Back to home

Identity Document Verification for UK Mortgage Brokers

By Casefile

Identity Document Verification for UK Mortgage Brokers

Identity document verification for a mortgage file means confirming that a client's name, date of birth and address are backed by genuine, current, independent documents before the case goes to a lender. Done late or by hand, it is the step that causes most avoidable queries. Done early and consistently, it becomes a routine check that sits alongside affordability evidence rather than holding it up.

This guide sets out what UK brokers need to collect, what the regulatory position is, how electronic checks fit in, and a five-step process for building ID verification into document collection.

TL;DR

  • Mortgage brokers are not automatically bound by the Money Laundering Regulations like banks, but the Proceeds of Crime Act 2002 still applies, so most firms run formal customer due diligence.
  • Verification needs proof of full name, date of birth and address. One document cannot prove both identity and residence.
  • Electronic checks are an accepted route when the process is independent of the client, secure against fraud and gives appropriate assurance.
  • Keep the evidence for five years after the relationship ends, with a clear audit trail.
  • The biggest time saving comes from cross-checking ID against bank statements, payslips and the application form before the lender sees them.

Table of Contents

What identity verification covers on a mortgage file

There are two separate questions. The first is whether the person is who they say they are. The second is whether they live where they say they live. Photo ID answers the first. A bank statement or utility bill answers the second.

The HMRC guidance on identifying and verifying customers sets the minimum details for a private individual, starting with full name, and the government's money laundering supervision guidance describes customer due diligence as checks that customers are who they say they are. For a broker, the practical output is a file in which every applicant has:

  • a verified full name that matches across all documents;
  • a verified date of birth;
  • a verified current address, supported by a document independent of the photo ID;
  • a record of what was checked, when and by whom.

The point is not simply to hold copies. The HMRC manual on CDD frames the goal as understanding the customer and the purpose of the relationship. A file that holds a passport scan but nobody has compared it with the rest of the evidence has not been verified in any meaningful sense.

Which documents brokers normally ask for

The government guidance lists commonly requested documents such as a current UK or EEA photocard driving licence, a passport, utility bills, and bank or building society statements dated within the last three months, as set out in the money laundering responsibilities guidance. Individual lenders may add their own requirements, so the table below is a working baseline, not a substitute for the lender's criteria.

PurposeTypical documentsCheck before accepting
Proof of identity (photo)Passport, photocard driving licenceIn date, name matches application, image legible, no signs of alteration
Proof of addressRecent bank or building society statement, utility billDated within the last three months, name and address match, issued by the provider
Date of birthPassport or driving licenceMatches the application form and any other ID held
Income-related cross-checkPayslips, bank statements, tax documentsEmployer name, wage amount and deposit date agree between documents

If you are explaining to clients how documents prove name, date of birth and address, this short overview of the documents used to verify an individual's details is a handy outside reference, although the mortgage rules in this article are UK-specific.

One document cannot do two jobs

A frequent mistake in early document collection is accepting a single item as proof of both identity and address. The proof of identity checklist indicates that a photocard driving licence cannot serve both purposes. A second, independent document is needed to establish residency. Clients often upload the same licence twice and consider the job done, so a document list that states clearly what each upload is for removes a round of chasing.

One document cannot do two jobs — overview diagram

The regulatory position for UK mortgage brokers

The obligations depend on how a firm is supervised, and it helps to be precise.

According to the FCA's money laundering and terrorist financing page, the Proceeds of Crime Act 2002 applies to regulated firms. Many mortgage brokers are not subject to the Money Laundering Regulations in the same capacity as banks, yet adopt formal customer due diligence, often with electronic identity verification, because poor practice can still draw regulatory scrutiny. Treat AML controls as risk mitigation: they stop the firm from unwittingly facilitating financial crime.

The FCA Handbook, FCG 3 states that firms must identify their customers and, where applicable, their beneficial owners, then verify their identities. It also expects firms to understand the purpose and intended nature of the relationship. Brokers dealing with limited company or buy-to-let structures should read this with their own applicant types in mind.

When you do not need to verify again

There is no regulatory obligation to re-verify a customer's identity if it was previously verified satisfactorily and you have no reason to doubt the adequacy of the evidence, as noted in the FCA's 2025 final notice to Nationwide Building Society. For repeat clients this saves effort, but the phrase "no reason to doubt" matters. A change of name, a new address or a mismatch in new documents is a reason to look again.

Retention

Firms are required to keep evidence of identity for five years after the business relationship concludes. The FCA's financial crime guidance for consumer credit firms refers to Regulation 20(4) of the Money Laundering Regulations for this. The same applies to transactional documents. In practice that means storing documents in a way that lets you show who approved what and when, years later.

Manual checks and electronic checks compared

Both routes are legitimate. The question is which one produces a reliable file with the least effort for you and the client.

CriterionManual (copies by email or in person)Electronic or platform-based
Speed for the clientDepends on post, scanning and chasingUpload from a phone at any time
ConsistencyVaries by adviser and workloadSame checks applied to every file
Spotting mismatchesRelies on the reviewer noticingAutomated cross-checks flag differences
Audit trailOften spread across email and foldersRecorded in one place
Data handlingDocuments sit in inboxesControlled storage and access

The HMRC guidance on identifying and verifying customers accepts electronic identification as a reliable source where the process is independent of the individual, secure from fraud and misuse, and able to give an appropriate level of assurance. It points to digital identity services certified against the UK digital identity and attributes trust framework as recognised independent sources. When assessing any tool, ask whether it meets those three tests, not whether it looks modern.

Where ID verification goes wrong on mortgage cases

Most problems are mundane. They appear when documents are compared with each other, not when they are examined alone.

  1. Name mismatches. A payslip shows a shortened first name, a bank statement shows a middle initial, the passport shows the full name. Each is explainable, but a lender query is not.
  2. Stale address evidence. A statement outside the three-month window, or a utility bill for a previous address.
  3. Single-document reliance. One licence offered for both identity and address.
  4. Wage deposits that do not match payslips. The MoneyHelper guide to applying for a mortgage is a reminder of how much of the process depends on accurate supporting documents, and advisers commonly report that mismatches between client documents and application data are the leading cause of delay.
  5. Undeclared commitments. Regular payments visible on a bank statement that do not appear on the application.
  6. Altered documents. Edited PDFs or screenshots presented as originals. These are hard to see by eye.
  7. Complex applicants. Corporate applicants need beneficial owners identified, and higher-risk clients such as politically exposed persons need enhanced due diligence. The FCA's Nationwide notice indicates this is where manual discrepancies most often occur.

Only the first three are strictly identity issues. The rest are identity-adjacent, and they are why ID checks work best when run alongside income and commitments checks instead of as a separate task.

A five-step process for ID verification in document collection

This is the sequence that keeps verification proportionate and repeatable.

Five stages of broker identity document verification

Step 1: Build the document list from the case

The list should reflect who the applicant is and how they are paid. An employed applicant needs payslips and bank statements. A self-employed applicant needs tax documents as well, which is covered in our guide to tax return verification for mortgage brokers. A joint application needs a full set for each person. Generating the list from the case removes guesswork and avoids asking for irrelevant items.

Step 2: Tell the client what each document is for

State plainly that photo ID proves identity and a separate statement or bill proves address. This addresses the single-document problem before it starts.

Step 3: Verify the document itself

Check that the document is current, legible and complete, and that it has not been altered. Where you use an electronic service, confirm it can show you the outcome of its authenticity checks, not only a pass or fail label.

Step 4: Cross-check across documents

Compare name, date of birth and address against the application, then compare wage deposits on bank statements with payslips. Flag anything that does not reconcile and resolve it with the client before submission.

Step 5: Approve, record and retain

A named reviewer approves each item, the decision is logged, and the evidence is retained for five years after the relationship ends. Our article on document approval workflow controls explains the controls an auditor can trace, and the piece on role-based access control covers who in the firm should see which documents.

Our perspective: verification belongs inside document collection

We build Casefile for UK mortgage brokers, and our view is straightforward: ID verification should not be a separate task bolted on after the client has already sent everything. It belongs in the same flow as bank statements, payslips and tax forms, because the value comes from comparing them.

That is why the platform builds each client's document list from their payment type, cross-checks the documents it receives and highlights discrepancies, such as undeclared commitments and mismatched wage deposits, before they reach a lender. It also checks document authenticity and looks for tampering, and it handles ID and utility bills alongside income evidence. The adviser reviews a flagged exception instead of reading every page.

Two design choices matter to us as much as the checks. First, UK-only data residency, with no manual or offshore data handling, because identity documents are among the most sensitive items a broker holds. You can read how this works on our data security page. Second, the client-facing experience carries the brokerage's own branding, so the person uploading their passport sees their adviser's firm, not an unfamiliar vendor. That matters for trust and for completion rates.

Smaller brokerages gain the most. A firm with a handful of advisers cannot dedicate someone to document review, and consistent automated checks mean quality does not depend on who happens to pick up the file.

— Darren

Casefile for brokerages that want consistent ID checks

Casefile is a cloud-based platform that collects client documents, cross-checks them, flags discrepancies and manages the approval queue, with applicant privacy preserved and multiple applicant types supported. If your firm wants fewer manual checks and clearer client communication, see how it works at gocasefile.com.

What to ask before choosing an ID verification tool

Whatever you choose, put these questions to the provider:

  • Where is data stored and processed, and is any handling done offshore or manually?
  • Does the process meet the independence, security and assurance tests the HMRC guidance describes, and is any digital identity component certified against the UK trust framework?
  • Can it check ID alongside income documents, or only the photo ID in isolation?
  • Does it produce an audit trail you can show a supervisor, and can you retain records for five years after the relationship ends?
  • Can it handle joint, self-employed and corporate applicants?
  • Can you apply your own branding, and will clients understand what they are being asked to do?
  • How much training does a new adviser need before they can use it?

A tool that answers these well will reduce queries. One that only produces a pass or fail without explaining why will simply move the manual work somewhere else.

FAQ

What documents do I need to verify my identity for a mortgage?

You normally need photo ID, such as a passport or photocard driving licence, plus a separate document proving your address, such as a recent bank statement or utility bill. Government guidance mentions statements dated within the last three months. Your broker or lender may ask for more, so check their list.

Do mortgage brokers have to follow the Money Laundering Regulations?

Not automatically, in the same way banks do. The FCA says the Proceeds of Crime Act 2002 still applies, and many brokers adopt formal customer due diligence to manage that risk. Confirm your own firm's status with its compliance officer or your supervisor.

Can I use one document for both ID and proof of address?

No. Guidance states that a photocard driving licence, for instance, cannot prove both identity and residence. You need a second, independent document for the address.

Is electronic ID verification acceptable for mortgage cases?

Yes, provided the process is independent of the individual, secure from fraud and misuse, and gives an appropriate level of assurance, according to HMRC guidance. Digital identity services certified against the UK trust framework are recognised as reliable sources. Check any lender-specific requirements as well.

How long must identity evidence be kept?

Five years after the business relationship ends, as referenced in Regulation 20(4) of the Money Laundering Regulations. The same period applies to transactional documents. Store them so that approvals can be traced.

Sources

This article was generated with AI, and whilst it is our expectation that the article is accurate, it should not be taken as advice.