No one wants to call the help desk: Account recovery for Gen Z
Gen Z expects immediacy. They’re used to scrolling through TikToks in seconds, making one-click purchases on Amazon, and tracking limited-edition Labubu drops like it’s a sport. When it comes to digital touchpoints in their education like account recovery or password resets, they expect the same standard: fast, intuitive, and personalized.
So when they log into their university portal and hit friction: a password reset that leads to back-and-forth emails, manually submitting identity documents, or waiting hours (or days) for IT responses, it’s no surprise that no one wants to call the help desk. These moments create frustration, erode trust, and signal outdated systems.
This demand for seamless digital experiences will only intensify as Gen Alpha enters higher education in the coming years. Expectations are shifting rapidly toward real-time, self-directed digital interactions that require little to no human intervention.
This disconnect goes beyond student dissatisfaction; on the flip side, IT teams are drowning in help desk tickets that require manual review and running into security vulnerabilities at all access points. The bottomline is that higher ed institutions must modernize how they verify students across all access points, especially account recovery.
Where the current account recovery process falls short
Account recovery is one of the most common friction points for both students and IT teams in higher education. Imagine an alumnus trying to access their school portal years after graduation to retrieve a transcript or access alumni resources. Their login fails. They’ve forgotten the password, no longer have access to the recovery email, and are left with one option: call the help desk.
Help desks at many schools usually force individuals through outdated recovery processes:
Submitting tickets
Emailing photos of ID
Calling the help desk only during regular business hours
These manual and slow processes create a poor user experience and put pressure on IT teams, especially during peak times like enrollment or finals week.
The account recovery process is also one of the most common entry points for bad actors trying to exploit institutions using synthetic identities or stolen credentials. There could also be cases of account takeover fraud, when a bad actor attempts to reset the password and take over the account of a student, alumnus, or faculty member. Identity cannot always be manually verified with confidence, especially at scale. As online enrollment and remote learning grow, so does the volume of account recovery requests and the opportunity for misuse.
Manual processes often lead to bigger headaches down the line:
High operational cost: IT teams must manually verify identities, which often involves back-and-forth emails or live video calls to review documents.
Slow resolution: Limited support hours and high request volumes mean delays, which are especially painful during peak periods (e.g. course registration or financial aid disbursement).
Increased risk: Manual review can lead to human error, inconsistent experiences, and fraud slipping through the cracks.
Operational bottlenecks: Ongoing requests eat up IT teams’ time and keep staff from working on more strategic digital transformation projects.
Instead of hiring additional employees focused on manual account recovery to solve these challenges, an online identity verification (IDV) process could be a more cost-effective and efficient solution.
Ghost students are draining real IT resources
The rise of ghost students is also another growing threat for higher ed institutions. These fake or synthetic identities allow fraudsters to enroll, collect benefits like financial aid, and exit unnoticed. A common access point that ghost students exploit is during account recovery, when someone tries to access or reset a credential using forged documents or stolen data.
Every fraudulent account undermines trust and misallocates funding. IT and financial aid departments bear the burden of managing recoveries, fixing errors, and responding to audits. By enforcing stronger identity verification during account recovery, schools can reduce this risk significantly.
Fraudulent student accounts have become so widespread that, in June 2025, the US Department of Education announced a new nationwide ID verification initiative to combat student aid fraud. Starting in fall 2025, the Free Application for Federal Student Aid (FAFSA) will have significantly stricter identity verification requirements. The move is a direct response to organized fraud rings exploiting weaknesses in current verification processes.
This level of identity assurance can’t be achieved through manual processes alone. With more scrutiny now placed on the higher education ecosystem, IT teams will need to evaluate how identity is verified across all access points. This includes moments like account recovery, when attackers often slip through unnoticed.
Modern identity verification platforms like Persona help build stronger identity assurance by detecting risk signals that human reviewers may miss. Instead of relying on static credentials like usernames and emails, automated systems can analyze a wide range of dynamic signals in real time, like:
Device signals
Geolocation
Document integrity
With this level of scrutiny through automated identity verification, fewer bad actors slip through and more financial support can reach real students.
What a modern account recovery flow looks like
Upgrading to identity verification processes shouldn’t add friction to the account recovery flow. With the right system, recovery can be faster for legitimate users and more secure overall.
Here’s what a modern, automated account recovery flow with Persona can look like:
User requests a password reset: The user selects “Forgot password” on your portal.
Persona collects risk signals: Persona gathers passive data such as IP address, device fingerprint, and location without the student lifting a finger.
Persona automatically triggers custom flow: Based on risk level, a custom flow kicks off. For example, a user logging in from a recognized location may only need to verify with an ID and selfie, while a request from an unusual device outside the country could be routed to further review.
Persona verifies the user’s identity: The user submits the necessary documents or information based on their risk level. Then, Persona runs live checks on the submitted information in real time.
User receives an automated decision: Persona’s system automatically approves, rejects, or escalates based on the custom rules. Approved users reset their password and regain access immediately.
This approach reduces the burden on IT teams while giving users a fast, secure way to recover access. With Persona, you can automate your identity verification process, cutting support volume and improving SLAs.
Here’s what the manual account recovery process looks like compared to a modern, automated account recovery process with identity verification:
| Manual IT account recovery process | Automated account recovery with identity verification |
|---|---|
| User requests password reset | User requests password reset |
| Ticket created with IT help desk (could sit in the backlog for a long time) | Persona collects active and passive risk signals (IP, device, location, etc.) |
| IT verifies student identity manually (ID uploaded or email confirmation) | Dynamic Flow triggers based on the user’s risk level |
| IT manually reviews supporting documents | Persona verifies identity with live checks |
| IT approves or rejects | Automated decision: approve, reject, or escalate |
| IF approved: IT sends temporary password/reset link | Approved users reset password and regain access |
| User resets password and regains access |
| Manual IT account recovery process | Automated account recovery with identity verification |
|---|---|
| User requests password reset | User requests password reset |
| Ticket created with IT help desk (could sit in the backlog for a long time) | Persona collects active and passive risk signals (IP, device, location, etc.) |
| IT verifies student identity manually (ID uploaded or email confirmation) | Dynamic Flow triggers based on the user’s risk level |
| IT manually reviews supporting documents | Persona verifies identity with live checks |
| IT approves or rejects | Automated decision: approve, reject, or escalate |
| IF approved: IT sends temporary password/reset link | Approved users reset password and regain access |
| User resets password and regains access |
The biggest difference in the two account recovery flows outlined in the chart is the manual review of verifying a student’s identity vs automatically verifying their identity based on accurate active and passive risk signals. Automating this part of the process helps IT teams speed up the process and takes the manual oversight off their plate.
Related: See how Persona helped Preply, a global tutor network, cut down 80% of time spent on manual identity verification and gain a 15% increase in tutor conversions.
Solving common concerns with automated identity verification
Moving to automated identity verification is a big shift for some institutions, but the right approach can make the transition smooth and manageable. Here are common concerns we hear when it comes to upgrading identity verification processes, and how educational institutions are solving them with Persona:
| Common concern | How Persona’s automated IDV helps address this |
|---|---|
| Lack of budget |
• Modular and usage-based platform (you can start with a single use case like account recovery and scale from there) • Further ROI like reduced support costs, fraud prevention, and faster student access to key services |
| Outdated systems | • APIs and integrations with your existing student information systems (SIS), help desks, and authentication providers |
| Lack of bandwidth to onboard a new tool | • Automated identity verification and recovery flows without daily oversight |
| Data privacy and compliance |
• Full compliance with FERPA, GDPR, CCPA, and other relevant data privacy regulations • SOC 2, ISO 27001, and IAL2 certifications • Custom granular control over data retention, redaction, and access |
| Students’ user experience |
• Mobile-friendly, fast, and intuitive identity flows • Custom dynamic recovery paths that only prompt for additional verification when risk is detected |
Why this matters: Fraud prevention meets operational efficiency
Automated identity verification protects your institution from the growing threat of ghost students and account takeover fraud.
Whether it’s an attacker trying to reset a student’s password to siphon financial aid or a bad actor creating multiple fake accounts to exploit resources, Persona helps you:
Ensure legitimate financial aid disbursement: With new Department of Education guidelines tightening identity requirements for FAFSA, automated IDV helps you verify real students, prevent fraud, and protect aid resources without burdening your IT team.
Reduce manual workloads: Preply cut manual identity checks by 80% after switching to Persona. Cut out the time spent on manual reviews and automate the decision-making process.
Scale support without scaling headcount: Automatic flows can handle surges in requests without breaking a sweat.
Integrate seamlessly: Persona works with your current systems; no need to rip and replace.
Stay compliant and secure: Persona meets top certifications like ISO 27001 and SOC 2, and complies with GDPR and CCPA.
And with fine-grained control over data retention and redaction, schools can align verification with their privacy policies and values.
Recover accounts smarter and faster
A modern, secure, and seamless identity experience reflects your institution’s commitment to innovation, trust, and student success. In an age where a clunky help desk experience can damage your brand, Persona offers a better way forward.
Whether you're facing a flood of account recovery requests or trying to weed out ghost students before disbursing aid, Persona provides the tools to verify identities, mitigate fraud, and delight users at scale.
Ready to resolve account recovery requests faster and free up IT resources? Get a demo today.