What "Verified" Actually Means on Each Platform, and What It Does Not

Seven platforms, seven different claims

"Verified" is one word that seven companies use to mean seven different things. On one platform it means somebody filmed the inside of a shop. On another it means a certificate authority checked a trademark registration. On a third it means a card payment cleared. The badges look alike. The claims underneath are not.

We run this stack on our own business, a hockey apparel store called Bench Clearers. BIMI and a VMC in Gmail, and Meta Verified on a 52,000 follower Instagram account. Here is what each process actually checks.

Google Business Profile: free, and it is about the address

The claim: a business operates at or serves from that location, and the account holder is authorized to manage the listing. Google states in its own help pages that verification is not an endorsement. It says nothing about licensing, insurance or quality.

Cost is zero. There is no paid tier. Anyone charging a fee is charging for labor, not access.

Video verification is now the default for most categories. Record it live in the Google Maps app on a phone, signed in to the managing account. Desktop uploads and pre-recorded files are rejected. Minimum 30 seconds, one unbroken take. Show the exterior with signage and something that fixes the address, then the interior, then proof you control the place. Review takes up to five business days.

Google can also suspend a verified profile later, most often for keyword stuffing in the business name, or for editing name, address, category and phone in one rapid burst.

Gmail and the VMC: the only one backed by cryptography

BIMI, short for Brand Indicators for Message Identification, puts your logo beside your name in the Gmail inbox. With a Verified Mark Certificate behind it, Gmail adds a checkmark. A certificate authority issues that VMC after checking you own a registered trademark of the exact logo.

Three facts get asserted: you control the domain, the message passed authentication under a DMARC policy at enforcement, and the logo is a mark you own. Nothing is asserted about content, and the check is evaluated per message, so a message that fails authentication shows no logo even though your account has not changed.

The record is a TXT entry at default._bimi.yourdomain.com reading v=BIMI1; l=https://.../logo.svg; a=https://.../vmc.pem. DMARC, the rule telling receiving servers what to do with mail that fails authentication, must be p=quarantine or p=reject with pct=100 on the organizational domain. A p=none policy does not qualify and neither does a partial percentage. The logo must be SVG Tiny PS, square, solid background, at least 96x96 in absolute pixels and ideally under 32 KB.

The certificate is the cost, roughly $750 to $1,500 a year depending on issuer, reseller and term. Ours runs about $780 through a GlobalSign reseller. Three authorities currently issue mark certificates for BIMI: DigiCert, GlobalSign and SSL.com. That list has changed before, so check the BIMI Group issuer page rather than a blog post, this one included.

The trap is the logo. It must match the registered mark exactly and byte-match the file the certificate was issued against. A tidied-up export or a recolor fails. Gmail does accept a Common Mark Certificate for untrademarked logos, but that route does not produce the checkmark.

Meta: two different things, one word

Meta business verification and Meta Verified are separate products with one word between them.

Business verification lives in Business Manager and is free. You upload official documents so Meta can match your legal name, address and phone against public records. Review runs up to 14 business days. It raises WhatsApp Business API limits and unlocks some ad and app permissions. It produces no badge.

Meta Verified is the paid subscription that produces the badge. Individual plans start at $14.99 a month, or $11.99 bought on the web instead of in-app. Business tiers run $14.99, $49.99, $149.99 and $499.99 a month, priced per asset. One Page, one Instagram account or one WhatsApp number each, so a brand with both a Page and an Instagram account pays twice. Eligibility means 18 or over, a government ID whose name and photo match the profile, prior posting history and two-factor authentication on. It asserts that Meta matched an ID to a profile. Stop paying and the badge goes.

In April 2026 the Spanish investigative outlet Maldita.es documented 170 blue-check profiles running roughly 67,000 fraudulent ads across Facebook and Instagram in a single quarter, many of them hijacked accounts. Verified and safe are not the same word.

We never handle client ID documents or passwords. That step happens in the owner's own session on Meta's own surface.

X: the blue check is a receipt

A blue check on X means an active X Premium subscription. Premium is $8 a month on the web and includes the check. Basic at $3 does not. Premium+ is $40. App store prices are higher because of platform fees. X states in its own help pages that a checkmark is not an endorsement of the account or its content.

The gold check is Premium Business, formerly Verified Organizations, restructured in late 2025 into tiers from around $200 a month to about $1,000 for full access, with enterprise pricing above that. Affiliated employee accounts add roughly $50 a month each. This tier does involve a manual review.

Changing your profile photo, display name or handle drops the check until X re-reviews, so plan a rebrand around that gap. And $200 a month is hard to justify on trust alone. Buy it for the affiliate structure or the impersonation handling, not for the color.

LinkedIn: three badges, three narrow claims

LinkedIn verification is free and it is not one badge. Identity runs through CLEAR in the US, Canada and Mexico, Persona in most other countries and DigiLocker in India. Workplace confirms an employer association, usually with a code sent to a company email address, or through Microsoft Entra Verified ID or a company-provided Learning or Recruiter license. Education confirms an institution association.

Each badge asserts one fact. A workplace badge means a person controls an email address at a domain. It does not confirm the job title on the profile, which matters when you are vetting a vendor. It costs nothing and takes minutes, so there is no case for skipping it.

TikTok: you cannot buy it and you cannot apply

TikTok verification is free, and there is no application form. TikTok grants it. The stated criteria are authentic, unique, active and notable, where notable means press coverage or genuine public recognition. Follower count alone qualifies nobody. One account per person or business. Parody, fan and meme accounts are excluded. Turnaround runs from days to weeks.

This one is fully discretionary. If someone offers to sell you a TikTok checkmark, they are selling either nothing or a hijacked account. We screen for it, and if a business has no press coverage and no real public profile we say so and decline rather than take the fee.

Apple Business Connect: brand approval, not business approval

Apple Branded Mail puts your logo beside your name in Apple Mail, and it is free. Apple has folded Business Connect into its wider Apple Business offering.

Requirements: DMARC at quarantine or reject, DKIM on every message with SPF alone not supported, a square logo as JPG, PNG or HEIF between 1024 and 4864 pixels, a TXT record on the sending domain, and Apple approving both the company and the logo. Review runs up to seven business days. No registered trademark is needed, which makes it the cheapest branded-inbox win on this list.

The claim: Apple checked the company and approved that logo for that sending domain. Nothing about the mail itself.

None of these is a quality endorsement

Read the list again and notice what is missing. Not one platform checks whether a business ships on time, honors refunds, holds a license or treats customers well. Google says verification is not an endorsement. X says the same about checkmarks. Meta's badge means an ID matched a profile. Scammers operate from verified accounts routinely, either by paying the subscription like everyone else or by taking over an account that already carried the badge. Treat any badge as a weak identity signal with a known false positive rate.

What verification is genuinely good for

Four honest uses, and one thing it will not do.

It will not fix a conversion rate, rank a page or repair a reputation. If one of those is the actual problem, verification is a distraction with a monthly fee attached.

• Impersonation defense. A verified account generally gets a faster, more human support path when someone clones you.
• Access rather than trust. Meta business verification raises WhatsApp API limits. Google verification is what puts a profile in Maps and the local pack at all. The gate is the value.
• Inbox rendering. BIMI and Branded Mail are the only two here that change what a customer sees before they open anything, and the DMARC enforcement underneath them is worth doing on its own.
• Removing a half second of doubt at the point of decision. Real, small, and easy to overvalue.

Working with us

We are Verified Everywhere, part of JWC Apps in San Diego. We ran this entire stack on our own store before offering it to anyone, so we know which steps fail and why. We work only through official channels, and we never take passwords, government ID documents or card numbers. If we do not believe a verification will be granted, we say so and decline the work rather than take the fee. Platforms make the final call every time.