iDIN API integration: a business guide for 2026
How a business accepts iDIN, the Dutch banks' eID: its move to itsme by 2028, what users see, the data, eIDAS Substantial and the Wwft, how to connect, limits and a document fallback.
Oleh Alberto RosasCo-founder & CEO, DiditDiperbarui 
In short
The iDIN API lets a business in the Netherlands identify a customer through the customer's own online banking login: the bank confirms the identity and releases the data the customer agrees to share.[2][4] Belgian Mobile ID, the company behind itsme, bought iDIN on 17 December 2025; the scheme stays available for at least two years, and the move to itsme is expected to finish in 2028.[2][3]
- Per ABN AMRO, about 13 million people in the Netherlands can use iDIN and roughly 300 websites are connected.[3]
- iDIN declares itself eIDAS Substantial; it is not on the EU list of notified schemes.[4][1]
iDIN is the Dutch banks' electronic identification (eID) service: a person proves who they are to a web shop, insurer or other online service by logging in with their bank.[3] For a business, an iDIN API integration replaces a photo of an ID card with identity data confirmed by a bank that has already identified that customer under Dutch anti-money laundering (AML) law.[4]
iDIN at a glance
iDIN
The Dutch banks' online identification service
Is iDIN being discontinued
Yes, gradually. Belgian Mobile ID acquired iDIN, Currence's identification service, on 17 December 2025.[2] The transition was set to begin in spring 2026 and "is expected to be completed in 2028"; from June 2026, people can also log in to connected services with the itsme app.[3]
- 17 December 2025SoldBelgian Mobile ID (itsme) acquires iDIN from Currence.
- Spring 2026TransitionStarts once the agreed conditions are met.
- 1 June 2026itsme in NLitsme launches for Dutch users.
- End of 2027Phase-outPhase-out date given by itsme.
- 2028Fully mergediDIN fully integrated into itsme.
From iDIN to itsme, per the parties' own announcements.[2][3][6]
Watch out
Sources differ. The acquisition notice says iDIN stays at least two years and ends in 2028; itsme says iDIN will be "phased out completely by the end of 2027".[2][6] Plan for the earlier one; that is our conservative reading, not either party's statement.
Our guide to the itsme API integration covers the successor in depth.
How many people use iDIN
iDIN counts reach and volume, not active users: 13 million is a ceiling. The scheme does not publish a share of the adult population.
From the 17 December 2025 announcements: the 15 million from iDIN, the 13 million from ABN AMRO and iDIN, the 300 connected websites from ABN AMRO.[2][3]
Two different measures share the number: the 300 connected websites are iDIN connections, per ABN AMRO,[3] while itsme says its own app is accepted at "more than 300 Dutch companies".[6]
What the user sees
Our sources publish no iDIN screen sequence, step by step or cross-device, as of 5 October 2026. They confirm two things: people identify through their bank app,[3] and the customer instructs their own bank to provide the data needed to identify them to the organisation.[4] The strip below is a suggested design for your own pages around that one confirmed step.
Verify your identity
Continue with iDIN
Use an ID document instead
1Suggested for your page: iDIN next to a document route.
Identify with your bank
Use your bank app or card reader.
2Confirmed: the customer identifies at their own bank and instructs it to provide the data.[3][4]
Identity confirmed
Continue
3Suggested for your page: confirm the result.
Screens 1 and 3 are suggestions for your own pages, not iDIN screens. Screen 2 is a placeholder: the bank's real screens and their order are not published.
A generic redirect sign-in with a national eID, not a recording of iDIN.
What a business receives from the iDIN API
iDIN's compliance page describes data rules, not a field list. The customer instructs their own bank to provide the data needed to identify them, and keeps full control over which data goes to which party. Currence's Rules and Regulations set data quality requirements for every licensed issuing bank.[4]
| Question | What the sources say | Source |
|---|---|---|
| Who confirms the identity | The customer's bank, in the iDIN role of Issuer | iDIN[4] |
| Who decides what is shared | The customer, per organisation | iDIN[4] |
| Who can be identified | Natural persons with internet or mobile banking, identified under the Wwft by their bank | iDIN[4] |
| Data quality | Set by Currence's data quality requirements for Issuers | iDIN[4] |
| Exact attributes, identifier format, age indicator | Not published in the sources reviewed, 5 October 2026 | Ask your provider for the data specification |
| Portrait | Not mentioned in the sources reviewed | Plan a separate liveness and face match if you need one |
What iDIN's published rules say about the data a business receives.
| Point | iDIN | itsme |
|---|---|---|
| How the user signs in | Own bank's login, app or card reader[3] | itsme app with code, fingerprint or face[6] |
| Needs a Dutch bank | Yes, a participating bank[4] | No, registration by passport or ID scan plus selfie[6] |
| eIDAS status | Self-declared Substantial, not notified[4][1] | Notified at High (Belgian scheme)[1] |
| Published data list | Not in our sources | Scopes include profile, address, age-over claims[7] |
| Future | Folded into itsme by 2028[3] | The successor service[3] |
iDIN and its successor side by side.
Level of assurance and the Wwft
Under the EU eIDAS Regulation (EU) No 910/2014, iDIN is not on the European Commission's list of notified eID schemes; the Dutch schemes on that list are DigiD and eHerkenning.[1] iDIN instead states: "iDIN levert identiteitsvaststelling en authenticatie op het niveau eIDAS substantieel" (iDIN provides identity proofing and authentication at eIDAS level substantial). A certification and audit framework backs that claim.[4]
Dutch AML law, the Wet ter voorkoming van witwassen en financieren van terrorisme (Wwft), requires identity to be verified "aan de hand van documenten, gegevens of inlichtingen uit betrouwbare en onafhankelijke bron" (on the basis of documents, data or information from a reliable and independent source).[5] Article 4(1)(h) of the Uitvoeringsregeling Wwft designates "een voldoende betrouwbaar identificatiemiddel" (a sufficiently reliable means of identification) as such a source.[5]
Q&A, Article 11(1) WwftDe Nederlandsche Bank
"Een eID-middel is voldoende betrouwbaar wanneer deze voldoet aan het betrouwbaarheidsniveau 'substantieel' of 'hoog'."
Source: DNB, Q&A Elektronische identificatiemiddelen en cliëntidentificatie[5]
In English: an eID is sufficiently reliable at level substantial or high. Institutions judge this themselves; De Nederlandsche Bank (DNB) does not test specific eIDs in advance.[5]
From 10 July 2027 the EU Anti-Money Laundering Regulation (AMLR) adds an EU-wide rule.[8]
Article 22(6)(b)Regulation (EU) 2024/1624
"the use of electronic identification means which meet the requirements of Regulation (EU) No 910/2014 with regard to the assurance levels 'substantial' or 'high' and relevant qualified trust services as set out in that Regulation."
Source: EUR-Lex, Regulation (EU) 2024/1624[8]
The Anti-Money Laundering Authority (AMLA) final draft standards of 30 September 2026, not yet law, say eID means qualify "regardless of whether they are notified [...] as long as they comply with the requirements of either 'substantial' or 'high' assurance levels".[9] If AMLA's standards are adopted as drafted, the question for iDIN would be its level, not notification. That is our reading of a draft, not a regulator's view. The European Digital Identity (EUDI) Wallet guide covers the wider AMLR picture.
iDIN API integration: how to connect
Businesses join iDIN as connected organisations; iDIN's Rules and Regulations govern the licensed and certified parties in the scheme.[3][4] Our sources do not list who onboards new businesses, certification steps, contract terms or lead times.
Today
iDIN through a scheme party
- A licensed or certified iDIN party connects you
- Data set and price in that contract
- Ends when iDIN merges into itsme
Prices not published
Successor
itsme directly
- Contract with Belgian Mobile ID
- OpenID Connect sign-in with scopes
- Bracketed price by active users
Quote on request
Multi-scheme
Certified broker
- One contract for several eIDs
- The broker holds the scheme links
- Pricing set per broker contract
Quote on request
Three ways to accept bank-based or app-based identification in the Netherlands.[4][7][10]
itsme describes "gradually decreasing bracketed pricing" by active users per project, with no public price list.[10] iDIN's scheme pages publish no business price either, as of 5 October 2026. Our post on becoming an itsme partner compares the direct and broker routes.
Note
DigiD is not a shortcut. Only organisations with a statutory public task that may use the citizen service number (BSN) can connect to it.[11] See DigiD for private companies.
Use cases and sector rules
Web shops, insurers and other online services use iDIN.[3]
| Use case | What iDIN gives you | Rule to check |
|---|---|---|
| Know your customer (KYC) and AML onboarding | Bank-confirmed identity at self-declared Substantial | Wwft Art. 11(1); Uitvoeringsregeling Art. 4(1)(h); DNB Q&A[5] |
| Gambling | Identity before play | Licensing rules and the CRUKS exclusion register check (see below) |
| Age checks | Depends on the data set you receive | Confirm a date of birth or age attribute with your provider |
| Insurance and retail | Verified identity without your own login system[3] | Sector rules vary |
| Telecom, signing | Not described for iDIN in our sources | Not covered in this guide |
According to Vissers Legal, the Dutch gambling authority (Ksa) requires operators to check the CRUKS exclusion register. We found no rule that requires iDIN in particular.
Limits and fallbacks
- A customer needs internet or mobile banking at a participating bank, and must have been identified under the Wwft by that bank.[4]
- Foreigners and non-residents without a Dutch bank account cannot use iDIN.
- A minimum age for iDIN is not published in the sources reviewed, as of 5 October 2026; treat minors as needing another route.
- iDIN ends by 2028, so any build has a fixed lifetime; we found no published outage or security incident.[3]
1Offer a bank or app eID first
iDIN during the transition, itsme for the long term.
The user completes an eID sign-in
Use the confirmed data
Check the level and the fields you received.
Verify with a document
NFC chip reading, liveness and face match.
2Screen and decide
AML screening, then your onboarding decision.
eID first, document route for everyone else.
For the document route, read the passport or ID card chip over near-field communication (NFC), then add liveness and a face match. A document is the other means in AMLR Article 22(6).[8]
iDIN API integration checklist
- Decide whether to build on iDIN, itsme or both, given the 2028 merger.[3]
- Confirm with your provider that new iDIN connections are still accepted.
- Get the current iDIN data specification in writing.
- Map each field you receive to a Wwft requirement.[5]
- Write down your own assessment of iDIN's Substantial level.[5]
- Offer a document route with chip reading and liveness for minors and customers without a Dutch bank.
How Didit helps with eID verification in the Netherlands
iDIN is on Didit's roadmap. For Dutch users today, Didit runs the document route: NFC chip reading, liveness and face match, plus AML screening, in one workflow. A full KYC check costs $0.33, NFC verification $0.15 and AML screening $0.20.
itsme, the successor, is on our roadmap too. Each eID sits next to the document route in one workflow; the digital ID wallets docs show how.
Didit provides
- Document checks with NFC chip reading, liveness and face match
- AML screening against sanctions, PEP and watchlists
- EU data storage by default, retention from 1 month to 10 years
Stays with you
- The Wwft risk assessment and the eID reliability analysis
- The onboarding decision
- The choice of which eIDs to accept
Bring iDIN to your sign-up
Tell us where your Dutch users sign in, and start with the document route today.
Key takeaways
- Belgian Mobile ID (itsme) bought iDIN on 17 December 2025; the two are expected to merge fully in 2028.
- iDIN is self-declared eIDAS Substantial and not EU-notified; DNB accepts substantial or high eIDs for the Wwft.
- The published sources give no iDIN field list or business price: get both in writing.
Frequently asked questions
Is iDIN being discontinued?
Yes, in stages. Belgian Mobile ID, the company behind itsme, bought iDIN on 17 December 2025, and iDIN is expected to be fully integrated into itsme in 2028. itsme itself gives the end of 2027 for the full phase-out. The two dates conflict; our conservative reading is to plan for the earlier one.[3][6]
How much does the iDIN API cost?
iDIN does not publish a business price list on its scheme pages, as of 5 October 2026. Prices are set in the contract with the party that connects you. For itsme, prices come in decreasing brackets by active users, on request.[10]
What data does iDIN share with a business?
The identity data the customer instructs their bank to release, and the customer controls which data goes to which party. The exact field list was not published in the sources we reviewed, so ask your provider for the data specification.[4]
Is iDIN eIDAS notified?
No. iDIN is not on the European Commission's list of notified schemes. According to its compliance page, it provides identification at eIDAS Substantial, backed by a certification and audit framework. That level is self-declared; no regulator has confirmed it in our sources.[1][4]
Can I use iDIN for Wwft customer due diligence?
It can work. DNB says an eID is sufficiently reliable under the Wwft when it meets level substantial or high, and that each institution assesses this itself. iDIN's compliance page says it provides Substantial, but that level is self-declared and DNB does not test specific eIDs in advance, so document your own assessment.[5][4]
Can minors use iDIN?
The sources we reviewed do not publish a minimum age, as of 5 October 2026. iDIN serves natural persons with online or mobile banking at a participating bank. Treat minors as needing another route, such as a document check.[4]
Can foreigners use iDIN?
Only if they bank with a participating Dutch bank and use its internet or mobile banking. People without one need another route. itsme lets people register with a passport or ID scan and a selfie.[4][6]
What is the difference between iDIN and itsme?
iDIN works through the customer's own bank login and is self-declared Substantial. itsme is a separate app, notified at High under the Belgian scheme. It launched in the Netherlands on 1 June 2026, and iDIN is expected to merge into itsme by 2028.[3][1][6]
How long does an iDIN integration take?
No lead time is published, as of 5 October 2026. Plan around the sunset instead: iDIN ends at the end of 2027 per itsme, or in 2028 per the acquisition notices, so a 2027 launch may run a year or less.[6][3]
How do I test an iDIN integration?
Test terms were not public in our sources, as of 5 October 2026, so ask the party that connects you for a test environment and accounts before you sign. Then test the data set against your Wwft needs, a cancel at the bank and your document fallback.
Sources
- Overview of pre-notified and notified eID schemes under eIDAS, European Commission, read 5 October 2026.
- Nederlandse identificatiedienst iDIN overgenomen door itsme, iDIN, 17 December 2025.
- Dutch identification service iDIN acquired by itsme, ABN AMRO, 17 December 2025.
- Regelgeving en compliance, iDIN.
- Q&A Elektronische identificatiemiddelen en cliëntidentificatie, De Nederlandsche Bank.
- itsme launches in the Netherlands, itsme.
- Data sharing, itsme developer documentation, Belgian Mobile ID.
- Regulation (EU) 2024/1624 (AMLR), Article 22, EUR-Lex.
- Final Report, draft RTS under Article 28(1) AMLR, AMLA, 30 September 2026.
- itsme identification for business, Belgian Mobile ID.
- DigiD aansluiten en wijzigen, Logius.
Our eID verification page shows how national eIDs and the document route sit in one workflow, and what eID verification is explains the basics.
Verify Dutch users in one workflow
Start with chip reading, liveness and AML screening, and tell us which eIDs you need next.
Artikel terkait
- Undang-Undang e-commerce Vietnam: KYB untuk penjual, livestreamer, dan afiliasi
- Dekret 320/2026: verifikasi akun VNeID untuk platform di Vietnam
- Verifikasi kartu identitas Vietnam: membaca chip CCCD dengan NFC
- Regulasi MiCA pada 2026: panduan kepatuhan kripto UE hingga 2028
- Verifikasi identitas Companies House: vonis Insolvency Service
- Regulasi privacy coin setelah FinCEN mencabut aturan mixing