Fctr Verify

Verify who's calling. Before you act.

Helpdesks verify employees. Employees verify support callers and colleagues—with the factors your organization already manages.

Two-way verificationCall in progress
Fctr in Teams / Outlook
JLJamie LeeIT support
MCMaya ChenEmployee

“Hi, I’m Jamie from IT. I’ve sent a verification request.”

Check pending requests1 request

Open Fctr independently. Match the caller’s phrase and submit.

Caller says“Blue harbor”
IT support verifiedEmployee matches the phrase, submits, and waits for completion.
Two caller-verification initiation paths. IT support initiated: the caller meets organizational factor policy and creates a request; the employee independently opens Fctr in Teams or Outlook, checks pending requests, matches the spoken phrase, and waits for verification complete. Employee initiated: the employee says let me verify you first, independently opens Fctr in Teams or Outlook, chooses Request verification, selects the caller from the organization, and sends a request. The caller completes enrolled-factor verification and the employee checks the result before continuing. Employee-initiated requests require enablement and both participants to have access to the configured app.

In your configured Teams or Outlook app.
Employee-initiated requests are available where enabled.

An identity check.
Outside the login screen.

A name, caller ID, or familiar voice can be impersonated. Verify the person through a supported method recognized by your organization before continuing a sensitive interaction.

Either end of the call.
A clear way to verify.

The person you need to verify determines the workflow. Check an employee asking for account help, or let an employee check the person claiming to be support.

Employee → helpdesk

Verify the person
asking for account help.

The agent finds the employee in Fctr Portal or a supported integration and initiates the verification required for the request.

  1. Find the employee.Review the matching directory identity and live support context.
  2. Request verification.The employee completes the supported enrolled-factor check required by policy.
  3. Check the result.Only continue with actions allowed by the agent's role, target restrictions, and policy.
Explore helpdesk controls
MC
Maya ChenEmployee requesting account help
Your enrolled factor

Organization-managed
verification

Verification complete
Result returned to the support workflow
Employee verification with an existing enrolled authenticator. The result returns to the support workflow.

Support caller → employee

Verify someone
claiming to be support.

The support caller meets your organization's verification policy and creates a request in Fctr Portal or a supported integration.

  1. Open Fctr independently.In your configured Teams or Outlook app, choose Check pending requests. Review caller details and the reason.
  2. Match what the caller says.Select the caller's random phrase, submit, and wait for Verification complete. Never read the choices aloud.
  3. Stop if something does not match.Choose None of these / Not on a call, then End request. Contact support using details you already trust.

Phrase selection confirms the interaction. It is not a new MFA challenge for the employee and does not authorize a support action.

Fctr VerifyCaller request
JL
Jamie LeeIT support · Access assistance

Caller says“Blue harbor”

Verification complete
Fctr Verify support caller request. The employee selects the phrase spoken by the caller and waits for verification complete.

A sensitive request?
Ask the person to verify.

Employees can initiate verification of colleagues across the organization where enabled. Both participants need access to the organization's configured Fctr app in Teams or Outlook.

  1. 01

    Find the person

    Independently open Fctr, choose Request verification, and search by name or work email.

  2. 02

    They verify

    The selected person checks pending requests, chooses Verify yourself, and uses their enrolled, organization-managed factors.

  3. 03

    Check the result

    Wait for successful verification in Fctr before continuing. If verification is incomplete, do not proceed.

Existing factors.
Familiar tools.

Bring verification into tickets, support sessions, and employee apps. Use supported Microsoft Authenticator, Okta Verify, passkeys, and other factors your organization already manages.

Entra ID
Okta
Cisco Duofor Entra ID
  • Authenticator push
  • Passkeys
  • TOTP
  • SMS OTP
  • Email OTP

Available methods depend on provider configuration, policy, and verification direction. Entra Verified ID + Face Check is supported for employee verification where configured. Integrations are deployed in the customer's environment.

Review Verify pricing
  • ServiceNow
  • Freshdesk
  • Zendesk
  • Slack
  • Teams
  • Verification API

Beyond IT.
Across the organization.

Verify the person behind a sensitive request, then follow the approvals and access checks your business requires.

Discuss your use case
HR and payroll changes

Verify an employee asking to change direct-deposit or bank details before processing the request. Employees can also verify someone claiming to be from HR before sharing tax or benefits information.

Bank-detail requestVerify the employeePayroll review + approval
Executive and payment requests

Verify the executive or finance employee behind an urgent payment request. A familiar voice is not proof. Payment approval and bank-detail checks still follow your normal process.

Payment requestVerify the requesterPayment checks + approval
Confidential information

Verify the named employee asking for records, customer exports, or legal documents. Then confirm access rights and share through approved channels.

Document requestVerify the requesterAccess checks + approved channel
Vendors and contractors

A contractor requests access. A vendor's support engineer asks you to follow instructions. Verify the person through their eligible organization-provided account and supported factors before continuing, then apply your normal access and approval checks.

Vendor or contractor requestVerify the personAccess checks + approval

Both people need access to the configured Fctr workflow. Check vendor and guest-account eligibility.

Fctr Mobile Coming soon

Proof of presence.
Signed verification.

Standalone organizational identity verification without relying on existing enterprise factors.

You will be able to look up a colleague and send a verification request. They will confirm it with fresh biometric authentication or an organization-permitted passcode. Their device will sign a single-use response bound to your request, with the verification result returned to you.

  1. Look up
  2. Request
  3. Verify
  4. Check result
Discuss Fctr Mobile
Fctr Mobile requests preview Coming soon. The app shows Check pending requests and an expanded Request verification area with Find a recipient.

Attackers impersonate
both sides of support.

Make verification routine for sensitive requests. A familiar voice should not replace an identity check.

Microsoft Incident Response

A fake support call can become initial access.

A documented Teams vishing case used IT impersonation to gain Quick Assist access and compromise a corporate device.

Read the Microsoft case

Mandiant · M-Trends 2026

Helpdesks are a path around MFA.

Mandiant describes attackers using highly interactive voice phishing against IT helpdesks to bypass MFA and reach SaaS environments.

Read M-Trends 2026

Two-way verification,
clearly.

Answers about IT support caller verification, existing factors, and employee requests in Teams or Outlook.

Read the documentation
What is Fctr Verify?

Fctr Verify is organizational identity verification software for IT support calls and sensitive employee requests. Helpdesks can verify employees, and employees can verify IT support callers or request a colleague's verification where enabled. It uses supported organization-managed verification methods through customer-deployed integrations and configured apps in Teams or Outlook.

How can employees verify an IT support caller?

Employees verify IT support callers through Fctr Verify in their organization's configured Teams or Outlook app. The caller starts a request in Fctr Portal or a supported integration after meeting the organization's verification policy.

Open Fctr Verify independently, review the caller details and reason, select and submit the phrase they say, and wait for Verification complete. Never read the choices aloud. If the caller is not verified, end the call.

Can caller verification use existing Okta or Microsoft Entra ID factors?

Yes. Fctr Verify uses supported factors your organization already manages through Okta or Microsoft Entra ID, so employees do not need another authenticator for these workflows. Available methods depend on your provider, configuration, policy, and verification direction.

Can employees request verification themselves in Teams or Outlook?

Yes, where employee-initiated verification is enabled. Open Fctr Verify independently, choose Request verification, and find the person by name or work email. The selected person opens Fctr, chooses Verify yourself, and completes verification using their enrolled, organization-managed factors.

Use this for sensitive requests from HR, payroll, or finance, such as changes to bank details or an urgent payment request. Both people need access to the organization's configured app. Check the result in Fctr before continuing. If the caller is not verified, end the call. Business approvals and access checks still apply. Explore employee verification use cases.

Can Fctr verify external vendors and contractors?

Fctr can verify vendors and contractors who use eligible organization-provided accounts, supported enrolled factors, and your configured Fctr workflow. This lets employees check the person behind a support instruction or access request before continuing. Verification does not grant access or approve the request.

A vendor-list entry or guest invitation alone is not enough. The current Teams and Outlook workflows do not support Microsoft Entra B2B guest accounts. Discuss your vendor setup with Fctr to confirm the supported workflow.

Do we need Fctr Portal to verify support callers?

No. Supported workflows can start in a customer-deployed integration such as ServiceNow, while employees use Fctr in Teams or Outlook. Where enabled, employees can request another person's verification directly. Portal adds the governed helpdesk workspace. Fctr Mobile is an upcoming standalone biometric path.

Is reverse caller verification the same as two-way?

Reverse caller verification is the employee-verifies-support direction. Two-way, or bidirectional, verification covers both helpdesks verifying employees and employees verifying support callers.

Who completes the verification challenge?

In support-initiated caller verification, the support caller meets organizational factor policy before creating the request. The employee's phrase selection confirms the interaction without a fresh MFA challenge for that employee. For colleague requests, the selected person verifies. For an incoming helpdesk request, the employee completes the supported verification required for that workflow.

What if verification fails or remains incomplete?

Do not treat the person as verified. End the interaction and contact the person or support using details you already trust. Do not rely on a link supplied only by the caller.

What is different about Fctr Mobile?

Fctr Mobile is coming soon. It will offer proof of presence and signed verification without relying on existing enterprise factors. A requester will look up a colleague and send a request. The recipient will confirm it with fresh biometric authentication or an organization-permitted passcode. Their device will sign a single-use response bound to the specific request and decision, with the verification result returned to the requester.

Does successful verification authorize an action?

No. Identity verification, support-action permission, and business approvals are separate. Password resets, enrollment changes, payment requests, and data sharing still require their applicable role, policy, approval, and access checks.

Does Fctr analyze calls for deepfakes?

No. Fctr verifies identity through supported methods rather than analyzing audio or video. Available enterprise-factor methods depend on provider, policy, and direction. Fctr Mobile will add a standalone biometric path.

Put proof behind
the next conversation.

See both caller-verification directions with your organization's workflows in mind.

Request a demo