ID.me's CEO told Congress they only matched your face to your own photo. He lied. They were running every face against a database of millions — 1:many surveillance-grade facial recognition. He called getting caught a "communication mistake." Senator Wyden called it "a lie." 100 million Americans' faces in a searchable database, and the man running it lied to Congress about it. During COVID, millions of Americans needed unemployment benefits to survive. ID.me's facial recognition was the gatekeeper. Black applicants were locked out at higher rates because the algorithm couldn't reliably verify darker skin. Benefits frozen for months while they waited for manual review. An algorithm decided who eats and who doesn't, and it had a racial bias baked in.
What they claim: ID.me CEO Blake Hall repeatedly told Congress and the public that ID.me only used 1:1 facial verification (matching your face to your ID photo), not 1:many (searching your face against a database)
What we found: In January 2022, Hall admitted ID.me had been using 1:many facial recognition all along, comparing faces against a database of millions. He called it a "mistake" in communication. Senator Ron Wyden called it "a lie" and demanded an FTC investigation. The reversal came only after investigative reporting forced the admission.
What they claim: ID.me claims its facial recognition technology works equitably across all demographics
What we found: NIST studies show facial recognition algorithms have significantly higher failure rates for darker-skinned individuals, women, and elderly people. Reports from multiple states documented Black and Latino applicants being disproportionately locked out of unemployment benefits during COVID because ID.me could not verify their identity. Some applicants waited months for manual review while their benefits were frozen.
What they claim: ID.me describes itself as optional, with alternative verification methods available
What we found: The IRS initially planned to make ID.me the only way to access online tax accounts, effectively requiring facial recognition to file taxes. After bipartisan Congressional opposition, the IRS reversed course. However, the VA, Social Security Administration, and over 30 state unemployment agencies had already made ID.me mandatory with no practical alternative.
What they claim: ID.me privacy policy describes data retention and security measures for biometric data
What we found: ID.me is a private, for-profit company holding facial biometrics for over 100 million Americans. Unlike a government agency, ID.me faces no FOIA obligations, limited congressional oversight, and can be acquired, sold, or go bankrupt — with unclear consequences for its biometric database. The company has raised $240 million in venture capital, creating investor pressure to monetize its identity data.