Confirm a customer's address in seconds, no utility bill, no upload
You can confirm a customer's name and address electronically by matching what they tell you against independent, reliable data sources, rather than asking for a utility bill or bank statement. The check runs against several sources at once, because a single source is not normally enough on its own to verify identity to the standard the Money Laundering Regulations expect.
That last point matters commercially. Every time onboarding pauses to request a document, some customers walk. A recent mover who has not yet had a bill in their name, an overseas buyer, a first-time renter, a new-to-UK director: these are the people who stall at the address step, and they are often the customers you most want to keep.
Yes. The Money Laundering Regulations 2017 require verification from a reliable source independent of the customer, not a specific document. A utility bill is one example a business may use. Matching a customer's stated name and address against independent data sources reaches the same standard, and works for people who have no recent bill.
No. Regulation 28(18)(a) of the Money Laundering Regulations 2017 defines verification as confirming identity on the basis of documents or information, in either case obtained from a reliable source that is independent of the customer. HMRC lists the utility bill and bank statement as examples of address evidence a business may use, not as a legal requirement.
The customer gives their name and address once. Instead of asking them to prove it with paper, you match those details against independent datasets held by other organisations, checking whether the same person is recorded at the same address across more than one source. This is the address half of the "2+2" convention: matching at least two identity attributes against at least two independent, reliable sources. HMRC guidance is clear that an electronic check drawing on a single source is not normally enough on its own.
A reliable independent source is any dataset held independently of the customer that carries an appropriate degree of assurance about who they are and where they live. Regulation 28(19) expressly recognises electronic identification as a route to this standard. In practice, sources include bank records, mobile-network data, insurance policy and claims data, public-sector data, finance-application data and credit reference agency data. No single one of these is treated as definitive on its own.
Document checks are slow and easy to fake. A PDF utility bill can be altered in minutes, and HMRC itself notes that a letter to a PO box does not confirm a residential address, with the business left to set its own recency rules. For the customer, the experience is worse still. They have to find a recent bill, photograph it, and upload it, and a meaningful share gives up before they finish. The people most likely to lack a document in their own name are recent movers and newcomers to the UK, the exact customers a growing business wants to onboard.
Electronic verification is compliant where it draws on multiple independent sources that together give reasonable certainty about the customer. Regulation 28(19) recognises electronic identification, and JMLSG guidance accepts electronically sourced evidence where cumulative independent sources support that certainty. The test is multi-source. A single database check is normally not enough on its own, and where identity is verified without the customer present, guidance expects an additional check linking the customer to the claimed identity. The firm still owns the wider customer due diligence.
Electronic name and address matching confirms the identity attributes at the verification step. It does not carry out sanctions or PEP screening, source-of-funds enquiries, transaction monitoring, or your business-wide risk assessment. Government guidance on using digital identities with the Money Laundering Regulations confirms that a certified provider can be a reliable independent source for the identity step, while the regulated firm remains responsible for the rest of its programme and ultimately liable.
|
Method |
What it is |
Practical drawbacks |
Where it sits in the MLRs |
|
Document (utility bill or bank statement) |
A paper or PDF record showing the customer's name at an address |
Slow to collect, easy to alter, drops customers who lack a recent bill; recency is for the firm to set |
An HMRC example of address evidence; acceptable subject to the reliable-independent-source test |
|
Single electronic source |
An address check against one dataset, such as one credit reference agency |
Thin-file customers may have no footprint at that source; not normally sufficient alone |
Acceptable input, but a single source is not normally enough on its own to verify identity |
|
Multi-source electronic matching (2+2) |
Matching stated name and address across several independent datasets at once |
Requires access to more than one source; configuration to the firm's risk appetite |
Meets the reliable-independent-source test where cumulative sources give reasonable certainty |
The commercial gain is straightforward. When you can confirm an address from data the customer already sits within, you clear the routine cases in seconds and send only genuine exceptions to manual review. Fewer good customers fail at the address step, and your compliance team spends its time where the risk actually is.
This is where KYC Match fits. It is an optional add-on across OneID's identity products, matching a customer's stated name, address and date of birth against a configurable set of independent sources, and returning the match counts your policy calls for. It runs alongside bank-based verification, or on customer data alone as a real-time API or a batch data wash, a common pattern being a second wash on the records a single credit reference agency check missed. In one Tier-1 gaming operator's data, a second wash on customers that failed a credit-reference-only check recovered enough of them to lift new-customer onboarding by around 15%. OneID is a digital verification services provider, certified under the UK's Digital Verification Services Trust Framework (DVSTF).
You can test this against your own book. Run 1,000 records through KYC Match for free and compare the results against your existing provider, by contacting OneID.
Can I verify a customer's address without asking for documents? Yes. The Money Laundering Regulations require a reliable source independent of the customer, not a specific document. Matching a customer's stated name and address against several independent datasets meets that standard and works for people who have no recent bill in their name.
What is electronic proof of address? Electronic proof of address confirms where a customer lives by matching their stated name and address against independent data sources held by other organisations, rather than collecting a paper or PDF document from the customer.
Is a utility bill required for KYC? No. HMRC lists a utility bill as an example of address evidence, not a legal requirement. The rules ask for verification from a reliable independent source, which electronic multi-source matching can provide.
How many sources are needed to verify an address electronically? More than one. HMRC and JMLSG guidance state that a single source is not normally enough on its own. The industry "2+2" convention matches at least two attributes against at least two independent, reliable sources.
Does OneID need a document upload to verify address? KYC Match confirms name and address by matching against independent data sources, so routine cases resolve without a document upload. The firm still runs its wider customer due diligence.