A shoulder check is a photo or video you take of yourself holding your payment card next to your face, usually to verify you own the card during account setup or after a security alert
Card issuers and payment networks use shoulder checks as a identity verification step, not a security measure against fraud. The issuer is confirming that the person setting up the account or making a high-risk transaction is the same person whose name appears on the card. You hold the card so your face and the card are both visible in the frame, then submit the image through the issuer's app or website.
This requirement appears most often during initial account set up, after you report a card lost or stolen, when you change your registered address, or when the system flags an unusual transaction pattern. Some issuers ask for it routinely; others only when their fraud detection system raises a flag. The check takes a few minutes and usually clears within hours, though some issuers may take up to one business day to review it.
Key Takeaways
- A shoulder check is a selfie holding your physical card next to your face, taken to prove you own the card during account setup or after a security alert.
- The issuer reviews the photo to confirm the person in the image matches the cardholder name and that you physically possess the card.
- You submit the image through your card issuer's mobile app or online portal, and most issuers review it within a few hours to one business day.
- If your photo is rejected, the issuer will tell you why — usually poor lighting, the card number not visible, or your face not clearly shown — and let you resubmit.
- Shoulder checks are a standard practice across major card networks and do not indicate fraud on your account; they are a routine verification step.
When issuers request a shoulder check
The most common trigger is initial card set up. When you receive a new card and log into your account for the first time, some issuers require a shoulder check before you can use the card. This is especially true for premium cards, business cards, or accounts opened online rather than in a branch.
A second common trigger is account recovery after a security event. If you report your card lost or stolen, or if the issuer detects unusual activity and temporarily locks your account, they may ask for a shoulder check to re-verify your identity before restoring full access. This protects both you and the issuer by confirming that the person requesting the unlock is actually you.
Address changes, large transactions, or transfers to a new device can also prompt a shoulder check. Some issuers use them as part of their standard multi-factor verification process; others only when their system detects a pattern that looks unusual for your account.
How to take an acceptable shoulder check photo
The photo must show three things clearly: your face, the front of your card, and ideally the card number or last four digits. Position yourself so the camera captures your face on one side and the card on the other — hence "shoulder check." The card should be held at roughly chest or shoulder height, tilted slightly toward the camera so the numbers are readable.
Lighting matters. Take the photo in natural daylight or under bright indoor lighting. Avoid shadows across your face or the card. If you are using a phone camera, tap the screen to focus on your face first, then adjust so both your face and card are in focus. Most phones will blur one or the other if you try to focus on both at once, so aim for the card and accept that your face may be slightly softer.
Do not crop out your shoulders or the top of your head. Issuers want to see enough context to confirm it is a real photo of a real person, not a screenshot or a photo of a photo. The card should show enough of the front to be identifiable — at minimum the card network logo and the last four digits, though the full number is better.
What happens after you submit your photo
Once you upload the image, the issuer's system performs an automated check. It looks for a human face, confirms the card is visible and readable, and may run facial recognition to compare your face to any ID photo they have on file (usually from your account opening documents). This process usually takes a few minutes to a few hours.
If the check passes, you will receive a confirmation message in your app or email, and your account access or card will be restored. If the check fails, the issuer will tell you why — common reasons include poor image quality, the card number not visible, your face not clearly shown, or the card appearing to be a screenshot rather than a physical card. You can resubmit when ready, and most issuers allow multiple attempts.
If you resubmit and the check fails again, contact the issuer's customer service. A human reviewer may step in to verify you manually, or they may ask for an alternative form of ID. This rarely happens, but it can occur if you have an unusual name, if your appearance has changed significantly since your account was opened, or if the photo quality is genuinely too poor to assess.
Why issuers use shoulder checks instead of other methods
Shoulder checks are faster and cheaper than calling you for a phone interview or asking you to visit a branch. They also create a record — a timestamped photo tied to your account — that issuers can reference if there is a dispute later. From a fraud prevention standpoint, they confirm you physically possess the card, which is harder to fake than a password or a one-time code.
The method is not perfect. A determined fraudster with a stolen card and basic photo-editing skills might pass an automated check. But for routine verification — confirming that the person activating a new card is the person whose name is on it — shoulder checks are effective and low-friction. They do not require you to remember a security question or wait for a phone call.
Different issuers have different thresholds for when they require a shoulder check. Some use it for every new card; others only when their fraud detection system raises a flag. Visa, Mastercard, and American Express all support the method, though the exact implementation varies by issuer.
Privacy and security concerns with shoulder checks
Your photo and card image are stored on the issuer's servers, encrypted and access-controlled like any other sensitive account data. The issuer does not share the photo with third parties, and it is not used for marketing or any purpose beyond verification. If you are concerned about privacy, you can ask the issuer's customer service whether they retain the photo after verification or delete it after a set period — policies vary.
The main security risk is submitting a shoulder check over an unsecured connection. Always use the official issuer app or website, never email a photo to an address someone gave you. Scammers sometimes pose as the issuer and ask for a shoulder check via email or text; that is a phishing attempt. Legitimate issuers will only ask for the photo through their own find app or portal.
If you are uncomfortable taking a photo of your card, you can ask the issuer whether they accept an alternative verification method — a video call with a representative, a copy of your ID, or a phone interview. Most issuers will work with you, especially if you have a long account history with them.
Troubleshooting a rejected shoulder check
If your photo is rejected, start by checking the issuer's feedback. They usually tell you exactly what went wrong: "Card number not visible," "Face not clearly shown," "Image too dark," or "Card appears to be a photo of a photo." Read that feedback carefully and resubmit with that specific issue fixed.
Common fixes: move to better lighting, hold the card more directly toward the camera, make sure your full face is visible (not just part of your head), and confirm the card number is readable. If the issuer says the image is too dark, take it near a window or under a bright lamp. If they say the card is not visible, hold it higher or angle it more toward the camera.
If you resubmit twice and still get rejected, or if the issuer's feedback does not make sense, call customer service. Explain what you have tried and ask whether a representative can review your photo manually or offer an alternative verification method. This usually resolves the issue within one business day.
Frequently Asked Questions
Does a rejected shoulder check mean my account is compromised?
No. A rejection means the photo did not meet the issuer's technical requirements — usually poor lighting, the card number not visible, or your face not clearly shown. It is a quality issue, not a security issue. Resubmit with better lighting and a clearer view of both your face and the card.
Can I use an old photo or a screenshot of my card instead of taking a new one?
No. Issuers specifically require a fresh photo taken at the time of verification, and they can usually tell if an image is old or edited. The photo needs to show you holding a physical card, not a digital image or a photo from your phone's gallery. Take a new one each time.
What if I do not have my physical card with me when the issuer asks for a shoulder check?
Contact the issuer's customer service and explain the situation. If your card is lost or stolen, they already know that. If you straightforward do not have it nearby, ask whether they can delay the verification or offer an alternative method. Some issuers will accept a video call or a photo of your ID instead.
How long does it take for the issuer to review my shoulder check?
Most issuers review shoulder checks within a few hours during business hours. Some complete the review in minutes; others may take up to one business day. You will receive a notification in your app or email once the review is complete. If you do not hear back within 24 hours, contact customer service to check the status.
Is my shoulder check photo stored permanently on my account?
Policies vary by issuer. Some delete the photo after verification is complete; others retain it for a set period (usually 30 to 90 days) for dispute resolution. Contact your issuer's customer service to ask about their specific retention policy if you are concerned about privacy.