Undercover Tourist Demanding I Share Photo of Drivers License or Passport with Plaid Verification

[mgarbowski]

Tried to buy a single ticket at https://www.undercovertourist.com/ and came across a hurdle I've never seen before. UCT would not take my order until I go through an identity verification process with a company called https://plaid.com/ who wants me to send them a photo of a drivers license or passport or similar ID. I never heard of Plaid before. My initial research turns up a bunch of testimonials from financial industry sites claiming Plaid is wonderful and trustworthy, but also articles about settling a class action for misuse of personal data and negative articles from the https://www.eff.org/ (EFF) who do a lot to protect and advocate for personal privacy online. I don't see why I need to do this to buy a park ticket and I don't trust Plaid and I'm not pleased with UCT right now for trying to push me to do this. The page where Plaid wants me to upload does not even link to their privacy policy or anything which is really poor design, and as noted, my research has not instilled confidence
Has anyone experienced this barrier with UCT before where they demand you verify your identity? I'm ordering, or trying to order, just one ticket. It's not like I'm ordering 20 and maybe looking to broker them or whatever. I cannot find anything searching here or generally around the web. I can guess something might be triggered because it's a new credit card, but usually the card issuer handles verification via text, phone or their app.

 

[Mrs.AMC]

Plaid is very trustworthy. https://www.rocketmoney.com/ (as one example) uses them to link all your info from other companies in to their site, for example.
UCT has frequently used ID requirements to purchase. They used to just do it old fashioned where you faxed or emailed a copy of your ID. Plaid is way more secure. I'd have zero issues with it.

ETA - I'm surprised you didn't find lots and lots of posts and UCT and ID requests going back years, maybe even a decade (or however long they've been around)
I know I had to send one in before I bought my AP which was in 2011

 

[supersnoop]

I understand your reluctance, but that is a condition of purchasing from UCT. If you aren't comfortable with the requirement, there are plenty of other places to purchase tickets.

 

[Kae]

Tried to buy a single ticket at Undercover Tourist and came across a hurdle I've never seen before. UCT would not take my order until I go through an identity verification process with a company called Plaid who wants me to send them a photo of a drivers license or passport or similar ID. I never heard of Plaid before. My initial research turns up a bunch of testimonials from financial industry sites claiming Plaid is wonderful and trustworthy, but also articles about settling a class action for misuse of personal data and negative articles from the Electronic Frontier Foundation (EFF) who do a lot to protect and advocate for personal privacy online. I don't see why I need to do this to buy a park ticket and I don't trust Plaid and I'm not pleased with UCT right now for trying to push me to do this. The page where Plaid wants me to upload does not even link to their privacy policy or anything which is really poor design, and as noted, my research has not instilled confidence
Has anyone experienced this barrier with UCT before where they demand you verify your identity? I'm ordering, or trying to order, just one ticket. It's not like I'm ordering 20 and maybe looking to broker them or whatever. I cannot find anything searching here or generally around the web. I can guess something might be triggered because it's a new credit card, but usually the card issuer handles verification via text, phone or their app.

OMG Plaid sux. I have turned down new clients who use them. And my company has a Fed Tax id. and they still tell me I have to do it um no, don't even get me started on their CS.

 

[mgarbowski]

Plaid is very trustworthy. RocketMoney (as one example) uses them to link all your info from other companies in to their site, for example.
UCT has frequently used ID requirements to purchase. They used to just do it old fashioned where you faxed or emailed a copy of your ID. Plaid is way more secure. I'd have zero issues with it.

ETA - I'm surprised you didn't find lots and lots of posts and UCT and ID requests going back years, maybe even a decade (or however long they've been around)
I know I had to send one in before I bought my AP which was in 2011

Interesting. My search in these forums for the terms "undercover" and "plaid" yielded four posts that had nothing to do with this issue. For example, two concerned an attempt to bridge UCT tickets with an unhelpful Plaid CM. Also, I bought 3 tickets from UCT last year without needing to do this. It might be a longstanding practice but I think there has to be something in the transaction that triggers an algorithm. Something I did this year presumably triggered the requirement.
As for Plaid, I'm aware that many financial institutions use them. I'm also aware that they paid $58 million to settle claims that they misled consumers about how they use their data and Etsy sellers are completely dissatisfied with Plaid's data protections and how the company failed to handle their verifications.

I understand your reluctance, but that is a condition of purchasing from UCT. If you aren't comfortable with the requirement, there are plenty of other places to purchase tickets.

Yep. They don't trust me. I don't trust them. I can't see doing business on that basis, and I don't see why anyone needs to furnish a government ID to buy a single theme park ticket, though I'm sure they have their reasons. I was particularly displeased about the lack of disclosure and information about privacy when they fobbed me off to a third-party site, and when I sent UCT an email about my concerns I wasn't pleased with the tone of UCT's response, which did not offer even a perfunctory attempt to show they took my concerns seriously. Rather, they gave the impression they're treating me not as an honest customer who accidentally triggered their algorithm, but as a probable scammer or at best, an annoyance who didn't just do what I was told. OK, fine. I'm buying elsewhere.

 

[Mrs.AMC]

Interesting. My search in these forums for the terms "undercover" and "plaid" yielded four posts that had nothing to do with this issue. For example, two concerned an attempt to bridge UCT tickets with an unhelpful Plaid CM. Also, I bought 3 tickets from UCT last year without needing to do this. It might be a longstanding practice but I think there has to be something in the transaction that triggers an algorithm. Something I did this year presumably triggered the requirement.
As for Plaid, I'm aware that many financial institutions use them. I'm also aware that they paid $58 million to settle claims that they misled consumers about how they use their data and Etsy sellers are completely dissatisfied with Plaid's data protections and how the company failed to handle their verifications.

Yep. They don't trust me. I don't trust them. I can't see doing business on that basis, and I don't see why anyone needs to furnish a government ID to buy a single theme park ticket, though I'm sure they have their reasons. I was particularly displeased about the lack of disclosure and information about privacy when they fobbed me off to a third-party site, and when I sent UCT an email about my concerns I wasn't pleased with the tone of UCT's response, which did not offer even a perfunctory attempt to show they took my concerns seriously. Rather, they gave the impression they're treating me not as an honest customer who accidentally triggered their algorithm, but as a probable scammer or at best, an annoyance who didn't just do what I was told. OK, fine. I'm buying elsewhere.

Because they never used Plaid before. That is new level they are trying since I suspect folks really hated faxing a DL to them and ya know, fax machines are going the way of the do-do bird and all.
They required verification by email or fax, as I said. If you search for UCT and DL verification you should find results. Just leave out PLAID references.
At any rate. They are no scammer by any means at all. They are really trying very hard to protect you AND them from fraud. You don't care for the way they do it. No biggie. Don't use UCT. Plenty of other sellers out there. They have been around longer than most for a reason though.

 

[georgina]

Tried to buy a single ticket at Undercover Tourist and came across a hurdle I've never seen before. UCT would not take my order until I go through an identity verification process with a company called Plaid who wants me to send them a photo of a drivers license or passport or similar ID. I never heard of Plaid before. My initial research turns up a bunch of testimonials from financial industry sites claiming Plaid is wonderful and trustworthy, but also articles about settling a class action for misuse of personal data and negative articles from the Electronic Frontier Foundation (EFF) who do a lot to protect and advocate for personal privacy online. I don't see why I need to do this to buy a park ticket and I don't trust Plaid and I'm not pleased with UCT right now for trying to push me to do this. The page where Plaid wants me to upload does not even link to their privacy policy or anything which is really poor design, and as noted, my research has not instilled confidence
Has anyone experienced this barrier with UCT before where they demand you verify your identity? I'm ordering, or trying to order, just one ticket. It's not like I'm ordering 20 and maybe looking to broker them or whatever. I cannot find anything searching here or generally around the web. I can guess something might be triggered because it's a new credit card, but usually the card issuer handles verification via text, phone or their app.

That would bother me too. I have never been asked for ID verification from UT and it would probably make me look elsewhere.

Everything is trustworthy until it gets hacked. A lot of people were touting Lastpass for storing passwords, then they recently got hacked. I would rather not have yet another company with my info.

 

[DeeBee3]

I've never had to provide such info to UCT. Is this a new requirement? Like within the last year?

 

[loves to dive]

I've never had to provide such info to UCT. Is this a new requirement? Like within the last year?

I think it might be something from the original poster that triggered it at UT. I think they said they were using a new CC. I bought tickets from them a month ago and it wasn't required and I've bought tickets from them in the past and it wasn't required. I've even used a new CC # but it might be I'm an established customer.

 

[mgarbowski]

Because they never used Plaid before. That is new level they are trying since I suspect folks really hated faxing a DL to them and ya know, fax machines are going the way of the do-do bird and all.
They required verification by email or fax, as I said. If you search for UCT and DL verification you should find results. Just leave out PLAID references.
At any rate. They are no scammer by any means at all. They are really trying very hard to protect you AND them from fraud. You don't care for the way they do it. No biggie. Don't use UCT. Plenty of other sellers out there. They have been around longer than most for a reason though.

Thx. Still not interested, and I'm certain I didn't fax them a copy of my ID last year. So it may be a longstanding practice but not an always thing. So they can do their thing and I'll do mine. As @georgina says, every entity is secure and trustworthy until they have a data breach. The fewer places that have my info the better, and I can buy park tickets elsewhere without supplying a copy of my Passport or Drivers License. And regardless of Plaid's reputation, I don't think much of how they handled this process. The page which asked for my ID has no links to their privacy or data policies. They seem to think I don't need to know as I'm handing that over, which is preposterous. That alone causes me not to trust them. Even after doing research separately, I have no idea what they do with my passport or drivers license image. Their website discusses how they handle financial data, but this is not financial data. They don't say if they immediately destroy the image of my ID after they verify me, or if they keep it (and why) and if so for how long.

But again, thanks for the info. It is exactly what I came here to find out so I appreciate your responsiveness.

 

[mgarbowski]

I think it might be something from the original poster that triggered it at UT. I think they said they were using a new CC. I bought tickets from them a month ago and it wasn't required and I've bought tickets from them in the past and it wasn't required. I've even used a new CC # but it might be I'm an established customer.

Correct. I don't know that the new CC is the reason; it's just my best guess. Presumably they have an algorithm and all I'm certain of is that I triggered it.

 

[niclodn]

I've never had to provide such info to UCT. Is this a new requirement? Like within the last year?

I bought tickets from them for other family members this past summer and didn't have to provided anything. And I've never heard of anyone else ever having to either until I read this thread

 

[DeeBee3]

I don't blame you @mgarbowski because I wouldn't provide that either

 

[SL6827]

Never heard of such. Strange to me.

 

[lanejudy]

I found these threads/posts, some going back to 2014. Different methods of verifying over the years and I think Plaid may be a new method.

https://www.disboards.com/threads/u...-activation-date.3663882/page-2#post-58835606
https://www.disboards.com/threads/uct-flagged-for-security.3576938/
https://www.disboards.com/threads/w...read-first-page.3711842/page-14#post-59862971
https://www.disboards.com/threads/undercover-tourist.3623273/
https://www.disboards.com/threads/undercover-tourist-tix-flagged-for-security.3341172/
https://www.disboards.com/threads/tickets-how-to-upgrade.3570721/page-352#post-60457470
https://www.disboards.com/threads/undercover-tourist-tickets.3626998/

I certainly respect anyone's right to choose to do or not do business online with any company. There are options and we all have our comfort levels.

 

[mgarbowski]

I found these threads/posts, some going back to 2014. Different methods of verifying over the years and I think Plaid may be a new method.

https://www.disboards.com/threads/u...-activation-date.3663882/page-2#post-58835606
https://www.disboards.com/threads/uct-flagged-for-security.3576938/
https://www.disboards.com/threads/walt-disney-world-date-based-ticket-system-faq-•-read-first-page.3711842/page-14#post-59862971
https://www.disboards.com/threads/undercover-tourist.3623273/
https://www.disboards.com/threads/undercover-tourist-tix-flagged-for-security.3341172/
https://www.disboards.com/threads/tickets-how-to-upgrade.3570721/page-352#post-60457470
https://www.disboards.com/threads/undercover-tourist-tickets.3626998/

I certainly respect anyone's right to choose to do or not do business online with any company. There are options and we all have our comfort levels.

Thx. I had found and read the "Flagged for security" one earlier. It was a trip. At that time UCT was asking people to send a photo of themselves holding their credit card. People were freaked out. Eventually UCT reps came into the thread and they abandoned that version of the policy. But it's also clear that UCT sees this as a necessary fraud prevention tool, and just as clear that a lot of the people asked to verify themselves find essentially any of the methods unreasonably intrusive. Another recurring theme is that UCT has a very solid reputation for customer service, yet a large number of people asked for verification feel they were treated rudely when discussing the issue. I too believe their response to my communication offered no courtesy or respect for my concerns. UCT could stand firm on their policy without insulting the people caught in their algorithm, but seems to be incapable of doing so. Personally the matter for me is closed. I bought elsewhere, and I won't ever be going back to UCT, but I also understand they have to protect their business, and I also understand that many many people have been very satisfied with their service over the years. Sometimes that's just how it goes.

 

[supersnoop]

I seem to remember these security checks being triggered when your IP address doesn't match your billing address; i.e. when you're buying something online and aren't at home or are connect to a VPN. If my billing address is in Austin and I'm in Austin buying a ticket online, then everything seems fine, but when my computer is connected through Las Vegas, they're going to want to double-check.

 

[Mrs.AMC]

I found these threads/posts, some going back to 2014. Different methods of verifying over the years and I think Plaid may be a new method.

https://www.disboards.com/threads/u...-activation-date.3663882/page-2#post-58835606
https://www.disboards.com/threads/uct-flagged-for-security.3576938/
https://www.disboards.com/threads/walt-disney-world-date-based-ticket-system-faq-•-read-first-page.3711842/page-14#post-59862971
https://www.disboards.com/threads/undercover-tourist.3623273/
https://www.disboards.com/threads/undercover-tourist-tix-flagged-for-security.3341172/
https://www.disboards.com/threads/tickets-how-to-upgrade.3570721/page-352#post-60457470
https://www.disboards.com/threads/undercover-tourist-tickets.3626998/

I certainly respect anyone's right to choose to do or not do business online with any company. There are options and we all have our comfort levels.

Thanks. I knew it had gone on for years.
.

 

[Mrs.AMC]

And to those that wonder, no, it's not every purchase.
As someone who deals with the credit card processing system for our business, online only, no card reader, physical machine, virtual cards only, I know what's involved. I know the differences in the fees businesses have to pay based on the types of verifications you get back when processing the cards virtually. Even a 100% valid purchase with a correct billing address/zip/name, and 3(4) digit code can return a flag when processing. Sometimes the processing software can allow the purchase to go through if the seller ok's it but that's when you get hit with fees out the ying yang. There are ways past that with the ID verification and that's what UCT is using. It's way more complex than this but at any rate, yeah, they go the extra step sometimes and folks don't like it. It's to protect them more than you, bottom line. You some but them mostly. Since not all that many thieves are out there buying Disney tickets. Anyway, I agree with those who have said they could use a better way to soften the wording when discussing it. I know little about their staffing over the years, or size of business or anything. Maybe it's a small mom/pop place and either mom/pop are just brisk speakers who don't communicate well with the public. Probably great to work in what they do, till they have to interact with this verification stuff and then they fall very short. No idea but it's a shame they have to loose business over it when all they need is someone who can ask nicer or at least explain it better

 

[gottalovepluto]

--

jk you solved your problem OP! Exactly what I would have done.