How to verify users?

[batto]

Hi

I'm making site that would be best if i could provide strong
evidence that someone is really who he tells he is.

As for now, i can require people to download document, print it, sign it and fax back to company.

I wanted to require them to make a photo copy of ID Card and fax it with the document, but i was advised that people would be reluctant to this, because they don't want to share copies of IDs.
Whats you point of view on this issue?

What models of user verification are today best?

I'm thinking about small credit card charge but then stolen credit card could be used.

I'd like to hear from you.

[bwnbwn]

be best to know what area of the net your in or getting into to really help give you an honest answer.

[bill]

Take a look at the way Google's Knol went about it: Name Verification FAQ
[knol.google.com...]

[aspdaddy]

Not many companies have a brand or reputation to do this - dont take any chances use a trusted 3rd party like echosign or a small paypal charge.

[batto]

Thank you for answers

[paladin]

If this is for US users you can try safeid.org

[blaketar]

I looked into authorizing a small charge againist a CC number which the user inputted. They could then report back to the site form the number (ranging from 0.01 to 0.99) and if it matched they would be verified.

Trouble is (and I just found this out) you can call the number on the back of the credit card and as long as you know the zip code of where the person lives the automated systems will tell you the most recent charges and authorizations. Not very secure anymore since any scammer is going to be able to google the users name and find out the zip code, heck they most likely allready have the credit card holders address and zip.

Anyone know how PayPal automates their Bank Account Verification? Seems to me if someone could write a PHP app to post or deposit a small charge to a checing account a scammer would need to know alot more than a zip code to access the information!

[D_Blackwell]

I'm with bwnbwn on this. What are you into that you need this extra verification?

Trouble is (and I just found this out) you can call the number on the back of the credit card and as long as you know the zip code of where the person lives the automated systems will tell you the most recent charges and authorizations. Not very secure anymore since any scammer is going to be able to google the users name and find out the zip code, heck they most likely allready have the credit card holders address and zip.

If the scammer has the credit card number and the security code they pretty much own the person until the fraudulent charges start showing up.

What are you selling? I'm all for security, but without compelling reason, you are going to alienate about 100% of your users and send them to someone easier to make an order with.

safeid.org includes your having the customer's SSN, and jumping though hoops. This is only something that sounds like an added protection if you are talking about big dollar transactions.

I don't get the point of the Knol deal.?

[blaketar]

In our case we are wishing to verify members to allow them access to our online auction system. Without verification a member cannot participate (bid or sell items) in the auction.

The road-block we are up againist is the fact that a new member may stumble upon an item they wish to buy or bid on during the weekends or late in the night. Unless we have staff here at the office 24/7 to handle over the phone verification (too costly) it becomes a system which must be automated somehow?