Out-of-wallet checks — knowledge-based authentication, or KBAs — validate identity by asking questions pulled from credit or public records that only the real person could reasonably answer, usually as multiple choice with three to ten options. It requires an SSN and/or date of birth to generate the questions.
How it works
Questions are generated from real credit history — something like "What bank financed your car in 1997?" with several plausible answers offered. A typical set runs five to ten questions, mixing recent and historical activity across auto loans, mortgages, and credit cards.
Using the result
A pass or fail comes back. Consumers who fail can be routed to an alternate channel — a different payment method, or a mail-in process. One rule matters here specifically: any follow-up correspondence should only go to the address on file with the verification service, never a new one the consumer provides, since that's exactly the kind of substitution a fraudster would attempt.
Strengths and weaknesses
KBAs are a genuinely strong way to establish identity, are considered best practice for credit issuance, don't require pulling a credit score, and give you real ammunition in a chargeback dispute. The tradeoffs: they barely work outside the U.S., and they measurably hurt conversion — this isn't a check to add lightly to a low-friction checkout.