Summary

ID.me’s core bet is that digital identity becomes shared infrastructure when one trusted wallet can establish legal identity, attach verified roles, and reuse both across organizations. The show introduces a network with more than 100 million members, while Hall says 65 million portable identities have been issued; government-issued ID supplies the root of trust, and authoritative databases confirm claims such as doctor, veteran, or graduate. His ambition is “Visa in 3D”: safer access, fewer passwords, and “never make the same person do the same thing twice.”
Fraud prevention is already a market measured in percentages of US GDP, not a narrow cybersecurity budget. Hall cites a Government Accountability Office estimate of $233 billion-$521 billion lost annually from federal spending alone—about 2% of GDP and, at the midpoint, roughly half the $824 billion defense budget. After ID.me entered Arizona, weekly unemployment claims fell from 570,400 to 6,700; seven states have credited it with stopping $270 billion of fraud, supporting his operating thesis that “it takes a network to fight a network.”
AI-driven impersonation strengthens the case for networked identity, but Hall rejects one architecture for every risk. ID.me saw account-takeover targeting rise from roughly 180,000 wallet logins in a 90-day period in 2022 to 1.3 million in the comparable 2023 window. Apple- or Google-style credentials can work well for local, in-person interactions, but online financial transactions need visibility, feedback loops, an audit trail, and victim recourse: purely client-side identity can otherwise mean, “If these really terrible things happen, you’re on your own.”
Hall’s military unit improved kill-capture performance from the 20th percentile to above 90% through preparation, after-action learning, and specialization. The theater average was about 44%, give or take; his unit reached average around month three, then became the force of choice in northern Iraq. The transferable mechanism is explicit: “Great leaders plan for contingencies,” rehearse before adrenaline impairs communication, and counter a team’s prevailing psychology rather than amplify it.
ID.me emerged only after the original TroopSwap marketplace failed to secure distribution and customers revealed that verification—not the app—was valuable. Hall’s formulation is “Paradoxically, to get big, you have to focus small,” but USAA and Military.com quoted two-to-three-year pilot cycles and the marketplace could not achieve liquidity. Microsoft, Under Armour, and other marketers instead wanted identity embedded in their own channels, producing the pivot: “It’s not an app, it’s a utility.”
The business model deliberately charges only when a legitimate user is successfully authenticated, aligning revenue with access rather than attempts. Hall had watched two veterans make 50-70 unsuccessful attempts through a credit-bureau API priced around $0.10-$0.25 per call; deficient coverage generated more vendor revenue while leaving users stranded. His rule is that ID.me should suffer economically when it fails a legitimate user—and that anyone buying its software should become more successful for doing so.
The five-year expansion case combines universal login with benefits discovery, turning verified identity into a distribution layer for public and private services. Hall wants users to open Coinbase, Chase, Social Security, or IRS apps without creating separate credentials, then receive relevant help during retirement, disasters, taxes, or home purchases. The cautionary example is $750 million of approved stop-loss combat pay: roughly $250 million expired unclaimed because government could not reach eligible service members.
Hall treats culture and executive cognition as hard scaling constraints rather than soft organizational topics. ID.me screens for shared values, emotional self-regulation, optimism, skills, habits, and conceptual capacity; executives must reach at least “stratum five,” meaning they can reduce a complex system to the few relationships that matter. His most common talent error was promoting people faster than their capacity developed, creating insecurity and blame—an organizational version of scaling before product-market fit.

Deep dive

1. Service became Hall’s inherited frame for risk and purpose

Hall’s grandfather landed at Anzio at 17 as a Browning Automatic Rifleman and received a Bronze Star with valor after crawling in front of three German machine-gun nests to splice a line that enabled artillery support. His father served 30 years, graduated from West Point, and became a brigade commander; that lineage taught Hall that American freedom is rare and sustained by people willing to sacrifice for it.
Hall did not initially want a military career. He entered ROTC at Vanderbilt in 2000 largely to pay for school, but 9/11 made his coming service personal: his maternal grandfather from Queens had shown him the Twin Towers throughout childhood. “If you’re gonna go to war, you might as well play with the varsity,” he decided.
After commissioning in 2004, Hall completed airborne and Ranger training, led a rifle platoon, and became scout-sniper platoon leader—the senior platoon-leader role in an infantry battalion. Deployed to Iraq in 2006-2007, he operated across Mosul, Baghdad, Karbala, Fallujah’s outskirts, and Lake Tharthar.
Three-letter agencies abruptly replaced the unit’s conventional reconnaissance mission with kill-capture raids against senior Al-Qaeda leaders, particularly vehicle-bomb networks. Hall was 23 and responsible for 32 scouts and snipers: “It was quite a lot of responsibility.”

2. Combat converted preparation from doctrine into survival

Hall’s starting principle was that “leadership starts with caring.” Having met his soldiers’ spouses, parents, and children, he understood that one bad decision or suicide belt could erase a quarter of the platoon. On arriving in Mosul, he prayed over Isaiah’s promise that “no weapon formed against me shall prosper,” claiming it for his men.
During his first firefight in northeast Mosul, Hall responded flippantly to a warning that the target was exceptionally dangerous, then AK rounds struck the cinder block just over his head. He positioned snipers, organized the assault, and ran through an alley under fire; only five or six minutes later did muscle memory give way to the realization that “this is a two-way range.”
Days later, Hall spotted wiring leading beneath altered asphalt but could not warn the following Stryker before a pipe bomb detonated. The blast breached the 20-ton vehicle and sent shrapnel into the driver’s compartment, yet body armor and a display surrounding the driver’s head absorbed it. Hall’s thought after that opening week: “I’ve got 51 more in front of me.”

3. Feedback loops took the unit from below average to above 90%

Combat psychology moved in an arc. Casualties were highest early, when troops lacked context, and late, when they began “playing not to lose”; around months six or seven came “god phase,” when repeated survival encouraged extreme risk. Hall’s leadership rule became to move inversely to context—inject aggression into excessive caution and restraint into recklessness.
The mission itself was novel: the platoon had not trained to combine signals intelligence with SWAT-like assaults. After every operation it asked what worked, what should be retained, and what failed. That scientific-method loop gradually produced specialized roles rather than one undifferentiated way of operating.
Hall recalls the average kill-capture success rate at about 44%, give or take. His platoon sat in the 20th percentile for its first three months, reached average around month three, then captured the head of Mosul’s Mujahideen Shura Council and Al-Qaeda’s spiritual leader for northern Iraq. It became northern Iraq’s kill-capture force of choice.
By deployment’s end, success exceeded 90% and, by some measures, led the theater in efficiency. Hall studied each cell’s “pattern of life”—where a target might eat lunch on Tuesday and where complacency might create an opening—then rehearsed contingencies because “great leaders plan for contingencies.”

4. Credibility rests on crucible, competence, and care

Ranger School supplied Hall’s crucible. Poison ivy spread across his body; steroids weakened his immune system; bronchitis made carrying 75-80 pounds through the mountains nearly impossible. He entered at 195 pounds and graduated at 162, eventually reaching a state where he did not care whether his parachute opened—but also realizing, “I would die before I quit.”
That Ranger tab served as a social signal of grit, but Hall says endurance alone does not confer the right to lead. He told his platoon he might not be the fastest, best shooter, or best at combatives, “but I’ll be damned if I’m not top five in everything.” A scaling founder likewise needs care, stamina, and relentless learning as required skills continually change.
Hall’s exemplar is Phil Schneider, whose Stryker crossed a 500-pound buried bomb in Dora, “Al-Qaeda’s Alamo” in Baghdad. Severely concussed, Schneider kept treating and evacuating his soldiers until he vomited and began losing consciousness; grabbing Hall’s lapels, he said, “Blake, my guys. Take care of my guys.”
Service, for Hall, means defending people’s right to live free while recognizing its cost. He remembers an Iraqi widow who identified Al-Qaeda members who murdered her husband and stole his Mercedes, only for the legal system to fail her. That gives politicians “a sacred responsibility” to employ the military judiciously and toward a coherent end.

5. Losing faith in strategy redirected Hall’s appetite for purpose

Hall’s final mission targeted a network responsible, he believes, for at least 17 Baghdad vehicle bombs and thousands of deaths. Over the next 10 days, he says the platoon captured nine of its top ten leaders and the hierarchy beneath them—faster than intelligence personnel had ever seen such a network dismantled.
All 32 of Hall’s soldiers returned home. His closing message conceded that Iraq’s larger story probably would not end well, but the platoon had stopped a network that would have killed thousands more: “You’ll never see the faces of the people that you saved from the car bombs that didn’t go off.”
Hall left because he no longer believed America’s strategy was making the world better or had a sensible end. He would not keep taking or risking life without a strategy and a specific purpose. His battalion commander forced him to apply to Harvard Business School by withholding a recommendation for anywhere else, abruptly moving him from combat to Cambridge at 26.
The transition felt like time travel. Fifteen months of kill-capture alerts had “infused lightning into my bones” and made him feel like an addict to intensity, while confronting mortality had stripped material success of meaning. He redefined risk as joining an organization whose mission he did not believe in and “wasting my life.”

6. TroopSwap’s failure exposed identity as the valuable primitive

Hall admits he began with “no idea what I was doing.” On his first call to a telecom company, the company said “$17 million,” but the number left him unmoved; he instead turned a second-year academic project into a company meant to address military identity theft, which was occurring at nearly twice the general-population rate.
His brother insisted on investing $20,000 despite Hall begging him not to. David Tisch and a classmate who invested $80,000 helped seed what became roughly a $1 million convertible note; several investors said TroopSwap’s model probably would fail but backed Hall personally—sometimes while identifying the check as a child’s college fund.
TroopSwap proposed a trusted military marketplace, based on Hall’s observation that Facebook began with Ivy League students, Uber with affluent riders and black-car drivers, and Pinterest with Midwestern mothers. “Paradoxically, to get big, you have to focus small.” Yet USAA and Military.com considered two to three years fast for a pilot, starving the marketplace of distribution.
In 2011, Hall told first board member Kelly Perdew that he did not know whether the company would work. Perdew told him never to say that again, urged him to keep his chin up, and helped him through the low point.
Meanwhile, three-fourths of the team’s work involved verifying military status. Veterans were exposing Social Security numbers to strangers for benefits as small as an Outback blooming onion, while Microsoft distributed e-learning vouchers in person because it could not verify veterans online. Marketers wanted that capability inside their channels: “It’s not an app, it’s a utility.”

7. Company building has stage gates that capital cannot repeal

Hall’s summary of Steve Blank’s Four Steps to the Epiphany begins with a hypothesis about a meaningful problem and proposed solution. The second step is not enthusiasm or user praise but payment: until someone pays to solve the problem, a founder has not earned the right to assume there is a scalable company.
Step three compares customer revenue and duration against acquisition cost. Hall contrasts LivingSocial, which raised $1 billion in the Washington market and went to zero, with Groupon, which pivoted from daily deals toward e-commerce, fell from roughly $20 billion to $5 billion, but survived. Upside-down unit economics simply “set money on fire.”
Step four is the organizational system—culture, retention, focus, and alignment—that captures a disproportionate market share. Raising abundant capital before establishing the ideal customer profile and product-market fit merely ratchets up expectations, encouraging teams to lift reported revenue even when the underlying economics remain toxic.

8. Federal fraud reveals identity’s economic and national-security stakes

Hall cites an April Government Accountability Office report estimating $233 billion-$521 billion of annual fraud in federal spending, excluding federal money administered by states or tribes. He compares that with $65.9 billion of aid to Ukraine, an $824 billion defense budget, and $13 billion per aircraft carrier: the loss approaches 2% of GDP.
When ID.me entered Arizona in October 2020, the state had 570,400 new weekly unemployment claims despite having only seven million residents, including children. Bots completed claims in under 60 seconds using a name, date of birth, and Social Security number; one week after introduction, claims fell to 6,700.
Arizona then reran approximately 265,000 paid claimants through verification. Only 92,000 even tried; ID.me authenticated roughly 86,000-87,000, with other channels serving the remainder. The company subsequently faced four denial-of-service attacks from West Africa, 2.2 billion global DNS queries, and hundreds of millions of queries from Yandex IP addresses.
Seven states have credited ID.me with stopping $270 billion in fraud, Hall says, and 27 state unemployment agencies adopted it over roughly 15-18 months. Each stolen identity represented a real person who could later be denied assistance, while proceeds often flowed overseas—making the problem both a fiscal leak and a national-security issue.

9. A defensive network can see what isolated agencies cannot

Hall imports General Stanley McChrystal’s Iraq lesson: “It takes a network to fight a network.” A decentralized, adaptive attacker defeats a centralized bureaucracy unless leaders push decisions and real-time intelligence to captains, lieutenants, and sergeants at the edge.
As a shared service, ID.me could connect signals invisible within any one agency. It found 50,000 identities used to claim unemployment that later applied for aid as owners of transportation businesses—claims that could not contextually coexist. Without shared authentication, attackers simply move to the weakest agency.
Hall compares standardized identity infrastructure with Netflix replacing Blockbuster or cloud services replacing isolated data centers: consistent security and cross-customer feedback loops improve together. He also says ID.me helped NBC News report that APT41, described by Hall as China’s economic-warfare arm, targeted Americans’ unemployment benefits.
The threat is accelerating. In 2022, ID.me saw roughly 180,000 wallet logins targeted for account takeover during a 90-day window; the comparable 2023 period reached 1.3 million. Hall connects that rise to increasingly convincing LLM-, face-, and voice-enabled scams.

10. Identity confidence compounds through time and authoritative evidence

Hall treats time as a core identity signal. A phone number associated with the same person since college, still possessed and not recently ported, is difficult for an attacker to fake over the long term. Roughly 85%-90% of users may have that durable relationship, though returning expatriates and lower-income prepaid users often do not.
Authentication then proves control of a credential, increasingly through passkeys—Hall’s shorthand is Touch ID or Face ID—rather than passwords. Shared login infrastructure lets one research-and-development improvement become immediately available to thousands of organizations instead of forcing each company to master the same security transition independently.
Legal identity is only the base layer. Hall says one in five US doctors uses ID.me to prescribe controlled substances, requiring checks against DEA numbers, National Provider Identifiers, and state medical licenses. Military claims connect to DoD, the VA, and National Archives records; education claims can return, with permission, to a university registrar.
ID.me calls these authoritative relationships the “trust graph.” Hall’s analogy is a mutual friend introducing two strangers: the intermediary converts suspicion into a trusted interaction. It functions “kind of like Visa between banks and merchants,” but carries many credential types and excludes impostors from benefits they did not earn.

11. “Visa in 3D” makes the physical wallet portable and programmable

Hall points to Sweden’s BankID, used by the average Swede five times daily across healthcare, government, banking, and commerce. His desired digital twin begins with the physical wallet’s root of trust—a driver’s license, passport, or other government photo ID—then lets users control and reuse credentials without proving the same fact twice.
Government matters because it issues foundational credentials and operates at the apex of standards, incentives, and risk. Hall challenged federal rules that tied remote verification to credit-file presence, creating a video exception for homeless people and those living overseas. More than ten million Americans have since used that pathway.
One early beneficiary was an 81-year-old veteran in Tokyo whose wife had Alzheimer’s and who could not travel to a VA facility. He cried after regaining online access. With 65 million portable identities issued, Hall argues that the same proof could now unlock a bank, fintech, or patient portal that otherwise excluded him.
The wallet can extend beyond ID cards. ID.me could query Netflix, Hulu, or other services to bind subscriptions automatically to a new device; at MGM and Wynn properties, millions of guests already check in digitally and save an average of 15 minutes. Hall estimates some deployments collectively return hundreds of years of waiting time annually.

12. Disney showed that authentication should change with the channel

Disney’s model used biometrics and its MagicBand at the park, a familiar password on the web, and Touch ID or Face ID in a native mobile app. Hall’s inference was that no single authentication gesture is universally best: each channel should open the wallet through the safest, easiest signal naturally available there.
A call center might therefore combine voice, device, and phone-number tenure. Once identity is established, tickets, access passes, and other entitlements can attach automatically. ID.me’s opportunity is to democratize Disney-grade research and development for smaller organizations that cannot fund comparable identity systems themselves.
Hall also studied Amazon’s advantage in behavioral data and feedback loops. If users can carry tastes, preferences, and verified claims with them—and consent to selected access—new developers can start with richer context, narrowing an incumbent’s historical data advantage without requiring users to surrender the entire identity graph.

13. Financial risk requires recourse that local device wallets cannot provide

Asked about CLEAR, Apple, Google, and similar players, Hall divides the market by risk. Device wallets work well for transit cards, passports, licenses, TSA checkpoints, and other in-person interactions because the attack surface is local: foreign attackers cannot appear en masse at a Dallas airport, and physical disguise is observable.
Online finance exposes every system globally. Hall argues that banks can monitor transaction patterns because society values fraud detection and consumer protection; when a card suddenly “starts to fly around,” the issuer can pause it, contact the owner, and provide recourse for unauthorized activity.
His counterexample is a 65-year-old woman whose 401(k) is emptied by an LLM-enabled scammer probably operating out of Lagos, Nigeria. A centralized provider can preserve an audit trail, explain what happened, learn from it, and offer recourse; a system designed never to observe credential use cannot. “There is no recourse for victims.”
Hall therefore rejects a monolithic privacy-versus-centralization debate. Client-side identity can fit localized or lower-risk uses, including adult websites or kids and social media, while global financial risk needs an accountable bank, network, or identity provider with visibility. “What’s good changes based on that risk.”

14. Incumbent resistance clarifies which gatekeeping belongs elsewhere

Fraud disruption brought personal threats: Russian callers named Hall’s home and his children’s school, and former Marines guarded the house one Christmas. On the corporate side, Hall alleges that data brokers responded in 2022 with lobbying, misinformation, and media pressure once they lacked an adequate product or business-model answer.
Hall still assigns credit bureaus an important role in estimating creditworthiness and repayment probability, but rejects them as identity gatekeepers. Their records work best for affluent, banked people and exclude many unbanked or underbanked users—turning financial history into a prerequisite for proving identity and accessing services.
His first-principles alternative follows identity from “cradle to grave”: a hospital records birth, government issues a birth certificate, and Social Security supplies a number; financial history often begins only around ages 17-19. The transition will be gradual, like payment cards displacing rather than instantly eliminating cash.
Hall’s running joke was that Treasury sales cycles should be measured not in months but in “the number of children I father.” Directors repeatedly proposed quicker markets, yet this was a founder-level constraint he would not relax: “Your identity needs to come from the government.”

15. Scale depends on aligned economics, shared values, and cognitive range

Hall’s commercial rule is to charge only after creating demonstrable value. Credit-bureau APIs billed roughly $0.10-$0.25 per query, and he watched two veterans retry 50-70 times without success; poor coverage increased vendor revenue. ID.me instead charges government customers when legitimate users authenticate successfully, making failed access the company’s economic problem.
Culture begins with shared classic-liberal commitments: equal treatment, freedom of expression, merit, and personal responsibility. Hall welcomes varied backgrounds but not incompatible operating values—“E pluribus unum, out of many one.” The behavioral screen includes “don’t be a jerk,” emotional self-regulation, grit, optimism, and willingness to hold a contrarian view from first principles.
His inherited family rules reinforce the system: never think yourself better than those you lead; choose a unit with the worst reputation so leadership’s effect becomes visible; and never let your name attach to S-4 logistics. The last came from seeing headquarters warm and fully equipped while frontline soldiers froze—generalized as “leaders eat last.”
Executive selection adds “stratum” capacity. Stratum four begins the shift from linear to conceptual thought; five can organize complexity into a simple synthesis; six and seven model interactions among concepts across long horizons. ID.me requires executives to reach at least five. Hall’s recurring mistake was over-promoting strong performers until insecurity produced blame: capability develops slowly, and effort cannot substitute for it.

Deepseek, Stargate and AI’s $600 billion question with Sequoia Capital’s David Cahn Your Guide to the DeepSeek Freakout: an Emergency Pod