What Is...?
36 in-depth explainers covering every concept in identity verification, biometric security, privacy technology, and digital trust.
What Is Identity Verification?
Identity verification is the process of confirming that a person is who they claim to be. Traditional methods use govern...
What Is Human Verification?
Human verification is the process of confirming that a real human being - not a bot, AI agent, or automated script - is ...
What Is Biometric Verification?
Biometric verification uses measurable biological characteristics - facial geometry, fingerprints, iris patterns, voice ...
What Is Liveness Detection?
Liveness detection is a biometric security technology that determines whether the source of a biometric sample is a live...
What Is Deepfake?
A deepfake is AI-generated synthetic media - typically video, audio, or images - that realistically depicts a person say...
What Is Proof of Personhood?
Proof of personhood is a cryptographic mechanism that verifies a unique human being exists behind a digital identity wit...
What Is Zero Knowledge Proof?
A zero-knowledge proof is a cryptographic method where one party (the prover) can convince another party (the verifier) ...
What Is Secure Enclave?
The Secure Enclave is a dedicated hardware security subsystem built into modern smartphones and computers. It is a physi...
What Is Content Authentication?
Content authentication is the process of cryptographically proving that a piece of digital content was created by a spec...
What Is Digital Identity?
Digital identity is the collection of electronically captured and stored data that represents a person in digital system...
What Is KYC?
Know Your Customer (KYC) is a set of regulatory requirements that mandate businesses - primarily in financial services -...
What Is Bot Detection?
Bot detection is the process of identifying and blocking automated software programs that simulate human behavior on web...
What Is Sybil Attack?
A sybil attack occurs when a single adversary creates many fake identities to gain disproportionate influence in a syste...
What Is CAPTCHA?
CAPTCHA stands for Completely Automated Public Turing test to tell Computers and Humans Apart. Invented in 2003 at Carne...
What Is Biometric Hash?
A biometric hash is a one-way cryptographic fingerprint derived from biometric data that cannot be reversed to reconstru...
What Is Trust Score?
A trust score is a numerical representation of an entity's verified trustworthiness based on accumulated verification si...
What Is Presentation Attack?
A presentation attack is an attempt to fool a biometric system by presenting a fake biometric sample to the sensor. Atta...
What Is Device Attestation?
Device attestation is a cryptographic process by which a hardware device proves to a remote server that it is genuine ha...
What Is Synthetic Identity Fraud?
Synthetic identity fraud is a type of fraud where criminals combine real and fabricated information to create a complete...
What Is Credential Stuffing?
Credential stuffing is an automated cyberattack where stolen username-password pairs from data breaches are systematical...
What Is Account Takeover?
Account takeover (ATO) is a form of identity theft where an attacker gains unauthorized access to a user's existing acco...
What Is Facial Recognition?
Facial recognition is a biometric technology that identifies or verifies a specific person by analyzing and comparing pa...
What Is GDPR?
The General Data Protection Regulation is the European Union's comprehensive data protection law, enacted in 2018. It cl...
What Is BIPA?
The Illinois Biometric Information Privacy Act is the most consequential biometric privacy law in the United States. Ena...
What Is Content Stamping?
Content stamping is the process of embedding a cryptographic proof into digital content (images, videos, text, audio) th...
What Is Privacy by Design?
Privacy by Design is an approach to systems engineering that embeds privacy protections into the design and architecture...
What Is Data Breach?
A data breach is a security incident in which sensitive, protected, or confidential data is accessed, disclosed, or stol...
What Is Multi-Factor Authentication?
Multi-factor authentication (MFA) requires two or more verification factors from different categories: something you kno...
What Is Passkeys?
Passkeys are a FIDO2-based passwordless authentication technology that uses public-key cryptography and biometrics store...
What Is Replay Attack?
A replay attack is a network attack in which a valid data transmission is captured and retransmitted to trick the receiv...
What Is Man in the Middle Attack?
A man-in-the-middle (MITM) attack occurs when an attacker secretly intercepts and potentially alters communications betw...
What Is Social Engineering?
Social engineering is the use of psychological manipulation to trick people into divulging confidential information, gra...
What Is Injection Attack?
In the context of biometric systems, an injection attack bypasses the physical biometric sensor entirely by injecting sy...
What Is Token?
In identity verification, a token is a cryptographic data structure that represents a verified claim (such as "this user...
What Is API?
An Application Programming Interface (API) is a set of protocols and tools that allows different software applications t...
What Is SDK?
A Software Development Kit (SDK) is a collection of tools, libraries, documentation, and code samples that developers us...
About POY Verify
POY Verify is the first universal human verification system built on zero-data architecture. Unlike traditional identity verification services that collect, transmit, and store your biometric data on their servers, POY Verify processes everything inside your smartphone's Secure Enclave - a physically separate processor with its own encrypted memory that even the operating system cannot access. No biometric data ever leaves your device. No personal information is ever collected. No databases exist to breach.
The system works in 30 seconds: your device's hardware sensors (3D depth cameras, infrared emitters, and motion detectors) confirm a living human is physically present. A cryptographic key pair is generated inside the Secure Enclave. The private key never leaves the device. The public key is registered with POY's verification registry. You are now a verified human on the internet - with zero personal data exposed.
Why Human Verification Matters
The internet was built without a way to prove a human being is on the other end of a connection. This architectural gap has created a trust crisis of unprecedented scale. Over 64% of all web traffic is now non-human - bots, scrapers, and automated agents that create fake accounts, post fake reviews, manipulate engagement metrics, and impersonate real people. Deepfake technology has increased 500% since 2024, enabling AI-generated faces, voices, and videos that are indistinguishable from real humans. Deepfake-enabled fraud exceeded $25 billion in losses in 2025 alone.
Traditional verification methods have failed to keep pace. CAPTCHAs are solved by AI with 99.8% accuracy. Phone verification is bypassed by SIM farms selling numbers for cents. Email verification is defeated by disposable address services. Document uploads create massive data breach liability while excluding the 1.4 billion people worldwide who lack government-issued identification. The tools of fraud have outpaced the tools of verification.
POY Verify exists to close this gap. By using hardware-based biometric liveness detection with zero data collection, it provides definitive proof that a real human is present - without the privacy sacrifices, regulatory burden, or exclusion that traditional methods create. The result is a verification layer that works for every human, on every platform, in every country, at zero cost to the individual.
Explore POY Verify
6-Signal Trust System
How biometric, email, phone, device, voice, and social signals build a 0-100 trust score.
Content Stamps vs Copyright
Why cryptographic proof beats watermarks and the Copyright Office.
The POY Protocol
Full technical whitepaper on zero-knowledge human verification.
API Documentation
9 core endpoints with code examples in JavaScript and Python.
Trust Center
Security architecture, compliance certifications, and data handling.
Case Studies
How fintech, social, and healthcare platforms use POY Verify.
By Industry
Fintech · Healthcare · Social Media · Gaming · Government · All Solutions
Compare
POY vs Persona · POY vs World ID · POY vs iProov · Persona Alternatives · CAPTCHA Alternatives
Learn More
Proof of Personhood · Biometric Liveness · Identity Fraud Prevention · Dead Internet Theory · Zero-Knowledge Identity · Glossary
Prove You Are Real
POY Verify is the privacy-first human verification layer for the internet. No data collected. No identity required. Just proof you are human.
VERIFY ME NOWOr join the waitlist for enterprise API access