Anthropic Claude identity verification requirement

To keep using Claude, some consumer subscribers now have to photograph a physical government-issued ID and submit a live selfie to a third-party vendor, Anthropic's identity partner Persona Identities, which extracts what Anthropic's own privacy policy calls "facial geometry templates (which may be considered 'biometric data' in some jurisdictions)."^[1][2] Anthropic began applying the Persona verification mechanism in April 2026 for what Engadget reported as "a few use cases," and a revised privacy policy that adds a "Verification Data" category collecting the ID image, ID number, date of birth, & a photo or video selfie is scheduled to take effect July 8, 2026.^[3][1] The requirement reaches Free, Pro, and Max accounts; Team, Enterprise, and API customers are exempt.^[4]

Anthropic published a support-center page titled "Identity verification on Claude" and began applying the check to a subset of accounts in April 2026.^[2][5] The page does not name the specific features that trigger a prompt. It states that a user "might see a verification prompt when accessing certain capabilities, as part of our routine platform integrity checks, or other safety and compliance measures."^[2]

Anthropic gives three reasons for the check. On the support page it writes that identity verification "helps us prevent abuse, enforce our usage policies, and comply with legal obligations."^[2] It also says the data is walled off from model training:

We are not using your identity data to train our models. Verification data is used solely to confirm who you are and to meet our legal and safety obligations.

^[2]

Engadget reported that the requirement applied "for a few use cases" rather than to every account at sign-up, and Biometric Update reported that the limited April deployment ran through Persona.^[3][5]

The check requires a valid physical government photo ID, a passport, driver's license, or national identity card, plus a live selfie captured through a phone or webcam; Anthropic says it "typically takes under five minutes."^[2] The support page rejects photocopies, screenshots, scans, photos of a photo, digital or mobile IDs, non-government IDs such as student or employee cards, & temporary paper IDs.^[2]

The data fields are spelled out in the revised privacy policy. Under a new heading the policy describes what Anthropic collects when a user verifies:

In certain circumstances, we may ask you to verify your age or identity. If you choose to do so, data we will collect includes, depending on the method: an image of your government-issued identity document and the information appearing on it (such as your ID number and date of birth); your image in photo or video form, facial geometry templates (which may be considered 'biometric data' in some jurisdictions); and the result of the verification (for example, whether your age meets the applicable threshold).

^[1]

That clause is the company's own acknowledgment that the process generates facial geometry templates, which it concedes "may be considered 'biometric data' in some jurisdictions."^[1] The policy lists consent as a legal basis "where you choose to verify your identity using biometric data."^[1] Its stated effective date is July 8, 2026, so the codified "Verification Data" category will become binding then, while the verification mechanism itself has been live since April.^[1][4]

The mandate does not reach every customer. Techzine reported that the consumer tiers, Free, Pro, and Max, are subject to the check, and that it "does not apply to business customers (Team, Enterprise, and API)."^[4] Anthropic acts as "the data controller" for the verification data; The New Stack reported that the captured IDs & selfies are held by Persona rather than copied onto Anthropic's own systems.^[6]

Persona Identities is a San Francisco identity-verification firm, founded in 2018, that matches live selfies against government documents.^[6][7] It raised a $200 million Series D at a $2 billion valuation, a round that included Founders Fund & Ribbit Capital, and it lists OpenAI among its clients.^[7][8] Persona markets itself as "the verified identity layer for an agentic AI world."^[7]

Founders Fund, the venture firm in Persona's Series D round, was started by Peter Thiel, who, per Founders Fund's own page, "cofounded Palantir Technologies, where he serves as chairman."^[9] Founders Fund is also an investor in Anthropic, so the same firm helped finance both the company collecting the biometric data and the vendor processing it.^[10]

Persona disputes any operational tie to Thiel. Its chief operating officer, Christie Kim, told Biometric Update that Thiel "is not on our board, does not advise us, has no role in our operations or decision-making, and is not directly involved with Persona in any way."^[10]

In June 2026, the U.S. Commerce Department used national security export controls to bar Anthropic from distributing two of its models, Claude Fable 5 & Claude Mythos 5, to any foreign national.^[11][12] Fortune reported that the directive reached far beyond people abroad:

The directive includes not just people located outside the U.S., but also any foreign national in the U.S., including Anthropic's own non-citizen employees.

^[11]

Given that scope, Fortune reported, Anthropic "argued it had no choice but to disable the models for all users."^[11] SecurityWeek reported that the Commerce Department did not immediately respond to a request for comment.^[12]

CIO.com wrote that the order "ended up making it an identity management problem" and that a policy provision for scanning identity documents "could enable Anthropic to distinguish between foreign and domestic users of its most powerful AI model."^[13] Techzine reported that identity checks "can help prevent the circumvention of export restrictions via shared accounts."^[4] Cybernews wrote that uncertainty about users' identities appeared to be among the government's motives for the export controls, and that the verification change would let Anthropic "demonstrate a willingness to thoroughly check user identities if suspicion arises."^[14] Anthropic's own pages do not describe verification as a citizenship check; the support page gives abuse prevention, policy enforcement, & legal compliance as the reasons, and does not mention nationality or government databases.^[2]

The Electronic Frontier Foundation has argued against the broader practice of mandatory identity & age verification, though its published comments addressed Discord's rollout of Persona rather than Anthropic's. The EFF wrote that it has "been raising the alarm about age verification" and called such mandates "a censorship and surveillance nightmare."^[15]

Coverage of Anthropic's policy notice reported direct user pushback. Biometric Update wrote that Claude users objected to the prospect of submitting government IDs & facial-geometry data to a Persona-run check, and noted Persona had recently faced the same reaction over its attempt to bring the technology to Discord.^[10]

The Illinois Biometric Information Privacy Act, 740 ILCS 14, defines a "biometric identifier" to include a "scan of hand or face geometry."^[16] Under Section 15 of the Act, a private entity that collects biometric identifiers must first receive "a written release executed by the subject" and must publish a "retention schedule and guidelines for permanently destroying" the data.^[16] The Act defines "written release" as "informed written consent..."^[16] Section 20 gives "[a]ny person aggrieved by a violation of this Act" a private right of action & sets liquidated damages of "$1,000" for a negligent violation & "$5,000" for an intentional or reckless one.^[16]

In the European Union, Article 9 of the General Data Protection Regulation lists "biometric data for the purpose of uniquely identifying a natural person" among the special categories whose processing "shall be prohibited," unless an exception applies, one of which is that "the data subject has given explicit consent."^[17]

The Claude rollout arrives during a broader push toward online age verification that has run into the same vendor & the same backlash. Discord moved to make age verification mandatory through Persona, a step the EFF documented & criticized.^[15] Anthropic's policy folds age verification into the same "Verification Data" clause, tying the result of a check to "whether your age meets the applicable threshold."^[1]

• Anthropic
• Palantir
• Discord
• Age verification
• General Data Protection Regulation