[lxgr]

What API takes a photograph and tells you whether the person who gave it to you is in physical possession of the ID document depicted on it?

This flow was designed, and only works, for branch-based KYC: The bank employee physically looks at the ID, makes sure it's you, examines the many physically hard-to-forge elements on the card, and then queries an API that tells them whether the same ID was ever issued with that data on it (name and photo).

Bringing that flow online in the age of GANs is an absurd concept, right up there with using a short, unchangeable numeric personal identifier as a bearer token for authentication. The fact that financial institutions in some countries actually do both doesn't make it any less absurd.

[chislobog]

I registered for login.gov using my face and an ID, which allowed me to register for submitting tax records among other things.