Digital Account KYC Onboarding

A digital-first bank opens accounts without a branch, which means the very first interaction with a customer is also the riskiest: a stranger claiming to be someone, asking for a regulated financial product. Onboarding had to be fast enough that applicants did not abandon, and rigorous enough that the bank knew who it had let in. Those two goals usually fight each other.

The challenge

The bank’s original onboarding leaned on manual document review and back-office checks, so a new account could take days to activate. Applicants dropped off during the wait, and the manual step was both expensive and inconsistent. Worse, identity was effectively asserted at signup and only verified afterward, which left a window where an unverified account already existed.

The bank wanted identity proven up front — at the moment of onboarding — with enough rigor to satisfy KYC obligations and enough speed to keep applicants engaged.

What Veripass deployed

Veripass moved verification to the front of the funnel. During onboarding, applicants completed biometric verification — a face capture matched against an ID-document scan — so the bank had a strong, evidenced link between the person and the claimed identity before any account session was established. Where additional assurance was needed, fingerprint verification reinforced the check.

Policy-based, context-aware evaluation drove the flow: the conditions of the application determined which verification steps were demanded, so straightforward cases moved quickly while higher-risk ones faced more proof. Once verified, the applicant’s identity became a first-class member of the bank’s organization tenant, and their initial entitlements were issued through claims, capabilities, roles, and access profiles — so a freshly onboarded customer started with exactly the access their product allowed, nothing more.

Every verification step, every captured artifact, and every policy decision landed in an immutable audit trail, giving compliance a complete, reconstructable record of how each identity was established.

• Biometric verification (face, ID document, fingerprint) at onboarding
• Policy-based, context-aware verification flows
• Identity provisioned into the organization tenant on success
• Initial entitlements via claims, capabilities, roles, and access profiles
• Immutable audit trails evidencing every KYC decision

Outcome

Account opening collapsed from days to minutes for the majority of applicants, because verification happens in the flow rather than after it. Drop-off fell as the wait disappeared, and the manual review queue shrank to the genuinely ambiguous cases that warrant human eyes.

Crucially, identity is now proven before the first session exists, closing the window in which an unverified account could act. When a regulator asks how the bank knows a given customer is who they claimed, the answer is a complete audit trail: the biometric match, the document, the policy, and the moment it all cleared.