Didit vs ID R&D: IDLive Face liveness or a hosted KYC API

Published by Didit; based on the linked public documentation. Competitor sources checked 25 October 2026; Didit facts checked 27 October 2026. · Not legal advice

Evidence you can inspect before switching

Liveness certification: Didit passive liveness is iBeta Level 1 and Level 2 certified for presentation attack detection (ISO/IEC 30107-3).

A published customer outcome: in Didit’s AhoraCrypto customer story, the crypto on/off-ramp reports more than 20% savings per user against its previous provider and over 50% less time on manual user reviews. The previous provider is unnamed; these are that customer’s reported results.

Budget the checks you will actually run

The core KYC bundle is $0.33: ID verification $0.15 + passive liveness $0.10 + face match $0.05 + device and IP analysis $0.03. The passive-liveness column prices this module at $0.10 per check in a workflow; the core KYC column prices the complete $0.33 bundle.

Illustrative USD list-rate budgets. Core KYC assumes successful checks. Taxes, credits, prepaid discounts and other modules are excluded. Database checks and national digital IDs are outside the $0.33 core KYC bundle. Vendor prices retain their stated currency, billing unit and plan scope.

Integration scope: country database checks use the documented workflow or standalone API integration and require each service’s input fields. Global identity enrichment is standalone API only, outside the workflow builder. Database service scope.

Compare the scope your team needs

Mitek acquired ID R&D in 2021. It now markets IDLive Face alongside MiVIP, as shown on its current product page (checked 25 October 2026). The choice here is hosted KYC with Didit versus integrating the IDLive Face liveness component; it is not a comparison with the whole Mitek catalogue. (public source, checked 25 October 2026).

National digital IDs are an alternative verification route; a signed scheme result is not a selfie or face-match result. Database and eID checks have separate prices from the $0.33 core KYC bundle. Device/IP analysis here is part of a verification session.

Test the attacks your flow needs to resist

A presentation attack puts a spoof in front of a camera; an injection attack feeds substituted media into the capture path. Didit’s liveness documentation describes anti-spoofing checks. Validate both attack paths in your own capture flow and inspect the returned warnings before setting review rules.

A liveness result your reviewer can act on

Didit’s liveness report returns the method, a 0–100 score, the reference selfie, video for active methods, coded warnings and cross-session face matches. The same report appears in the session decision API and status-update webhook. Your analyst can inspect those signals in the console instead of treating the liveness result as an isolated pass or fail.

Watch: Liveness, Face Match & Face Search (Didit Academy)

1. Capture and check. Document verification, liveness and face match create evidence on the same session.
2. Check for a returning face. Automatic face search is enabled by default on the liveness step and checks eligible faces from the application’s history and lists. It can be switched off per workflow.
3. Apply the risk action. A definitive face-blocklist match declines the verification; a possible blocklist match goes to review. Duplicate-face warnings follow the workflow’s configured action.

These are documented product behaviors, not promised fraud-detection rates. See automatic face search and liveness warning actions. The screenshots below show the liveness score, matched faces and list entries that make those decisions reviewable.

Watch: Duplicate Account Detection (Didit Academy)

Public evidence behind the recommendation

The February 2026 report on Spain’s financial sandbox records the project that tested Didit’s solution. Fifty users enrolled in the solution, and the described fraud tests used cryptographic NFC reading with facial biometrics and active liveness. The report describes printed or substituted-photo ID attacks being blocked by the NFC-based flow. Section 4.2 records SEPBLAC’s participation and positive assessment of the reinforced remote-identification measures.

The report’s findings apply to the described sandbox and laboratory exercises.

Didit’s security certification documentation separately lists SOC 2 Type 1 and Type 2 and ISO/IEC 27001.

Didit serves 3,000+ companies. Document coverage spans 220+ countries and territories and 14,000+ document types. Review public customer stories and the document-verification scope.

Inspect the product evidence

A Didit session flagged for review: a low liveness score warning, with the face match similarity, the liveness score, the estimated age and the device next to it.

One liveness result in the Didit console: the selfie, the score, the estimated age, blocklisted faces and earlier sessions with the same face.

The Didit blocklist: a document, a face, a phone number and an email, each linked to the session it came from.

Put onboarding and monitoring in the same budget

For a fintech or marketplace onboarding 10,000 people in a month and checking 100,000 transactions, the selected Didit usage is straightforward to calculate.

Illustrative USD list-rate budget for successful checks and the stated transaction count. Taxes, plan fees, credits, discounts, ongoing AML, database/eID services, KYB, wallet checks, Investigator and other modules are excluded. Each added module has its own price; a vendor comparison requires a quote for this same scope. Didit module prices.

Switch with an evidence-based rollout

Keep the existing journey available while you validate the replacement. Use this proposed acceptance checklist to agree the rollout with your engineering and compliance teams.

Start with a small, predefined share of eligible traffic. Agree completion, manual-review and cost-per-approved-user thresholds before the pilot, comparing the same checks and population. Increase traffic only when those thresholds and the import reconciliation pass; route traffic back to the existing journey if they fail. See the import API, webhooks and workflow documentation.

Start with one flow; keep the evidence as you grow

Didit connects onboarding to screening, monitoring and case review on one account and record. Investigator reads verifications, alerts and cases and writes a cited report with a recommendation for $0.20 per reviewed item. Copilot helps build workflows, and the hosted MCP server lets your own agents connect through OAuth 2.1.

Investigator requires Growth or higher and organization enablement; it does not run in sandbox. Sanctions matches go to a person, and it never files a regulatory report. Its per-item charge is separate from plan fees.