What Is Identity Verification? A Complete 2026 Guide
Identity verification is the process of confirming a person is who they claim to be — using documents, biometrics, or databases. Here's how each method works, how IDV fits into KYC, and what to look for in a provider.

Identity verification (IDV) is the process of confirming that a person is who they claim to be — by examining a government-issued document, matching it to a biometric, or cross-referencing it against authoritative database records.
IDV is a component of KYC (Know Your Customer), not a synonym for it. KYC is the broader compliance framework; identity verification is the technical process that satisfies its Customer Identification Program (CIP) obligation. Understanding the difference — and the three distinct methods used to verify identity — helps you choose the right combination for your risk profile and regulatory environment.
Key takeaways
- Identity verification (IDV) confirms a person is who they say they are using documents, biometrics, or database lookups.
- IDV is a component of KYC — it satisfies the Customer Identification Program (CIP) obligation but does not replace the full KYC framework.
- Three main methods exist: document-based, biometric, and database-based. Most regulated use cases combine all three.
- Didit covers 220+ countries, 14,000+ document types, and 48+ languages with sub-2s decisioning.
- The complete document + liveness + face match + IP core flow costs $0.33, with 500 free checks per month.
- Didit is the only provider formally attested by an EU member-state government (Spain's Tesoro / BdE / SEPBLAC / CNMV) as safer than in-person verification.
What identity verification is
When a person signs up for a financial product, a marketplace, or any other service that requires them to be who they say they are, the business needs to confirm that claim. Identity verification is the set of technical checks that make that confirmation.
Unlike a password or a PIN — which only proves you know a secret — IDV proves you are a specific person in the real world. It does this by examining evidence that only the real person should have: their government-issued document, their face, or their presence in authoritative records.
The three verification methods
Document-based verification
Document verification examines a government-issued identity document — a passport, national ID card, residence permit, or driving licence — to confirm it is genuine and belongs to the person presenting it.
This involves several layers of checking. OCR (optical character recognition) extracts the machine-readable data from the document. Security feature analysis looks for signs of tampering — incorrect fonts, missing holograms, altered photographs. Chip reading (NFC) is available for biometric passports and contactless ID cards, providing a cryptographically signed copy of the document data that cannot be forged.
Didit's ID Verification module supports 14,000+ document types across 220+ countries and 48+ languages. NFC Reading is available as an add-on at $0.15 for documents that carry a chip.
Biometric verification
Document verification confirms the document is real. Biometric verification confirms the person presenting it is the same person depicted on it — and is physically present right now, not submitting a photo or video of someone else's document.
This involves two checks. Passive Liveness ($0.10) confirms the user is a real person present in real time — not a printed photo, deepfake, or replay attack. Face Match ($0.05) compares the user's live face to the document photograph, confirming they are the same individual.
Together, document verification + liveness + face match constitute what regulators call remote biometric identity verification — the accepted standard for onboarding customers who cannot appear in person.
Database-based verification
Database verification cross-references a claimed identity against authoritative external records: government registries, credit bureau files, utility records, telco databases, or address verification services. Rather than checking a document, it checks whether the name, date of birth, and address provided by the user match what official systems hold.
Database validation is faster and more frictionless for users — no document capture required. It works well for lower-risk use cases and jurisdictions where it satisfies CIP. For higher-risk use cases or where regulators require document and biometric verification, database validation is used as a supplementary check rather than a substitute.
How IDV fits into KYC
Identity verification answers the first KYC question: is this person real and are they who they say they are? But KYC extends further. After CIP (which IDV satisfies), a complete KYC program also requires Customer Due Diligence (CDD) — screening the verified identity against AML (Anti-Money-Laundering) watchlists — and ongoing monitoring over the life of the customer relationship.
Confusing IDV with KYC is a common compliance gap. A business that only checks documents is meeting one pillar of a three-pillar obligation. Didit's workflow builder lets you compose IDV modules (document, biometric, database) together with AML screening and ongoing monitoring so a single session satisfies the full KYC requirement.
Use cases
Fintech account opening — document + liveness + face match is the standard for neobank, EMI, and payments account CIP. Sub-2s decisioning means the check completes inside the signup flow.
Crypto exchange onboarding — FATF standards and national VASP licensing require biometric IDV for account opening. Didit's core flow covers the full obligation across 220+ countries.
Marketplace seller verification — confirming the identity of sellers on a marketplace platform prevents fraud and enables age-gated categories. Document verification with database cross-check is the standard pattern.
iGaming registration — age verification at sign-up is a legal requirement in regulated gambling markets. Document verification with face match confirms both age and identity in one step.
How Didit helps
Didit packages document verification, biometrics, database checks, and AML screening into a single hosted session. One API call starts the flow:
curl -X POST https://verification.didit.me/v3/session/ \
-H "x-api-key: $DIDIT_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"workflow_id": "your_workflow_id",
"vendor_data": "user_98765",
"callback": "https://yourapp.com/webhook/idv"
}'
The user opens session.url in a browser or mobile WebView. Didit runs document capture, OCR, liveness, and face match in sequence. Results arrive via webhook or GET /v3/session/{sessionId}/decision/.
Module pricing: ID Verification $0.15 · Passive Liveness $0.10 · Face Match $0.05 · IP Analysis $0.03. Full core flow: $0.33. 500 free checks per month. 3–5× cheaper than comparable providers.
Frequently asked questions
What is the difference between identity verification and KYC?
Identity verification (IDV) is the technical process of confirming who someone is. KYC is the broader compliance framework — IDV satisfies its Customer Identification Program (CIP) pillar, but KYC also requires AML screening and ongoing monitoring.
How much does identity verification cost?
Didit's core IDV flow — ID Verification + Passive Liveness + Face Match + IP Analysis — costs $0.33. 500 free checks per month, no minimums.
Which countries and documents does Didit support?
220+ countries and territories, 14,000+ document types, 48+ languages. Passports, national IDs, driving licences, residence permits, and more.
How long does an identity verification check take?
Under 2 seconds for decisioning. The user-facing flow — document capture, liveness, face match — typically completes in under 2 minutes in a smooth session.
Does biometric verification satisfy regulatory requirements for remote onboarding?
In most regulated jurisdictions, yes. Document + passive liveness + face match is the accepted standard for remote CIP. Didit is the only provider formally attested by an EU member-state government (Spain's Tesoro / BdE / SEPBLAC / CNMV) as safer than in-person verification.
Ready to get started?
- Explore the product → User Verification
- Read the integration guide → docs.didit.me
- See what it costs → Pricing — $0.33 full flow, 500 free/month
- Start building → business.didit.me