The scoreboard
What they make you surrender.
The law says a company should verify you by matching data it already holds — not by demanding your passport. Some follow that. Some route you through a third-party face-scan to see your own burrito receipts. We grade every company A–F on how much they make you give up, and we keep the receipts.
loading the scoreboard…
# Grades reflect friction relative to what the law allows.
A matches data they already hold (email/account login) - no documents
B reasonable - a signed agent letter, no sensitive or government ID
C heavier - account login, knowledge questions, or an ID selfie for full access
D a power of attorney or ID upload offered as a path
F government ID / third-party biometric demanded for routine data
# FCRA and government records lawfully require more ID - flagged, not failed.
# "We've tested" = graded from a real request we sent, not just their policy.
$