Regulations Governing the Standards for Information System and Security Management of Electronic Payment Institutions Article 4
When an electronic payment institution accepts user registration, it shall use the following security design for its identity verification process:1. Verifying mobile phone number: Ensure the user can send and receive messages.2. Ways to verify that the holder of the financial payment instrument matches with the user of the e-payment account are as follows:(1) Verifying the deposit account holder: The institution should check with the bank at where the deposit account is opened or verify the national ID card number or uniform business number of the deposit account holder with the bank; where an individual user does not have a national ID number, the institution should provide another identity document and its number for the bank to verify.(2) Verifying credit card holder: The institution should check with the credit card issuer or verify the holder's national ID card number.3. Verifying the copy of identity document: The institution should obtain a complete and clearly identifiable image of user's identity document by upload or taking a photograph.4. In-person identity verification: When the institution accepts in-person user registration, it should understand user's motive, verify user's telephone number and address, check identity document with a photo and keep a copy, retain user's seal or signature specimen, enter an agreement on limits of funds received/paid, and pay attention to the surrounding environment while the user opens an account.5. Identity verification via electronic signature: The institution shall accept signature via certificate authority (CA), authenticate the validity of certificate, and confirm that the identity proven by the certificate matches that of the e-payment account user.
中文原文 電子支付機構資訊系統標準及安全控管作業基準辦法第4條
電子支付機構於受理使用者註冊時，所採用之身分確認程序之安全設計如下：
一、確認行動電話號碼：應確認使用者可操作並接收訊息通知。
二、確認金融支付工具之持有人與電子支付帳戶使用者相符，方式如下：
（一）確認存款帳戶持有人：應向金融機構查詢或確認存款帳戶持有人身分證統一編號或商業統一編號。
個人使用者無身分證統一編號者，應提供其他身分證明文件及其號碼等資料供金融機構確認。
（二）確認信用卡持有人：應向信用卡發卡機構查詢或確認持有人身分證統一編號。
三、確認證明文件影本：得採上傳或拍照方式取得完整清晰可辨識之影像檔。
四、臨櫃確認身分：臨櫃受理使用者註冊，應了解使用者動機、查證電話與住址、辨識具照片之身分證明文件、留存影像、留存印鑑或簽名、約定收付款限額及注意周邊環境。
五、以電子簽章確認身分：應透過憑證進行簽章、驗證憑證有效性，並確認該憑證之身分與電子支付帳戶使用者相符。
一、確認行動電話號碼：應確認使用者可操作並接收訊息通知。
二、確認金融支付工具之持有人與電子支付帳戶使用者相符，方式如下：
（一）確認存款帳戶持有人：應向金融機構查詢或確認存款帳戶持有人身分證統一編號或商業統一編號。
個人使用者無身分證統一編號者，應提供其他身分證明文件及其號碼等資料供金融機構確認。
（二）確認信用卡持有人：應向信用卡發卡機構查詢或確認持有人身分證統一編號。
三、確認證明文件影本：得採上傳或拍照方式取得完整清晰可辨識之影像檔。
四、臨櫃確認身分：臨櫃受理使用者註冊，應了解使用者動機、查證電話與住址、辨識具照片之身分證明文件、留存影像、留存印鑑或簽名、約定收付款限額及注意周邊環境。
五、以電子簽章確認身分：應透過憑證進行簽章、驗證憑證有效性，並確認該憑證之身分與電子支付帳戶使用者相符。