I'm not too worried about selfies with my license. I can block out anything I don't want seen, but I don't think there's anything private on there. Just my address, which I'm giving them anyhow. I'm not proud of being 5'10", but I don't care if my juice supplier knows I never made 6'. My ssn isn't on there. I think it's safe. (But understand why people would be reluctant to do it.)
That's where we've come down. We don't like to have to take the picture of the DL, but what we've heard about bluecheck is not great either and I personally don't see where they add value. So we have it emailed in, and then we store it cross referenced for all future orders, and then we audit the cross reference list once every few months to make sure it's all up to date and we don't have any customers in the wrong bins.
That way we only have to ask for it once, it's only transmitted once, and we aren't wrestling with any custom integrated solution and its security issues or with a third party that we're trusting will handle your data carefully.
We have had a few people refuse to send in a DL, and we just refund them. Basically, if you're going to refuse to send in a picture of the ID and you're not buying to someone who personally knows that you're over 18, you can't buy from anyone in the states. Anyone who lets you won't be in business very long.
Third party verification of ID is also not required as far as I know, I asked about this specifically. That would be required under the PACT act, and the while the FDA considers ecigs, eliquid, mods, etc. tobacco products, their deeming decision does not change the definitions in the PACT act, it was particular legislation with particular language and the decision by the FDA does not carry the authority to change what that language means. That would take congress.
Pray that they don't because you'll watch almost every online vendor go under.
That's why we asked specifically early on, if they forced PACT compliance we were just going to shut the doors; it's virtually impossible for a small business to afford compliance the way I understand the requirements. The way we understand it, we can stay compliant and create minimal headache for our legitimate customers.
Oh, as an aside, we just shipped our first adult signature required package today. Shipping through the USPS cost 15$ for a medium sized order (5 bottles I think). We don't charge shipping, but it was to a regular customer we've had for a while, but who didn't send us a pic of the license (just didn't respond), so we went this route on this one until we can get a hold of them.