







Identity Verification Attacks in 2025
See the most egregious cases of identity verification incidents in 2025, with expert commentary and tools to stay ahead of and prevent similar threats.

Exposed Persona Frontend Reveals Extensive Biometric Surveillance Stack Behind Age Verification - ID Tech
Security researchers investigating Discord’s age-verification implementation have discovered a publicly exposed frontend belonging to Persona Identities, Inc., revealing that the identity-verification vendor’s platform performs far more extensive checks than users […]

Hackers Had A Live Feed Of Every ID This Verification Company Scanned. For Over A Year.
From the very beginning of this recent obsession with identifying everyone online (yes, they like to call it “age” verification, but it always ends up as identity verification), we̵…

Hack of Age Verification Company Shows Privacy Danger of Social Media
We’ve said it before: online age verification is incompatible with privacy. Companies responsible for storing or processing sensitive documents like drivers’ licenses are likely to encounter data
‘Age Verification’ could force trans people to out themselves to use the internet
Automated online ID checking systems add new potential dangers to having a mismatching ID.

AU10TIX: records exposed security breach affecting major apps
An Israeli identity verification company suffered an attack that compromised the personal data of millions of users of popular apps.
The Everything Account - augment
I’ve been thinking a lot about our accounts lately. We all have an ever-growing pile of digital identities scattered across the web, many forgotten after a b…
Privacy.com uses identity verification service Persona, which will keep biometric information for "up to" 3 years
I think it’s time to stop recommending it

Self-sovereign identity: the future of personal data ownership?
Despite the economic value of online identities, major concerns remain around privacy issues. Could the self-sovereign identity model be the solution?

Actually, having one Identity for yourself is a Breaching Experiment
This should really be a comment to Henry’s post, but I have the keys to this car, so I’m going to drive it, too. We have Zuckerberg’s remark:
IIW – Internet Identity Workshop
The Internet Identity Workshop — where the identity community meets to discuss and advance digital identity.

The Age Verification Privacy Paradox: Why Document Uploads Hurt Everyone—and How World Solves It
Age verification is now required by many digital platforms worldwide, but most systems create new risks for user data and privacy. This article explores why document-based age verification exposes everyone to greater risk—and how privacy-first technology like World ID offers a safer path for consumers and platforms.

have you ever done an age/ID biometric verification online? congrats, you're fucked. your biometric data is now permanently circulating the dark web with no way to stop it
your face just got leaked. permanently.
youtu.be♍ Bee 🐝
I'm upset about age verification stuff today and might do a thread or write up later Just catching up with the mercor data breach and fml. fuck all of our lives. Especially re: the doxxing of sex workers. jesus fucking christ
You know, part of the reason why I’ve been so concerned about the-letter-that-shall-not-be-named is because I was worried about their users being misled or their legal IDs potentially being leaked, but the responses under the ridiculous announcement from the official account suggest I shouldn’t care