Verifying Your Identity

To improve platform integrity by reducing high volumes of low-quality submissions, identity verification (IDV) is now mandatory for all researchers before submitting reports to Managed Bug Bounty (MBB) programs (public and private, excluding on-demand MBBs). For this process, you will need to upload a copy of your approved identification document and a well-lit photo of your face via the embedded portal for NetVerify (Jumio), a third-party provider we use to perform identity checks. If you are already ID Verified (e.g., previously successfully completed, verified for payments, or background-checked), you do not need to verify again. Before you begin the process, please review the helpful tips to successfully verify your identity.

Tips for a successful verification

  • Ensure that the age difference between the selfie photo and the identification document is not too much. If there is a significant age difference, it can be difficult to make an accurate assessment of the person’s identity.
  • Ensure that the selfie photo is good quality. This includes having good lighting conditions, avoiding reflections on the face, having enough contrast, and making sure the essential parts of the face (eyes, nose, and mouth) are fully visible.
  • Keep in mind that facial hair and glasses can interfere with the camera and cause a failure in facial recognition.
  • Align your face with the oval on the screen or in the app. This will ensure that your face is captured correctly and that the verification process is successful.
  • You should be the only person in the selfie photo. Multiple people in the photo can cause confusion and make it difficult to verify your identity.
  • You should only use color selfie photos.

Things to avoid for identity verification

The items below can make it difficult to verify your identity and can lead to your identity verification being rejected.

  • Don’t use an entire ID as a selfie.
  • Don’t manipulate the selfie using filters, digital manipulations, or masks.
  • Don’t use a selfie that was captured from a digital, paper copy, or video.
  • Don’t cover parts of your face with a scarf, hat, or something similar.
  • Don’t have a different person perform the identity verification.
  • Don’t use an ID that is already associated with another Bugcrowd account (including banned accounts), as the verification will be automatically blocked.

Verifying your Identity

Have your identification document available. Jumio recognizes most passports, identity cards, or driver’s licenses as valid options that you can use as your identification document. The list of approved documents is at Jumio’s discretion and all licenses or IDs should be a plastic card to be recognized by their system.

To verify your identity, follow these steps:

1. Log in to Bugcrowd, click your profile picture, and then click Account settings.

account-settings

2. Click the Identity verification tab.

placeholder

3. Click START IDENTITY VERIFICATION to begin the identification process.

placeholder

You will be redirected to Jumio.

4. Click Start to begin the verification process through Jumio.

placeholder

5. Face Verification: allow the webcam and take a photo of your face.

placeholder

placeholder

Only take a photo of yourself with your webcam for this step: While Jumio’s system allows you to upload a photo for this step, it always fails the authorization. Hence, it is recommended to take a selfie.

6. Choose how to upload your ID document to verify your identity. Jumio allows you to choose between uploading a file from your computer, taking a picture with your computer’s webcam or your phone’s camera. Follow the instructions on the screen for the option that you choose.

placeholder

6a. You can use your mobile phone by scanning the QR code on screen.

placeholder

6b. Or upload a file from your computer.

placeholder

Note: We strongly recommend that you take a well-lit picture and your document is visible. Your document and the photo provided on your document are used to process the second part of the verification. If these are not clear, then the verification will fail.

7. Take a photo of the back of your document (if applicable). Follow the instructions on the screen for the option that you choose.

Note: If you have chosen a passport as a verification document, then skip this step.

8. When your upload finishes, you will be redirected to Bugcrowd.

placeholder

It may take a few minutes for your identification to process, but when it completes, you will receive an email from support@bugcrowd.com confirming your successful identity verification and Completed will be shown as the status next to your verification attempt in your Bugcrowd researcher profile under Identity Verification.

placeholder

9. If you have another nationality you would like to verify, click on the VERIFY ANOTHER IDENTITY button. We recommend that you verify yourself for each nationality you belong to by going through the same verification process steps again.

placeholder

Note: You have five attempts to verify your identity. If you have any problems or have used your five attempts, submit a support ticket through the Bugcrowd Support Portal.