Identity verification (IDV)

What identity verification establishes

Identity verification is the process of confirming that an applicant is who they claim to be. It answers a narrow but fundamental question that sits beneath every other check a lender makes: is this a real person, are they who they say, and is it genuinely them making the application. Until that is settled, an affordability assessment or credit check is only as reliable as the identity it is attached to.

It is worth separating two ideas that are often blurred. Verifying an identity means confirming that a claimed identity is real and belongs to the applicant. Authenticating means confirming that a returning customer is the same person who was verified before. Both matter, but identity verification proper is chiefly concerned with that first, onboarding question.

The task really has two parts. The first is to establish that the claimed identity corresponds to a genuine person who exists, which data checks against authoritative records are well suited to. The second, and often harder, part is to bind that identity to the individual actually making the application, so that a fraudster in possession of someone else's details cannot simply assert them. Document and biometric checks exist largely to answer that second question, and a verification process that handles the first but not the second leaves an obvious gap for impersonation.

How verification is carried out

UK lenders verify identity using a combination of methods, chosen according to the risk and the product. Electronic verification is now the norm for most consumer lending, drawing on credit reference agency and other data to confirm that the name, address and date of birth provided correspond to a real, consistent record.

• Data-based checks against credit reference agency records, the electoral roll and other sources
• Document checks, such as validating a passport or driving licence
• Biometric checks, such as matching a selfie to a document photo with liveness detection
• Knowledge-based and possession-based factors, such as access to a known account or device

Identity verification within KYC and fraud control

Identity verification is a building block of both KYC and fraud prevention. Within the anti-money-laundering framework, confirming identity is part of the customer due diligence required under the Money Laundering Regulations, and it feeds screening against sanctions and other lists. Separately, it is a lender's first defence against application fraud, where a fraudster uses a stolen or fabricated identity to obtain credit they never intend to repay.

Identity theft and synthetic identities, where real and fabricated details are combined, make this harder than simply matching a name to an address. Robust verification therefore increasingly combines data, document and biometric signals, and looks for inconsistencies that a single check would miss. Open Banking can add a further signal, since access to a genuine, established bank account is itself evidence that an identity is real.

Balancing security and customer experience

Verification is a point of friction, and friction cuts both ways. Too little, and fraud and financial-crime risk rise; too much, and genuine applicants abandon the process or are shut out. The Consumer Duty expects firms not to erect unreasonable barriers, and heavy-handed verification can fall hardest on exactly the customers a lender should be serving, those without extensive records or those in vulnerable circumstances.

The aim is verification that is strong where the risk warrants it and light where it does not, with alternative routes for customers who cannot clear a standard digital check. Good data and well-designed journeys let a lender achieve both at once, confirming identity reliably while letting legitimate customers through quickly and without unnecessary intrusion into their personal information.