Identity verification in Austria
Document verification, biometric liveness and AML screening for businesses operating in Austria — at $0.30 per verification.
Documents supported
(Government IDs from 220+ countries)
Average verification time
Countries covered
(Government-issued IDs validated)
Market overview
Austria is the EU's 13th-largest economy and the headquarters country for several pan-CEE financial groups (Raiffeisen Bank International, Erste Group, UNIQA, Vienna Insurance Group). Vienna is one of Europe's quieter fintech hubs — smaller than Berlin or Amsterdam, but home to N26's Austrian operations, Bitpanda (crypto, one of the EU's largest licensed VASPs), Wikifolio, Finabro, and Fintec-Anbieter under the FMA's Regulatory Sandbox (opened 2020 under §23a FMABG). Key demand drivers for identity verification in Austria:
Supported documents
Didit templates cover national IDs, passports, residence permits and regional documents — plus 14,000+ documents globally for cross-border flows.
Personalausweis
BMI / district authorities
ID-1 format, primary onboarding document
Reisepass
BMI
Machine-readable, NFC-readable
Führerschein
District authorities
ID-1 plastic card (since 2006); not accepted by many FIs for KYC
Aufenthaltstitel
BFA / BMI
Mandatory for non-EU residents; machine-readable
Regulators
BGBl
Federal Criminal Police Office, BKA
DSGVO in German
Regulation (EU
Bundesministerium für Finanzen
Bundesministerium für Inneres
Oesterreichische Nationalbank
Bundeswettbewerbsbehörde
BMI (Bundesministerium für Inneres)
regulated
Central population register. Electronic access for authorized entities. Contains residence and identity data.
BMF (Bundesministerium für Finanzen) / A-Trust
regulated
Successor to Bürgerkarte/Handy-Signatur. National digital identity solution. eIDAS-notified. Supports electronic identification and qualified electronic signatures.
Ministry of Justice
open
Business register. Online search available via USP (Unternehmensserviceportal).
Government & regulated databases
Compliance framework
AML framework
Supervised by FM-GwG
The FM-GwG (BGBl. I Nr. 118/2016) is the core AML/CFT statute for the Austrian financial sector. It entered into force on 1 January 2017, replacing the patchwork of AML provisions previously scattered across the Bankwesengesetz (BWG), Versicherungsaufsichtsgesetz (VAG), Zahlungsdienstegesetz (ZaDiG) and Wertpapieraufsichtsgesetz (WAG). The act transposed the 4th EU AML Directive; subsequent amendments transposed AMLD5 (2020) and AMLD6 (2021).
Data protection
Supervised by EU General Data Protection Regulation
- Legal framework: DSGVO (GDPR) + Austrian Datenschutzgesetz (DSG). - Data-protection authority: Datenschutzbehörde (DSB), Vienna. - Retention of KYC records: 10 years after the end of the business relationship or the occasional transaction (§21 FM-GwG). Shorter retention breaches AML; longer retent
Penalties for non-compliance
- Raiffeisen Bank International AG — €2,070,000 fine, June 2024. The FMA found that RBI could not demonstrate the adequacy of CDD checks performed by two third-country respondent banks in correspondent banking relationships. The penal order is under appeal at the Bundesverwaltungsgericht.
Use cases
Neobanks, EMIs, payment institutions, lenders, brokerages.
Austrian banks, payment institutions and e-money issuers are directly in scope of FM-GwG §§5–11. The FMA's Online-Identifikationsverordnung (Online Identification Regulation, originally January 2017, amended November 2021 and again in 2023) defines how remote onboarding must be executed. Three compl
Exchanges, custodians, wallets, on/off-ramps.
VASPs registered under §32a FM-GwG apply full FM-GwG CDD obligations from the first euro (no €15k threshold; AMLD5 sets the crypto CDD threshold at €1,000 for occasional transactions). This in practice means VASPs cannot offer anonymous wallets or anonymous fiat on-ramps to Austrian residents.
Sports betting, online casinos, age-gated platforms.
Austria's online-gambling market is currently a legal monopoly under the Glücksspielgesetz (GSpG): a single online licence is held by Win2day, a brand of Österreichische Lotterien GmbH, a subsidiary of Casinos Austria AG (the Republic of Austria holds ~33% of Casinos Austria via ÖBAG). Land-based ca
Gig platforms, delivery, creator economy, e-commerce.
Pure C2C marketplaces, gig platforms and creator-economy sites are not directly in scope of FM-GwG. They become obliged entities only if they hold customer funds, issue e-money, or provide payment services — at which point they fall under ZaDiG or the E-Geld-Gesetz and inherit the full FM-GwG regime
Biometric liveness
The November 2021 amendment to the Online-Identifikationsverordnung opened the door to fully algorithmic biometric identification. The FMA has been explicit that such flows must match or exceed the security of agent-based video KYC. Industry practice has converged on: - Passive liveness detection certified to ISO/IEC 30107-3 (Presentation Attack Detection), ideally iBeta Level 1 / Level 2 laboratory attestation. - NFC document chip read with passive authentication against the issuing country's C
CERTIFICATIONS
Our platform meets the highest international standards for information security, data privacy, and biometric accuracy.
Full EU data protection compliance
Information security management
PAD (liveness + face match)
TRUSTED WORLDWIDE
Join thousands of companies that trust Didit for their verification needs
Didit’s NFC + active biometrics technology blocks the most advanced fraud scenarios, offering a level of security equivalent to or superior to in-person verification.
Spanish Financial Sandbox
CNMV, SEPBLAC & Spanish Treasury — Conclusions Report
Didit is an exceptionally valuable partner, delivering a stable and highly adaptable solution”.
Vuk Adžić
Head of the E-Business Department at Crnogorski Telekom
Didit offered us a robust technology with a simple implementation and adaptability to different markets”.
Fernando Pinto
CEO & CoFounder at TucanPay
Thanks to Didit we have been able to reduce manual processes and improve data extraction accuracy”.
Diana Garcia
Trust & Safety Executive at Shiply
Didit’s integration slashed verification times and costs, freeing resources for other projects”.
Guillem Medina
COO at GBTC Finance
Didit removed KYC costs, enabling faster scaling with high verification standards and less fraud.”
Paul Martin
VP Marketing & Growth at Bondex
Didit’s secure, user-friendly verification boosts customer trust and optimizes our process.”
Cristofer Montenegro
Executive assistant to the CEO at Adelantos
Didit ensures a precise, secure digital onboarding without slowing negotiations or client time.”
Ernesto Betancourth
Gerente de riesgos at CrediDemo
FAQ
Yes. Austria permits remote KYC onboarding under its national AML framework, including document verification, biometric liveness and video identification where required by regulation.
Didit verifies all major national IDs, passports and residence permits issued in Austria, plus 14,000+ document types globally for cross-border flows.
Didit charges $0.30 per verification with 500 free checks per month. No contracts, no minimums. Competitors typically charge $1.00–$2.50+ per verification.
Yes. Didit screens against 1,000+ global watchlists including PEP databases, sanctions lists (EU, UN, OFAC, OFSI), and adverse media — covering all AML obligations in Austria.
Most regulated sectors in Austria require or strongly recommend biometric liveness detection for remote onboarding. Didit provides ISO 30107-3 PAD Level 2 certified liveness.
Yes. Didit supports document verification, liveness, AML screening and ongoing monitoring aligned with Austria’s crypto regulatory framework, including EU Travel Rule compliance where applicable.
Yes. Didit provides document-based age verification and identity confirmation suitable for Austria’s iGaming regulatory requirements.
500 free verifications per month. No contracts, no minimums. $0.30 per verification after the free tier.
