Private client verification
As AI Improves, Your Client Risk Compounds.
How will you verify clients when voice, image and video can all be convincingly faked?
Trust Onion puts identity verification inside an app branded as your firm. Don’t trust the voice. Verify the client.
Book a security review For security teams: how it’s secured
The voice is Richard’s. The caller isn’t.
The ground shifted
Confirm it is your client, even when every check passes
An attacker who controls a client’s inbox and phone number, and has cloned their voice, can pass each check below.
Your security team knows how often inboxes and phone numbers get taken over. AI adds the voice: a clone built from about 15 seconds of public audio can sound like your client. Recognizing the person on the line was the check advisors trusted most, and it no longer holds on its own.
-
The inbox
A phishing link or a reused password gives the attacker the client’s email, so email confirmation passes.
-
The number
An eSIM swap or carrier port-out moves the client’s phone number, so caller ID matches and text codes reach the attacker.
-
The voice and face
About 15 seconds of public audio, from an interview or a voicemail greeting, can be enough to clone a client’s voice.
-
The request
An urgent transfer request arrives from a client your firm has known for years, and every check passes.
What are the words?
Each device generates the three words locally. They rotate every 60 seconds, out of reach of anyone holding only the inbox and number.
Ellery Grant Verify
Hayes Family
Rotates every 60 secondsGenerated on this phone
- Advisor · Ellery Grant CRM The three words on the Hayes Family record, rotating every 60 seconds.
- Client · Richard’s phone The same three words, on his phone.
- Every 60 seconds Both change at the same moment. A caller holding only his inbox and number doesn’t have them.
What’s at stake
Protect the relationships one misdirected transfer could end
The cost of one misdirected transfer reaches well past the transfer itself.
- The funds. A forged request moves funds on your firm’s authority, to an account your client never chose.
- The relationship. Years of trust with a client can turn on one call your advisor approved.
- The headline. A misdirected transfer can become a public story about your firm.
The new standard
Verify every call in seconds, and escalate any doubt
Your advisor matches three live words against the client’s record in one question. For doubtful requests, a signed live selfie adds proof, and your existing controls still run before funds move.
-
Your client calls. Their device generates three live words in your firm’s app, and the words rotate every 60 seconds.
-
Your advisor sees the same words. They appear in the client’s record, inside your company’s CRM.
-
Your client confirms. The advisor asks “What are the words?” and the client reads them aloud.
-
Any doubt, a Proofie™. The advisor requests a live selfie, signed by the client’s passkey after a Face ID, fingerprint, or passcode check. The signature covers the exact photo plus the time and place, and any edit breaks verification.
Hayes Family
New words in 42s
Rotates every 60 secondsGenerated on this phone
Proofie request
Your Ellery Grant advisor asked for a Proofie to confirm a request.
Take a live selfie. Your passkey signs it after Face ID, fingerprint, or passcode.
Take ProofieFace ID unlocked the key
Fingerprint watermark
Proofie™
EGv7…k2Rq
- Signed with
- Passkey (P-256)
- Not before
- Arbitrum One #472,918,305
- Place (signed)
- ///brass.ivory.harbor
- Owner controls
- Password protected · Delete any time
Verified by Ellery Grant
Swipe for the next screen
Invisible to your team
Your advisors verify clients without opening another app
When a client calls, the three live words appear in their record inside your company’s CRM. Your advisor asks one question and never leaves the screen.
When the words match, the advisor clicks to confirm and the record shows Verified. When your policy calls for it, the advisor taps Request Proofie on the same screen. We set up the CRM connection during deployment.
Shown in Salesforce · Works with your company’s CRM
Search Salesforce
- Primary Contact
- Richard Hayes
- Client Since
- 2009
- Location
- Palm Beach, FL
- Service Tier
- Private Client
- Household Name
- Hayes Family
- Members
- 4
- Preferred Channel
- Phone
- Verification
- Three words + Proofie
Ellery Grant Verify
Ask: What are the words?
Advisor: What are the words?
Client: Cobalt Lantern Harbor.
Salesforce is a trademark of Salesforce, Inc. Shown for illustration only; no affiliation implied.
Security you can verify
Your security team can test each security claim below
Each box below links to its source or to a review with us, so your security team can test what we say.
-
On-device codewords
Each device generates three codewords per group locally. They rotate every 60 seconds and work offline.
Read the privacy policy -
Signed Proofies
A patent-pending live selfie, signed by the client’s passkey after a Face ID, fingerprint, or passcode check. The signature covers the exact photo plus the time and place; any edit breaks verification.
Visit proofoflife.io -
An added layer
It works alongside callbacks, compliance review, and dual approval.
-
Open to review
Bring your security team; we answer every question.
Book a security review -
Keys in a secure enclave
Each client’s group key sits in a secure enclave on the deployment server and on the client’s phone. Advisors see the words in your CRM, never the key.
Book a security review -
Passkeys stay on the phone
Each client’s passkey is bound to their phone. Our server stores only the public key, never the private key.
Book a security review
The signature includes a recent public block hash, a value no one could know in advance, which shows the photo was taken after that moment. Nothing is written to a blockchain.
Read our privacy policy and terms.
For your clients
Your clients carry a safety app that bears your name
Your clients get a verification app in your firm’s name, published under your own App Store and Google Play accounts. We build, submit, and maintain it.
- A welcome screen in your brand. The first thing clients see is your firm’s name and logo.
- Set up in a minute. Your firm invites each client, and the app opens ready, with their advisor already in the group.
- One set of words per family. Relatives join the client’s group and share its three words, the same ones your advisor sees.
- A welcome letter on your letterhead. It introduces the app and the one question your advisors will ask.
Welcome to Ellery Grant Verify
When you call your advisor, three words confirm it’s you.
Get startedYour group
- You
- Spouse
- Daughter
- Granddaughter
- Your Ellery Grant advisor
Everyone in this group sees the same three words.
Swipe for the next screen
Dear Mr. Hayes,
When you call us to move funds, your advisor will now ask one question: “What are the words?”
You will find the answer in Ellery Grant Verify, our app for your phone. It shows three words that rotate every 60 seconds, generated locally on your device.
If a request ever needs a closer look, your advisor may ask for a Proofie. You take a live selfie, and your passkey signs it after a Face ID, fingerprint, or passcode check.
This adds to the safeguards you already know. Our callbacks and reviews stay in place.
Warm regards,
Your advisory team
Ellery Grant Private Wealth
Scales with the risk
Match the check to the risk your policy defines
Your verification policy sets the thresholds, and we help you write it. Advisors escalate to a Proofie when a threshold or trigger applies.
Set by your verification policy
Normal requests
The three words, on every call your policy treats as routine.
When all apply
- Below your threshold
- Known beneficiary, account, and destination
- No urgency or secrecy
- Words given promptly and correctly
- Nothing feels off
Threshold: set by your verification policy
Three words
Set by your verification policy
Elevated requests
The three words and a Proofie, whenever your policy’s triggers apply or anything feels off.
When any applies
- Above your threshold
- New beneficiary, account, or destination
- Urgency or secrecy
- Words slow, wrong, or refused
- Anything that feels off
Threshold: set by your verification policy
Three words + Proofie
The return
Give clients visible protection, and move before your industry does
88% of financial executives say a successful cyber-attack would trigger client withdrawals. 83% of family offices are concerned about deepfakes or other impersonation threats.
Source: Omega Systems, 2025 Financial Services Cyber Resilience Report.
- Verified identity. Three words and a Proofie, for calls where voice, face, caller ID, and email can all be faked.
- Clients who feel safer. A safety app in your brand, plus a family circle that shows your firm looks out for them.
- Reputational risk, cut at the source. Lowers risk of fraud, so one misdirected transfer is less likely to cost a client relationship or become a headline.
- Frictionless for the team. Verification appears inside your company’s CRM when the client calls, so nobody opens another app.
- Past email confirmation. Your firm moves first, while the industry still confirms transfers by email.
- A conversation with your carrier. A stronger verification record is worth discussing with your carrier.
Next step
Settle your security team’s questions before you commit
Send this page to your security team, then book a review with us before you decide.
Your security team can test how the three words and Proofies work. We cover the CRM connection we set up during deployment, and where your existing controls fit.