* The account creator provides a photo id and an EIN
* You verify that the id is valid (visual/ML inspection?)
* Extract the expiration date and make sure it's unexpired (OpenCV/Tesseract)
* Extract the name from the id image (OpenCV/Tesseract)
* Check to see if that id matches the registered agent for that EIN.
This assumes that there is a unified API for EIN/TIN lookup in the US and I don't know if there is.