized agents—one permitted to book travel, another to manage a household utility account, and another to gather research without spending money. In that world, being able to generate a convincing voice or avatar would be relatively unimportant. What matters is whether an action comes with a trustworthy trail: an identifiable owner, a narrowly defined authorization, a record of what was done and a way to challenge or reverse it. That could create an entirely new layer of digital infrastructure. Banks, insurers, employers, healthcare providers, marketplaces and governments may all need ways to recognize machine identities and verify what those machines are permitted to do. New services could emerge to manage delegated permissions, preserve evidence and investigate disputes. The potential is enormous, but so is the responsibility. A single identity system controlled by a small group of companies could concentrate power. A rigid verification requirement could exclude people who lack documents or reliable internet access. A stolen signing key could undermine a seemingly secure transaction. And technical proof of authorization would not determine whether a transaction was fair, wise or lawful. A trusted digital future will need more than sophisticated software. It will need standards people can understand, institutions they can challenge, and protections against misuse. *IT GETS PERSONAL / FOUR DIMENSIONS OF CHANGE* ## What could this mean *for my future?* ### My life A familiar voice may no longer be sufficient evidence that a request comes from someone you know. You may increasingly rely on independently verified communication channels, bank protections, clear permission records and the ability to revoke access given to automated helpers. The ideal outcome is not constant suspicion. It is a world where ordinary people can confidently confirm important actions without becoming security specialists. ### My career Digital trust could become part of many roles, not just cybersecurity. Finance teams may need to distinguish valid instructions from convincing impersonations. Human-resources teams may have to evaluate machine-generated applications and verify credentials. Designers and communications professionals may need to establish the provenance of media. Auditors, lawyers and technology teams could spend more time examining the boundary between machine action and human responsibility. ### My business The immediate priority is identifying which requests could cause substantial harm if the sender were impersonated. Changes to bank details, disclosure of sensitive files, approval of purchases and modification of customer records are obvious places to begin. Businesses should require independent authorization for those actions regardless of how convincing a caller or message seems, and create clear limits before agents receive access to important systems. ### My industry Trust may become part of the underlying economics of digital services. Markets could favor businesses that make authorization understandable and verification inexpensive, while imposing higher costs on organizations with weak controls. Industries built around evidence—insurance, healthcare, financial services, law and government—may experience particularly significant changes in how they establish what happened and who can be held accountable. *JIM CARROLL'S PERSPECTIVE* ## Human authenticity and machine accountability are different assets In his 2025–2026 writing on [*Trust Capital*](https://jimcarroll.com/2025/12/decoding-tomorrow-mastering-2026-24-trust-capital-in-an-era-of-synthetic-perfection-your-flaws-are-now-the-ultimate-watermark-of-your-authenticity/) and the [*Chase for Authenticity*](https://jimcarroll.com/2026/09/megatrends-one-year-later-28-the-chase-for-authenticity/), Jim Carroll explored the rising value of genuine human experience as synthetic content becomes inexpensive and abundant. His argument was that companies and individuals may increasingly stand out through credible human relationships rather than impossibly polished communication. This YottaBit story extends that insight. Human authenticity will matter enormously, but an increasingly automated economy will also require **machine accountability**. We can value real people and human judgment while insisting that software agents carry clear proof of their responsibilities and limitations. For a leadership team, the useful question is specific: which digital actions would create the biggest damage if performed by a convincing impersonator or an over-permissioned agent? Identify those actions first, strengthen independent approvals and make sure the responsible human can still intervene. ### EXPLORE JIM CARROLL'S RELATED WRITING - [Reality risk, synthetic identities and machine accountability ↗](https://jimcarroll.com/2026/09/i-was-told-my-ai-risk-keynote-was-too-dark-then-anthropic-published-the-footnotes/)Jim examines deepfakes, synthetic personas, credentials and autonomous action together, directly connecting the scenario’s authenticity problem to the need to prove authorization. - [Policing and AI: the crimes we have not yet imagined ↗](https://jimcarroll.com/2024/11/daily-inspiration-policing-ai-its-the-types-of-crime-that-we-cant-yet-imagine-that-we-should-be-worried-about/)Jim discusses AI-generated identities and digital identity crime, offering a directly relevant earlier exploration of why familiar identity checks can be insufficient. - [The Chase for Authenticity: the value of verifiably human experience ↗](https://jimcarroll.com/2026/09/megatrends-one-year-later-28-the-chase-for-authenticity/)Jim discusses the value of genuine human experience as synthetic content becomes abundant. This supports the human-trust dimension; it is distinct from the technical mechanisms for machine authorization. [Why Jim started YottaBit — the story behind the name ↗](https://yottabit.com/why-yottabit/) *THE REALITY CHECK / WHAT MUST HAPPEN FIRST* ## What could stop or distort this future? Standards may not interoperate. Credentials can be stolen. Governments and companies may impose verification systems that threaten privacy or exclude vulnerable people. Provenance can help establish the history of an asset without establishing its truth, and authorization can establish permission without proving that a decision was good. None of those distinctions is optional. *THE BIGGER YOTTABIT IDEA* ## The future is bigger *than you think.* **The YottaBit possibility isn't just an internet with fewer fakes. It's a future in which trust is something we can demonstrate, limit and audit—even when machines are acting among us.** *THE SCIENCE / CHECK THE EVIDENCE* ## Where the facts end *and the future begins.* The sources below support the present-day foundation of this story—not a promise that the 2031 or 2036 scenarios will happen. These are possibilities, not forecasts. - [NIST, Identity and Authority of Software Agents (February 2026)](https://www.nist.gov/news-events/news/2026/02/new-concept-paper-identity-and-authority-software-agents) — Research agenda on identifying agents, defining authority and auditing automated actions. - [C2PA, Content Credentials Explainer](https://spec.c2pa.org/specifications/specifications/1.4/explainer/Explainer.html) — Digital content provenance; explicitly does not prove content is true. - [Google Cloud, Agent Payments Protocol (September 2025)](https://cloud.google.com/blog/products/ai-machine-learning/announcing-agents-to-payments-ap2-protocol) — Cryptographic permission records intended for agent-initiated purchases. - [Visa, Trusted Agent Protocol](https://developer.visa.com/capabilities/trusted-agent-protocol) — A framework for recognizing authorized commerce agents and distinguishing them from malicious automated traffic. - [Jim Carroll, Trust Capital (December 2025)](https://jimcarroll.com/2025/12/decoding-tomorrow-mastering-2026-24-trust-capital-in-an-era-of-synthetic-perfection-your-flaws-are-now-the-ultimate-watermark-of-your-authenticity/) — The human-authenticity side of the story. [How YottaBit treats science, evidence and uncertainty ↗](https://yottabit.com/research/) *THE BREAKTHROUGHS BEHIND THIS SCENARIO* ## Start with the science. *Then imagine what comes next.* Explore the related research-led stories already in the YottaBit library. → [THE 2026 FOUNDATION ↗**What if banks could interrupt fraud while a crime is still unfolding?**](https://yottabit.com/stories/banks-stop-fraud-while-it-happens/) → [THE 2026 FOUNDATION ↗**What if the safety of intelligent systems mattered more than how clever they are?**](https://yottabit.com/stories/safety-and-trustworthy-intelligent-systems/) → [THE 2026 FOUNDATION ↗**What if a computer sounds brilliant but still fails when a task gets complicated?**](https://yottabit.com/stories/intelligent-computers-still-fail-complicated-tasks/) *THE NEXT FUTURE / KEEP EXPLORING* ## Every possibility *connects to another.* → [2036 FUTURE SCENARIO / 019 MIN ↗Robotics + Artificial IntelligenceWhat if one robot learned a skill—and thousands of others could use it tomorrow?A robot's most valuable feature might eventually be something you can teach it once, improve through experience, and distribute to an entire fleet.2026 · REAL2031 · NEXT2036 · POSSIBLEEXPLORE THE FUTURE ↗](https://yottabit.com/stories/the-shared-robot-brain/) → [2036 FUTURE SCENARIO / 029 MIN ↗Artificial Intelligence + Commerce + NetworksWhat happens when software stops answering questions and starts running parts of the economy?Your next important business transaction may be negotiated by two pieces of software—each acting for a different person or organization.2026 · REAL2031 · NEXT2036 · POSSIBLEEXPLORE THE FUTURE ↗](https://yottabit.com/stories/the-agent-operated-economy/) → [← ALL 15 FUTURE SCENARIOS](https://yottabit.com/future/) [Explore the complete 110-story YottaBit library ↗](https://yottabit.com/stories/) --- *Source: https://yottabit.com/stories/the-next-age-of-digital-trust/ · Site index for AI systems: https://yottabit.com/llms.txt*