FAQ's

1) What is myVerified Pass?

It is a secure framework that connects businesses and consumers to verify identities without sharing physical documents. Equifax will initially act as an unaccredited identity service provider, with a pathway to seek accreditation and act as an Identity Exchange Provider*, Identity Service Provider (ISP)**, and Attribute Service Provider* under the Australian Digital ID Act 2024, ensuring high standards of privacy and technical integrity.
* Scheduled for 2027. Equifax will also be seeking accreditation in 2027. 
**Aiming to go live Q4 2026

 

2) How do consumers share their information?

Through the myEquifax web app, consumers will verify their identity and selectively share their identity attributes with businesses via their mobile device or desktop. This provides a frictionless experience and ensures the business never has to store sensitive PII.

 

3) How do businesses verify consumer identities?

Using our Identity Exchange (scheduled for 2027) or directly through myEquifax (unaccredited ISP), your business can request specific information - from simple age checks to detailed identity information  - delivered via OIDC compliant, secure API.
 

4) What attributes can Equifax myVerified Pass confirm?
We offer access to a ready-made pool of verified profiles and a wide range of attributes, which can be updated as per your business needs from a combination of public and proprietary data sources.
Attributes include:

  • Primary Identity Documents: Government issued credentials such as Driver Licence, Passport, Medicare, and Birth Certificate.
  • Trust Signals***: Income, employment history and qualifications. 

Depending on your compliance needs, risk appetite and business requirements, you can choose the appropriate level of information, including age verification, specific attributes or full identity information.
*** Planned for future release, subject to development schedules.

 

5 ) Why is myVerified Pass more secure?

It eliminates the need for businesses to hold sensitive documents, helping to remove ‘data honeypots’ that attract hackers. We also include real-time biometric liveness checks and deepfake technology to help mitigate synthetic fraud. 

 

6) How does myVerified Pass enable faster checks? 

MyVerified Pass allows customers to verify their identity once and reuse it seamlessly with any business that has integrated our secure verification network. These reusable identities mean customers don't have to re-upload documents for every new service. This can help reduce verification time from hours to a few minutes. 

 

 

7) How does myVerified Pass integrate with my business? 

  • Step 1: Define the "Claims" (data) you need.
  • Step 2: Add the "Verify with myEquifax" button to your site.
  • Step 3: Receive the secure data claims directly into your backend.

 

 

8) How does myVerified Pass help with regulatory compliance?

Our solution is designed for and is on a pathway to align with the AU Digital ID Act 2024, so that your business can meet evolving standards for digital trust and risk management. 

 

9) How are documents verified?

Our automated process includes:

  • ID Scan: Advanced fraud analysis and OCR data extraction.
  • Biometric Match: High accuracy facial matching between the selfie and the ID document.
  • Liveness Check: Helping detect sophisticated presentation attacks (photos, videos, 3D masks).
  • DVS Match: Verify the document against government records.

 

 

10) How does myVerified Pass protect against deepfakes and AI-generated documents?

Equifax myVerified Pass includes biometric verification which leverages deepfake technology to expose AI-generated forgeries that are extremely difficult for the human eye to detect. This helps protect against digital forgeries created using generative AI, as well as printed photographs, videos, screen replays and 3D masks.

 

11) Where is data stored and what security measures are in place?

All data is stored in Australia using Amazon Web Services with a full audit trail of each transaction.
AES 256+ data encryption is used both in transit and at rest, with full user access control and management. Penetration testing is routinely performed four times per year, as well as after any significant upgrades or releases.

Equifax holds ISO 27001 and ISO 22301 credentials, as well as SOC 2 (Type 1 and 2). Our Biometrics offering is iBeta Presentation Attack Detection Level 1 and Level 2 certified. 

myVerified Pass delivers high standards across accessibility and usability, privacy protection, security, fraud control, risk management, and technical integrity.