Identity verification against official databases and government records in Brazil

Key takeaways (TL;DR)
 

Validating identity data against official Brazilian databases is key for Central Bank compliance and preventing digital identity fraud.

Didit verifies user-provided data directly against trusted sources like SERPRO and Datavalid.

Available via Standalone API or No-Code Workflows, making it easy for both engineering and compliance teams to adopt.

Didit Database Validation improves accuracy, automates checks, and supports AML/CFT requirements aligned with Banco Central do Brasil (BCB) and COAF guidance.

Identity verification in Brazil is evolving fast. High levels of digital fraud—among the highest globally—are pushing financial institutions and fintechs and exchanges to require identity checks backed by real government sources, not just document scans or selfies.

In fact, according to recent studies on identity fraud in Brazil, over 35% of verification attempts show inconsistencies in personal data or signs of document manipulation.

To ensure users are who they claim to be, businesses must go beyond basic document or selfie verification. The answer: validate user data directly against official Brazilian government records, such as SERPRO and Datavalid.

This process is known as Database Validation, and Didit offers it natively—combining speed, accuracy, and regulatory readiness.

Why it matters for KYC and AML/CFT compliance in Brazil

In Brazil, AML/CFT (Anti-Money Laundering / Countering the Financing of Terrorism) requirements set by Banco Central do Brasil (BCB) and the Council for Financial Activities Control (COAF) require regulated entities to know their customers (KYC).

That means verifying each user’s identity before starting a business relationship or enabling financial transactions.

But Brazil faces a unique challenge: a high volume of synthetic, stolen, and reused identities. Many fraud cases start with personal data that’s altered—or simply doesn’t match government records.

To address this, institutions are increasingly adopting cross-checks against government databases, a practice encouraged by the market and widely used across the Brazilian fintech ecosystem.

With Didit Database Validation, the data your user provides (such as CPF, full name, or date of birth) is automatically compared with trusted records from SERPRO and Datavalid—creating clear, auditable evidence and reducing fraud risk.

How Didit Database Validation works in Brazil

Database Validation adds an extra layer to your identity flow. When a user submits their information, Didit performs a direct 1:1 comparison between the declared data and the available official sources, returning clear results you can automate.

You can review the full architecture in the Database Validation technical documentation.

Step-by-step: how validation runs

1. Data extraction. When a user captures their identity document, the system extracts key fields.
2. Data quality check. Didit verifies the required fields were correctly extracted and formatted.
3. API request. Didit sends a request to the relevant government source.
4. Result. The response is analyzed and classified as Full_Match, Partial_Match, or No_Match. Depending on your configuration, the session is auto-approved, auto-rejected, or routed to manual review.

This enables real-time, high-volume verification—supporting up-to-date checks and Brazil’s AML/CFT expectations.

API or No-Code: two ways to reach the same security standard

Didit Database Validation is designed to be both flexible and robust. You can integrate it in two ways: through No-Code Workflows or via standalone APIs. Either way, you get speed, accuracy, and compliance-friendly checks.

No-Code Workflows

Built for compliance and operations teams who want to launch quickly without engineering effort.

• Build the full flow from Didit’s visual builder.
• Turn on validation against official databases with a single click.
• Centralize results and export reports instantly.

Standalone API

Ideal for technical teams who want to embed data validation directly into their architecture with full control.

• Modern REST API, well documented. See the Database Validation API reference.
• Real-time responses.
• Full control over routing and decisioning logic.
• Support for single checks or bulk validation.

Which Brazilian documents and fields can be validated?

When you run an identity check against government databases in Brazil using Didit Database Validation, the goal isn’t “proving a document exists”—it’s validating key personal data against trusted records. This cross-check adds strong evidence, improves assurance, and significantly reduces fraud and data-entry errors.

Supported documents in Brazil and the fields validated

Didit supports multiple document types to trigger the right database checks, including National ID, Passport, Driver’s License, and Residence Permit. These documents are used as inputs to query the appropriate government sources.

For the fields validated, Didit cross-checks essential identifiers such as:

• Tax ID / document number (e.g., CPF)
• First name
• Last name(s)

This helps ensure the information your user provides is real, current, and consistent with official Brazilian records.

You can see other supported countries and documents in our documentation.

How to integrate Database Validation for Brazilian users

Integrating Didit Database Validation is straightforward and can be completed in minutes.

1. Create an account in our Business Console. It’s free.
2. Open your Dashboard and choose your integration method:

   1. Standalone API: Generate your token and call the /database-validation endpoint.

      Here’s the full API documentation.

   2. No-Code Workflow: Drag and drop the Database Validation block into your builder.
3. Configure the fields you want to validate.
4. Receive results in real time, with logs and automated reporting.

Conclusion: the new identity verification standard in Brazil

Identity verification against official databases and government records in Brazil is no longer optional—it’s essential for any organization aiming to reduce fraud and meet Banco Central do Brasil expectations.

With Didit Database Validation, you can automatically validate user identity data against trusted sources like SERPRO and Datavalid, getting precise, auditable results in seconds.

That improves confidence across KYC and AML/CFT programs—and reduces user friction, by automating checks that used to be slow, manual, and error-prone.