2Shakes & IDV Code of Practice 2026

How 2Shakes meets the NZ IDV Code of Practice 2026 - clause by clause. 

The Identity Verification Code of Practice 2026 provides four pathways for identity verification and the 2Shakes Biometric Identity Verification fully complies with pathway 1.3 Other Electronic Identity Verification Methods. 

• 1.3.1 Other electronic identity verification (EIV) methods for the purposes of the code may be used where a customer’s name and date of birth is verified remotely (i.e. non-face to-face) from an electronic source.
  2Shakes Biometric Identity Verification electronically verifies the customers name and date of birth remotely to meet these requirements.

• 1.3.2 An electronic source is the underlying database or record where authenticated core identity information is held, and against which the customer’s full name and date of birth is verified. The electronic source must be reliable and independent.
  2Shakes only uses highly trusted government databases as electronic sources that are reliable and independent.

• 1.3.3 A customer’s full name and date of birth may be verified from— (a) a single electronic source that provides both information assurance and binding assurance; or (b) an electronic source that provides information assurance in combination with a separate linking mechanism that provides binding assurance.
  2Shakes uses 1.3.3(b) electronic sources that provide information assurance in combination with a separate linking mechanism that provides binding assurance.

• 1.3.4 To comply with the Code, one of the following options (a) to (e) must be used.
  2Shakes uses options (b), (c), and (e), as applicable.

  • 1.3.4(b) the DIA Confirmation Service;
    2Shakes verifies NZ passport data against the DIA confirmation service.

  • 1.3.4(c) a reliable non-New Zealand electronic source maintained by an overseas government body, that is an electronic source containing reliable authenticated identity information. A reporting entity must consider each of the following to determine whether the electronic source contains reliable authenticated information: (i) the method of information collection; (ii) the quality and accuracy of the information; (iii) security and privacy (including whether the management and provision of the information is consistent with the Information Privacy Principles 5 to 11 in section 22 of the Privacy Act 2020); and (iv) the level of country risk;
    2Shakes uses the Australian Government’s Document Verification Service (DVS) to verify Australian passport or driver licence data.

  • 1.3.4(e) the NZ Transport Agency Waka Kotahi Driver Check. When using this option, the customer’s name must be verified from a second reliable and independent electronic source. For example: (i) Credit Bureau; (ii) Companies Office; (iii) Land Registry (LINZ); or (iv) vehicle registration (NZTA)
    2Shakes uses the NZ Transport Agency Waka Kotahi Driver Check, along with Centrix Credit Bureau data, Companies Office (NZBN) data, and LINZ data.

• 1.3.5 To comply with the Code, options (b) to (e) above must be combined with a separate linking mechanism that provides binding assurance that the person being dealt with remotely is the genuine holder of the claimed identity.
  2Shakes Biometric Identity Verification provides a linking mechanism that provides binding assurance.

• 1.3.6(a) Use of EIV technology: to ensure the authenticity of any identification document electronically provided by the customer. This process must utilise robust facial recognition software (including a liveness test) to bind the person being dealt with to the image on the identity document, and to ensure the document has not been forged, altered or tampered with.
  2Shakes Biometric Identity Verification checks the authenticity of the document and utilises robust facial recognition software, including a liveness test as required.