← Back to Compliance Knowledge Center · California Compliance & CAPSS guide family

CALIFORNIA CUSTOMER INTAKE GUIDE

California ID Verification Requirements for Pawnbrokers and Secondhand Dealers

California secondhand dealer reporting is not only about submitting item data to CAPSS. A store also needs a disciplined customer-identification workflow: verifying the intended seller or pledger, keeping the right local records, understanding “on file” reporting, and retrieving information when lawfully requested. For a covered transaction, the person taking the information must reasonably rely on qualifying identification. California does not generally require a commercial counterfeit-ID service, specialized ID scanner, or DMV database connection under the statewide provisions reviewed here.

Scope and legal caution: Identification obligations depend on the covered activity and transaction, property type, current California law, and applicable local licensing requirements. This educational guide is not legal advice; confirm unusual circumstances with official sources, the local authority, or qualified counsel.

Current-law note: The requirements below describe law in effect when this article was legally reviewed on November 12, 2026. AB 2633 changes dealer and property coverage beginning January 1, 2027; its ID-verification technology language remains permissive. Review whether your activities and property are covered under the amended statute. See the AB 2633 overview for that transition.

Quick answer: verify, retain, then report

For covered California secondhand-dealer and pawnbroker transactions, the ID check is a local intake and recordkeeping responsibility, not merely a CAPSS entry. BPC § 21628(e)(1) requires identification of the intended seller or pledger to be recorded and maintained for three years from the date the item was reported to CAPSS. Identifying details that would otherwise go to CAPSS are handled as “on file” under § 21628(e)(3)(B), while the underlying information remains with the dealer. The person’s ID must be verified for each covered transaction under § 21628.3, subject to § 21628(d)(6)–(7)’s separate item/set reporting definitions.

“Customer” and the legal terms

We use customer for a readable store workflow. The statute and regulations use seller, pledger, intended seller, and intended pledger. Train staff to map the store’s customer record to the right legal role for the actual transaction; not every visitor or sale creates a CAPSS-reportable seller/pledger transaction. See Who Must Report to CAPSS? and BPC § 21626 for applicable definitions.

What the intake workflow should capture or organize

A consistent customer-identification workflow connects these parts. Some are statutory duties for covered transactions; others are recommended staff controls rather than additional legal mandates:

  • The intended seller’s or pledger’s identity and qualifying document checked at intake (BPC § 21628(e)(1); 11 CCR § 999.504).
  • Required locally recorded seller/pledger information and identification-document details (BPC § 21628(e)(1),(3); 11 CCR § 999.506(c)(1)).
  • The ownership-or-authority certification and legible fingerprint required under BPC § 21628(e)(2), with signature/capture handling as applicable under 11 CCR § 999.506(e).
  • Transaction and item context tying the customer record to the applicable property report (BPC § 21628(a),(d); 11 CCR § 999.506(c)).
  • Staff review and affirmation before submission, plus a retrievable record of corrections, omissions, and follow-up steps as practical controls (11 CCR § 999.506(d) addresses the submission affirmation).

Why is identification checked?

California Business and Professions Code (BPC) § 21628(e) requires covered dealers to verify and retain identification of the intended seller or pledger. § 21628.3 says the check is for each transaction, not for each item that shall be reported. BPC § 21628(d)(6) separately says a reportable transaction consists of no more than one item, with a qualifying set treated as an item under (d)(7). Do not treat an arbitrary basket as one reportable transaction or assume that one ID check covers separate transactions. Pawnbrokers are subject to the secondhand-dealer reporting requirements through Financial Code § 21208. Examining an ID document is not the same as authenticating it against the issuer’s database.

What does California law require?

  • Verify the person: the person taking the information verifies the intended seller’s or pledger’s identification, reasonably relying on a qualifying document under BPC § 21628(e)(1).
  • Check the document criteria: it must be currently valid or have been issued within five years, contain a photograph or description (or both), be signed where applicable, and bear a serial or other identifying number. Under 11 CCR § 999.504(b), the person taking the information verifies that the presented identification contains a photograph or physical description (or both).
  • Keep the required local record: BPC § 21628(e)(1) requires identification to be recorded and maintained for three years from the date the item was reported to CAPSS. Subdivision (e)(2) also requires the seller’s or pledger’s ownership/authority certification and a legible fingerprint.
  • Report covered property: BPC §§ 21628(a), 21630 and 11 CCR § 999.506 govern the applicable property transaction report and electronic CAPSS submission. Submitting the report affirms that the person taking the information verified the ID; CAPSS receipt is not an independent document-authenticity determination.

These are obligations for covered activities and transactions, subject to the statute’s property and transaction exemptions; not every sale or acquisition is reportable. See Who Must Report to CAPSS? and the California CAPSS Reporting Guide.

Which identification documents can qualify?

BPC § 21628(e)(1) lists these categories. The validity/issuance and document-feature criteria above apply to each; the last two categories additionally require another item of identification bearing an address.

  • United States passport.
  • Driver’s license issued by any U.S. state or Canada.
  • Identification card issued by any U.S. state.
  • Identification card issued by the United States.
  • Passport from another country plus another item of identification bearing an address.
  • Matrícula Consular plus another item of identification bearing an address.

Can an expired driver’s license qualify?

Potentially, yes—not automatically. The statute says the document must be currently valid or have been issued within five years. An expired listed license issued within the preceding five years may satisfy that timing alternative if the other statutory features are present and reliance is reasonable. Check the issue date; an expired license issued more than five years earlier does not qualify merely because it was once valid. This is a document-eligibility rule, not a promise that an altered or suspicious document should be accepted. Current 11 CCR § 999.504(a) addresses recording and maintaining the identification information cross-referenced in § 999.506; do not rely on older, repealed regulatory instructions about entering an expired ID’s issue date on a CAPSS report.

Who verifies ID, and how often?

Under BPC §§ 21628(e)(1) and 21628.3, the person taking the information verifies the ID for each transaction, not for every item that shall be reported. This frequency rule does not override BPC § 21628(d)(6)’s one-item-per-reportable-transaction rule or (d)(7)’s definition of a qualifying set. Multiple items bought during a single store visit may call for separate reportable transactions; do not assume one check covers all of them. A new transaction calls for its own check; a prior customer record or successful prior CAPSS submission does not erase that responsibility. Pawnbroker reporting obligations follow Financial Code § 21208. Seek legal or local-authority guidance where transaction grouping is unclear.

Is electronic counterfeit-ID detection required?

No such general statewide technology purchase requirement appears in the reviewed BPC §§ 21628/21628.3 or 11 CCR §§ 999.504/999.506. California requires the identity check and relevant record/report, while BPC § 21628(e)(1) says the verifier may use cameras, software, or other technology to obtain information and verify identity remotely. That permission is not a mandate to buy a commercial authenticator or query DMV records.

Required checks versus optional tools

  • Required — examine qualifying ID and verify the seller or pledger for each covered transaction. BPC §§ 21628(e), 21628.3 and 11 CCR § 999.504 establish the applicable identity-check duties.
  • Optional — read a driver’s license PDF417 barcode. This can speed up data entry, but a readable barcode alone does not prove that the card is genuine.
  • Optional — capture front/back images, use OCR or compare visible and encoded fields. Particular tools may assist a dealer; their availability does not replace reasonable identification verification.
  • Optional — use counterfeit-detection services or check issuing-agency records. No general statewide purchase or database-query requirement appears in the reviewed provisions; access to any service depends on its terms and applicable law.

A barcode may reproduce data printed on a card even when the card has been altered or fabricated. Comparing fields or using a third-party authenticity signal may assist staff, but none of those steps alone is a statutory safe harbor. Follow applicable local requirements and seek advice for unusual or suspicious documents.

Can cameras, scanners, and software be used?

Yes. BPC § 21628(e)(1) expressly permits the person taking the information to use technology, including cameras or software, to obtain information and verify identity remotely. A compatible barcode reader can speed up transcription; a camera can capture document images; OCR can extract visible text; consistency checks or optional authentication services can flag discrepancies. These are capabilities of particular tools, not California mandates, and they should not be mistaken for a confirmed issuing-agency database check.

Permission to verify identity remotely does not by itself establish that an entirely remote pawn or purchase workflow satisfies all other obligations, including a legible fingerprint, seller certification, recordkeeping and applicable local rules. Evaluate the complete workflow with the relevant authority or counsel rather than assuming that camera access alone makes a transaction compliant.

How does ID verification connect to CAPSS?

11 CCR § 999.506(b) permits electronic submission by DOJ’s CAPSS web report, web bulk upload, or API protocol; no particular commercial reporting API is mandatory. The Property Transaction Report includes the regulatory seller/pledger, identification-document, store and transaction fields, subject to statutory exceptions. Under BPC § 21628(e)(3)(B) and 11 CCR § 999.506(c)(1), fields that would otherwise identify the seller or pledger are populated as “on file” in CAPSS while the dealer records and maintains the underlying information locally. Identification-document information includes type, issuing jurisdiction/country, number, and issue date or expiration year in the locally maintained record described by the regulations. After specified lost, stolen, or embezzled-property notice, a qualifying law-enforcement request can require the underlying locally held information under § 21628(e)(3)(A).

Under 11 CCR § 999.506(d), submitting a Property Transaction Report affirms that the person taking the information verified the identification. The seller/pledger ownership-or-authority certification and fingerprint requirements remain separate. Submission success means the electronic report was received; it does not establish that an ID was genuine or that the dealer’s verification was adequate. See CAPSS “On File” Customer Information and the BPC § 21628 guide.

What “on file” means for customer records

“On file” does not mean the dealer may skip collecting or maintaining required seller/pledger details. BPC § 21628(e)(3)(B) and 11 CCR § 999.506(c)(1)(A)–(M) distinguish identifying information held locally from identifying fields populated “on file” in CAPSS. Store procedures should link the acquired customer identity and ID-document record with the ownership/authority certification, legible fingerprint, reported transaction and item, so the records can be found for an appropriate request. After a qualifying lost, stolen or embezzled-property notice, § 21628(e)(3)(A) requires the recorded identity information to be given to local law enforcement upon request within the statutory timing; other signatures/fingerprints should be handled under the law and the particular request, not under an invented blanket-disclosure rule.

For a more detailed field-by-field explanation that also addresses acquired signatures and fingerprints, read What Does “On File” Mean in CAPSS?. For device selection rather than legal interpretation, see Fingerprint Scanners.

Three-year identification retention and retrieval

BPC § 21628(e)(1) measures the identification record-and-maintain period as three years from the date the item was reported to CAPSS. A one-time customer screen entry is not enough if the required underlying information cannot later be located. Organize identification details with a usable transaction/item reference for staff review, audit or a lawful request; follow the separate rules applicable to other records rather than assuming every file has the same three-year period. See the Inspection and Audit Readiness Checklist.

Recommended dealer practices (not additional legal mandates)

  • Examine the ID and compare its name, photograph/description, identifying number and dates with the person and transaction information available to staff.
  • Check the issue date when relying on the five-year alternative; review inconsistencies rather than treating a successful barcode read as authentication.
  • Use documented escalation steps for suspicious or incomplete information and train staff on when to pause and obtain supervisory or legal guidance.
  • Keep the required local records retrievable and restrict access to sensitive customer data. Do not collect or retain extra document images merely because a tool permits them; check applicable privacy and retention rules.

Staff workflow checklist

Use these steps as an operational review starting point, not as an expanded list of legal mandates. Apply the statutes and regulations cited above to determine what a covered transaction actually requires:

  1. Determine whether the activity and property fall within the secondhand-dealer/pawnbroker reporting workflow (BPC §§ 21626, 21628, 21630).
  2. Have the person taking the information verify the seller or pledger’s ID for each covered transaction under BPC §§ 21628(e) and 21628.3; check the document and record the required locally held identity details.
  3. Obtain and organize the applicable ownership/authority certification, legible fingerprint, and signature/capture record as required (BPC § 21628(e)(2); 11 CCR § 999.506(e)).
  4. Connect the customer identity and document record to the reported item and transaction; check the one-item/set reporting rule in BPC § 21628(d)(6)–(7).
  5. Review the required property fields and submit the applicable CAPSS report using an available permitted route (BPC §§ 21628(a),(d), 21630; 11 CCR § 999.506(b)–(d)).
  6. Maintain the identification record for the applicable three-year period under BPC § 21628(e)(1), keep other records under their own rules, and make records retrievable for properly authorized requests.
  7. Record corrections, omissions, reporting errors and staff follow-up so the store can investigate discrepancies or answer a later inquiry; this step is a recommended control, not a new statutory record format.

For connected store-review tasks, see the Inspection and Audit Readiness Checklist (CAPSS status, customer files, item details, corrections and holds) and the CAPSS Reporting Checklist.

How EZ-CAPSS supports the workflow

EZ-CAPSS product materials describe organization of customer, item, transaction, identification, store and reporting information; local signature/fingerprint capture when the store acquires those records; offline-capable intake; and JUS 123 generation from acquired data. Offline intake does not mean an offline CAPSS submission or a legal-compliance guarantee. On an appropriate, validated Windows setup, compatible PDF417 barcode readers and camera-based ID capture may assist intake. Confirm the current release, device compatibility and the exact capture/reporting workflow in a demo. EZ-CAPSS does not advertise automated counterfeit-ID detection, DMV database verification or document authentication as a shipped feature, and it does not replace DOJ/CAPSS instructions or legal advice.

Review your customer intake workflow

If your store needs a more reliable way to link customer identification, acquired signatures/fingerprints, item records, local retention and CAPSS reporting, request a walkthrough of EZ-CAPSS. Review supported hardware first if devices are part of your decision. For existing-customer or general help, use Contact Us.

Frequently asked questions

Are California secondhand dealers required to verify identification?

Yes, for covered seller/pledger transactions under BPC § 21628(e)(1), with verification for each transaction under § 21628.3.

Are pawnbrokers required to verify identification for every transaction?

Pawnbrokers comply with applicable secondhand-dealer reporting rules under Financial Code § 21208. Verify identity for each covered transaction under BPC §§ 21628(e) and 21628.3. The latter says “not for each item that shall be reported,” but § 21628(d)(6) separately limits a reportable transaction to one item (including a qualifying set under (d)(7)); do not assume one check covers separate transactions.

Can an expired driver’s license be accepted?

It may qualify if issued within five years and the other BPC § 21628(e)(1) criteria and reasonable-reliance standard are met. Expiration is neither an automatic disqualification nor automatic permission to accept it.

Does California require a driver’s license barcode scanner?

No barcode-scanner mandate appears in the reviewed statewide BPC §§ 21628/21628.3 or 11 CCR §§ 999.504/999.506. Verification is required; a scanner is an optional data-entry aid.

Does California require counterfeit-ID detection software?

No general mandate for a commercial counterfeit-detection service appears in those reviewed provisions. BPC § 21628(e)(1) permits technology but requires reasonable reliance on qualifying identification.

Can a dealer verify identification remotely?

BPC § 21628(e)(1) permits cameras/software to obtain information and verify identity remotely. That does not waive fingerprint, certification, recordkeeping, reporting, or other applicable transaction requirements. Seek workflow-specific guidance for a wholly remote transaction.

Does CAPSS verify whether a driver’s license is genuine?

11 CCR § 999.506(d) treats report submission as the dealer’s affirmation of its own verification. Do not treat successful CAPSS receipt as document authentication.

Is DMV database verification mandatory?

No general DMV database-query requirement appears in the reviewed statewide BPC §§ 21628/21628.3 or 11 CCR §§ 999.504/999.506. Review any applicable local or specialized rule before adopting a particular process.

Official legal references and review information

Current consolidated regulation text and alternate access

Legal Research Last Reviewed: November 12, 2026. Applicable Law: California BPC §§ 21628, 21628.3; Financial Code § 21208; 11 CCR §§ 999.504, 999.506. AB 2633 general effective date: January 1, 2027.

Disclaimer: This article provides general information about California identification and secondhand-dealer reporting requirements; it is not legal advice. Businesses should review current statutes, regulations, local authority requirements, and qualified counsel for their circumstances.

Continue through the Compliance Knowledge Center

This guide is part of the California Compliance & CAPSS guide family. Use these related guides to connect customer identification with reporting, item descriptions, signatures/fingerprints and inspection readiness:

Back to the Compliance Knowledge Center

Source-check reminder: Review the cited official California and DOJ materials, current local authority requirements and qualified counsel before making compliance decisions. EZ-CAPSS helps organize acquired customer records, signatures, fingerprints and reporting data; it does not authenticate documents or certify compliance. Request a demo for workflow questions.