This guide is for individuals going through a Persona-powered identity verification flow. While we’ve included helpful tips, the verification was set up by the business, service, or organization that asked you to verify. They use Persona as a tool, and they ultimately decide what’s required and can assist with your specific situation, if you’re having trouble.
Checking whether a request is legitimate
A real verification request comes from a company you are actually dealing with, usually right as you sign up, log in, or complete a transaction with them. If you do not recognize the company, or the message arrived out of the blue, trust your caution.
Signs a request is legitimate
- It came from the app, website, or email of the company you were just using.
- The message names the specific action you took, like opening an account.
- The verification flow only asks for the usual things, your ID and a selfie.
- You can open the sending company’s own website or app separately to double check.
Signs to be careful about
- Pressure to act immediately, with an urgent deadline or a threat.
- A request that asks for payment, or for money “to release” a result.
- A link you cannot verify from a company you do not remember.
- Anything asking for your password, PIN, or a one-time code that was texted to you.
If you are unsure
Do not scan documents and do not enter anything you would regret. Ask the company that supposedly sent the request through their normal customer-service channel, using a phone number or address you found yourself, not one from the message. You can also see Is Persona a scam? for how a real flow looks.