Abstract: A process, apparatus and system are disclosed for verifying the authenticity of a user before providing the user with a desired service. The process involves first receiving a request from the user. Next, a question set is fetched corresponding to the user. The question set concerns information of a private nature that someone with rightful access to the desired services should know. The question set has at least one question and a possible answer or list of possible answers corresponding to the question. The question is then transmitted to the user along with the possible answer(s). After receiving a response from the user, a record is made whether the response correctly identified the possible answer as being correct or not. Finally, after the number of questions transmitted to the user reaches a predetermined number, a determination is made whether the number of incorrect responses exceeds a certain limit.