Chapter 1

Why secure onboarding matters for businesses

While it’s essential to create a customer-centric onboarding process that makes your new users feel welcomed, validated, and valued, this process is also an opportunity to learn more about your customers and better understand their needs.

Every secure onboarding experience must be mutually beneficial to two audiences: your customers and your business. Your customers want to trust their personal information is safe, while at the same time, your business needs to ensure it builds a seamless process that delights and protects new and existing users.

What does this look like in practice? Here are a few of the benefits onboarding programs award customers and businesses when properly executed:

Benefits of a strong customer onboarding program

For your customers

  • Provides an intuitive sign-up flow to reduce the time, effort, and frustration that can be associated with account creation

  • Instills trust that personal information is safe

  • Allows them to choose how a business communicates with them

For your business

  • Delights customers from day one with a seamless and secure experience

  • Identifies and proactively stops digital sign-up fraud

  • Builds mutual trust with legitimate customers

  • Cuts down friction and reduces sign-up abandonment

Plus, prioritizing security at sign-up can save your business time and money down the line. Many tech giants like Twitter and Paypal have learned just how expensive identifying and deleting fake user accounts can be. Avoid the costly clean up by prioritizing identity verification at sign-up and taking a proactive, rather than reactive, approach to fraud.

That’s just a taste of how a secure onboarding process can benefit both your company and customers. Below, you’ll find even more reasons why businesses should prioritize and invest in a secure customer onboarding experience.

Inspire mutual trust

Any customer onboarding experience prioritizes security for one main reason: so a business can ensure that an end-user is legitimate and trustworthy before allowing them access to its platform. But trust goes both ways. While your business needs to ensure your new sign-ups and future customer transactions are legitimate, your users need to ensure your business will keep their data safe today and in the future.

Here’s what that looks like in more detail:

For your business, onboarding allows you to collect a user’s contact information and verify that they are who they say they are. This information can help protect your business and users at various stages of the customer journey—by reducing sign-up fraud, preventing user-account takeovers, and protecting future customers transactions. That way, you can trust every new, legitimate user that tries to do business with you and not worry about compromising the security of your existing customer base.

On the other hand, your customers need to trust that your business will keep their personal information safe. Your business can help put them at ease by introducing advanced user security measures at sign-up, like password complexity requirements, two-factor authentication (2FA) requirements, recovery phone numbers or email addresses, etc. Even allowing your customers to specify how they want to hear from your brand can increase their confidence in your business. After all, they want to ensure anytime they engage with a call, text, or email from your brand, they aren’t falling victim to a phishing or spoofing scam.

An example of mutual trust in practice

A user creates a new account with a cryptocurrency company to buy and sell bitcoin. During sign-up, the company asks the user to share their government-issued identification (ID) and set up 2FA to verify their identity. Right away, the user feels more confident about using the company’s platform since the business clearly takes security seriously.

On the business side, the company has verified the new user is who they say they are, thanks to their ID and 2FA. Anytime the user logs in to buy, sell, or trade cryptocurrency, the company can ensure the user’s transactions are intentional and legitimate.

That said, any secure onboarding process needs balance. Your business must have enough security processes and procedures in place to keep out bad actors, but not too many where legitimate users become frustrated. Once your company achieves this balance and establishes mutual trust with your users, you’ll be well on your way to building a long and prosperous relationship with your customers.

Delight legitimate users while fighting fraud

Identity verification doesn’t have to come at the expense of customer experience (CX). One critical goal of any secure onboarding process is to ensure actual humans can access the tools and platforms they need from your business.

User verification using Twilio’s phone data intelligence

Digital identity verification—whether via document verification or email/phone number lookup—allows your business to determine if a user is trustworthy and take preemptive action if needed. Odds are your legitimate users won’t even notice this step since you can do it behind the scenes in some cases. After uploading their documents or providing their contact information, users will progress seamlessly to the next step in your sign-up experience.

For example, instead of running the risk of having a customer get frustrated by a one-time passcode (OTP) or Completely Automated Public Turing test to tell Computers and Humans Apart (CAPTCHA), your business can instead send them a push authentication through your mobile app and have them approve or deny their login attempt with one click. Your customers can access their accounts with less friction, while your business can ensure its platform remains secure.

When your business has a reliable way to verify new user identities and ensure that your users’ devices and data aren't at risk, you can rest easy knowing your business can continue to grow responsibly.

Reduce new account abandonment

While it’s important to keep bad actors out, it’s equally important to keep legitimate customers engaged. Unfortunately, this can be harder than you’d think, especially when new account abandonment can reach as high as 70% to 90%, depending on your industry.

One of the most common ways to reduce new account abandonment is to audit your onboarding experience and ensure you only gather necessary data. This can help simplify your onboarding process and allow your users to create an account even faster—besides, your business can always ask for more information at later touchpoints in the customer journey.

42% of customers admit they’ve abandoned an account application due to onboarding friction.

42% of customers admit they’ve abandoned an account application due to onboarding friction.

— Liminal’s Consumer Digital Identity Landscape 2021 report

You might also want to reconsider your business’ use of CAPTCHAs and knowledge-based questions during your onboarding process, too. While these methods can verify user identities, they can also be a source of user frustration and contribute to your new user drop-off rates. Instead, using verification methods that don’t open the door for human error can help you create a more seamless and secure onboarding process. When your users can create an account in just a few minutes—or in some cases, a few clicks—you’ll see improved new user retention and sign-up completion rates.

Prioritize user security and experience

You don’t have to choose between having a secure onboarding process and an exceptional UX. Now, you can have both.

While passwords alone aren't enough to protect your customer accounts, encouraging users to set up 2FA can help your business and users keep their information safe. With a robust API like Verify, your business can have customers verify they are who they say they are via their preferred channel of choice: SMS, voice, email, push, time-based one-time password (TOTP), and WhatsApp. Now, your customers can seamlessly and instantly validate their identity on a channel of their choosing. Plus, they’ll gain peace of mind knowing they’ve partnered with a business doing everything it can to secure their credentials and data throughout their journey.

“Using two‑factor authentication is great because it increases account security and ensures we’re preventing unauthorized people from accessing an account.”

Suhas Joshi Engineering Manager, Stripe

Reach customers on their preferred channels

At the heart of every great CX lies convenience, personalization, and timeliness. To combine these 3 characteristics and please your customers, you need to know where and how they want to hear from your brand. For that reason, your business should not only ask customers what their preferred communication channel(s) is/are but also confirm their language preferences. This establishes where your customers should anticipate your messages and allows your brand to send them in their preferred language so that they don’t think your call, text, or email is spam.

Knowing your customers’ communication preferences helps you understand what kind of messaging elicits the best response from them and allows you to build more seamless relationships with your users. Here’s an example of how knowing your customers’ preferences can help you prioritize account security:

Food delivery example

A customer signs up for your food delivery service application, shares their phone number during sign-up, and specifies that they’d prefer to hear from your business via text. You send them an OTP to confirm their phone number, and the user makes their first order successfully.

A few months later, the user wants to order food through your app but realizes they’ve forgotten their password. Instead of contacting your customer service team for help, the user could confirm their identity via an OTP texted to their phone. They can copy the code, use it to reset their password, and regain account access—all within a matter of minutes and without requiring assistance.

The best part is your customer might not even notice this subtle interaction because it was so convenient. But, your business deserves all the credit. By knowing this customer prefers to interact via SMS, you created an intuitive and seamless UX for them based on their preferences.

The success of this verification process depends on your business’ ability to send users these OTPs and push notifications in real time. Even a delay of as little as 10 seconds could lead to user frustration, repeat requests, and support requests—all leading to a negative CX for your customer and increased support costs for your business.

Luckily, Twilio has dedicated networks with fallback routes to ensure these mission-critical messages reach your customers in real time so that they don’t have to request multiple codes and contact support for assistance. But be sure to partner with a solution that has a proven track record of message deliverability, so you know your messages will reliably reach your customers when they need them most.