Establishing who someone actually is.
WHAT IT DIFFERS FROM
Authentication, which proves a returning user is the same person.
WHAT IT ESTABLISHES
That a person is who they claim, at first contact.
WHAT METHODS EXIST
Document verification, checking an identity document Biometric comparison against the document Database checks against authoritative records Knowledge-based questions Verification by a trusted third party
WHAT DOCUMENT VERIFICATION CHECKS
Security features Consistency of data Signs of tampering
WHAT LIVENESS ADDS
Confirming a live person is present, not a photograph.
WHAT MATTERS LOCALLY
Which identity documents and databases are actually available and verifiable That many people hold limited documentation That document quality and database coverage vary
WHAT THAT MEANS
A verification process assuming universal documentation excludes legitimate customers.
WHAT TO PROVIDE
Alternative routes, and human review.
WHAT TO MINIMISE
Data retained after verification.
WHY
Copies of identity documents are an extremely attractive target.
WHAT TO RETAIN INSTEAD
The verification result and its evidence reference, where lawful.
WHAT OBLIGATIONS MAY APPLY
Financial and anti-money-laundering requirements, which are specific and enforced.
Take advice on your position.
