ID.me, the controversial biometric identification verification company whose facial match technology provoked a major privacy backlash at the IRS earlier this year, may have misled the public and lawmakers when its CEO claimed the U.S. lost $US400 ($555) billion to fraudulent pandemic unemployment claims. Its biometric services, billed as a convenient and secure way to reduce pandemic related unemployment fraud, may have actually made it more difficult for those most in need of assistance to receive their aid.
That new evidence, shared with Gizmodo by the House Select Subcommittee on the Coronavirus Crisis and the Committee on Oversight and Reform, alleges ID.me made “baseless claims,” of rampant covid-19 unemployment fraud, “in an apparent attempt to increase demand for its identity verification services.” Additionally, the committees allege ID.me’s verification process, which was used by 21 different state governments to dole out unemployment benefits, contributed to “extraordinary wait times,” for certain users trying to verify their identities. In some cases, users without access to devices required to take face scans had to wait up to ten hours to have the company verify their identity over a video call.
ID.me, whose service was abandoned by the IRS earlier this year following backlash from privacy groups and reporting from Gizmodo and other outlets, works by asking users to provide a selfie which is then run against a government document to verify an individual’s identity. The company also verifies new users’ selfies against a database of faces when they first enroll.
This biometric system, at one point used by multiple federal agencies and 27 states, is intended to cut down on potential fraud and increase efficiency. If a user is flagged by ID.me’s system for some reason, (or if a user doesn’t have access to the tech required to produce a face scan) they aren’t blocked outright but are instead redirected to a video chat verification with one of the company’s team members.
Those video chat verifications, according to the House committees, were woefully inadequate.
In 14 of the 21 states where ID.me’s service was used to verify users identity for unemployment benefits, wait times for video verification chats reportedly averaged four hours in April 2021. Those weren’t even the worst cases. During that same month in North Dakota, people seeking unemployment benefits reportedly had to wait an average of 10 hours to have their identification confirmed.
Those long wait times may have disproportionately impacted unemployment seekers who didn’t have access to smartphones or broadband internet. As multiple studies from Pew Research shows, that cohort of Americans tends to come from low-income and rural communities. Those same communities were some of the groups most in need of pandemic unemployment benefits in the first place. States’ hasty reliance on ID.me’s facial match software, and ID.me’s lack of human video reviewers, may have combined to make an already difficult situation even worse for economically vulnerable groups.
“It is deeply disappointing that a company that received tens of millions in taxpayer dollars to help Americans obtain these benefits may have hurt their ability to access that critical relief,” House Subcommittee Chairman Senator Chairs Clyburn said in a statement. “ID.me’s practices risked putting desperately needed relief out of reach for Americans who lack ready access to computers, smartphones, or the internet.”
Making matters worse, the Committees claim they obtained documents from ID.me showing the company removed users’ ability to schedule appointments with reviewers because ID.me thought those appointments were allegedly, “hindering efficiency.”
In addition to the gruelingly long wait times, the Committees said they found no evidence supporting ID.me CEO Blake Hall’s widely reported claims that the U.S. had lost “as much as 50% of all unemployment monies,” due to fraud. Though many states did acknowledge some level of pandemic unemployment fraud did occur, statewide figures reviewed by the Committees were not nearly as high as ID.me’s figures. Strikingly, the company’s estimate of potential unemployment fraud was nearly ten times higher than the $US45.7 ($63) billion in potential fraud estimated in an analysis conducted by The Department of Labour Office of Inspector General.
The immense fraud that exploded during the pandemic has metastasized into a cancer rooted deeply within our economy. Exploring the origins of this fraud is the first step towards curing this cancer. https://t.co/77kpbWJwNe
— Blake Hall (@Blake_Hall) February 17, 2022
When the Committees asked ID.me to provide data supporting its claims, the company allegedly provided estimates from the right-leaning Heritage Foundation. Yet, after reviewing those figures, the Committees discovered the Heritage Foundation actually used ID.me’s own claims to arrive at its figure.
So, in other words, ID.me’s evidence to support its wildly inflated fraud claims was….itself.
Olga Akselrod a senior staff attorney with the ACLU’s Racial Justice Project, told Gizmodo that ID.me’s long wait times, in particular, “erected a barrier to accessing government services,” particularly among Black, Latinx, Indigenous and rural households, who are often amongst the most negatively impacted by internet and device digital divides. More broadly, Akselrod said the findings raise questions about the efficacy of public agencies relying on private firms to conduct identify verification.
“Government agencies should not be outsourcing such a core function as identity verification, and the dangers of that are particularly acute where they have failed to do a thorough assessment at the front end of the vendor and its product to ensure privacy, equity, and accessibility,” Akselrod said.
The Surveillance Technology Oversight Project agrees with the ACLU’s concerns. “ID.me should never have been used for pandemic unemployment assistance or any other government services,” Surveillance Technology Oversight Project Communications Director Will Owen told Gizmodo. “No one should have to give up their biometric data simply to access the benefits they’re entitled to.
Owen, who’s privacy focused focused organisation has spoken critically of ID.me in the past, said ID.me’s biometric solutions weren’t as efficient as the company let on.
“The absurd wait times show that there is nothing efficient or accurate about facial recognition,” Owen added. The algorithmic biases baked into these tools put people of colour and women at risk of being denied essential services.”
The House Committees’ findings are the result of a more than six-month long investigation launched in April. At the time, Senators Clyburn and Carolyn Maloney, expressed serious concern over the efficacy and security of ID.me facial match technology, which they described as “complex and problematic.” Those concerns are shared by numerous privacy and civil liberties groups which have criticised state and federal government partnerships with ID.me. One of those groups, Fight For the Future, has led a campaign calling on all government agencies to end their partnerships with ID.me.
And some are. Following the IRS’s decision to abandon ID.me in February, a spokesperson for the Department of Veterans Affairs told Gizmodo it was examining market research to see if continuing its relationship with ID.me is, “in the best interest of the agency.” Another spokesperson from the U.S. Patent and Trademark Office told Gizmodo they were considering other identity verification alternatives as well.
We reached out to ID.me for comment but have not heard back.