ID Verification - More Info
Identity Verification Options
In 2Shakes you can choose to verify the identity of your customers:
BIOMETERIC: Biometric Identity verification adds another layer of certainty to the existing electronic ID verification method by capturing and assessing the ID document image against the person’s face in real time. Biometric includes Electronic IDV.
ELECTRONIC: Either yourself or you client can enter ID details. 2Shakes will data match the identity information against trusted external data sources and provide you with an electronic report.
MANUAL: Where you take copies of original Identity documents, or you get a trusted referee to certify copies of the originals on your behalf. You can make a note of how you did the identity verification and upload files or scans.
Advice on how to interpret an Electronic Identity Report and Biometric Identity Report.
Biometric ID Video
See how to do Biometric Identity Verification in 2Shakes.
2Shakes uses OCRLabs proprietary biometric identity verification API system. This world class system is one of the few in the world to have IBeta’s Presentation Attack Detection level 1 & 2 accreditation. With a perfect score in both level 1 & 2 iBeta anti-spoofing certified testing.
You can decide which IDV Method in each situation
Biometric ID verification
The 2Shakes Biometric IDV includes both the Biometric check AND the Electronic (Data Only) ID Verification detailed below.
Use Biometric ID verification when:
You want the highest level of verification - meeting AML requirements.
You can’t meet your client in person – In addition to the Smart ID check of the person’s details, biometric verification captures and assesses the ID document image against the person’s face in real time. We match hundreds of facial measurements to see if the person sitting in front of their phone, matches the photo identity document.
You need copies of ID and high privacy and security for the ID data you hold – Copies of the ID document and results are all stored securely in the 2Shakes platform, which meets the New Zealand Governments strict requirements for Privacy and Security.
Note : If you use the Biometric IDV option in 2Shakes you don’t need to do any other additional measures. The 2Shakes Biometric IDV option is very similar or the same as Example 2 in the DIA’s updated Explanatory Note, and satisfies the additional measures required.
Electronic (Data Only) ID verification
he 2Shakes Electronic IDV verifies the person’s ID Document at source, verified their Address, and carries out a Politically Exposed Person (PEP) and Sanctions check. This is included in the Biometric IDV above.
Use Electronic ID verification when:
Someone has a digital presence that can be verified – Electronic ID verification matches the information provided against trusted external data sources. Ideally the person would have a NZ passport or NZ drivers license. For address verification they ideally they would hold a NZ bank account, or be the account holder listed for a household utility bill, or be listed as the owner of a house.
You want to avoid Identity Fraud – Using an electronic ID verification service allows you to verify details without holding a copy of the credentials. This reduces the risk of personal details you hold being able to be inappropriately used for identity fraud.
You want to save time & effort – Using an electronic solution makes the collection and verification quick and easy. Manually collecting proof of address, doing online searches of sanction lists, doing PEP checks, storing evidence can all be time consuming. All while delaying you getting to work for your client.
Use Manual ID verification when:
To strengthen electronic identity verification – When you consider that additional identity measure are required you can collect additional CDD evidence manually for a person. For example:
Additional Measures: if you feel that the risk is high, or if the CDD level is raised to enhanced CDD your AML programme may require that you undertake additional measures on top of electronic ID verification. 2Shakes enables you to record additional measures.
Outstanding Verification – Electronic verification may not be able to fully verify the identity. For example a persons passport might verify their name and date of birth, but because the person has recently moved the address may not match external records. To complete CDD in this example you may manually verify the address and then use 2Shakes to record this using Notes & Files.
Where you already know your customer – If you have already gathered sufficient evidence to confirm the identity of the person you can upload notes and files to record this to 2Shakes and then manually confirm that IDV has been completed.
To avoid additional costs – If you want to avoid ID verification charges then you can verify the identity of a person manually. You may like to refer to DIA’s Amended Identity Code of Practice which outlines a ‘safe harbor’ for how to do this.
How it works
With Biometric IDV, 2Shakes sends your client an email link which explains the process. They enter their mobile phone number, and receive a text to complete the IDV on their phone. We take photos of the ID, and a video of the person to ensure liveness and a Biometric match to the ID Document.
The process usually takes a couple of minutes for your client. Once they are done, we carry out our Electronic (Data Only) verification (see below), then send you a notification when the ID check is ready to review. Easy.
With Electronic IDV, 2Shakes sends your client an email link to enter the ID data. That is then verified at source, and you get sent a notification that the ID is done. Alternatively, you can enter the client’s data for verification, but you must confirm you have their consent to do so.
Since Biometric includes the Electronic IDV too, both these forms of IDV include:
Name, Address and Date of Birth verification
New Zealand Driver License Verification from the New Zealand Transport Authority (NZTA)
New Zealand Passport Verification from the Department of Internal Affairs (DIA)
International Watchlist / Politically Exposed Person (PEP) status sourcing
Information is verified via a third party bureau database to verify name, address and date of birth data. This database holds trusted source data on over 3 million NZ consumers, which is updated monthly by banks, finance and retail energy providers. Changes to the Credit Reporting Privacy Code have enabled this data to be used for AML/CFT verification purposes.
This service is focused on trusted source information which ensures that matched data is only confirmed based on the data being confirmed by a trusted source. This limits the opportunity for fraudulent applications passing the verification threshold. You should of course take appropriate legal advice regarding your AML/CFT identity verification compliance processes as part of the AML/CFT programme.
Obtaining Consent
The Credit Reporting Privacy Code 2004 governs who can disclose credit information for the purposes of undertaking identity verification in accordance with the AML/CFT legislation. Consent is required of the person whose identity you wish to verify.
Where the client is entering their information (in a Biometric IDV, or Electronic IDV via email), 2Shakes captures their consent to verify the information.
In an Electronic IDV where you are entering ID details on their behalf, then you are required to confirm that you have their consent.
AML Legislative Requirements
The Legal requirements reporting entities are required to meet to provide services in-scope for AML/CFT to customers are detailed in the Act. In addition to this you can follow the Amended Identity Code of Practice.
2Shakes utilises a third party electronic identity ID service that is intended to assist users to comply with ID verification to meet AML/CFT. However it is up to your AML programme to determine if this service is sufficient on its own, or what additional measures will are appropriate for the situation and risk assessment of the customer. 2Shakes provides the ability for you to use Notes & Files to capture additional measures you have taken to confirm Identity.
The AML Supervisors (DIA, FMA and Reserve Bank) have published a new explanatory note guideline for Part 3 of the Amended Identity Verification Code of Practice (IDVCOP). This update introduces some significant clarifications by the Supervisors, which we have discussed and confirmed with DIA.
The most significant change for 2Shakes users relates to clarifications around linking a person to the identity they claim.
Going forward, if you use the Standard Electronic IDV option in 2Shakes, you must also use additional methods to link the person to the identity they claim. Paragraph 19 of the updated Explanatory Note provides some examples of additional methods you may use. (We are in discussion with DIA around other options for additional methods which may be useful for some sectors – as soon as we have more on that we’ll let you know).
The 2Shakes Biometric IDV option is very similar or the same as Example 2 in the DIA’s updated Explanatory Note, and satisfies the additional measures required. For this reason, the default ID Verification method in 2Shakes to Biometric IDV.
Reports and Auditing
2Shakes records both the identity details as well as the results of electronic verification. All notes and files you enter are also collated to allow you to report on all the CDD information collected. When your AML compliance officer has consider and confirmed that the AML CDD is complete we create an AML report of all this data which is available for auditing purposes.
Find out more about AML in 2Shakes here.
More Help
Didn’t find what you need here? You can find lots more help on our main Support Page.
Or you can contact us or email us at support@2shakes.co.nz and we can help you with what you need to know.
Thanks very much,
The 2Shakes Team