In banking and financial services, identity verification means validating a customer's identity against ID documents, databases, and biometrics before granting them access to a product or service.  

In the context of Know Your Customer (KYC), identity verification is the critical first step. It’s where an institution establishes what they know about a customer before any further decision can be made.  

Here, we’ll explain how identity verification works in practice, what role it serves across KYC processes, and more. Let’s get started.  

Identity verification, explained 

Identity verification is the way that financial institutions confirm the legitimacy of their customers. The process works by cross-referencing the different identity documents and markers against a set of automated checks designed to confirm the documents are genuine, the person is real, and that the information matches what is known about them from external databases. 

These days, the entire process is mostly digital and completed in real time. Human review is generally reserved for exceptional cases.  

Learn more about how digital identity verification works 

Where does identity verification sit in the KYC process? 

KYC is built on three layers of customer due diligence, and identity verification underpins all three: 

• Standard Customer Due Diligence (CDD). Identity verification is the entry point to all customer due diligence. It’s where you confirm the basics: a customer's name, date of birth, address, and document validity before onboarding begins.  

• Enhanced Due Diligence (EDD). For higher-risk customers, including Politically Exposed Persons, high-risk third country relationships, and business relationships above defined asset thresholds, identity verification must go further. Under AMLR Article 34, EDD is mandatory for these categories. 

• Ongoing monitoring. Once an identity is verified at onboarding, this becomes the basis for how all other monitoring decisions are approached. This includes transaction monitoring, risk re-categorisation, and suspicious activity reporting.  

Types of identity verification in KYC 

During customer onboarding and beyond, there are several types of identity verification which take place: 

• Document verification. Government-issued IDs, such as passports, national identity cards, or driving licenses, are presented by customers and verified for authenticity and validity — either through visual/OCR checks or NFC chip verification. 

• Biometric verification. Here, facial recognition confirms that the person presenting a document matches the photo on it. Liveness detection prevents spoofing by confirming the person is physically present. 

• Electronic identity verification (eIDV). This step cross-references customer details against third-party data sources such as credit bureaus or government databases. 

• Database and watchlist screening. Beyond eIDV, regulators require that customer data be checked against PEP lists, sanctions databases, and adverse media sources. 

Identity verification in KYC and AML compliance 

Identity verification is the foundation of both Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance. Before an institution can assess a customer's risk profile, monitor their transactions, or make any compliance decision, it first needs to confirm who that customer is.  

Under KYC, identity verification confirms the basics: a customer's name, date of birth, address, and document validity before onboarding even begins. Under AML regulations, that verified identity then becomes the anchor for every subsequent decision: risk categorisation, transaction monitoring, enhanced due diligence, and suspicious activity reporting. 

FAQs 

What is the difference between identity verification and KYC?  

Identity verification confirms that a person is who they claim to be. KYC is the broader process of understanding who a customer is, what they do, and what risk they represent. Identity verification is a critical first step within KYC, but KYC encompasses ongoing monitoring, risk categorisation, and due diligence. 

What is the difference between identity verification and identity authentication?  

Identity verification is a one-time process, typically carried out at onboarding, that establishes who a person is. Identity authentication is an ongoing process that confirms a returning user is the same person who was originally verified. Think of identity verification as opening an account and authentication as logging into it. 

What documents are used for identity verification?  

The most commonly accepted documents are government-issued photo IDs, including passports, national identity cards, and driving licences. Under AMLR, accepted document requirements are being standardised across EU member states. 

Why is identity verification important in banking?  

Identity verification is a legal requirement under KYC and AML regulations. It’s a critical aspect of fraud prevention, protecting both the institution and its customers from identity theft, synthetic fraud, and impersonation attacks.