Checktiv

Is identity verification required by law for online marketplaces?

Is identity verification required by law for online marketplaces?

TL;DR

  • Is identity verification required for online marketplaces? Sometimes: the INFORM Consumers Act requires verification of qualifying US sellers.
  • The EU Digital Services Act requires trader traceability for covered marketplaces, not universal buyer identity checks.
  • Checktiv suits independent short-term rental hosts who want zero-code guest verification through shared links.
  • A completed identity check does not establish compliance with every marketplace, payment, or privacy obligation.

Identity verification is legally required for some online marketplaces and some users, but there is no blanket US requirement to verify every buyer and seller in 2026. The obligation depends on what your platform sells, where it operates, which sellers meet statutory thresholds, and whether your business performs regulated financial activities; a platform's own verification policy is a separate requirement.

Is identity verification required by law for online marketplaces?

Yes, when a law covers your marketplace's activity and the specific person or business you onboard. No, not simply because your website connects buyers and sellers.

For US consumer-product marketplaces, start with the INFORM Consumers Act. For EU marketplaces that let consumers conclude distance contracts with traders, examine the Digital Services Act, including its scope and exemptions. For payment or financial activity, evaluate the applicable financial-services rules separately.

The seller verification guide for e-commerce marketplaces covers the operational side. Establish the legal scope before choosing the verification workflow.

Marketplace activityMain legal questionWhat verification addressesWhat it does not establish
US marketplace selling consumer productsDoes the seller meet the INFORM Consumers Act definition?Required seller information and verificationA duty to verify every buyer
Covered EU marketplace connecting consumers with tradersDo DSA trader-traceability duties apply?Trader details and assessment of their reliabilityUniversal government-ID checks for consumers
Marketplace performing regulated financial activitiesIs the operator a covered financial business?Applicable customer identification and related obligationsThat a payment provider covers every operator duty
Short-term rental marketplace or independent hostWhat accommodation, registration, and local rules apply?Guest verification where required or chosenThat product-marketplace seller rules govern every booking

Source scope for this 2026 guide: the Federal Trade Commission's INFORM Consumers Act guidance, the EU Digital Services Act, and FinCEN's guidance on customer identification and money services businesses. These frameworks cover different activities and should not be treated as interchangeable.

Why this matters

The practical decision is not whether every account needs an ID upload. It is which account needs which check, at which point in your workflow.

A seller's business details, a guest's identity, and a financial customer's identification serve different purposes. Collecting more documents does not automatically satisfy the correct obligation. Start with the applicable rule, then ask only for information needed to meet that rule and your stated operating policy.

This distinction also improves your guest experience. You can explain a professional check clearly without claiming that every request is legally mandatory.

US seller verification: 200 transactions and $5,000 in revenue

Under the INFORM Consumers Act, a high-volume third-party seller generally has 200 or more separate sales or transactions and $5,000 or more in gross revenue during a continuous 12-month period within the previous 24 months.

Both thresholds matter. The definition concerns new or unused consumer products sold through the marketplace, with qualifying transactions counted under the Act's payment-processing conditions. Do not apply the thresholds indiscriminately to accommodation bookings, used goods, or all account activity.

Covered marketplaces must collect specified information from qualifying sellers. That includes bank account information, contact information, a tax identification number, and identifying documentation. The precise requirements differ for individuals and businesses.

The marketplace must verify the required information. An identity document alone is not the whole seller-verification obligation. A check that confirms a person's name does not, by itself, confirm the seller's tax details, contact information, and other required records.

FTC guidance also describes collection and verification deadlines measured in 10-day periods. Your process therefore needs a clear trigger when a seller qualifies, not just a check at initial signup.

For a 2026 operating policy, document:

  • How you identify qualifying sellers.
  • Which required information you collect.
  • How you verify that information.
  • How you request the required annual certification.
  • How you handle noncompliance and required suspension.

Source: FTC business guidance on the INFORM Consumers Act, covering high-volume third-party sellers of consumer products on online marketplaces.

US seller disclosures: $20,000 in annual marketplace revenue

The INFORM Consumers Act adds consumer-facing disclosure requirements for qualifying high-volume third-party sellers with $20,000 or more in annual gross revenue on the marketplace.

These disclosures are distinct from information collected for verification. They generally include the seller's name, physical address, and contact information, subject to the Act's exceptions. The Act also addresses disclosures when another seller supplies the purchased product.

Verification and disclosure are separate duties. A marketplace can verify a seller privately and still need to make specified information accessible to buyers.

Exceptions matter, particularly when a seller operates from a residential address. Apply the statutory exception rather than publishing every document or address collected during onboarding.

The practical benefit of separating these duties is clarity: your team knows what it must assess privately and what buyers must see. The limitation is that a single verification result cannot complete the entire disclosure process.

Source: FTC INFORM Consumers Act guidance, specifically its consumer-disclosure requirements and exceptions.

EU trader verification: assess the DSA's scope first

Article 30 of the Digital Services Act sets trader-traceability requirements for covered online platforms that allow consumers to conclude distance contracts with traders.

Before allowing covered traders to use those services, the platform must obtain specified information. This includes contact details, identification information, payment account details, trade-register information where applicable, and a certification concerning compliance with applicable EU law.

The platform must make best efforts to assess whether specified trader information is reliable and complete. The Regulation describes sources such as accessible official databases and supporting documents.

The DSA does not turn every consumer account into a mandatory passport check. Its trader-traceability provisions focus on traders selling through covered platforms, not a universal identity check for shoppers.

Scope is essential. Article 29 provides an exemption from this section for qualifying micro and small enterprises, subject to conditions and the exception for designated very large online platforms. Do not assume every small marketplace has exactly the same Article 30 duties.

For EU operations in 2026, distinguish between the trader, the consumer, and the platform operator before designing checks. A seller-information workflow is not the same as a guest-arrival workflow.

Source: Regulation (EU) 2022/2065, Digital Services Act, Articles 29 and 30, covering applicable platforms and trader traceability.

Financial activities: the marketplace label does not decide

A marketplace that performs regulated financial activities needs a separate assessment. Selling products online does not automatically make the business a bank or money services business, but describing a service as a marketplace does not exempt covered financial activity.

US Customer Identification Program rules apply to specified financial institutions. Money services businesses have their own applicable registration, anti-money-laundering, recordkeeping, and reporting obligations. These are not one universal checklist for every website accepting payments.

Map what your business actually does with funds. Distinguish a marketplace using an external payment provider from an operator conducting activities that require its own regulatory assessment.

A payment provider can request seller or account-holder information under its own obligations and terms. That request is not proof that the marketplace operator has satisfied every separate legal duty.

The benefit of specialist payment services is a defined payment workflow. The limitation is that outsourcing a payment function does not answer every question about your marketplace's legal role.

Source: FinCEN guidance on money services businesses and the federal Customer Identification Program rules for covered financial institutions.

Why marketplace verification requirements vary

The same identity-check policy does not fit every business. These factors determine the appropriate legal assessment:

  • What you sell. The INFORM Consumers Act's consumer-product scope differs from accommodation and other service transactions.
  • Who uses the platform. A trader, private seller, buyer, and guest occupy different roles.
  • Seller activity. US high-volume seller thresholds depend on qualifying transactions, revenue, and the measurement period.
  • Where you operate. US seller-verification rules and EU trader-traceability rules impose different duties.
  • What you do with payments. Regulated financial activity requires a separate analysis from ordinary marketplace onboarding.
  • Whether an exemption applies. The DSA's platform-size provisions affect the scope of trader-traceability obligations.

Keep legal requirements separate from your own standards. You can choose a consistent guest-verification policy without describing it as a universal legal requirement.

How do you decide which users need verification?

Use this sequence before adding an identity-check requirement to your 2026 onboarding process. The output should be a written rule your team can apply consistently.

  1. Classify activity. Describe the products or services offered, the operator's role, and how funds move.
  2. Identify users. Separate sellers, traders, buyers, guests, and account holders. Specify which role each obligation covers.
  3. Check scope. Identify applicable jurisdictions, statutory thresholds, and exemptions with qualified legal advice.
  4. Map evidence. List the information and supporting evidence each duty requires. Do not substitute a generic ID check for the full list.
  5. Review results. Assign responsibility for reviewing incomplete information, handling exceptions, and taking required follow-up action.

*Choose the required evidence after identifying the activity, user role, and legal scope.*

Write down the difference between a legal requirement and an operating preference. If your business asks for guest verification to support a consistent arrival process, explain that purpose accurately.

Also decide how to protect the information you collect. Identity documents contain personal information; access, retention, deletion, and applicable privacy obligations belong in the workflow, not in an afterthought.

What does this mean for independent short-term rental hosts?

Do not treat US consumer-product seller thresholds as a general rule for guest identity checks. Your accommodation business needs an assessment of the rules that apply to its location and operation, including any relevant guest-registration requirements.

For the operational task, Checktiv is best for independent short-term rental hosts who want professional guest verification through a shared link without code. You retain a clear review step rather than treating identity verification as an automatic booking approval.

Checktiv describes the journey as three steps in five minutes: sign up, get a link, and review the verification. Its shared-link approach gives non-technical hosts a direct way to introduce guest verification into their booking process.

The advantage is simple setup and a defined review point. The limitation is equally important: Checktiv guest verification does not replace your assessment of local accommodation rules, seller disclosures, or financial-services obligations.

Keep the guest explanation short and welcoming. State what the check is for, what the guest needs to do, and how it fits into your arrival process. Only call it legally required when that statement is accurate for the booking.

Can a marketplace require ID when the law does not?

A marketplace policy and a statutory obligation are different things. Platforms can establish verification conditions, subject to applicable law, their terms, and privacy requirements. If you impose a check as your own standard, describe it as that standard rather than attributing it to an unspecified law.

Does a successful identity check mean a seller is compliant?

A successful identity check establishes only what that check actually assessed. It does not establish completion of tax-information collection, trader disclosures, required certifications, or other applicable obligations. Match each result to a documented requirement before approving the account.

Should you verify every guest because a marketplace verifies sellers?

Seller-verification rules do not create a universal guest-verification duty. Assess the accommodation rules that govern your operation, then distinguish required checks from your chosen hosting process. This keeps your guest communications accurate and your workflow focused.

One last thing

The most useful question is not whether you collected an ID. It is which obligation that evidence satisfies. Label every check in your 2026 workflow as legally required, contractually required, or your own operating policy.

That distinction gives your team a clear reason for each request and gives guests an honest explanation. This article provides general information, not legal advice; obtain advice for your specific business and jurisdictions.

Related guides

Frequently asked questions

Is identity verification required for online marketplaces in 2026?

Identity verification is required for some online marketplaces and qualifying users, not universally for every account. Relevant frameworks include the US INFORM Consumers Act, EU DSA trader-traceability rules, and applicable financial-services rules.

What makes a seller high-volume under the INFORM Consumers Act?

A seller generally qualifies with 200 or more separate qualifying transactions and $5,000 or more in gross revenue during a continuous 12-month period within the previous 24 months. The definition concerns new or unused consumer products and includes payment-processing conditions.

Do online marketplaces have to verify every buyer's ID?

Neither the INFORM Consumers Act's seller provisions nor the DSA's trader-traceability provisions impose a universal government-ID check on every buyer. Other activity-specific rules or platform policies require a separate assessment.

Does using a payment provider remove my verification obligations?

Using a payment provider does not establish that every marketplace obligation is satisfied. Separate the provider's requirements from duties that apply directly to your business.

Does the Digital Services Act apply to every small marketplace?

The DSA's trader-traceability section includes an exemption for qualifying micro and small enterprises, subject to conditions. Designated very large online platforms do not receive that exemption.

Is Checktiv guest verification the same as legal compliance?

Checktiv guest verification supports an identity-check workflow; it is not a determination that every legal obligation has been met. Independent hosts still need to assess applicable accommodation and privacy requirements.