Back to All Articles

VerifyNow guide

How to Verify Proof of Address Online in South Africa

How South African organisations can review proof of address under a risk-based process, including the current boundary that VerifyNow does not provide a standalone proof-of-address authentication service.

Start verifyingView services
How to Verify Proof of Address Online in South Africa

How to verify proof of address online in South Africa depends on the organisation's legal duties, Risk Management and Compliance Programme, and the evidence available for the customer. VerifyNow does not publish a standalone proof-of-address authentication product.

Why proof of address may form part of a South African process

FIC Act customer-due-diligence duties apply to accountable institutions listed in Schedule 1. The institution must identify and verify customers using measures described in its RMCP. The Act follows a risk-based approach and does not prescribe one universal document, a fixed three-month age rule or the same address evidence for every customer.

Other organisations may request address evidence for fraud prevention, delivery, contracting or another lawful purpose. They should explain the purpose and collect only the information needed for that decision.

The Financial Intelligence Centre publishes current FIC Act guidance. POPIA guidance and the official security-compromise channel are available from the Information Regulator.

Common address evidence

An organisation's policy may accept evidence such as a municipal statement, utility account, bank statement, lease, body-corporate letter, tax document or another reliable record. Acceptance depends on the purpose, source, recency, customer circumstances and RMCP where applicable.

A document should be reviewed for:

  • The customer or authorised person's name
  • The physical address relevant to the decision
  • Issuer and document date
  • Completeness and legibility
  • Consistency with other supplied information
  • Signs that require manual clarification

Electronic statements can be acceptable when the organisation's policy permits them and the source can be assessed. A document image alone does not prove that the customer currently lives at the address.

A practical online workflow

1. Define the purpose

Record why the address is needed, which law or business process applies, and who may review it. An accountable institution should connect the step to its RMCP.

2. Tell the customer what evidence is accepted

Provide a clear list and explain recency, format and exception rules. Avoid demanding extra documents that do not serve the stated purpose.

3. Collect the evidence securely

Use the organisation's approved upload or communication channel. The organisation remains responsible for access control, retention, security safeguards and operator agreements. VerifyNow does not claim to host a universal proof-of-address intake, approval or records-management workflow.

4. Review the document

Compare the document with the customer information already held. Escalate ambiguity, missing pages, mismatches or questionable source details to a trained reviewer.

5. Use separate data services under their correct labels

VerifyNow can supply supported identity and trace results. Address Lookup or Consumer or Person Trace may return available recorded address context for their authorised purposes. Recorded context is not proof of current residence and must not be relabelled as authenticated proof of address.

Document Verification analyses supported document types and returns its documented extraction, validation and warning fields. Confirm current supported document coverage before submitting an address document.

6. Record the organisation's decision

Keep the source, date, result reference, reviewer conclusion and any exception evidence required by the organisation. The final acceptance decision belongs to the organisation.

FICA recordkeeping

For accountable institutions, FIC Act section 22 covers customer-due-diligence records, section 22A covers transaction records, section 23 sets retention periods, and section 24 permits electronic or third-party storage subject to access and accountability requirements.

These provisions do not require VerifyNow to store every document or manage the institution's compliance file.

POPIA responsibilities

The responsible party should identify a processing condition, give appropriate notice, minimise collection, restrict access and set a defensible retention period. Consent is one possible processing condition and is not mandatory for every address-processing activity.

Where there are reasonable grounds to believe personal information was accessed or acquired by an unauthorised person, POPIA section 22 requires notification to the Information Regulator and affected data subjects as soon as reasonably possible, subject to the Act's investigation and delay provisions.

Customers without standard documents

An RMCP or internal policy should describe reasonable alternatives for informal addresses, shared accommodation, students or customers whose documents are not in their own name. Alternatives can include a reliable letter, affidavit or other source appropriate to the risk and sector. A manual reviewer should record why the alternative was accepted.

Frequently asked questions

Does VerifyNow verify proof of address online?

VerifyNow does not publish a standalone proof-of-address authentication service. It provides separate identity, document and recorded-address-context services with their own inputs and outputs.

Is proof of address always required by FICA?

No single document is mandatory for every customer. An accountable institution applies its RMCP and risk-based verification measures.

Can recorded address data replace a current document?

Recorded address context can support review, but it is not proof that a person currently resides there.

How long should address evidence be kept?

Apply the retention rule that governs the purpose. Accountable institutions should use the FIC Act recordkeeping provisions and their RMCP. Other organisations should use their legal and operational requirements together with POPIA retention limits.

Choose the correct VerifyNow service

Review current services and prices through Learn more about VerifyNow services. Create an account through Start Your Free Trial when a documented VerifyNow result fits the workflow.