Is Face Recognition via Mobile App on Par with In-Person Verification for eFaas?
In recent years, NCIT has introduced face recognition via the eFaas mobile app as an alternative to in-person verification. While this method adds convenience by eliminating the need for physical visits, it also raises important questions:
🔹 Is it as secure as in-person verification?
🔹 Does it provide the same level of confidence in identity authentication?
The Shift from Verification Levels to a Simple "Verified Yes/No"
Previously, eFaas had multiple verification levels, with the highest (Level 300) requiring users to verify their identity in person, have their photo taken, and sign an agreement. This ensured a high level of confidence in the user's identity.
However, eFaas has now transitioned to a simplified "Verified Yes/No" model, with face recognition via the mobile app becoming the new primary verification method.
Concerns with Face Recognition as the Sole Verification Method
While face recognition brings ease of use, there are some concerns with relying solely on this method:
✅ Liveness Detection – Is it effectively implemented? Without proper liveness checks, spoofing attacks using photos or videos could compromise security.
✅ Accuracy & Matching Issues – There have been reports of users struggling to get verified via face recognition. Additionally, twins may be mistaken for the same person, raising concerns about the system’s accuracy.
✅ Foreign Nationals & eFaas – Currently, face matching is only available for Maldivian citizens, as the system only contains local ID photos. This leaves foreign work permit holders unable to verify via this method.
An Alternative Solution: Remote Video Call Verification
Some banks abroad and other organizations tackle these issues by using live video call verification instead of (or in addition to) automated face recognition. A live agent can:
📌 Match the user’s face in real time
📌 Check for liveness (blinking, head movement, etc.)
📌 Request the user to show their national ID or passport
This approach offers a balance between security and convenience, especially for those unable to verify via the mobile app.
Face recognition is a great step forward, but should it be considered equivalent to Level 300 in-person verification? In my opinion, it should fall somewhere around Medium+ (250)—convenient, but not the highest level of identity assurance.
As digital identity verification evolves, a hybrid approach combining face recognition, video verification, and other security measures might be the best way forward.
📖 For those unfamiliar with how eFaas verification levels worked previously, check out my post here:
https://www.tumblr.com/nunthu/637268138043555840/importance-of-efaas-verification-levels
