Here's a novel idea: don't remove the existing email/password/secure-image combo. It works fine.
You can search for something more secure, sure - but don't break the damn system for the millions of people who need it and refuse to deal with ID.me.
You can search for something more secure, sure - but don't break the damn system for the millions of people who need it and refuse to deal with ID.me.
The government lost tens of hundreds of billions in unemployment fraud during COVID, and tax refund fraud is huge.
If you look at the fraud activity reported in the media in places like California, most of that was using breach data. Validating at IAL2 would probably eliminate 90% of that.
Tax return fraud is a huge business too, especially for people with large refunds due to EIC.
I'm confused by your question because I get the impression you were assuming I wanted to delegate such info collection to a 3rd party and that you would not that want, but maybe I've got that wrong. Is that what you were implying?
I think yes that's the case and yet I do think there are some services that are more in-house to the government and less farmed out, but I'm not sure.
For example, I think the unemployment departments at the state level are often government-run, but I could be wrong. Not sure how much the passport process is contracted out, but I would assume not too much but maybe it is.
Like a few years back when they were stealing tax refunds by filing before you or filing for people who'd passed away that tax year.
So much of this sounds like another overengineered solution to a problem that shouldn't exist.
They couldn't store more than 500MB of emails per employee, which was ~45TB uncompressed in 2014. Because of budgetary constraints.
Because they paid some dude rosemaro a half billion for an IT contract, among other things