How to Verify Client Identity Remotely

Introduction

Remote identity verification has become the standard for client onboarding across regulated industries in Canada. FINTRAC’s guidance permits electronic verification methods that allow businesses to confirm a client’s identity without requiring an in-person meeting — provided the method meets acceptable standards for document authentication and identity confirmation.

Step-by-Step Process

1. Initiate a verification request: Using your identity verification platform, create a new verification request for your client. This generates a secure, time-limited link that is sent to the client via email or SMS.

2. Client captures their identity document: The client opens the link on their mobile device and photographs the front and back of their government-issued photo ID (passport, driver’s licence, or provincial photo ID card). The system automatically extracts data from the document and checks its authenticity.

3. Biometric matching: The client takes a live selfie, which is compared against the photo on the identity document using facial recognition technology. This confirms that the person completing the verification is the person pictured on the document.

4. Liveness detection: The client performs a short liveness check — such as turning their head or following on-screen prompts — to confirm they are physically present and not using a static image, video replay, or deepfake.

5. Automated screening (if applicable): For KYC-level verification, the client’s information is screened against sanctions lists, PEP databases, and adverse media sources in real time.

6. Review the verification report: Once the client completes the process, a detailed report is generated containing the document images, extracted data, biometric match score, liveness confirmation, and screening results. Review the report and store it in your compliance records.

Best Practices

1. Use a secure, encrypted platform: Ensure that all data transmitted during the verification process is encrypted in transit and at rest. The platform should comply with PIPEDA and applicable provincial privacy legislation.

2. Set appropriate time limits: Verification links should expire after a reasonable period (typically 24 to 72 hours) to prevent misuse.

3. Provide clear instructions to clients: The verification process should be intuitive, but a brief email explaining what the client will need (their government ID and a mobile device with a camera) reduces friction and abandonment.

4. Maintain records: Store the complete verification report for the period required by your regulatory obligations — typically at least five years after the end of the business relationship.

How Athenty Can Help

Athenty, a verification intelligence company, provides Smart IDV and KYC services that make remote client identity verification fast, secure, and compliant.

1. One-link onboarding: Send your client a single secure link. They complete document capture, biometric matching, and liveness detection on their own device in under five minutes.

2. Automated document authentication: Smart IDV checks security features, MRZ data, and metadata consistency to detect fraudulent or tampered documents.

3. Active liveness detection: Defends against deepfake attacks and photo injection by requiring real-time interaction from the client.

4. Complete audit trail: Every verification produces a timestamped, downloadable report that meets FINTRAC’s record-keeping requirements.

Conclusion

Remote identity verification is not only permitted by Canadian regulators — it is increasingly expected. By following a structured process and using a verification platform that meets regulatory standards, businesses can onboard clients securely from anywhere without compromising compliance.