← Credit Bureau
D

Onfido Identity Verification

Serious concerns
Entrust · 🇺🇸 United States
PolicyApp PermissionsNetwork TrafficFirmwareRegulatory
Technical details
Manufacturer: Entrust (formerly Onfido)

The bottom line

You scanned your passport for Revolut. Onfido processed it. Onfido was bought by Entrust — a company that does identity work for governments. Your crypto exchange verification is now in a government contractor's system. You signed up for a fintech app. Your face ended up in a defence contractor's database. Nobody told you about the acquisition.

Legal jurisdiction
🇺🇸 United States (headquarters)
CLOUD Act read more →
US govt can demand your data from this company even if stored overseas
FISA §702 / PRISM read more →
NSA collects stored emails, photos, messages without individual warrants
Geofence warrants read more →
Police can demand location data for everyone near a crime scene
Spying
2/4 MODERATE
Is someone spying on me?
Data Sharing
1/4 LOW
Who gets my data?
Security
0/4 N/A
Is it actually secure?
Honesty
0/4 N/A
Can I trust what they say?
ACCEPTABLE Moderate concerns. Standard privacy hygiene applies.
1Contradictions
0Critical
1High
0Medium
4Sources
Findings by concern
Spying 2/4 MODERATE 1 finding
⚡ highmarketing vs third party research
You scanned your passport for Revolut. Onfido processed it. Onfido was bought by Entrust — a company that does identity work for governments. Your crypto exchange verification is now in a government contractor's system. You signed up for a fintech app. Your face ended up in a defence contractor's database. Nobody told you about the acquisition.

What they claim: Onfido promotes AI-powered identity verification trusted by financial services

What we found: Onfido processes identity documents and facial biometrics for companies including Revolut, Bitstamp, and Zipcar. In 2024, Onfido was acquired by Entrust — a US digital security company that also provides identity solutions to governments. The acquisition means biometric data collected for fintech verification is now held by a company that works with government agencies. Users who verified identity for a crypto exchange are now in a government contractor's database.

Sources