Identity proofing

Identity proofing is the process of establishing that a person is who they claim to be, usually by checking identity evidence and linking it to the person presenting it. It is a core step in digital identity verification.

Identity proofing assesses an identity claim before an organization opens an account, grants access, or completes a higher-risk transaction. It commonly combines document checks, database checks, and methods to confirm that the applicant is present and connected to the evidence provided.

The required level of assurance depends on the service and the consequences of error. A social-media account may need limited checks, while banking, government benefits, healthcare, or remote signing may require more robust proofing.

How identity proofing works

A typical remote process begins when an applicant provides biographic details, such as name and date of birth, and identity evidence, such as a passport or driver license. A provider evaluates whether the evidence appears genuine, whether its data is consistent with trusted sources, and whether it is linked to the applicant.

• Document verification examines security features, machine-readable data, signs of alteration, and whether a document is valid or expired.
• Database or authoritative-source checks compare submitted information with government, credit, or other trusted records where permitted and available.
• Biometric matching compares a selfie or video image with the portrait on an identity document.
• Liveness detection seeks evidence that a real, present person is participating rather than a photo, video replay, mask, or synthetic-media attack.
• Fraud and risk checks may identify suspicious devices, repeated identity use, inconsistent data, or other indicators requiring review.

Proofing, authentication, and verification

Identity proofing is most important when an identity is first established or re-established. Authentication is the later process of confirming that a returning user controls an account, for example with a passkey, password, or security key. Identity verification is often used broadly to describe either activity, but can also refer specifically to checking evidence during proofing.

Limits and safeguards

No proofing method guarantees that an identity claim is correct. Records can be incomplete, documents can be stolen, and biometric systems can produce errors or perform differently across populations. Organizations should use proportionate controls, offer accessible alternatives and human review, protect collected data, and clearly explain how identity information and biometric data are used.