Identity verification
built for Brazil 
RG, CIN, CNH and Pasaporte on one session, cross-checked against Receita Federal (CPF/CNPJ), $0.33 full KYC, 500 free every month.




Trusted by 2,000+ organizations worldwide.
How identity verification works in Brazil.
- Fraud landscape
- Three pressures shape Brazilian identity fraud: deepfake and synthetic-CPF attacks targeting the explosion of PIX-enabled neobanks and digital wallets, CNH and RG document forgery, and a fast-growing iGaming surface (legalised by Lei 14.790/2023) where SPA-MF demands tight onboarding controls. Didit scores 200+ real-time fraud signals on every session, face morph, replay, injection, document tampering, device intelligence, IP geolocation.
- Compliance frameworks
- LGPD (Lei Nº 13.709/2018)
- Circular BCB 3.978/2020 (PLD/FT)
- Resolução BCB 96 (PIX onboarding)
- Resoluções CVM 24 · 35 · 175
- Lei 9.613/1998 (lavagem de dinheiro)
- Lei 14.790/2023 (apostas + iGaming)
Who supervises identity verification in Brazil.
BCB
Banco Central do Brasil, central bank and prudential supervisor for banks, payment institutions, EMIs, and the PIX instant-payment scheme. Sets AML/CFT rules via Circular BCB 3.978/2020.
CVM
Comissão de Valores Mobiliários, securities and Virtual Asset Service Provider (VASP) supervisor. Sets remote-onboarding rules under Resoluções CVM 24, 35 and 175.
COAF
Conselho de Controle de Atividades Financeiras, Brazil's Financial Intelligence Unit. Receives Suspicious Activity Reports (Comunicações de Operações Suspeitas).
ANPD
Autoridade Nacional de Proteção de Dados, LGPD (Lei Geral de Proteção de Dados, Lei Nº 13.709/2018) supervisor. Governs every identity verification on Brazilian residents.
Receita Federal
Federal tax and customs authority. Maintains the CPF (individuals) and CNPJ (companies) registries used by every KYC and KYB flow in Brazil.
SPA-MF
Secretaria de Prêmios e Apostas (Ministério da Fazenda), sports-betting and online-casino supervisor under Lei 14.790/2023. Sets KYC + AML obligations for licensed operators.
Four modules. One verification.
Capture and read the ID.
Captured on any phone, auto-classified, OCR-parsed, and template-verified.
- CIN, RG (all 27 state templates), CNH (including the QR-coded CNH Digital), Pasaporte (with the chip read on e-Passports), and CRNM for foreign residents.
- Returns the name, CPF, date of birth, place of issue, and expiry.
- Carteira de Identidade Nacional (CIN)
- RG · CNH · CRNM (foreign residents)
- Pasaporte, chip read on e-Passport
Match the face. Prove it's a real person..
Selfie confirmed live and matched against the ID portrait.
- Duplicate check: 1:N face search across existing users. Free.
- Active liveness ($0.15) for elevated-risk flows, user turns or blinks.
- Selfie on any phone or laptop camera
- Mobile-handoff QR when the user starts on desktop
Screen for sanctions, PEPs, and adverse media.
Didit screens the user's name against the global pool of 1,300+ sanctions, Politically Exposed Persons (PEP), and adverse-media lists, plus every Brazilian regulatory watchlist (CVM, Receita Federal Transparency Portal, Ministério da Justiça, ANEEL, ANAC, CADE, IBAMA, Ministério Público MG, plus federal-government sanctions).
Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.
Screen for sanctions, PEPs, and adverse media , see the docs for the full module surface.
Cross-check against Receita Federal.
Cross-checked against the authoritative civil registry.
- The CPF status check is the fast, low-cost first pass, name and CPF status (regular / suspended / cancelled) from Receita Federal via SERPRO.
- The National ID lookups (
bra_national_id,bra_national_id_2) hit Receita Federal directly with ~98–100% coverage. Pick the cheaper one first; escalate to the deeper one when needed. - Tax Registration, Residential (electoral roll) and Phone (MNO) cross-checks complete the picture, every service is pay-per-success, no consent required.
Cross-check against Receita Federal , see the docs for the full module surface.
Every Brazil document Didit accepts.
Civil-registry and AML coverage for Brazil.
Brazil — CPF status check
Source: Receita Federal via SERPRO. $0.20 per successful query.
Brazil National ID (Receita Federal)
Source: Receita Federal — federal tax authority. $0.69 per successful query. Coverage ~98% of adult population.
Brazil National ID 2 (CPF/CNPJ)
Source: Receita Federal CPF/CNPJ — alternate provider. $0.87 per successful query. Coverage ~100% of adult population.
Brazil Tax Registration (CPF/CNPJ)
Source: Receita Federal CPF/CNPJ — fast tier. $0.08 per successful query. Coverage ~100% of adult population.
Brazil — Residential (electoral roll)
Source: Combined database of electoral registrations. $0.14 per successful query. Coverage ~95% of adult population.
Brazil — Phone (MNO lookup)
Source: Brazilian mobile network operator data. $0.40 per successful query. Coverage ~60% of mobile lines.
AML lists screened in Brazil
1,300+ sanctions, Politically Exposed Persons (PEP), and adverse-media lists, plus the country's regulatory watchlists and PEP registries.
Open a new country in one click. We do the hard work.
Common questions about Brazil.
What does Didit ship?
Didit is the infrastructure layer for identity and fraud. One Application Programming Interface (API), 25+ composable modules across four product lines:
- User Verification (KYC, know your customer), Identity Document Verification, liveness, face match, Anti-Money Laundering (AML) screening, Internet Protocol (IP) analysis. $0.33 per full bundle.
- Business Verification (KYB, know your business), registry, Ultimate Beneficial Owner (UBO), officers, entity AML, plus a linked KYC session per UBO.
- Transaction Monitoring, real-time rule engine, case management, Suspicious Activity Report (SAR) workflow.
- Wallet Screening (KYT, know your transaction), on-chain wallet risk at $0.15 per check, or bring your own screening provider and run it inside Didit.
Compose any module into a workflow with the visual no-code builder, ship in 5 minutes, 500 verifications free every month, forever.
How is Didit different from a single-product Know Your Customer (KYC) vendor?
Most identity vendors sell one slice, a KYC check, an Anti-Money Laundering (AML) list, a wallet screen. Didit ships the infrastructure underneath all of them, and the gap shows up on six axes:
- Pricing. Public price on every module, $0.33 for a full KYC, 500 verifications free every month, no minimums, no contracts. Single-product vendors hide six-figure minimums behind a sales call.
- Access. Sandbox in one click, self-serve from day one, production keys on signup. Single-product vendors gate the sandbox behind a contract, months to evaluate.
- Developer experience. Public docs, a Model Context Protocol (MCP) server for Claude Code and Cursor, and native Software Development Kits (SDKs) for Web, iOS, Android, React Native, and Flutter. Integrate in 5 minutes with an AI agent or in a working afternoon by hand.
- User experience. Highest pass rates in the market, sub-2-second end-to-end inference, country-specialised capture flows, 48+ languages out of the box.
- Flexibility. One
/v3/Application Programming Interface (API) composes 25+ modules across KYC, Know Your Business (KYB), Transaction Monitoring, and Wallet Screening (KYT, know your transaction). A KYB session spawns a linked KYC for every Ultimate Beneficial Owner (UBO); a flagged transaction spawns a step-up KYC remediation, same session, same webhook contract, same audit trail. Single-product vendors sell one shape of KYC and stop there. - AI-era fraud. 200+ real-time fraud signals scored on every session, deepfake, injection, synthetic-ID, document forgery, face-morph, device intelligence, replay. Single-product vendors treat deepfake and injection detection as roadmap items, not defaults.
Common in fintech and crypto, the same architecture fits marketplaces, iGaming, mobility, and any vertical where you need to know who someone is and what they are doing.
What does it cost? Is anything actually free?
500 verifications free every month, forever, on every account. No credit card. No sales call. No expiry.
Above the free tier, every module has a public per-success price on didit.me/pricing, $0.33 per full KYC bundle, $0.15 per Identity Document Verification, $0.15 per Wallet Screening, $0.20 per Anti-Money Laundering (AML) Screening, $0.10 per liveness, $0.05 per face match, $0.03 per Internet Protocol (IP) analysis.
Pay-as-you-go, no minimums, no overage surprises. Volume discounts kick in automatically as you grow.
Which Brazilian regulator covers identity verification on a digital onboarding?
Four sit on top of every Brazilian identity-verification flow:
- Banco Central do Brasil (BCB), sets remote-onboarding requirements for banks, payment institutions, EMIs and PIX participants under Circular BCB 3.978/2020 (PLD/FT) and Resolução BCB 96 (PIX onboarding).
- Comissão de Valores Mobiliários (CVM), securities and Virtual Asset Service Provider (VASP) supervisor under Resoluções CVM 24, 35 and 175.
- Conselho de Controle de Atividades Financeiras (COAF), Brazil's Financial Intelligence Unit. Receives Comunicações de Operações Suspeitas generated by the AML stage of the flow.
- Autoridade Nacional de Proteção de Dados (ANPD), LGPD supervisor under Lei Nº 13.709/2018. Governs how the verification data is captured, stored, and disclosed.
Didit ships the hosted flow + the audit log + the watchlist coverage to satisfy all four at the same time, same POST /v3/session/ workflow, same JSON report, same SOC 2 Type 1 + ISO/IEC 27001 evidence pack.
Does Didit cross-check Brazilian identities against Receita Federal?
Yes, via six Database Validation services on POST /v3/database-validation/.
- `bra_cpf` (
$0.20), Receita Federal CPF status (regular / suspended / cancelled) via SERPRO. Low-cost first-pass gate. - `bra_national_id` (
$0.69, ~98% coverage) and `bra_national_id_2` ($0.87, ~100% coverage), Receita Federal name + DOB + address matching. - `bra_tax_registration` (
$0.08), fast CPF/CNPJ lookup. - `bra_residential` (
$0.14, ~95% coverage), combined electoral-roll address match. - `bra_phone` (
$0.40, ~60% coverage), Brazilian mobile-network-operator phone match.
All six services are documented at docs.didit.me/api-reference/database-validation/brazil/. Pay-per-success, no consent required, no contracts.
Is Didit suitable for iGaming operators licensed under Lei 14.790/2023?
Yes. The federal sports-betting + online-casino regime (Lei 14.790/2023, supervised by SPA-MF under the Ministério da Fazenda) requires every licensed operator to run remote KYC, AML screening, age verification, and ongoing monitoring on every player.
Didit covers the full stack on one workflow:
- Identity Document Verification + Active Liveness + Face Match 1:1 for the tier-1 onboarding check.
- `bra_cpf` + `bra_national_id_2` Database Validation against Receita Federal, the authoritative-source check SPA-MF expects.
- AML Screening ($0.20 per check) against the global pool plus Brazilian regulatory watchlists.
- Age Estimation ($0.10) as an additional age-gate signal alongside the document DOB.
- Ongoing AML monitoring ($0.07 per user / year) for the periodic-review obligation.
How long does it take to integrate Didit in Brazil?
5 minutes to a working sandbox, a weekend to a production flow.
- Sign up at
business.didit.me, grab an API key, callPOST /v3/session/with aworkflow_idthat wires ID Verification + Active Liveness + Face Match + AML + Receita Federal CPF cross-check, done. - AI-agent path: paste the integration prompt at
docs.didit.me/integration/integration-promptinto Claude Code, Cursor, Codex, Devin, Aider, or Replit Agent. The agent provisions the application, builds the workflow, wires the webhook, and runs a smoke test. - Five SDKs share the same session model: Web, iOS, Android, React Native, Flutter.
The first 500 verifications every month are free, forever, pilot the full Brazil stack at zero cost before flipping production traffic.
Which language does the hosted verification flow use for Brazilian users?
Brazilian Portuguese, auto-detected from the user's browser / device locale. The hosted UI ships in 48+ languages; Brazilian users land on the pt-BR flow by default. Spanish and English are also live on the same flow for cross-border or expat users.
The document-recognition layer is decoupled from the UI layer, capture works in any language, and the admin console can be set independently to whichever language your compliance team prefers.
What does the Brazil verification cost end-to-end?
Per-module public pricing, pay only for what runs on the session:
- ID Verification,
$0.15per document check. - Passive Liveness,
$0.10. Active Liveness,$0.15. - Face Match 1:1,
$0.05. Face Search 1:N, free. - AML Screening,
$0.20per check. Ongoing AML,$0.07 per user / year. - `bra_cpf`,
$0.20per successful query. - `bra_tax_registration`,
$0.08. `bra_residential`,$0.14. `bra_phone`,$0.40. - `bra_national_id`,
$0.69. `bra_national_id_2`,$0.87.
The full KYC bundle (Identity + Passive Liveness + Face Match + IP Analysis) is `$0.33`, same anchor price worldwide, no Brazil surcharge. 500 verifications free every month, no credit card. Volume discounts auto-apply above the free tier; Enterprise adds a custom Master Services Agreement (MSA) and data-residency choice.
Infrastructure for identity and fraud.
One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.