If you are going the route of "verifying" the authenticity of U.S. Passports, why not also verify drivers licenses, as well?
Don't you think that, from a business perspective, if it made sense to verify the authenticity of drivers licenses or passports, the US TREAS would've made it a requirement?
I know as Compliance folk, we are typically not all too concerned with the business aspect of things, but...ho hum...authenticating id's is an unnecessary step that can adversely affect "business as usual."
Once again, we should be treating the CIP requirement as an extension of our normal business practice and not some business-altering thorn in our side that some folks on these boards have made it out to be.
So in other words, if the identification looks unfamiliar to you or appears altered ask for another form of id - or simply refuse the account.