Verify an unfamiliar document request before sending records
Open the provider account through the route your business already uses, independently of the unfamiliar email. Match the requested document, purpose and case reference to an account request or confirmation from support reached through that established route. Until the request and destination are confirmed, keep the documents unsent. Stripe verification documents belong in the Stripe Dashboard, not email. A familiar logo, accurate business details or a convincing deadline does not establish that the sender is authorized.
For: An owner or authorized representative of a research-only merchant who received an unexpected request for verification documents.
Separate the email’s claims from the account’s request
Record the provider name, document type, stated purpose, deadline and case reference claimed in the message. These are details to compare, not evidence that authorizes an upload. First establish whether your actual provider made the request; selecting a suitable document comes later.
Open the account through your established sign-in route rather than a link in the message. Confirm that it is the account for the relevant business and service. Compare any outstanding request with the email. A genuine account request does not automatically validate a different attachment destination supplied by an outside message. The request and the channel both need to agree.
Resolve an absent or conflicting request
If the account contains no matching request, the email remains unverified. That absence does not by itself establish fraud or prove that no further information is needed. Reach support through the account or another route your business has already established. Ask whether the provider issued the named case, requested that document type for this account, and can identify its authorized submission instructions.
Keep the confirmation with the request record. If the case exists but its document list, deadline or destination differs, ask support to resolve that specific difference before sending files. A case reference helps match records; a number printed in an email does not prove that the sender controls the case. Do not disclose a secret or send a document as a way of asking the sender to prove who they are.
Follow the confirmed upload route
Stripe’s acceptable-verification-documents guidance says sensitive verification documents must be uploaded through the Dashboard and must not be emailed. When a purported Stripe request asks for an email attachment, confirm the requirement through the established account route and use the Dashboard for the documents. Another provider must identify its own authorized submission channel.
Stripe’s account setup guidance also directs teams to use limited-access invitations instead of sharing passwords and to keep secret API keys private. A document request does not justify disclosing either. After authenticity is established, follow the requirements for the actual document and country. Keep a receipt with the document type, date and destination; do not turn the authenticity record into a second collection of identity documents.
Record the outcome and scope any further help
Close this check when the provider, account request or verified support confirmation, case reference if issued, and authorized destination can be connected. Leave an unmatched item unresolved with the account owner. Confirming that a request is genuine does not establish that the document will be accepted or that processing will be approved.
For a research-only processing consultation, describe the website and unresolved request in ordinary language. Prism can discuss processing preparation and a provider’s website questions; confirm scope, responsibilities, fees and terms before work. The public inquiry is not a document upload channel. Follow-up is by email, and sending it does not book an appointment, purchase a service or submit a processing application.
Request authenticity check
Use one sheet for one actual message. Record document types and non-sensitive references only. An unmatched request or destination keeps submission unresolved; completing this sheet does not establish provider approval.
Worksheet entries are not submitted by Prism’s worksheet and are not saved by the site. Use record types, availability, anonymized observations, or match/mismatch results. Do not enter government identifiers, customer names or addresses, customer messages, receipt-access links, card or bank details, passwords, or keys. Send sensitive documents only through the provider’s verified secure channel.
Request authenticity check. The last column is for temporary notes.
Check
Evidence to compare
Decision it supports
Your record
Claimed provider
Evidence to compareCompany and service in the email compared with your established account.
Decision it supportsIdentify the organization that must confirm the request.
Actual account request
Evidence to compareDocument type and purpose shown in the account or confirmed through independently reached support.
Decision it supportsEstablish what was requested; absence requires clarification.
Case reference
Evidence to compareEmail reference compared with the case confirmed through the account route; note if none was issued.
Decision it supportsA reference received in an email alone cannot authenticate the sender.
Verified support route
Evidence to compareHow you independently reached support and the date it confirmed the request.
Decision it supportsPreserve the basis for relying on the reply without recording credentials.
Authorized submission channel
Evidence to compareDestination in the confirmed instructions; Stripe verification uses Dashboard upload.
Decision it supportsDo not substitute an email attachment or guessed portal.
Unresolved difference
Evidence to compareAny difference in document type, purpose, deadline or destination.
Decision it supportsKeep files unsent until the actual provider clarifies the discrepancy.
Submission receipt
Evidence to compareAfter upload, document type, date and receipt reference only.
Decision it supportsDistinguish authentication of the request, submission and later acceptance.
These are temporary notes. Leaving or reloading this page may clear them. Worksheet entries are not sent automatically. If you copy notes into the consultation message and submit the form, Prism receives them as part of your request.
Limits
This comparison does not authenticate an email by appearance, domain spelling or knowledge of your business.
Keep identity documents, card numbers, authentication codes, passwords, API secrets, full bank details and customer records out of this worksheet and public inquiries.
Stripe’s upload rule is specific to Stripe verification; the relevant provider decides requirements and eligibility.
Stripe acceptable verification documents — checked 2026-09-29. Stripe accepts sensitive verification documents through the Dashboard, not email. Document requirements depend on the account and country; the upload rule does not authenticate an outside message.
Stripe account setup — checked 2026-09-29. Stripe directs account holders to use team invitations with limited access instead of sharing passwords and to keep secret API keys private.
Prism solutions — checked 2026-09-21. Prism offers storefront review, card-processing preparation and help with provider website questions. Scope, fees and terms are discussed before work; providers decide eligibility and account terms.
Prism contact — checked 2026-09-21. The inquiry asks about the website, products and question and excludes card details, passwords and customer records. Follow-up is by email; submission is not an appointment, purchase or processing application.
Discuss my processing options
Want to talk through your own processing situation?