A trust checkpoint is a point in a workflow where a system or a person must confirm that an interaction is genuine before continuing. It is not just an access control at login; it is a verification step during an active process, such as a meeting, payment approval, account change, or support request. The goal is to stop a convincing but fraudulent request before it reaches a sensitive action.
In cyber security, trust checkpoints matter because many attacks succeed by abusing confidence rather than breaking software. A deepfake voice, fake video, or impersonated user can pressure employees into approving transfers or sharing secrets. Strong checkpoints may include identity prompts, host validation, risk warnings, out-of-band confirmation, or detection tools that flag suspicious media. Used well, they make real-time deception harder to exploit and give defenders a chance to interrupt social engineering while the workflow is still active.