Mailock Launches ID, KYC, and AML Checks by Secure Email

Mailock now lets firms send ID, KYC, and AML checks by secure email, with the identity checking service provided by LexisNexis® Risk Solutions.

The checks launched on 5 October 2026. They bring together three things firms have often handled in separate systems: reaching the customer securely, confirming who they are, and keeping a record of what happened.

What Has Launched

A sender chooses an ID, KYC, or AML check and sends the request from the Mailock Outlook add-in or the Mailock web app. The client opens a secure email, enters a code sent to their phone by SMS, then photographs a supported passport or driving licence and takes a live selfie. There is no account to create and no app to install.

LexisNexis® IDVerse® authenticates the identity document and runs liveness and face-match checks. LexisNexis® IDU® corroborates customer details and carries out politically exposed person and sanctions screening. A results pack then comes back to the sender by secure email, for the firm to review against its own policy.

Mailock records the key events along the way with Digital Recorded Delivery, including secure access and completion of the identity check, so the firm keeps one connected record instead of evidence spread across several systems.

Why It Matters for Firms and Their Customers

A common digital journey still takes the customer from an email to a portal, asks them to create an account, then hands them to a separate identity check. Each hand-off is another point where a legitimate customer can give up, or wonder whether the request is genuine.

Starting the check from a secure message the customer has already received keeps it connected to the reason the firm got in touch. That matters most when the communication is sensitive or time-critical, such as a pension decision, a mortgage application, or a change of personal details.

"Most organisations have had to solve three separate challenges: finding the right customer, confirming their identity, and communicating with them securely. Bringing those capabilities together removes unnecessary complexity and creates a communication channel that becomes more valuable with every interaction."

Paul Holland, Founder and CEO, Beyond Encryption (Mailock)

Not every message needs a full identity check. Routine communications can keep using recipient authentication, which controls who can open a message, while an identity check is kept for higher-risk moments, such as a change of bank details or the start of a new client relationship. Our guide to which identity check you need maps ID, KYC, and AML checks to moments like these.

The wider approach also draws on data enrichment from LexisNexis® Risk Solutions, which helps organisations cleanse existing customer records and, where available, add missing email addresses, so more customers can be reached digitally in the first place. We set out the thinking behind it in From ‘We Sent It’ to ‘We Know Who Received It’, in One Trusted Customer Journey.

"For most firms, the hard part of an identity check isn't the check itself. It's everything around it: getting the request to the right person, getting it completed, and getting the result back to the team that needs it. Starting the check from a secure email means the client has no new system to learn, and the firm has one less hand-off to manage."

Adam Byford, Chief Commercial Officer, Beyond Encryption (Mailock)

References

Data Enrichment, LexisNexis® Risk Solutions, 2026

Reviewed by

Sam Kendall, 08.10.26