Identity Verification Is Not All Created Equal

As you prepare for AML/CTF Tranche 2 compliance ahead of the 1 July 2026 deadline, one of the most important decisions you'll make is choosing how you verify your clients' identities. Many platforms appear to offer similar functionality on the surface — but beneath it, there's a fundamental divide between platforms that perform genuine government-connected verification and those relying on automated document scanning with no direct line to the source of truth.

VerifiMe sits firmly on the government-connected side of that divide. VerifiMe is an approved Gateway Service Provider (GSP) to the Australian Government's Document Verification Service (DVS) — listed on the Attorney-General's Department's official approved GSP register as GreenGate FinTech Holdings (VerifiMe). You can verify this directly at idmatch.gov.au/organisations/business-user/approved-gateway-service-providers.

What Is the DVS?

The Document Verification Service is a national online system operated by the Attorney-General's Department, now underpinned by the Identity Verification Services Act 2023 (Cth). When an identity document is checked through the DVS, it queries the original issuing agency's records directly — the Department of Home Affairs for passports, Austroads' NEVDIS system for driver's licences, Services Australia for Medicare cards, and state registries for birth certificates.

The result is a simple, definitive yes or no: either the details match the official record, or they don't. No raw data is revealed — only the match result — protecting your clients' privacy while confirming document authenticity. Up to 14 categories of Australian government-issued identity documents can be verified this way, including passports, driver's licences, Medicare cards, birth certificates, visas, and citizenship documents.

DVS vs. Standard Identity Verification

Most identity verification tools used by professional services firms  rely on optical character recognition (OCR): they scan a photo of an ID document and use algorithms to assess whether it looks legitimate based on formatting, fonts, and visual security features.

This is fundamentally different from a DVS check. OCR tells you whether a document appears genuine. DVS tells you whether it is genuine, because it queries government records directly. A high-quality forgery can fool an OCR check. It cannot fool a DVS check, because a false document number won't return a match.

For Tranche 2 purposes, AUSTRAC has recognised the DVS as a reliable method for satisfying identity verification obligations under the AML/CTF framework. When your compliance program is reviewed, "DVS-connected check via an approved GSP" is a demonstrably robust answer.

What This Means for Your Tranche 2 Obligations

From 1 July 2026, accounting practices providing designated services become reporting entities under the AML/CTF Act, with obligations to:

• Verify client identities — for individuals and for the beneficial owners behind companies, trusts, SMSFs, and other structures
• Assess and document customer risk — every client must receive a risk rating, with enhanced due diligence applied where appropriate
• Screen against PEP, sanctions, and adverse media lists — at onboarding and on an ongoing basis
• Maintain a complete audit trail — every decision must be documented and producible to AUSTRAC on request

VerifiMe addresses all of these in a single platform. DVS-connected identity verification is the foundation, wrapped with automated PEP and sanctions screening, KYB capabilities for corporate and trust structures, risk scoring, and a full audit trail — purpose-built for Australian professional services firms.

The VerifiMe Advantage

Government-grade verification. Every identity check runs through the DVS hub in real time, backed by the issuing agency's own records — the same infrastructure used by banks and government agencies.

No document copies held by your practice. Your clients verify through VerifiMe and you receive a verified attestation, not raw copies of their passport or licence. This dramatically reduces your data breach exposure and aligns with Privacy Act best practice.

The shareable identity wallet. Once a client verifies with your practice, those credentials are stored in their secure digital wallet and can be shared — with their consent — with other professionals in the VerifiMe network. One verification, reused across their accountant, lawyer, and financial adviser.

Xero Practice Manager integration. Verification and compliance records flow directly into XPM, keeping your team working in the tools they already use.

Why GSP Status Is a Real Differentiator

Becoming an approved GSP requires satisfying strict technical and privacy standards set by the Attorney-General's Department, executing a formal Participation Agreement with the government, and taking on ongoing accountability for the business users you onboard. It is not a credential any software vendor can simply claim — it requires genuine investment and ongoing government oversight.

When you use VerifiMe, you're not just subscribing to a SaaS product. You're connecting to a government-accredited verification network through an intermediary the Australian Government has vetted and holds accountable. That institutional foundation is worth communicating to your clients as part of how seriously your practice takes compliance.

Ready to build your AML/CTF program on government-grade infrastructure? Contact us at hello@verifime.com.