ID.me gathers lots of data besides face scans, including locations. Scammers still have found a way around it.

The revelations raise new questions about the McLean, Va.-based contractor, which saw its business explode during the pandemic: 10 federal agencies, 30 states and more than 500 companies now pay ID.me to confirm the identities of Americans seeking services such as unemployment insurance or online tax records. The company last year was valued at $1.5 billion, and its government contracts have totaled in the hundreds of millions of dollars.