Independent coverage of how identity is verified online, across every industry: the technology, the fraud it stops, the rules that govern it, and what it means for your privacy.
A fake ID is not automatically a felony in the United States. The result depends on the state, the document, the conduct and the intent, with consequences that can extend well beyond a fine or jail term.
TechnologyMost passports issued in recent years are biometric, but the quickest way to tell is not the photo page. Look for the small international chip symbol on the cover and understand what it can, and cannot, verify at the border.
Fraud & ThreatsFake IDs now range from borrowed real documents to AI-generated images designed for remote verification. The most effective controls compare the visible document data with machine-readable data and add checks that address genuine IDs used by the wrong person.
Regulation & PolicyThe EU Digital Identity Wallet is moving from policy framework to national rollout. It could let people reuse verified credentials across borders, but its value will depend on issuer quality, business integration and public trust.
Regulation & PolicyKYC is not a single identity check but an operating cycle that starts with an account-opening trigger and continues through review. Its effectiveness depends on linking reliable evidence, proportionate risk decisions and timely follow-up.
Fraud & ThreatsDeepfake video, synthetic documents and camera-feed injection are reshaping identity fraud from a specialist attack into an operational risk. Verification providers are adding layered defenses, but businesses still face trade-offs among security, privacy and conversion.
TechnologyElectronic know-your-customer, or eKYC, has shifted account opening from the branch counter to a smartphone screen. Its spread reflects not only better software, but also the identity infrastructure and laws that make remote verification possible.
TechnologyReusable identity promises to let people prove facts such as age, address or professional credentials without repeatedly handing over documents. The model could reduce fraud and friction, but it also raises hard questions about interoperability, privacy and who controls the wallet.
Fraud & ThreatsA fast ID check is not about reading body language as proof. For bar, retail and onboarding teams, it means using a consistent sequence: inspect the card, compare it with the holder, ask a limited follow-up question and understand what a scanner actually checks.
PrivacyAge checks for pornography are becoming law in parts of the US and the UK. The policy goal is widely shared, but requiring an ID upload can create a permanent privacy risk around a lawful and highly sensitive activity.
Regulation & PolicySource of funds and source of wealth are related enhanced due diligence checks, but they answer different questions. Auditors and compliance teams look for evidence that is proportionate, consistent and traceable, not simply a plausible explanation.
TechnologyTransaction monitoring is central to anti-money-laundering compliance, yet its alerts are often noise. The challenge for banks is to detect genuinely suspicious activity without overwhelming investigators or missing the cases that matter.
Fraud & ThreatsMoney laundering is commonly described in three stages: placement, layering and integration. The model is useful for compliance, but real cases often overlap, repeat or omit stages altogether.
Identity verification is the process of establishing that a person is who they claim to be. It combines evidence, checks and risk decisions to help organizations prevent fraud, meet obligations and provide services safely.
KYC verifies individual customers, KYB verifies businesses and their owners, and AML is the wider legal framework for detecting and preventing illicit finance.
Online identity verification combines document analysis, biometric checks and screening data to decide whether a person is likely genuine and eligible for a service. The exact steps vary by provider, country, risk level and the document presented.
Onboarding verifies who a customer is at the start of a relationship. Ongoing verification keeps that identity, risk profile and activity under review as circumstances and threats change.
NIST Special Publication 800-63 separates confidence in a person’s identity, their login method and federated sign-in transactions. Its assurance levels help organizations match verification and authentication controls to the harm a mistaken decision could cause.
Identity verification is a core control for banks, payment firms and fintechs. It must satisfy financial-crime rules while keeping legitimate customers moving through onboarding and account use.
Identity verification is now a core compliance function for much of the crypto market, especially where platforms exchange crypto for money, hold customer assets or facilitate transfers. It remains contested in a sector built around self-custody, pseudonymous addresses and open networks.
Identity verification in iGaming combines age checks, customer identity verification and financial-crime controls, but the required timing and depth vary sharply by jurisdiction. Operators must reduce fraud and harm without creating sign-up flows that drive legitimate customers away.