Independent coverage of how identity is verified online, across every industry: the technology, the fraud it stops, the rules that govern it, and what it means for your privacy.
The EU Digital Identity Wallet is moving from policy framework to national rollout. It could let people reuse verified credentials across borders, but its value will depend on issuer quality, business integration and public trust.
Deepfake video, synthetic documents and camera-feed injection are reshaping identity fraud from a specialist attack into an operational risk. Verification providers are adding layered defenses, but businesses still face trade-offs among security, privacy and conversion.
Reusable identity promises to let people prove facts such as age, address or professional credentials without repeatedly handing over documents. The model could reduce fraud and friction, but it also raises hard questions about interoperability, privacy and who controls the wallet.
Age checks for pornography are becoming law in parts of the US and the UK. The policy goal is widely shared, but requiring an ID upload can create a permanent privacy risk around a lawful and highly sensitive activity.
Identity verification is the process of establishing that a person is who they claim to be. It combines evidence, checks and risk decisions to help organizations prevent fraud, meet obligations and provide services safely.
KYC verifies individual customers, KYB verifies businesses and their owners, and AML is the wider legal framework for detecting and preventing illicit finance.
Online identity verification combines document analysis, biometric checks and screening data to decide whether a person is likely genuine and eligible for a service. The exact steps vary by provider, country, risk level and the document presented.
Onboarding verifies who a customer is at the start of a relationship. Ongoing verification keeps that identity, risk profile and activity under review as circumstances and threats change.
NIST Special Publication 800-63 separates confidence in a person’s identity, their login method and federated sign-in transactions. Its assurance levels help organizations match verification and authentication controls to the harm a mistaken decision could cause.
Identity verification is a core control for banks, payment firms and fintechs. It must satisfy financial-crime rules while keeping legitimate customers moving through onboarding and account use.
Identity verification is now a core compliance function for much of the crypto market, especially where platforms exchange crypto for money, hold customer assets or facilitate transfers. It remains contested in a sector built around self-custody, pseudonymous addresses and open networks.
Identity verification in iGaming combines age checks, customer identity verification and financial-crime controls, but the required timing and depth vary sharply by jurisdiction. Operators must reduce fraud and harm without creating sign-up flows that drive legitimate customers away.