You need to sign in to view this page.
  1. NowInfinity
  2. Identity and Verification
  3. Getting Started with Identity and Verification

Identity and Verification (ID&V) FAQs

Avatar

Question

Answer

What is Identity and Verification (ID&V), and where can I learn more about it?

To support your preparation for AML/CTF Tranche 2, we’ve launched our Identity and Verification (ID&V) solution in NowInfinity. ID&V is an on‑demand solution that enables firms to verify the identities of their clients.

More information can be found from:

Do all NowInfinity clients have access to the ID&V solution? 

The ID&V solution is available to all NowInfinity clients, and can be accessed from Menu > Identify Verification.

Who is NowInfinity’s integration partner for Identity and Verification? 

NowInfinity’s ID&V solution is delivered via an API‑based microservice integration with GBG GreenID and Cloudcheck.

If someone has already been verified as an officeholder when registering Company X, is re-verification required if they become an officeholder for Company B during its setup?

Not automatically. Re‑verification is not required solely because the individual becomes an officeholder of another company. The need for further ID&V depends on whether a new designated service is being provided and the designated service provider’s AML/CTF risk assessment. Prior verification may be relied upon where it remains current, reliable and appropriate, unless there has been a material change in risk.

What services and packages are offered, and what are their prices?

We offer 3 service types, and each service type includes an optional Biometric check, for details on each service type and pricing refer to our help article Identity and Verification (ID&V).

Which service package would be most suitable to ensure compliance with the AML/CTF Tranche 2 requirements?

NowInfinity is a technology solution provider, offering functionality on our platform to support with the AML/CTF tranche 2. However, it remains the client's responsibility to ensure that they carry out the necessary identity checks by selecting the required product.

What documents are required for an ID&V check?

Up to two valid Australian ID documents are required:

  • Driver's License
  • Passport or
  • Medicare card

You only need to provide one form of ID; however, we recommend submitting at least two and double checking the details entered for a stronger verification result. 

Do all service types include a Risk Profile?

No. Not all service types include a Risk Profile.

The Standard ID&V Check only performs identity verification against government data sources and does not include screening against Politically Exposed Persons (PEPs) and sanctions lists. As a result, a risk profile cannot be assigned and will display as "Not Assigned".

If a risk assessment is required as part of the client's customer due diligence process, an Enhanced ID&V Check should be completed. The Enhanced ID&V Check includes screening against PEP and sanctions lists, enabling a risk profile assessment to be generated.

Can I know the reason why my clients Identity and Verification check is ‘Confidence’ , ' Likely' , ‘Cannot confirm’ or 'Not Assigned'?

For privacy, security and regulatory reasons, we’re unable to disclose the specific factors or data sources that contribute to an Identity and Verification (ID&V) outcome. This approach is consistent with Australia’s AML/CTF and privacy requirements, which restrict the disclosure of verification logic to help prevent misuse and protect personal information.

A “Confidence” outcome is where the submitted information is confirmed with the appropriate government databases on both the Primary Photographic identification and secondary sources

A “Likely” outcome is where Primary Photographic identification can be confirmed , however we are unable to match against our providers collection of secondary sources.

A “Cannot Confirm” outcome is where when we cannot confirm against the Primary Photographic identification, all secondary sources, watchlist checks do not proceed.

Next steps recommended for a “Cannot Confirm” outcome:

  • Review details entered (name, date of birth, address) to ensure they are accurate and consistent with formal identity documents.
  • Ask the client to re‑complete the ID&V check using clear, current, and valid documents.
  • Undertake alternative customer due diligence, where appropriate, in line with your AML/CTF Risk Policy.

Can I know the reason why my clients Risk Profile is ‘Low’, “Medium” or “High”?

The Risk Profile is a digital indicator only, generated using limited inputs. It does not override the Designated Service Provider’s responsibility to conduct its own risk assessment and comply with the AML/CTF Act, its AML/CTF Program, and applicable regulatory requirements for the designated services provided.

  • ‘Preliminary’ Low risk: ID&V is “Confident” and not on any PEP’s or Sanction lists.
  • ‘Preliminary’ Medium risk: ID&V is “Likely” and if “Biometrics” cannot be validated. A conservative approach is being taken with this profiling. We allocate a preliminary Medium risk factor when the primary ID document passes but the digital verification checks could not be confirmed against our provider's secondary identification sources, which requires an exact name match plus date of birth or address match. 
  • “Preliminary” High risk: Will occur regardless of the ID&V outcome if their name has appeared on a PEP’s and Sanctions List and thus might require further manual validation. It should be noted, that due to name commonality and alias that False Positive results may occur.
  • Not Assigned: Will display for on-going monitoring where the "identity opinion" cannot be confirmed. A "Not Assigned" risk profile also appear for Standard Identity Check, which did not include the additional screening required to generate a risk assessment. 

“High” Risk Profile will occur always with “Cannot Confirm” outcome. Noting: Suspicious Matter Report may need to be submitted where the Designated Service Provider determines on reasonable grounds individual isn’t whom they claim to be.

What are the next steps recommended for a Medium Risk Profile?

We allocate a Medium Risk factor for you to investigate further when the primary identity document passes but the digital verification checks could not match against our provider's secondary identification sources, which requires an exact name match plus date of birth or address match. 
 
Manual checking of secondary identification sources may be required.
 
Austrac has provided guidance on suitable secondary sources: 

  • Utility notice issued in the last 3 months
  • Council rates notice issued in the last 3 months
  • Australian bank statement issued in the last 3 months
  • Notices issued by a Commonwealth, state, territory or local government body issued in the last 3 months
  • Income tax assessment notice issued by the Australian Taxation Office (ATO) in the last 12 months
  • Payslip or letter from employer containing the individual's name issued in the last 3 months

Can I update the Risk Profile?

Yes. Once the preliminary rating is showing as either "Low risk", "Medium risk", or "High risk", the "Assign risk rating" button will display. This will allow the manual assigning of a risk profile, or recalculating the risk profile based on response to a "Risk assessment questionnaire". See: How can I update the Risk Profile of an ID&V result?

What is PEP’s ?

A Politically Exposed Person (PEP) is an individual who currently holds or has previously held a prominent public function, and who therefore presents a higher risk of bribery, corruption, or misuse of public funds due to their position or influence.

Importantly, being a PEP is not illegal and does not imply wrong doing - it is a risk classification, not an allegation.

PEP status also extends to immediate family members and close associates, because financial risk often flows through these relationships.

What are Sanctions Lists?

A sanctions list is an official, legally binding register of individuals, entities, countries, vessels, or sectors that are prohibited or restricted from financial or commercial dealings.

Unlike PEPs, sanctions are mandatory and enforceable by law. Dealing with a sanctioned party can result in criminal penalties, fines, asset freezes, and licence cancellations.

Can we conduct Identity and verification checks for Foreign person?

Identity verification is currently supported using Australian identity documents only. Verification using foreign identity documents, including foreign passports, is not supported at this stage and must be completed manually outside of NowInfinity. 

Do we need to perform Identity and Verification check before setting up the entity?

NowInfinity is a technology solutions provider that facilitates entity establishment and identity verification processes. Clients are responsible for determining the appropriate timing for conducting identity and verification checks.

Could you please confirm whether the ID&V solution is included in my current subscription package or I need to pay extra?

Identity and Verification (ID&V) is available as an on-demand product and incurs additional charges.

When is the payment for identity checks processed? 

For Subscription clients, all Identity & Verification (ID&V) check charges are processed as part of the monthly invoice, alongside the subscription fee. Charges are applied once the end client has completed the verification process. 

For PAYG clients, Identity & Verification (ID&V) check payments are processed at the time the request is initiated. Payment can be made via credit card or debit card. 

Charges apply regardless of the verification outcome.

Will I get an invoice for the Identity and Verification check?

For Subscription clients, Identity & Verification (ID&V) check charges are included in the monthly invoice, alongside the subscription fee. 

For PAYG clients, an invoice is generated for each Identity check and can be accessed via Menu > Portal > Invoices.

Can I re-submit the Identity and Verification check if it expires or if it fails?

There is no option to re-submit a request. A new request will have to be created.

Who receives the Identity verification completion email? 

Once an Identity verification is complete, a completion email is sent to the requester.

How can I extract Identity Verification Results?

Once an Identity verification is complete you can extract a PDF copy of the verification by:

  1. Navigate to Menu > Identity Verification > Identity Verifications
  2. Select the completed check
  3. Select the print icon located in the top right of the page
  4. Select PDF as the print type
  5. Select Save/Print
    Note: Exact selection at step 4 and 5 my differ based on your setup.

What are biometric checks?

Biometric checks compare the individual's facial features at the time of verification against the facial features shown within the provided identity documents.

Can expired identification documents be used for an ID&V check?

No. Expired identification documents cannot be used for an ID&V check through the NowInfinity ID&V tool. If an expired document is provided, the verification will either fail or return a status of "Cannot Confirm."

Which secondary sources checked by GBG during an Identity Verification check?

During an Identity Verification check, GBG automatically validates customer details against several secondary data sources, including Illion Australia/Greater Data, the Public Number Directory (PND), the Australian Tenancy File (TICA), FCS historical electoral roll data, the Australian Claims Database (IRS), and Australian Super Payroll Records. These sources are used to cross-check combinations of an individual's name, date of birth, address, and other identifying information to strengthen identity verification outcomes.

Was this article helpful?
1 out of 1 found this helpful
Have more questions? Submit a request