Knowledge-Based Authentication (KBA) for Remote Online Notarization
Published September 13, 2024 · Updated May 20, 2026
Knowledge-Based Authentication (KBA) is the identity-verification method most states require for Remote Online Notarization (RON). It proves the person on the other end of the video call is who they claim to be by asking questions only that person would know. Here is how it works.
How KBA Works
- The signer enters their name, address, date of birth, and Social Security number (or last 4 digits) into the RON platform.
- The platform queries a third-party identity verification service (like LexisNexis or TransUnion) that pulls data from the signer’s credit history, public records, and transaction history.
- The platform generates 5 multiple-choice questions based on this data. Examples: “Which of these addresses have you lived at?” or “Which of these vehicles did you purchase?”
- The signer must answer at least 4 out of 5 correctly within 2 minutes.
- If the signer fails, most platforms allow one retry with a new set of questions. A second failure blocks the session.
Why KBA Is Required for RON
In a traditional notarization, the notary checks a physical ID and looks the signer in the eye. In RON, the signer could be anywhere. KBA provides a digital equivalent of identity verification. Most state RON laws and the mortgage industry (Fannie Mae, Freddie Mac) require it as part of the signer authentication process.
KBA vs Other ID Verification Methods
| Method | How It Works | Strengths | Weaknesses |
|---|---|---|---|
| KBA | Questions from credit/public records | Fast, familiar to borrowers | Fails if signer has thin credit file |
| Credential analysis | AI scans government ID (front + back) | Verifies physical ID | Requires good camera, lighting |
| Biometric | Facial recognition matches ID photo to live selfie | Hard to fake | Newer, some privacy concerns |
Most RON sessions use a combination: credential analysis (scan the ID) + KBA (answer questions) + biometric (selfie match). This layered approach is what Fannie Mae and Freddie Mac require for eMortgages.
Common Reasons KBA Fails
- Thin credit file: Young adults, recent immigrants, or people who avoid credit may not have enough data for meaningful questions
- Recent life changes: Just moved, just bought a car, just changed names — the data may not be current
- Time pressure: The 2-minute limit stresses people out, and they misread questions
- Wrong personal info entered: Typos in SSN, DOB, or address at the start will generate wrong questions
Tips for Signing Agents
- Tell borrowers ahead of time that they will be asked personal questions based on their credit history. This prevents surprises.
- Remind them to have their SSN handy and to enter information carefully at the start. Typos cause failed KBA.
- If a borrower fails KBA twice, they cannot proceed with RON. The signing will need to be rescheduled as an in-person notarization.
- Some borrowers are uncomfortable sharing their SSN online. Reassure them that the RON platform uses encrypted connections and does not store the SSN.
Related Reading
Frequently Asked Questions
What questions does KBA ask?
Questions drawn from credit and public records: past addresses, vehicle purchases, loan types, employer names. All multiple-choice. You must answer 4 of 5 correctly.
What happens if a signer fails KBA?
Most platforms allow one retry with new questions. If the signer fails twice, the RON session cannot proceed. The signing must be rescheduled in person.
Is KBA required for all RON sessions?
In most states, yes. Some states allow alternative identity verification methods (biometric + credential analysis), but KBA is the most widely required method, especially for mortgage closings.
Can someone fake KBA?
It is difficult but not impossible. The questions are generated dynamically from recent data that is not easily found online. That is why most RON platforms layer KBA with credential analysis and biometric verification.
Why does KBA need my Social Security number?
The SSN is used to pull the correct credit and public records data. Without it, the system cannot generate personalized questions. The SSN is transmitted over encrypted connections and is not stored by the RON platform.
Responses