To verify your identity, you present a valid government-issued photo ID — typically a driver’s license, passport, or state ID — and, depending on who’s asking, add a second document, answer questions drawn from your credit file, or take a selfie the system compares to your ID. That’s the short version of how to verify your identity, and it covers most situations you’ll run into: opening a bank account, starting a job, logging into a tax account, boarding a domestic flight, or picking up your medical records. What changes from one setting to the next is which documents count, whether the check happens in person or online, and what to do when something goes wrong.
Since May 7, 2025, federal agencies no longer accept a standard driver’s license or state ID for official purposes unless it’s REAL ID-compliant, which reshapes what “showing ID” means at airports and federal buildings. And the stakes for getting verification right keep climbing: the FTC received more than 1.1 million identity theft reports in 2024.
The Methods You’ll Be Asked to Use
Most verification systems combine two or more of four core methods. Knowing which one you’re facing tells you what to have ready.
Document-based verification. You present a government-issued ID and someone confirms it’s real and matches you. In person, that’s a visual check of holograms, watermarks, and microprinting. Online, an automated system scans a photo of your document, pulls your name, date of birth, and ID number, and looks for signs of tampering. Many digital systems then compare your document photo to a live selfie.
Biometric verification. A system captures a physical trait — fingerprint, facial geometry, or iris pattern — turns it into a digital template, and compares it to a stored record. Better systems run a liveness check to confirm the sample comes from a real person, not a photograph. You’ll see this at airport security, on your phone’s lock screen, and increasingly in financial and government portals.
Knowledge-based verification (KBA). The system asks questions only you should be able to answer, such as past addresses or previous loan amounts. Static KBA uses questions you chose at signup; dynamic KBA pulls questions in real time from credit bureau data and public records. One catch: if you’ve placed a credit freeze, dynamic KBA often fails because the system can’t reach your credit file. You’ll need to lift the freeze temporarily or use another path.
Multi-factor authentication (MFA). This combines two or more independent checks pulled from different categories: something you know (password, PIN), something you have (a phone receiving a one-time code), or something you are (fingerprint, face scan). Even if someone steals your password, the second factor still stops them. Turn MFA on wherever it’s offered.
Verifying Yourself at a Bank or for a Loan
Opening a bank account, applying for a loan, or setting up a brokerage account triggers some of the most thorough verification you’ll encounter. Federal law requires financial institutions to run a written Customer Identification Program under the Bank Secrecy Act, which means the bank must form a reasonable belief that it knows your true identity before it opens the account. At minimum, expect to hand over your name, date of birth, address, and a taxpayer identification number, usually your Social Security number.
The bank verifies those details using documents (your ID and often a second proof of address), non-documentary methods such as checking your information against consumer reporting agencies, or both. Ongoing due diligence continues after the account opens: banks build a risk profile for each customer and monitor transactions for suspicious activity.
If the bank can’t verify you online, going in person to a branch with your ID and Social Security card almost always works.
Verifying Yourself for a New Job
Every U.S. employer must verify a new hire’s identity and work authorization using Form I-9. The employer has three business days from your first day of work for pay to complete Section 2, which requires examining your original documents. For jobs lasting fewer than three days, the form must be completed no later than day one.
You choose which documents to present from three lists:
- One document from List A, such as a U.S. passport, establishes both identity and work authorization on its own.
- Or one document from List B (identity, such as a driver’s license) plus one from List C (work authorization, such as a Social Security card).
Your employer cannot dictate which specific documents you present, only that they come from the approved lists. Decide before your first day what you’ll bring so you’re not scrambling at orientation.
Verifying Yourself With a Government Agency
Federal and state agencies verify your identity before granting access to benefits, licenses, and online tools. The IRS uses ID.me for online services like viewing tax transcripts, checking payment status, or accessing your tax account. You’ll need a Social Security number or ITIN and a valid government-issued photo ID such as a driver’s license, state ID, passport, or passport card. The system asks you to photograph your ID and take a selfie for comparison.
If the selfie path doesn’t work, ID.me offers a video call where an agent walks you through verification live. The IRS also runs Taxpayer Assistance Centers for in-person help. Selfie, video, and biometric data collected during IRS verification are automatically deleted after the process unless fraud is suspected.
Other agencies set their own rules. The General Services Administration, for credentialing appointments, requires two forms of physical, unexpired ID, with at least one primary form such as a passport or driver’s license. An expired ID is not acceptable.
REAL ID for Flights and Federal Buildings
REAL ID enforcement began on May 7, 2025. Federal agencies no longer accept a standard driver’s license or state ID for official purposes — domestic air travel, entry to federal buildings, and access to certain military bases — unless it meets REAL ID standards. If your license has a star or flag in the upper corner, or says “Enhanced,” it’s compliant. If it doesn’t, you’ll need either a REAL ID-compliant card from your state DMV or an acceptable alternative like a U.S. passport.
To get a REAL ID-compliant license, states require proof of identity (birth certificate or passport), your Social Security number, and two documents showing your current address. The underlying federal law also requires verification of lawful status and a digital photograph.
One boundary worth naming: REAL ID governs federal purposes. A non-compliant license still works to drive, to prove age, and for most private-sector ID checks.
Mobile Driver’s Licenses
A growing number of states issue mobile driver’s licenses (mDLs) stored in smartphone wallets. TSA accepts these at airport checkpoints, but the digital ID must be based on a REAL ID-compliant or Enhanced Driver’s License or Enhanced Identification Card. As of early 2025, more than 20 states and territories participate in TSA’s digital ID program through Apple Wallet, Google Wallet, Samsung Wallet, and state-specific apps. TSA also accepts digital passport credentials through Apple Wallet, Google ID pass, and Clear ID for domestic travel.
Verifying Yourself at a Healthcare Provider
Under HIPAA’s Privacy Rule, a covered entity must verify the identity and authority of anyone requesting protected health information before disclosing it, unless the requester’s identity is already known. In practice, that means showing a photo ID and insurance card at check-in. The legal standard is reasonableness: a provider can rely on documentation that appears on its face to meet the requirements. For disclosures to public officials, credentials presented in person or a request on government letterhead can satisfy verification.
What to Have Ready Before You Start
A little preparation prevents most verification headaches. The single most common failure is a mismatch between the name on your ID and the name in the system. If you’ve changed your name through marriage, divorce, or court order, bring the linking document (marriage certificate, divorce decree, or court order) with your current ID.
Keep a valid, unexpired government-issued photo ID accessible. A driver’s license or passport covers most scenarios. Depending on the context you may also need a Social Security card, birth certificate, or a utility bill showing your current address.
For online verification, technical problems cause as many failures as document issues. Before starting:
- Get on a stable internet connection.
- Confirm your camera works. Most systems need one for document photos and selfies.
- Update your device’s software.
- Read the instructions. Some systems require a smartphone; a laptop webcam won’t complete the flow.
When Verification Fails
Failed verification is frustrating but usually fixable. The common causes are blurry document photos, name mismatches, expired ID, and credit freezes blocking KBA questions.
If your document photo was rejected, retake it in good lighting on a flat, dark surface. Glare and shadows are the usual culprits. If you legally changed your name, many systems will route you to a video call with a live agent rather than the automated selfie path. If your ID is expired, there’s no shortcut. Renew it and try again.
For KBA failures tied to a credit freeze, lift the freeze temporarily with the relevant credit bureau, complete verification, then reinstate the freeze. Each bureau lets you do this online or by phone.
If repeated attempts fail, most agencies offer alternative paths. The IRS provides video calls with ID.me agents and in-person appointments at Taxpayer Assistance Centers. Banks can verify in person at a branch. Don’t just give up mid-process; some systems lock you out after too many failed attempts in a short window.
Protecting Your Information While You Verify
Every verification hands your personal data to someone else. A few habits cut your risk sharply.
Confirm the request is legitimate before sharing anything. Website URLs should start with “https,” and you should reach the site by typing the address yourself or following an official link, not by clicking a link in an unsolicited text or email. Legitimate organizations do not ask you to verify your identity by replying to a text with your Social Security number. If something feels off, go to the organization’s official website or call the number on your account statement.
Use a private network. Public Wi-Fi at coffee shops and airports is easy to intercept. If you must verify away from home, use your phone’s cellular data.
Provide only what’s explicitly requested. If a form asks for your name and date of birth, don’t volunteer your Social Security number. Extra data increases your exposure if the organization is later breached.
If Someone Else Uses Your Identity
The FTC operates IdentityTheft.gov as the federal government’s central resource for reporting and recovering from identity theft. The site builds a personalized recovery plan with step-by-step instructions, printable checklists, and sample letters for businesses and credit bureaus. Filing there creates an official FTC Identity Theft Report, which you may need to dispute fraudulent accounts.
Then place a fraud alert or credit freeze with all three major credit bureaus. A fraud alert is free and requires businesses to take extra steps to verify identity before opening new accounts in your name. A credit freeze goes further, blocking access to your credit report until you lift it. Both are free. Move quickly: the longer fraudulent accounts stay open, the harder the cleanup.