Electronic Identity Verification (eIDV) Report

This page explains how to interpret the eIDV report from 2Shakes. 2Shakes uses a specialist AML identity product called Smart ID to do electronic identity checks. You can use electronic identity verification in 2Shakes to make it easy to complete AML and CDD checks.

Smart ID verification rules

The Smart ID results will verify if all the following checks pass:

  • The Drivers Licence (First Name, Last Name, Date of Birth, Driver license and version match the NZTA driver license database) OR NZ Passport (Full name including all middle names, Date of Birth, Passport number and expiry date match the Department of Internal Affairs passport database) verify,

AND

  • At least two external trusted data sources match on first name and surname,

AND

  • At least one external trusted data source that matched on first name and surname also matches on date of birth,

AND

  • At least one external trusted data source that matched on first name and surname also matches on address,

AND

  • The PEP (Politically Exposed Person) check is clear.

When Smart ID does NOT verify

When Smart ID does not verify you will need decide what additional measures you need to take.

When Smart ID does not verify it simply means that the data provided did match to meet all the Smart ID rules. You need to decide what additional steps to take to completed identity verification. It is important you record these decisions, actions and further evidence you take. You can use Notes & Flles to store them in 2Shakes. When you are satisfied an Identity is verified use the IDV done button to manually complete ID verification.

When you should verify address

If the name and address does not verify you will need to verify the address using another method. This happens when the external sources did not match the name of the person against the address.

If the address is the ONLY thing that didn’t verify, it simply indicates that the person’s name (exactly as it shows on their photo ID) isn’t also held against the address with any of the major banks, property ownership records, as a company directorship, insurance or utility companies we check. This may occur, for example if the household utility bills are held in the spouse’s name or the parent’s names, or under a maiden name. If the person has only recently moved and not yet changed their address. It also occurs if some uses a ‘nick name’ or other variations on their name at different organisations which is different from the name they have on their passport or driver license.

When the address is the only thing that failed to verify you could ask the person to provide evidence of their address. This should show their name and address on a document such as a tenancy agreement, an official letter from a government department, or correspondence from their doctor, lawyer or other trusted professional. Alternatively, you can send them a letter with a ‘code or secret phase’ that they tell you when they receive their mail.

You should record what you did to verify the address. You can use Notes & Files to record it in 2Shakes.  You can then use the IDV done button to manually complete ID verification.

When you should strengthen with Additional Measures

If details from the driver license or passport have NOT matched, but other external databases DID match you will see a failed Smart ID result because the ID verification is considered weak.  Because all the other Smart ID checks did match, technically the identity verification meets DIA identity code of practice for electronic Identity Verification. BUT Smart ID requires the photo Identity (the primary Identity document) to match to be confident of the verification.

Taking additional measures to supplement the electronic identity verification will mitigate any deficiencies and provide more confidence. Your own practices AML programme should guide what you do. But some additional measures you might consider include:

  • Re do: If the person simply didn’t enter their Passport number or Driver License number correctly then consider doing their IDV again with correct details (using Add Persontab).
  • Original ID: Ask to see original identity documents. These might include the Passport, Driver License, Birth Certificate, Super Gold Card, Marriage Certificate, Statement from Inland Revenue, Statement from a Bank etc.
  • Letter with a code: Send a letter with a unique code or phrase and ask the customer to tell you what it was.
  • Phone them: Phone the customer on a number that has been verified by a reliable and independent source (telephone book / yellow pages).
  • Security Questions: Ask the customer security type questions that only that person is likely to know. For example, you might be able to ask them questions related to their Inland Revenue transactions and payments (as this information is not publicly available or easily obtained).
  • References: Preform research to confirm the identity by search the internet, trustworthy registers or contacting reputable references such as their Doctor, Teacher or Lawyer.

Always record the research, activities, outcome and additional measures you have made to verify identity. You can store these using the Notes & Files button on the Management page. Consult DIA’s Code of Practice and the accompanying explanatory note for clarification around identity verification and other examples of additional measures.

When you should redo the Identity verification manually

When two or more Smart ID checks have failed then this normally indicates that the person doesn’t have a strong digital identity footprint in New Zealand. As this search checks bank account, property ownership, company directorship, insurance and utility companies etc. This is equivalent to a lack of a credit history. This normally just means they are NOT a good candidate for an electronic identity verification.

You should follow your own practices AML programme for what you do. Generally, DIA code of practice requires you either sight the originals of Identity evidence or you can get a trusted referee to do this on your behalfs. You should record the verification checks you do. 2Shakes allows you to store these as Notes & Files.

When PEP watchlist is not clear

This indicates that the person’s name matched the name of a politically exposed person PEP). Different rules apply to dealing with a PEP. You will need to refer the decision to work with the customer to Senior Management. Follow your AML/CFT programme for how to deal with a PEP before continuing.