Back to Blog
Identity Verification · Technology Guide · UK 2026

Identity Verification Using P300 EEG: How It Works

Traditional identity verification checks documents. It confirms that the passport is genuine, the CV matches the references, the name corresponds to the records. What it cannot confirm is whether the person presenting those documents is actually who they say they are. P300 EEG tests the person — directly, neurologically, and in a way that fabricated documentation cannot defeat.

MO

Mathew Oneill

Corporate Investigations Lead & P300 EEG Researcher — DeceptionDetection.co.uk

Mathew leads corporate and identity verification investigations at Deception Detection, working with employers, regulated organisations, and legal professionals across the UK. He has overseen P300 EEG identity investigations covering fabricated employment history, credential fraud, concealed criminal background, and pre-employment screening for high-trust roles. See our full identity verification testing service for details.

The Gap That Traditional Identity Checking Cannot Close

Every employer, regulated body, and organisation that handles sensitive information has some form of identity verification process. Background checks. Reference verification. Document authentication. DBS checks. Right to work confirmation. These processes are well-established, legally required in many contexts, and genuinely effective at what they are designed to do.

What they are designed to do, however, is verify the authenticity of documents and the accuracy of records. They answer the question: are these documents genuine, and do they correspond to the person named? They do not answer a different and often more important question: is the person presenting these documents actually the person they describe?

A fraudster using a sophisticated false identity, a legitimate identity obtained through deception, or a real identity with carefully concealed elements — criminal history, undisclosed employment, fabricated qualifications — can pass a document-based check without difficulty if the fabrication is well-executed. The documents say what they should say. The references are managed. The CV tells the right story.

P300 EEG closes this gap by testing a dimension that documents cannot address: what the person's brain recognises as familiar. It is the difference between checking the label on the box and checking what is inside it.

A person using a false identity has documents that say one thing and a brain that knows another. Those two things cannot be reconciled when the brain is tested directly. The P300 response fires involuntarily — before conscious thought, before any decision about how to respond, and before any prepared account can be deployed.

95%
P300 EEG accuracy across identity and corporate case dataset
300ms
The recognition window — fires before conscious thought can intervene
0
Known methods of suppressing P300 recognition — it cannot be trained away
48hrs
Typical investigation turnaround — verbal result same day, report within 24 hours

How P300 EEG Identity Verification Works

The technology rests on a straightforward neurological principle. Understanding it properly explains both why it is effective and why it cannot be defeated.

What happens in the brain during an identity verification test
1

A stimulus appears on screen

The subject views a series of stimuli — words, names, dates, locations, reference numbers. Each is presented briefly, one at a time, in a randomised sequence that mixes genuine probe items with neutral filler items.

2

The brain processes it in the first 300 milliseconds

Before any conscious thought forms, the brain has already begun pattern-matching the stimulus against stored memory. If the stimulus matches something in memory — a name the person genuinely knows, a location they have actually been, a date that has meaning to them — the matching process produces a distinctive neural signal.

3

The P300 component fires on recognition

If the stimulus is recognised, the P300 event-related potential fires at approximately 300 milliseconds — a sharp positive voltage deflection measurable across multiple EEG channels. This is an involuntary neurological response. It fires before the subject has consciously decided whether to respond, and before any deliberate suppression or deception strategy can be applied.

4

The EEG records whether it fired

The BrainBit headband captures continuous EEG data from eight channels throughout the session. Post-session analysis compares the P300 amplitude on probe stimuli against the amplitude on filler stimuli. A statistically significant difference — the brain recognising the probes — produces a deception-indicated or identity-inconsistency result.

5

The result is interpreted against the identity claim

Where the probe stimuli are details that a genuine holder of the claimed identity should know — and the P300 is absent — this indicates the claimed identity is unfamiliar to the subject's brain. Where probe stimuli relate to a concealed identity or history — and the P300 fires — this indicates neurological recognition of information the subject has denied knowing.

The key principle is that the brain cannot lie. It can store false information if trained to do so — which is why probe design is critical. But it cannot produce a P300 recognition response to information it genuinely does not know, and it cannot suppress the P300 response to information it genuinely does know. This is the property that makes P300 EEG identity verification fundamentally different from document verification.

Where P300 EEG Identity Verification Is Applied

  • 📋 Fabricated employment history and CV fraud Pre-employment

    CV fraud is considerably more common than most employers appreciate. Studies consistently show a significant proportion of job applications contain material inaccuracies — fabricated job titles, inflated tenure, fictional employers, or undisclosed terminations. For senior and high-trust roles, the consequences of a fraudulent appointment can be severe.

    P300 EEG tests a candidate's neurological recognition of specific details associated with the employment history they have declared — the names of organisations, reported line managers, key projects, office locations. A candidate who genuinely worked at those organisations will have stored that information in memory and will produce P300 responses to relevant probe stimuli. A candidate who fabricated the history will not.

    Documented outcome: In our executive background check investigation, a candidate claiming C-suite experience at three named organisations produced no recognition response to probe stimuli relating to those organisations' specific operational details — while producing clear recognition responses to stimuli relating to a different, lower-level employment history not declared on the CV. The appointment was not made. See case study 4 for the full account.
  • 🎓 False educational and professional credentials Regulated roles

    Fabricated degrees, false professional memberships, and invented qualifications are a growing problem in regulated professions — healthcare, law, finance, education, engineering — where the consequences of an unqualified practitioner in a sensitive role extend far beyond the individual employer.

    P300 EEG tests recognition of specific academic and professional details — course content, institutional specifics, examination formats, professional body procedures — that a genuine graduate or qualified professional would have encountered and stored during their training. Someone who genuinely holds the qualification will recognise these details. Someone who fabricated the credential will not.

    Sector note: Regulated professions have specific requirements around screening that P300 EEG supplements rather than replaces. We work with compliance teams and regulated employers to ensure testing is integrated into the correct framework for the specific sector.
  • 🚫 Concealed criminal history High-trust roles

    DBS checks are an essential component of safeguarding in roles involving children, vulnerable adults, and sensitive information. However, DBS checks are limited to UK criminal records and have known gaps — unspent convictions overseas, offences that did not result in UK prosecution, or historical matters that the subject believes are inaccessible.

    P300 EEG in this context is not a replacement for DBS screening but a supplement to it — testing whether the subject has stored knowledge of specific criminal matters or proceedings that a DBS check did not surface. The probe design requires care and legal advice in this application context, and we work closely with the instructing organisation's legal team to ensure the process is compliant.

  • 🪪 Multiple identity use and assumed identities High-security contexts

    In high-security, financial services, and regulated immigration contexts, the use of multiple identities — legitimate identities obtained in different names, deceased persons' identities, or carefully constructed false personas — represents a sophisticated threat that document-based checks can struggle to identify if the fabrication is well-executed.

    P300 EEG addresses this by testing whether the subject's brain recognises details specific to the claimed identity as genuinely familiar — and whether they produce recognition responses to details from a different identity that their documents do not describe. The pattern of recognition responses across the two identity sets tells a definitive story that documents cannot contradict.

    Specialist application: Multiple identity investigations require specialist probe design and a detailed case briefing. Contact us directly to discuss the specific requirements of your situation before any investigation is scoped.
  • 🏛️ Witness credibility and identity in legal proceedings Civil and legal

    In civil proceedings, arbitration, and some tribunal contexts, the credibility of a witness's declared identity and background can be challenged. P300 EEG provides objective neurological evidence about what the witness recognises — relevant to their claimed expertise, their declared background, or the accuracy of their account of events they claim to have witnessed.

    This application requires the closest coordination with the instructing legal team, as the probe design must be structured to produce evidence that is relevant to the specific dispute and usable in the proceedings context. We work with solicitors to scope and deliver witness credibility investigations that produce properly documented, legally usable results.

P300 EEG vs Traditional Identity Verification

The two approaches are complementary, not competing. Understanding what each does — and what it cannot do — helps organisations build a screening framework that addresses the full range of identity risk.

Document-based verification

What it checks

  • Authenticity of identity documents
  • Accuracy of name, date of birth, nationality records
  • Right to work in the UK
  • UK criminal record status via DBS
  • Whether declared references exist and match
  • Whether the qualification certificates are genuine documents
P300 EEG verification

What it checks

  • Whether the person neurologically recognises details of their claimed identity
  • Whether the person has concealed knowledge of a different identity or history
  • Whether claimed qualifications are neurologically consistent with genuine study
  • Whether declared employment history is neurologically consistent with genuine experience
  • Whether concealed criminal or background matters are stored in memory
  • Whether the witness's claimed knowledge is neurologically consistent with direct experience

The gap P300 EEG fills is the gap between documents that say the right things and a person who genuinely is what those documents describe. A well-constructed false identity can pass document verification. It cannot pass neurological verification — because the brain cannot be trained to recognise details of a life it did not live, or to forget details of a life it did.

How an Identity Verification Investigation Is Conducted

  1. Briefing and case scoping

    We receive a detailed briefing from the instructing organisation — the claimed identity details, the specific concerns, the context of the investigation, and any existing documentary or reference information. We assess suitability and establish what probe material is available for each area of concern.

  2. Probe design — identity-specific stimuli

    Probe stimuli are built around specific details of the claimed identity that a genuine holder would have encountered and stored in memory — operational details of declared employers, specific elements of declared academic programmes, professional body procedures, or other details that cannot be researched from publicly available information. This stage requires careful verification that probe details have not been inadvertently disclosed to the subject through the briefing process or publicly accessible sources.

  3. Candidate notification and consent

    The subject is informed that P300 EEG verification is part of the screening or investigation process, and provides informed voluntary consent before the session proceeds. The categories being tested are disclosed — the subject knows the investigation concerns their declared employment history, for example — without the specific probe stimuli being revealed in advance.

  4. Testing session

    The subject wears the BrainBit EEG headband and views probe and filler stimuli on screen, responding with button presses. A standard identity verification session covers two to four probe sets and runs 90 minutes including the pre-test briefing. The session is calm and non-confrontational.

  5. Same-day verbal result and written report

    Verbal result the same day. Full written report within 24 hours — including raw waveform data, analysis methodology, probability scores for each probe set, and the examiner's documented conclusions. The report is formatted for use in employment, legal, regulatory, or civil proceedings contexts and includes a QR-verified result certificate.

Need Identity Verification That Goes Beyond Documents?

We work with employers, regulated organisations, and legal professionals across the UK. The initial consultation is free — we will assess your specific situation and tell you honestly whether P300 EEG identity verification is the right tool.

Frequently Asked Questions

P300 EEG verifies identity by testing whether a person's brain recognises specific details associated with the identity they are claiming — or fails to recognise details they should know if they genuinely are who they say they are. The P300 brainwave fires involuntarily at 300 milliseconds when a stimulus is recognised as familiar. A person using a false identity will not produce recognition responses to details specific to that identity's genuine history. A person concealing their real identity may produce recognition responses to details from that concealed history.
P300 EEG can detect a range of identity fraud scenarios: fabricated employment history, false educational and professional credentials, concealed criminal history, multiple identity use, assumed identities, and discrepancies between declared and actual background. The technology is most effective where specific factual details can form probe stimuli — details that only a genuine holder of the claimed identity would have stored in memory, or that only someone with the concealed history would recognise as familiar.
Yes — provided testing is voluntary, properly disclosed, and integrated into a fair screening process. Employers can use P300 EEG identity verification as part of pre-employment due diligence, particularly for high-trust, high-sensitivity, or regulated roles. Testing must be conducted with the candidate's informed consent and the results must be handled in accordance with UK GDPR. We advise on the correct legal framework for pre-employment testing in your specific sector.
A standard background check verifies documents and records — confirming that the documents presented are genuine and the records match the name. P300 EEG tests the person directly — assessing whether their neurological responses are consistent with the identity they are claiming, regardless of the quality of their documents. The two methods are complementary: document checks verify what the records say; P300 EEG verifies whether the person in front of you is who the records describe.
No. The P300 fires at 300 milliseconds — before conscious thought, before deliberate control, and before any preparation strategy can be applied. A person cannot train their brain to recognise details of an employment history they did not live, or to forget details of a history they did. Research consistently shows P300 accuracy above 92% even in subjects specifically trained and motivated to defeat the test. For a full breakdown of why countermeasures fail, see our P300 countermeasures article.
No. P300 EEG measures neurological recognition — not physiological stress. A candidate who is genuinely nervous about a screening process cannot produce false recognition responses through anxiety. The P300 fires only when the brain recognises a stimulus as something it has actually stored. A candidate who genuinely holds the qualifications and experience they have declared will produce recognition responses to relevant probe stimuli regardless of how nervous they are during the session.
Back to All Blog Posts