Is it safe to verify your identity for a data-broker opt-out?

Before verifying identity for an opt-out, confirm the official recipient, the action you requested, and the information it actually requires. A voluntary profile suppression, a sale-or-sharing opt-out, and an access or deletion request can have different rules.

Confirm who is asking and why

Reach the privacy page from the provider's own website or current official help center. Compare its domain with the request destination. If a message asks for documents, sign in through that verified route or ask the published privacy contact whether the request is genuine. A logo, urgent subject line, or sponsored search result does not establish the recipient.

Identify the purpose: matching a listing, confirming control of an inbox, proving authority to act for another person, or verifying a statutory request. Ask what remains incomplete and how the information will be used. Do not claim another person's profile because the name matches yours.

Match verification to the request type

For example, California's CCPA guidance distinguishes identity verification for access or deletion from a sale-or-sharing opt-out. That distinction does not establish a universal rule for every state, request, or voluntary site procedure.

If a document is requested

Read the current official instructions for accepted evidence, required fields, upload destination, retention, and supported alternatives. Ask the privacy contact to explain an unclear requirement before proceeding. Do not send additional documents to an unverified address or assume that a document is always required.

Follow the recipient's supported minimization or redaction instructions. Arbitrarily covering fields can make evidence unusable; sending an entire document when a narrower supported option exists can disclose more than necessary. There is no universal rule that all ID requests are forbidden, or that every broker accepts an email alternative.

The current Whitepages guide describes its documented routes and limits. That guidance is specific to Whitepages. SignalHire's form asks for a business email and individual profile URL; its official support contact is a fallback to ask about a blocked process, not a promise that another method will be accepted.

Keep the evidence private

Save the request reference, date, verified recipient, requested action, and response in a private log. Avoid putting document images, full sensitive identifiers, confirmation links, or recovery codes into shared trackers. The request tracker separates evidence types without requiring those secrets.

These guides do not ask you to upload identity documents to Delist. If you use a service, check its current instructions and data practices separately. A scan result is not proof that a document request is legitimate or that a removal was completed.

If verification fails

Use the official privacy or support route to ask which requirement was not met and which alternatives it supports. Keep the original acknowledgment and the support response. Do not weaken an account's security controls to complete a broker form. Use the failed opt-out guide to diagnose another missing step.

Frequently asked questions