No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Is id.me legit or a scam?
Legitimate federal identity-verification platform with 1,550 complaints primarily about slow verification processes, not scam activity.
Analysis Summary
MT Intelligence
ID.me is a registered, Virginia-incorporated company founded in 2011 and accredited by the Better Business Bureau since 2022. The company partners with 19 federal agencies including the IRS and Social Security Administration for secure identity verification. The 1,550 complaints documented in the evidence package focus on verification delays, long video-call wait times, and facial-recognition issues—operational frustrations rather than fraud indicators. Multiple reputable sources (Norton, Fox News, Security.org) explicitly confirm ID.me is not a scam. The negative independent review aggregator reviews cite access delays and support wait times, not credential theft or financial loss. The company actively maintains resources warning users about phishing impersonation scams that exploit its trusted name, indicating awareness of its value as a target for attackers.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →
Visual Screenshot Analysis
We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.
Visual red flags detected in the screenshot
We could not capture a fully-rendered screenshot of this page; visual analysis is inconclusive.
What our vision model saw
1 signalScreenshot incomplete — site may be slow to render
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for id.me, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- ID.me is a legitimate, NIST-certified identity verification service (IAL2/AAL2) founded in 2010, used by IRS, SSA, VA, and multiple state agencies for secure login and fraud prevention.
- The company has an official BBB profile in McLean, VA (accredited, B+ rating) with 1,550 complaints primarily related to verification delays, customer service, facial recognition issues, and long video call waits.
- ID.me maintains an extensive help center dedicated to identifying and reporting phishing, impersonation scams, and account takeovers that exploit its trusted name.
- Multiple reputable sources (Norton, Fox News, Security.org) explicitly state that ID.me itself is not a scam, though it is frequently impersonated by scammers in IRS/tax and unemployment fraud schemes.
- Trustpilot shows mixed reviews (average ~3.6/5) with praise for convenience in some cases but heavy criticism of the verification process, wait times, and support.
- No evidence of the domain being a typosquat or clone; it is the primary official site (id.me, not idme.com). The company warns users that legitimate emails come from specific @id.me domains only.
- BBB.orgopen
"In the past two months I have needed to verify my identity using ID.ME, it is a nightmare... There is no indication that this is a thing other than a scam."
- Trustpilot.comopen
"I have been suspended from getting into IRS.gov for 2 days... Avoid this website or what ever it is, at all costs! Big waste of my time and energy"
- Trustpilot.comopen
"This is a crime against humanity to make someone hold for over 8 hours... getting permission to access your own account should not be this difficult."
- Norton.comopen
"No, ID.me is not a scam. It's a legitimate identity verification company used by many government agencies and other organizations."
- FoxNews.comopen
"ID.me itself isn’t a scam. The problem is that scammers know people trust it. That makes it a perfect disguise."
- Security.orgopen
"ID.me is largely a safe service. When you use it, it stores personal details securely and with encryption... we feel it is safe to use ID.me."
- Reddit.comopen
"ID.me is legit, it's especially useful for veterans and teachers as proof for discounts at some stores."
ID.me, Inc. / ID.me LLC, incorporated March 23, 2011 in Virginia, headquartered in McLean, VA. BBB accredited since 2022. Veteran-founded company partnered with 19 federal agencies including IRS, SSA, VA.
BBB and independent review aggregator complaints describe frustration with verification delays, long video-call waits, and support responsiveness—operational pain points rather than fraud indicators. Norton, Fox News, and Security.org all explicitly state that ID.me itself is not a scam, though scammers frequently impersonate it in phishing and tax-fraud schemes. Reddit users confirm ID.me is legitimate and useful for veteran and teacher discounts. Business registration confirms ID.me, Inc. is a Virginia-incorporated company (founded 2011, headquartered McLean, VA) with BBB accreditation since 2022 and partnerships with 19 federal agencies including the IRS and Social Security Administration.
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Domain & Encryption
Redirect Chain
- 1301http://id.me/
- 2403https://id.me/
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on id.me and not a lookalike like i-d.me.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Safety FAQ
Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.
- Our automated security review found no threat indicators on id.me. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- id.me passed our automated security checks with a trust score of 82/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. id.me presents a valid TLSv1.3 certificate issued by DigiCert Inc · DigiCert Global G3 TLS ECC SHA384 2020 CA1, expiring in 88 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- No. id.me is not currently listed on the major browser blocklist feeds that modern browsers use.
- id.me resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.