Identity verification for fintech, without storing biometrics

Forged documents, injected selfies and second accounts get through onboarding checks that only look at pictures. JERIX is the identity-verification step inside your KYC process: the document is proven genuine, the face is matched to it, and you receive the identity fields you need. No images or biometrics are retained.

Four ways identity fraud gets into onboarding, and how each one is stopped.

Fraud that opens an account is cheaper to stop at the door than to chase after the money moves.

Forged and altered documents

A convincing fake passport passes a check that only looks at the picture of the page. The account opens, and the loss arrives weeks later.

How it is stopped. The passport chip is read and its signature is verified to the issuing state's root, offline. A forged or altered passport fails that signature, however good it looks.

Injected selfies and deepfakes

Fraudsters feed a virtual camera or a replayed video into the onboarding flow, so the face on screen never stood in front of a phone.

How it is stopped. On iPhone, every capture is signed on the device with a single-use nonce and Apple App Attest. A frame that did not come from the device's own camera does not verify.

Second accounts and returning fraudsters

A customer you closed for fraud comes back under a new email, or one person opens several accounts to farm sign-up incentives.

How it is stopped. Each verified customer is tied to one person, and that person cannot open a second account with you. Two clients receive different references for the same person, so no one can cross-reference your customer base.

Account takeover at the moments that move money

A stolen password is enough to change payout details or add a new device, and the real owner disputes everything after.

How it is stopped. Put a fresh selfie check in front of payout changes, large transfers or a new device. It must resolve to the person the account was verified for. No second document scan.

Why the chip matters more than the picture: passport chip verification. Why a convincing selfie is no longer proof: deepfakes and remote identity.

Where JERIX sits in your KYC.

One step, done thoroughly. The rest of your compliance program stays where it is.

StepWho handles it
Identity verificationJERIX. A genuine government document, matched to the live person in front of the camera.
Identity fields for your recordsDelivered to you. A regulated client can receive name and ID number, with larger field sets configured per client.
Sanctions, PEP and risk screeningYour existing AML tools and policy.
Transaction monitoringYour existing AML tools and policy.
Record keeping and the compliance decisionYou, under the rules your regulator sets.

Online customer identification at payment companies and other regulated fintechs runs on its own rules. JERIX supplies the verification and the fields. Whether a flow meets your obligations is your compliance team’s call, and this page is not legal advice.

How it works, in three steps.

1. Your onboarding opens the check

Your server creates a verification at the assurance level the flow needs, and your app or site opens one URL.

2. Document and selfie

The customer scans a passport chip in the app, or photographs an Israeli ID card, and takes a selfie that is matched to the document's face.

3. The result and your fields

Your server receives the verification result and the identity fields configured for you. The images and biometrics are deleted right after. A check takes under ten seconds.

No face database on your books, or on ours.

Fraud is stopped at the check. Right after it, the images and biometrics are deleted.

You receive the identity fields your process needs, not face images or templates. JERIX retains no images or biometrics, so there is no archive of customer faces to breach and nothing to feed the next deepfake. For a fintech, that is one fewer category of sensitive data to secure, audit and explain.

Read more: why storing face data is a liability.

Inside the onboarding you already have.

One URL opened inside your existing onboarding, and two server-to-server calls. No SDK is required, so your stack is not a gating question. When the check should run inside your own app, use the React Native or Flutter SDK. Results arrive through signed webhooks, and verifications are recorded in a tamper-evident audit chain.

What the two calls look like →

Questions about identity verification for fintech.

Is JERIX a full KYC or AML solution?

No. JERIX is the identity-verification step inside your KYC process: it confirms the person matches a genuine government document. Sanctions and PEP screening, risk scoring and transaction monitoring stay with your existing tools and your compliance team.

Can a regulated fintech receive the customer's name and ID number?

Yes. A regulated client can receive identity fields such as name and ID number, and larger field sets are configured per client. Platforms that only need an age or a verified flag receive a yes or no instead.

Does it work with Israeli ID cards for online customer identification?

Yes. An Israeli ID card is verified from photographs of the card, and its chip is never read. A biometric passport is the stronger path, because its chip signature is verified to the issuing state.

How long does identity verification take at onboarding?

Under ten seconds for the verification itself. The customer scans or photographs one document and takes one selfie, inside your own onboarding flow.

Stop the forged passport before the account opens.

Bring your onboarding flow and the fields your compliance team needs. Twenty minutes, a real passport, and the chip verified offline in front of you.

Book a demo