itsme API integration: a business guide for 2026
How a business accepts itsme: what users see, the data the itsme API returns, eIDAS High and Belgian AML rules, direct contract or certified partner, the Dutch launch, limits, and a document fallback.
By Alberto RosasCo-founder & CEO, DiditUpdated 
In short
The itsme API is an OpenID Connect sign-in run by Belgian Mobile ID: the user approves in the itsme app, and your business receives the identity attributes it asked for, such as name, date of birth and the Belgian national register number.[4] itsme is notified under eIDAS within the Belgian eID Scheme FAS at level High, and passed 8 million Belgian users at the end of 2025. At the federal login service, a sign-in with the itsme code counts as high and one with biometrics as substantial.[1][2][5]
- Connect directly or through a certified partner; prices are not published.[15]
- Belgian AML law allows eIDAS electronic identification for customer due diligence.[13]
- Plan a document fallback for people without itsme or a smartphone.
itsme is a Belgian electronic ID (eID) app that people use to log in to banks, tax and health portals and to sign documents; itsme says over 80% of Belgian adults use it.[2][3][8] For a business, the itsme API is the way to accept that app as proof of identity in a sign-up or a login, with attributes returned over OpenID Connect instead of a photo of an ID card.
itsme at a glance
itsme is private. Its founding members are four Belgian banks and three telecom operators, according to iDIN's acquisition notice, and the federal state accredits it for government logins.[10][3]
itsme
Belgium's mobile electronic identification app
How many people use itsme
itsme reached more than 8 million Belgian users at the end of 2025. They performed 594 million itsme actions in 2025, up 25% on 2024, or about 1.6 million a day on itsme's own average.[2]
Operator figures, according to itsme.[2][8][3]
According to itsme, it carried almost 68% of all logins on the Federal Authentication Service (FAS) in 2023, and counts over 2,000 government platforms and 1,000 private partners.[3]
- 2017LaunchBelgian Mobile ID starts building itsme.
- 18 December 2019NotifiedThe Belgian eID Scheme FAS, with itsme, joins the EU list at level High.
- 17 December 2025iDIN soldPer iDIN's notice, Belgian Mobile ID acquires the Dutch bank ID service.
- 1 June 2026Netherlandsitsme launches for Dutch users.
- 10 July 2027AMLR appliesEU rules name eID as a verification means.
itsme from launch to the EU AML Regulation.[2][1][10][8][17]
What the user sees
A redirect to itsme, then an approval in the app.[4]
Verify your identity
Use the digital ID you already have.
Continue with itsme
Use an ID document instead
1The user taps the itsme button.[4]
Scan the QR code
Open the itsme app and scan.
2On a computer, the user scans the QR code. On a phone, the app opens app to app, or the user enters a phone number instead.[4]
Share your data
- Full nameShared
- Date of birthShared
- National numberShared
- PhotoNot shared
3The app shows which organisation asks for which data.[4]
Confirm
Enter your itsme code or use your fingerprint or face.
4In the itsme app, not on your page, the user approves with the itsme code, a fingerprint or Face ID.[4]
Identity confirmed
You can continue your sign-up.
Continue
5Back in the service, which receives the data.[4]
According to itsme, since the end of 2025 the app shows an extra warning screen when an itsme action arrives during a phone call.[2]
An eID sign-in approved in the user's phone app, start to finish.
What a business receives from the itsme API
The itsme API is standard OpenID Connect: your server exchanges an authorization code for tokens and reads the claims for the scopes you requested.[4]
QR on desktop, app to app on mobile
Simplified OpenID Connect flow, as described in itsme's data-sharing documentation.[4]
| Scope | Claims returned | Typical use |
|---|---|---|
| profile | Family name, given name, full name, gender, locale, picture, date of birth | Identity and age |
| Email address | Contact | |
| address | Postal address | Residence checks |
| phone | Phone number | Contact |
| eid, idDocument | Claims listed include the national register number (BENationalNumber), eID card serial (BEeidSn), a photo (physical_person_photo) and nationality (claim_citizenship) | KYC files, matching to Belgian records |
| Age-over claims | age_gte_13, age_gte_16, age_gte_18, age_gte_21, age_gte_30 | Age checks without a birth date |
Scopes and claims from itsme's data-sharing documentation.[4]
Unlike most Nordic eIDs, itsme can return an address and a photo; age-over claims answer yes or no.[4] Government applications built on FAS need an itsme account linked to a Belgian eID and national register number.[6]
Note
Ask only for the scopes you need. A gaming site checking age has no use for a national register number.
Level of assurance and legal standing
itsme is on the European Commission's list of notified schemes as "Belgian eID Scheme FAS / itsme", eID means "itsme mobile App", level of assurance High, notified on 18 December 2019 (OJEU 2019/C 425/06).[1] The federal login service grades the level per sign-in: an accredited key such as itsme counts as "high with PIN or substantial with biometrics".[5]
| How the user approves | Level at FAS | Source |
|---|---|---|
| itsme code (PIN) | High | FAS privacy notice[5] |
| Fingerprint or face on the device | Substantial | FAS privacy notice[5] |
| Account opened with a foreign passport | Not confirmed | This guide could not confirm it in the sources reviewed, 5 October 2026 |
The Law of 18 July 2017 on electronic identification underpins the federal login service. The Royal Decree of 22 October 2017 governs accreditation of private keys for public applications, and itsme's FAS accreditation was renewed.[11][12][3] For AML, Article 27 of the Law of 18 September 2017 on preventing money laundering and terrorist financing governs identity verification.[13]
In the reading of the National Bank of Belgium (NBB), Article 27 §4 requires identification data to be verified "en recourant à des moyens de vérification particulièrement fiables" (using particularly reliable means of verification), and the NBB says the law "autorise explicitement" (explicitly allows) eIDAS electronic identification means and the Belgian eID card.[13] Its compendium adds that, in standard-risk situations, financial institutions "peuvent procéder ... à la vérification de l'identité ... en recourant à un moyen d'identification électronique" (may verify identity using an electronic identification means), with conditions each institution sets after a reliability analysis that considers the "niveau de garantie" (level of assurance).[14]
From 10 July 2027 the EU Anti-Money Laundering Regulation (AMLR) adds an EU-wide rule.
Article 22(6)(b)Regulation (EU) 2024/1624
"the use of electronic identification means which meet the requirements of Regulation (EU) No 910/2014 with regard to the assurance levels 'substantial' or 'high' and relevant qualified trust services as set out in that Regulation."
Source: EUR-Lex, Regulation (EU) 2024/1624[17]
The Anti-Money Laundering Authority (AMLA) final draft standards of 30 September 2026, not yet law, keep these two means as the default.[18] A notified High scheme such as itsme fits point (b) for Belgian-eID-linked accounts (passport route unconfirmed). That is our reading, not a regulator's. See the European Digital Identity (EUDI) Wallet guide and what eID verification is.
How to connect to the itsme API
A private business either contracts directly with Belgian Mobile ID or goes through a certified partner or broker.[15] Government sites reach itsme through FAS, run by FPS BOSA.[5] Our guide to becoming an itsme partner goes deeper into the first route.
Direct
Contract with Belgian Mobile ID
- Your own OpenID Connect client
- Price brackets by active users per project
- You run the scopes, keys and testing
Quote on request
Through a partner
Certified partner or broker
- Often one contract for several eIDs
- The partner holds the itsme connection
- Pricing set in the partner contract
Quote on request
Public sector
Federal login service
- For government applications
- Returns the national register number
- Integration through FPS BOSA
For public applications
Three ways to reach itsme.[15][5]
itsme publishes no price list as of 5 October 2026; it describes "gradually decreasing bracketed pricing" by active users per project.[15]
Use cases and sector rules
itsme reports uses in banking, tax, health, signatures, insurance, energy, parcels and ticketing.[2]
| Use case | What itsme gives you | Rule to check |
|---|---|---|
| KYC and AML onboarding | Name, date of birth, national register number, address, nationality | AML law of 18 September 2017, Art. 27; NBB reliability analysis[13][14] |
| Gambling and age checks | age_gte_18 and age_gte_21 claims[4] | Minimum age 21 for games of chance (secondary source, see below) |
| Signing | Qualified electronic signatures, up 55% in 2025[2] | eIDAS rules on qualified signatures |
| Insurance, energy, parcels | Verified identity and contact data | Sector rules vary |
For gambling, Belgium raised the minimum age to 21 for all games of chance in 2024, according to Bird & Bird. We found no rule that forces operators to use itsme in particular. See our post on age verification with itsme.
Limits and fallbacks
- A smartphone is required: every sign-in is approved in the app.[4] Activation runs through a Belgian bank, the eID card with a card reader, or a document scan with a selfie.[7][8]
- Minors under 13 cannot use it; itsme opened to minors aged 13 and up in late 2025.[2]
- Foreigners can activate itsme with a passport or ID card, but government partners require an account linked to a Belgian eID with a national register number.[6] According to e-signature.eu, passport onboarding is for people aged 18 or over.
- This guide could not confirm, as of 5 October 2026, whether passport-based accounts fall inside the notified High scheme.
The FPS Economy warns about itsme scams.[16] According to RTL, the banking federation Febelfin warned in August 2025 that these scams were rising; RTL calls it a psychological scam, not a flaw in the app.
According to VRT, the government launched the MyGov.be app as a public alternative in October 2025, citing fears of a foreign takeover of itsme and a sudden outage. Never make one eID the only door.
1Offer itsme first in Belgium
Show the itsme button next to a document option.
The user completes an itsme sign-in
Use the returned attributes
Check the level of assurance and the scopes received.
Verify with a document
NFC chip reading, liveness and face match.
2Screen and decide
AML screening, then your onboarding decision.
eID first, document route for everyone else.
In the Netherlands, iDIN runs during the transition: itsme's launch page says "phased out completely by the end of 2027", its iDIN page "In 2028, itsme will fully replace iDIN"; neither page is dated, and the sources disagree.[8][9] See the iDIN integration guide.
itsme integration checklist
- Decide whether you need a High level sign-in or whether Substantial is enough.[5]
- List the scopes your process needs and drop the rest.[4]
- Choose a direct contract or a certified partner.[15]
- Build the OpenID Connect code exchange on your server.[4]
- Handle accounts that carry no national register number.[6]
- Write down your AML reliability analysis for the eID route.[14]
- Offer a document route with chip reading and liveness.
- Tell users you will never ask them to approve an action they did not start.[16]
How Didit helps with eID verification in Belgium
itsme is on Didit's roadmap. For Belgian users today, Didit verifies people with the document route: NFC chip reading, liveness and face match, plus AML screening, in one workflow. A full KYC check costs $0.33 and AML screening $0.20.
Belgian users who hold Smart-ID can already sign in with it on Didit, next to the document route. It returns full name, date of birth and a personal identification code, at High; see our Smart-ID integration guide and the national eID docs.
Didit provides
- Document checks with NFC chip reading, liveness and face match
- AML screening against sanctions, PEP and watchlists
- The evidence of every check
Stays with you
- The risk assessment and the AML reliability analysis
- The onboarding decision
- The choice of which eIDs to accept
Bring itsme to your sign-up
Tell us where your users sign in, and start with the document route today.
Key takeaways
- itsme is notified under eIDAS within the Belgian eID Scheme FAS at level High; at FAS, biometric sign-ins count as substantial. It has more than 8 million Belgian users.
- Belgian AML law allows eIDAS eID for customer due diligence, after your own reliability analysis.
- Per itsme's docs, its claims include address, photo, national register number and age-over flags.
- Plan a document fallback for minors, visitors and people without itsme.
Frequently asked questions
How much does the itsme API cost?
itsme does not publish a price list. It uses gradually decreasing price brackets that depend on the number of active users per project, and asks businesses to request a quote.[15]
What data does itsme share with a business?
The scopes you request and the user approves. itsme's docs list name, gender, birth date, email, address, phone, national register number, eID serial, photo, nationality and age-over flags; which of these you receive depends on the scopes you request.[4]
Is itsme eIDAS High?
Yes, within limits. The European Commission lists the Belgian eID Scheme FAS, with itsme, as notified at level High since 18 December 2019. At the federal login service, a sign-in with the itsme code counts as high and one with biometrics as substantial.[1][5]
Is itsme enough for AML customer due diligence in Belgium?
It can be. In the NBB's reading of Article 27 §4, the AML law explicitly allows eIDAS electronic identification means, and in standard-risk situations institutions may verify identity with them. Each institution sets the conditions after its own reliability analysis.[13][14]
Can minors use itsme?
From age 13, since late 2025. Younger users need another route, such as a document check.[2]
Can foreigners use itsme?
Often yes: itsme is available in 32 European countries, and according to e-signature.eu passport onboarding is for people aged 18 or over. Government services, however, require an account linked to a Belgian eID.[2][6]
Does itsme work in the Netherlands?
Yes, since 1 June 2026, as the successor to iDIN. According to iDIN's notice, Belgian Mobile ID acquired iDIN on 17 December 2025.[8][10]
How long does an itsme integration take?
No standard lead time is published. The code is a standard OpenID Connect exchange; the contract, scopes and testing take most of the time.[4]
How do I test an itsme integration?
The public developer documentation describes the flow, scopes and claims. Test environment terms were not public as of 5 October 2026; ask Belgian Mobile ID or your partner.[4]
What is the itsme scam?
Fraudsters pose as a bank and talk victims into approving itsme actions they did not start. The FPS Economy warns about it, and itsme says it added a warning for actions during a phone call.[16][2]
Sources
- Overview of pre-notified and notified eID schemes under eIDAS, European Commission, read 5 October 2026.
- itsme grows to eight million users and strengthens its position as a European player, Belgian Mobile ID, 17 March 2026.
- itsme accreditation renewed, Belgian Mobile ID.
- Data sharing, itsme developer documentation, Belgian Mobile ID.
- FAS privacy notice, FPS BOSA.
- Activate without a Belgian ID document, itsme support.
- Get started, itsme.
- itsme launches in the Netherlands, itsme.
- itsme and iDIN, itsme.
- Nederlandse identificatiedienst iDIN overgenomen door itsme, iDIN, 17 December 2025.
- Loi du 18 juillet 2017 relative à l'identification électronique, etaamb.
- Arrêté royal du 22 octobre 2017, FPS BOSA.
- Identification et vérification de l'identité, National Bank of Belgium.
- AML compendium (archive of 21 February 2020), National Bank of Belgium.
- itsme identification for business, Belgian Mobile ID.
- Arnaque à l'application itsme, FPS Economy.
- Regulation (EU) 2024/1624 (AMLR), Article 22, EUR-Lex.
- Final Report, draft RTS under Article 28(1) AMLR, AMLA, 30 September 2026.
Our eID verification page shows how national eIDs and the document route sit in one workflow.
Verify Belgian users in one workflow
Start with chip reading, liveness and AML screening, and tell us which eIDs you need next.
Related articles
- Didit vs Unit21: KYC, KYB, AML and monitoring on one record
- Didit vs Trinsic: eID sign-in plus document checks, AML and KYB
- Didit vs Thomson Reuters: government databases plus the whole flow
- Didit vs Regula: hosted checks with full evidence, KYB and monitoring
- Top 10 AI compliance agents for KYC and AML review automation in 2026
- Top 5 Travel Rule compliance solutions for crypto businesses in 2026