It’s baffling to me that these types of (usually unsigned in both the electronic and the ink way, not that the latter would prove anything in a scan) PDFs are still somehow the gold standard for “proofs” of address.
It’s baffling to me that these types of (usually unsigned in both the electronic and the ink way, not that the latter would prove anything in a scan) PDFs are still somehow the gold standard for “proofs” of address.
Things like tax numbers with addresses associated to them, official address registers... hell, a lot of ID cards in many jurisdictions just have your address printed on it!
Now, again, fraud is possible, but "I registered my drivers license to a fake address" is a bit of a higher hurdle than "I edited my utility PDF to show the right address".
Though there's a bit of a blessing in things like PDFs being easily editable, in that many badly organized criminals will likely do it haphazardly, leading to messy metadata, or even more amateur hour stuff around just having the font be wrong or the like. More opportunities for a fraudster to trip up, so to speak.
Why not? In my country the company registry is public, anyone can pay a small fee to get an official certificate of a company's address and company number.
In Finland, people are supposed to have a single official address. When you move, the government informs banks and other businesses that have a legitimate reason to know your official address, unless you have opted out. There are a few exceptions, such as temporary addresses and international relocations, where you have to give the new address yourself.
In both Australia and Japan there are tax numbers used for corporate identity verification (remember: here we're talking about a Wise account used for a business)
Is a scan/photo of a government ID that much more reliable, though?
Physical IDs are designed to be validated in person because they're hard to replicate. That's not the case for a scan/photo of an ID.
- I don’t know for France but for Japan one of the ID cards (My Number cards) have RFID chips in them. This means that KYC procedures can involve both scanning the card with your phone, and then doing some video “turn your head” verification stuff
- even absent that, video-based KYC flows (which I see a lot of) just leave less margin of error for fraudsters. And for people being honest, a national ID card is yet another way for someone to have proof, despite their other circumstances
There’s always going to be people in edge cases of course, I just feel like leaning on ID cards that many jurisdictions have is straightforward
Combine that with the absence of any built-in user verification (some national schemes have a PIN code, but the track record of that isn't great), and it becomes clear why these documents don't fully solve the problem of strong identity verification.