Identity verification in Brazil
Executive summary. Brazil is Latin America's largest and most regulated identity-verification market: a 216-million-person economy built around a single universal tax identifier (CPF), the world's most-used real-time payments system (Pix, 150M+ users), the planet's densest fintech ecosystem outside San Francisco, and a newly minted licensing regime for crypto (Lei 14.478/2022 + Resoluções BCB 519/
Documents supported
(Government IDs from 220+ countries)
Average verification time
Countries covered
(Government-issued IDs validated)
Market overview
Brazil is the fifth-largest country in the world by population (≈215M) and the largest economy in Latin America. Financial inclusion has been transformed by Pix, Banco Central do Brasil's instant-payment rail launched in November 2020: as of 2025, more than 150 million Brazilians and 15 million businesses use Pix, and an estimated 85%+ of adults are banked — up from ~60% a decade ago. Nubank alone has crossed 100 million customers in Brazil, making it the largest digital bank in the Western Hemisphere. Inter, C6 Bank, PicPay, Mercado Pago, PagBank, Stone, Banco BS2, Will Bank, Neon, Original and dozens more compete at national scale. Brazil is also the largest crypto market in Latin America, with estimates of 10M+ holders and Mercado Bitcoin, Foxbit, Bitso, Ripio, Binance Brasil, OKX and C
Supported documents
Didit templates cover national IDs, passports, residence permits and regional documents — plus 14,000+ documents globally for cross-border flows.
Regulators
Conselho de Controle de Atividades Financeiras
SERPRO
regulated
Primary individual tax ID. Verified via SERPRO Datavalid API. Over 200M records. Central to Brazilian identity verification ecosystem.
SERPRO / DENATRAN
regulated
National driver's license database. Over 85M records. Accessible via SERPRO API integration.
TSE (Tribunal Superior Eleitoral)
restricted
Voter registration managed by the Electoral Court. Batch verification only; limited commercial accessibility.
Receita Federal
open
National business registry. Publicly queryable for basic company information.
Government & regulated databases
Compliance framework
AML framework
Supervised by COAF
Brazilian KYC/AML sits on six overlapping pillars:
Data protection
Supervised by National DPA
Biometric data is classified as dado pessoal sensível under LGPD Art. 5 (II). Its processing requires a narrower set of lawful bases (Art. 11): explicit and specific consent, legal obligation, contract performance with the data subject, protection of life, health protection by health authority, or r
Penalties for non-compliance
- Bradesco — R$92.2 million administrative fine from Banco Central in June 2020 for PLD/FT failings in foreign-exchange operations, with an accompanying commitment term (termo de compromisso) requiring a full PLD/FT remediation plan.
Use cases
Neobanks, EMIs, payment institutions, lenders, brokerages.
Brazilian fintechs and banks operate under Circular BCB 3.978/2020. Articles 7-14 codify customer due diligence (Identificação e Qualificação do Cliente):
Exchanges, custodians, wallets, on/off-ramps.
Until 2022 VASPs operated in a regulatory grey zone. Lei 14.478/2022 closed it by naming Bacen supervisor; Decreto 11.563/2023 confirmed Bacen's authority; and on 10 November 2025 Bacen published Resoluções BCB nº 519, 520 e 521 — the long-awaited secondary regulation. These enter into force on 2 Fe
Sports betting, online casinos, age-gated platforms.
Lei 14.790/2023 and the SPA/MF regulatory stack (key ordinances: Portaria SPA/MF nº 722/2024 — technical security requirements; Portaria SPA/MF nº 827/2024 — authorization procedure; Portaria SPA/MF nº 1.231/2024 — responsible gaming) set one of the most rigorous iGaming KYC regimes in the Western H
Gig platforms, delivery, creator economy, e-commerce.
Marketplaces in Brazil are not direct pessoas obrigadas under Lei 9.613 (unless they operate payment, credit, crypto or betting services), but they face three indirect KYC drivers:
Biometric liveness
Circular 3.978 does not prescribe a specific liveness standard, but Brazilian market practice — driven by Febraban (the national banking federation), the major banks, Unico's dominance and Datavalid's quality bar — has converged on: - ISO/IEC 30107-3 Presentation Attack Detection, Level 2 (PAD L2) as the de facto minimum. - Active + passive liveness combinations for high-value flows (onboarding a high-limit account, large Pix transfers, crypto withdrawals, iGaming deposits). - Datavalid federal
CERTIFICATIONS
Our platform meets the highest international standards for information security, data privacy, and biometric accuracy.
Full EU data protection compliance
Information security management
PAD (liveness + face match)
TRUSTED WORLDWIDE
Join thousands of companies that trust Didit for their verification needs
Didit’s NFC + active biometrics technology blocks the most advanced fraud scenarios, offering a level of security equivalent to or superior to in-person verification.
Spanish Financial Sandbox
CNMV, SEPBLAC & Spanish Treasury — Conclusions Report
Didit is an exceptionally valuable partner, delivering a stable and highly adaptable solution”.
Vuk Adžić
Head of the E-Business Department at Crnogorski Telekom
Didit offered us a robust technology with a simple implementation and adaptability to different markets”.
Fernando Pinto
CEO & CoFounder at TucanPay
Thanks to Didit we have been able to reduce manual processes and improve data extraction accuracy”.
Diana Garcia
Trust & Safety Executive at Shiply
Didit’s integration slashed verification times and costs, freeing resources for other projects”.
Guillem Medina
COO at GBTC Finance
Didit removed KYC costs, enabling faster scaling with high verification standards and less fraud.”
Paul Martin
VP Marketing & Growth at Bondex
Didit’s secure, user-friendly verification boosts customer trust and optimizes our process.”
Cristofer Montenegro
Executive assistant to the CEO at Adelantos
Didit ensures a precise, secure digital onboarding without slowing negotiations or client time.”
Ernesto Betancourth
Gerente de riesgos at CrediDemo
FAQ
Yes. Brazil permits remote KYC onboarding under its national AML framework, including document verification, biometric liveness and video identification where required by regulation.
Didit verifies all major national IDs, passports and residence permits issued in Brazil, plus 14,000+ document types globally for cross-border flows.
Didit charges $0.30 per verification with 500 free checks per month. No contracts, no minimums. Competitors typically charge $1.00–$2.50+ per verification.
Yes. Didit screens against 1,000+ global watchlists including PEP databases, sanctions lists (EU, UN, OFAC, OFSI), and adverse media — covering all AML obligations in Brazil.
Most regulated sectors in Brazil require or strongly recommend biometric liveness detection for remote onboarding. Didit provides ISO 30107-3 PAD Level 2 certified liveness.
Yes. Didit supports document verification, liveness, AML screening and ongoing monitoring aligned with Brazil’s crypto regulatory framework, including EU Travel Rule compliance where applicable.
Yes. Didit provides document-based age verification and identity confirmation suitable for Brazil’s iGaming regulatory requirements.
500 free verifications per month. No contracts, no minimums. $0.30 per verification after the free tier.
