Build a verification flow to restrict applicant profiles that use a VPN connection while passing verification.

How Sumsub detects VPN usage

Sumsub offers the Advanced IP check solution to extract the IP address of the device that your applicant uses for verification, and get all the related information, including data about their VPN connection status.

Why do you need to reject applicants using VPN

If it is a significant matter for your business to know the exact IP address of the applicant’s device, you can detect the VPN usage that covers this information and reject such profiles.

Create verification flow to reject applicants who use VPN

Add a Workflow Builder verification flow that will help you find and decline applicant profiles that use a VPN connection.

Step 1. Create verification level and add level step node

Build a verification level including an Advanced IP check and place it on the Workflow Builder’s canvas:

1. Create a verification level and add verification steps
2. Configure the level settings and save it.
3. Enable the Advanced IP check — on the Configurations tab of the verification level settings, enable the IP insights checkbox.
4. In the Dashboard, go to Applicant Workflows, add a level step to the canvas, and attach the created verification level by selecting it from the list.

Step 2. Configure profiles rejection

Add the Condition and Review step nodes to complete the verification flow and reject applicants using VPN:

1. Click on the initial node created earlier and select Condition as the next step.
2. Configure the condition branch:
   1. Select the If logical operator.
   2. From the Field drop-down list, select the applicant.riskLabels.device parameter.
   3. Set the contains logical condition.
   4. From the Value list, select the vpnUsage risk label.
3. Within the created condition branch, click Choose next step and select Review step.
4. Configure the Review step node settings:
   1. Identify the type of terminal step — select Final reject.
   2. Specify reasons or add labels that will explain the decision.

Step 3. Start using flow

Once the flow is created and configured, you can save the draft, perform test verification, and publish the flow to run the checks:

1. Save the draft and experiment with your flow — create copies and conduct tests.
2. Publish the flow to go live once the flow configuration is tested.

Step 4. Receive verification results

Get verification results via the webhooks or view them in applicant profiles.