Identity verificationIDV

Proving that a person is who they claim to be, usually by checking a form of ID against a live selfie.

Businesses run it when someone opens an account, applies for a loan, or asks for access to a regulated or age-restricted service. The person photographs an ID, takes a selfie, and gets a decision in a short flow, usually on their phone.

A process that combines document verification, biometric matching, and checks against other sources of evidence to confirm that a claimed identity belongs to the real person presenting it. It typically runs in three parts: (1) capturing a government ID and checking that it is genuine, (2) matching a live selfie to the photo on the ID while confirming a real person is present, and (3) cross-checking the extracted details against other records, such as government or credit bureau data. The result is a pass, fail, or send-to-review decision, often with a confidence score, measured against the level of confidence the business or regulator requires.

Verification can draw on several kinds of evidence:

Document verification inspects an ID's security features, checks it for tampering, and tests its data for consistency against issuer templates.
Biometrics compare a live selfie with the ID photo (a face match) and run liveness detection to confirm a real person is in front of the camera.
Chip reading uses near-field communication (NFC) to read the chip in an electronic passport or national ID card and verify the issuer's digital signature over the stored data.
Record checks match a name, date of birth, and ID number against credit bureau or government databases, sometimes without capturing the document at all.
Risk signals such as the device, the network, and the pattern of the attempt, which a trust score can combine into one number.

Identity verification sits next to three terms that are easy to mix up:

Identity proofing is the term that standards bodies such as the US National Institute of Standards and Technology (NIST) use for the overall process, with the rigor graded by assurance level.
Know your customer (KYC) is the legal duty to know who customers are, and identity verification is a common way to meet its identity-checking requirement.
Authentication checks a returning person at each login, after verification has already established who they are.

For a fuller walk-through, see What is Customer Identity Verification? and What is Digital Identity Verification?.

Why it matters

Every account, loan, and payment that follows rests on this check being right. An impostor who passes gets a real account to borrow, spend, and move money through, while an honest customer who fails is a customer the business loses.

Regulators add a third stake. KYC rules require financial institutions to identify and verify their customers, and firms that fall short can face fines. Other fields set their own bars: age-restricted services must confirm a customer's age, and employers and marketplaces must confirm that the person on the other side is real.

Remote checks also attract attackers. Deepfakes and injected video target the selfie step, so a modern flow also has to confirm that a live person is present, in addition to matching the face.

Every extra step costs conversion, so the best flows ask for only as much proof as the risk demands. A low-risk signup might need a quick document and selfie check, while a large loan might add chip reading and record checks.

FAQ

Frequently asked questions

Still have questions? Talk to an expert

What is the difference between identity verification and KYC?

Identity verification confirms that a person is who they claim to be. Know your customer (KYC) is the legal duty to know who customers are, which also covers understanding the purpose of the relationship and monitoring risk over time. Businesses commonly use identity verification to meet the identity-checking part of KYC.

What is the difference between identity verification and authentication?

Identity verification establishes who someone is at the start of a relationship, using evidence such as an ID document and a selfie. Authentication happens afterward, each time the person returns, using a proof tied to the account such as a passkey or password.

What is the difference between identity verification and identity proofing?

Most businesses use identity verification for the whole process of confirming who someone is. Standards such as the US National Institute of Standards and Technology (NIST) Special Publication 800-63A call the whole process identity proofing, grade it by identity assurance level, and use identity verification for one step inside it, the step that confirms the applicant owns the evidence.

What documents work for identity verification?

Most flows accept a government-issued photo ID, such as a passport, driver's license, or national ID card. The documents a business accepts depend on the countries it serves and the level of confidence it needs.

Does identity verification always need a selfie?

A selfie is optional in some identity verification flows. Non-document verification matches a name, date of birth, and ID number against credit bureau or government records without capturing an image. Most remote flows still add a selfie and a liveness check, because a record match alone cannot show that the person present is the person on file.

How long does identity verification take?

Fully automated identity verification can return a decision in seconds. Cases sent to manual review take longer, because an analyst has to examine the evidence.