Identity verification
built for Canada 
Provincial Driver Licences, Canadian Passport, PR Card on one session, with FINTRAC-compliant Credit Bureau cross-check, $0.33 full KYC, 500 free every month.




Trusted by 2,000+ organizations worldwide.
How identity verification works in Canada.
- Fraud landscape
- Three pressures shape Canadian identity fraud: deepfake and injection attacks on the chartered-bank online-onboarding flows, provincial Driver Licence forgery across the patchwork of 13 provincial / territorial templates, and provincial iGaming pressure as Ontario's AGCO-licensed market matures and BCLC's PlayNow expands. Didit scores 200+ real-time fraud signals on every session, face morph, replay, injection, document tampering, device intelligence, IP geolocation.
- Compliance frameworks
- PCMLTFA + FINTRAC Regulations
- FINTRAC Credit Bureau dual-process method
- PIPEDA + provincial privacy laws (Quebec Law 25, BC PIPA, Alberta PIPA)
- National Instrument 31-103 (CSA, securities KYC)
- OSFI B-10 Outsourcing + E-21 Operational Risk
- FATF 40 recommendations
Who supervises identity verification in Canada.
FINTRAC
Financial Transactions and Reports Analysis Centre of Canada, administers the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA). Sets the credit-bureau dual-process method for non-face-to-face identity verification.
OSFI
Office of the Superintendent of Financial Institutions, prudential supervisor for federally-regulated banks, trust and loan companies, and federally-incorporated insurers.
CSA + Provincial Securities Commissions
Canadian Securities Administrators, umbrella body coordinating the 13 provincial / territorial securities commissions (OSC, AMF, BCSC, ASC, etc.). Sets the National Instrument 31-103 KYC requirements for registered dealers.
OPC
Office of the Privacy Commissioner of Canada, administers the Personal Information Protection and Electronic Documents Act (PIPEDA), the federal private-sector privacy law.
Four modules. One verification.
Capture and read the ID.
Captured on any phone, auto-classified, OCR-parsed, and template-verified.
- provincial Driver's Licence (Ontario MTO, BC ICBC, Alberta, Quebec SAAQ, etc.), Canadian Passport (with the chip read on e-Passports), PR Card, Secure Certificate of Indian Status, and provincial health cards where rules allow.
- Returns the name, document number, date of birth, address, and province / territory of issue.
- Provincial Driver's Licence (13 provincial / territorial templates)
- Canadian Passport · PR Card
- Secure Certificate of Indian Status · Provincial Health Card
Match the face. Prove it's a real person..
Selfie confirmed live and matched against the ID portrait.
- Duplicate check: 1:N face search across existing users. Free.
- Active liveness ($0.15) for elevated-risk flows, user turns or blinks.
- Selfie on any phone or laptop camera
- Mobile-handoff QR when the user starts on desktop
Screen for sanctions, PEPs, and adverse media.
1,300+ global sanctions, PEP, and adverse-media lists, plus Canadian watchlists:
- Government of Canada - Consolidated Canadian Autonomous Sanctions List (Sanctions), the primary Canadian autonomous sanctions list under the Special Economic Measures Act.
- Government of Canada - Justice for Victims of Corrupt Foreign Officials Regulations (Sanctions), Magnitsky-style sanctions against corrupt foreign officials.
- Government of Canada - Regulations Establishing a List of Entities (Sanctions), terrorist entity designations under the Criminal Code.
- Government of Canada - United Nations Resolutions on the Suppression of Terrorism (Sanctions), UN Security Council terrorist designations implemented in Canadian law.
- British Columbia Securities Commission (Disciplined List) (Sanctions), BCSC enforcement actions and disciplined registrants.
- Canadian Securities Administrators (Investor Alerts) (Warnings), CSA investor alerts and unregistered activity warnings.
- Supreme Court of Canada, PEP Level 1, justices and senior judicial officers.
- Cabinet of Canada, PEP Level 2, federal Ministers and senior Cabinet officials.
- Canada Named Research Organizations List (SIE), state-invested entity designations for national-security screening.
Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.
Screen for sanctions, PEPs, and adverse media , see the docs for the full module surface.
Cross-check against the Canadian Credit Bureau.
After the ID is captured, Didit runs the FINTRAC-compliant Credit Bureau cross-check that the PCMLTFA non-face-to-face dual-process method requires.
- The Credit Bureau (FINTRAC) check (
can_credit_bureau_fintrac,$2.10, ~85% coverage, consent required) returns the credit-header data shaped for FINTRAC's identity-verification standard. - The Credit Bureau 2 (Non-FINTRAC) check (
can_credit_bureau_2_non_fintrac,$1.05, ~85% coverage) adds extra fraud-detection flags without the FINTRAC restriction. - The Residential check (
can_residential,$0.19, ~90% coverage, consent required) cross-checks the user against mobile-network-operator phone records. - The Consumer check (
can_consumer,$0.05, ~10% coverage) is the lightweight lead-generation lookup.
Cross-check against the Canadian Credit Bureau , see the docs for the full module surface.
Every Canada document Didit accepts.
Civil-registry and AML coverage for Canada.
Canada Credit Bureau (FINTRAC)
Source: Aggregated Canadian credit-header data (FINTRAC-compliant). $2.10 per successful query. End-user consent required. Coverage ~85% of adult population.
Canada Credit Bureau 2 (Non-FINTRAC)
Source: Aggregated Canadian credit-header data with extra fraud flags (non-FINTRAC). $1.05 per successful query. Coverage ~85% of adult population.
Canada Residential
Source: Canadian mobile network operator phone records. $0.19 per successful query. End-user consent required. Coverage ~90% of adult population.
Canada Consumer
Source: Canadian lead-generation consumer database. $0.05 per successful query. Coverage ~10%.
Canada Phone
Source: Canadian telco billing records. $0.36 per successful query. Coverage ~10%.
AML lists screened in Canada
1,300+ sanctions, Politically Exposed Persons (PEP), and adverse-media lists, plus the country's regulatory watchlists and PEP registries.
Open a new country in one click. We do the hard work.
Common questions about Canada.
What does Didit ship?
Didit is the infrastructure layer for identity and fraud. One Application Programming Interface (API), 25+ composable modules across four product lines:
- User Verification (KYC, know your customer), Identity Document Verification, liveness, face match, Anti-Money Laundering (AML) screening, Internet Protocol (IP) analysis. $0.33 per full bundle.
- Business Verification (KYB, know your business), registry, Ultimate Beneficial Owner (UBO), officers, entity AML, plus a linked KYC session per UBO.
- Transaction Monitoring, real-time rule engine, case management, Suspicious Activity Report (SAR) workflow.
- Wallet Screening (KYT, know your transaction), on-chain wallet risk at $0.15 per check, or bring your own screening provider and run it inside Didit.
Compose any module into a workflow with the visual no-code builder, ship in 5 minutes, 500 verifications free every month, forever.
How is Didit different from a single-product Know Your Customer (KYC) vendor?
Most identity vendors sell one slice, a KYC check, an Anti-Money Laundering (AML) list, a wallet screen. Didit ships the infrastructure underneath all of them, and the gap shows up on six axes:
- Pricing. Public price on every module, $0.33 for a full KYC, 500 verifications free every month, no minimums, no contracts. Single-product vendors hide six-figure minimums behind a sales call.
- Access. Sandbox in one click, self-serve from day one, production keys on signup. Single-product vendors gate the sandbox behind a contract, months to evaluate.
- Developer experience. Public docs, a Model Context Protocol (MCP) server for Claude Code and Cursor, and native Software Development Kits (SDKs) for Web, iOS, Android, React Native, and Flutter. Integrate in 5 minutes with an AI agent or in a working afternoon by hand.
- User experience. Highest pass rates in the market, sub-2-second end-to-end inference, country-specialised capture flows, 48+ languages out of the box.
- Flexibility. One
/v3/Application Programming Interface (API) composes 25+ modules across KYC, Know Your Business (KYB), Transaction Monitoring, and Wallet Screening (KYT, know your transaction). A KYB session spawns a linked KYC for every Ultimate Beneficial Owner (UBO); a flagged transaction spawns a step-up KYC remediation, same session, same webhook contract, same audit trail. Single-product vendors sell one shape of KYC and stop there. - AI-era fraud. 200+ real-time fraud signals scored on every session, deepfake, injection, synthetic-ID, document forgery, face-morph, device intelligence, replay. Single-product vendors treat deepfake and injection detection as roadmap items, not defaults.
Common in fintech and crypto, the same architecture fits marketplaces, iGaming, mobility, and any vertical where you need to know who someone is and what they are doing.
What does it cost? Is anything actually free?
500 verifications free every month, forever, on every account. No credit card. No sales call. No expiry.
Above the free tier, every module has a public per-success price on didit.me/pricing, $0.33 per full KYC bundle, $0.15 per Identity Document Verification, $0.15 per Wallet Screening, $0.20 per Anti-Money Laundering (AML) Screening, $0.10 per liveness, $0.05 per face match, $0.03 per Internet Protocol (IP) analysis.
Pay-as-you-go, no minimums, no overage surprises. Volume discounts kick in automatically as you grow.
Which Canadian regulator covers identity verification on a digital onboarding?
Four sit on top of every Canadian identity-verification flow:
- FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), administers the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and sets the credit-bureau dual-process method that non-face-to-face identity verification must follow.
- OSFI (Office of the Superintendent of Financial Institutions), prudential supervisor for federally-regulated banks and insurers; B-10 Outsourcing and E-21 Operational Risk apply to identity-verification vendors.
- CSA + provincial securities commissions (OSC, AMF, BCSC, ASC, etc.), set National Instrument 31-103 KYC requirements for registered dealers and advisers.
- Office of the Privacy Commissioner (OPC), administers PIPEDA (the federal private-sector privacy law); provincial laws apply in BC, Alberta, and Quebec (Law 25).
Didit ships the hosted flow + the audit log + the watchlist coverage to satisfy all four at the same time, same POST /v3/session/ workflow, same JSON report, same SOC 2 Type 1 + ISO/IEC 27001 evidence pack.
Does Didit run the FINTRAC-compliant Credit Bureau dual-process method?
Yes, via the `can_credit_bureau_fintrac` Database Validation service (POST /v3/database-validation/ with services=can_credit_bureau_fintrac).
- Source: aggregated Canadian credit-header data (FINTRAC-compliant).
- Price:
$2.10 per successful query. - Required inputs:
first_name,last_name,address,date_of_birth. - Consent: Required.
- Coverage: ~85% of the adult population.
- Workflow: combine the Credit Bureau cross-check with one government-issued document (Canadian Passport, provincial Driver's Licence, PR Card) on the same session, that satisfies the PCMLTFA non-face-to-face dual-process method.
A second non-FINTRAC variant (can_credit_bureau_2_non_fintrac, $1.05) returns extra fraud flags without the FINTRAC compliance restriction, handy for risk-only checks where you do not need to satisfy the PCMLTFA standard.
Does Didit work in Quebec under Law 25?
Yes. Quebec's Law 25 (formerly Bill 64) updated the Act respecting the protection of personal information in the private sector with explicit data-protection officer, privacy-impact-assessment, and cross-border-transfer obligations.
Didit covers Quebec users with the same workflow as the rest of Canada:
- The hosted UI ships in Canadian French alongside Canadian English, auto-detected from the user's browser / device locale.
- Identity Document Verification recognises the Quebec SAAQ Driver's Licence and the Quebec health card (RAMQ, accepted where rules allow).
- The Data Processing Addendum and SOC 2 Type 1 + ISO/IEC 27001 evidence pack satisfy the cross-border-transfer + privacy-impact-assessment obligations Law 25 expects.
- Quebec users land in the French flow by default; the admin console can be set independently to whichever language your compliance team prefers.
How long does it take to integrate Didit in Canada?
5 minutes to a working sandbox, a weekend to a production flow.
- Sign up at
business.didit.me, grab an API key, callPOST /v3/session/with aworkflow_idthat wires ID Verification + Active Liveness + Face Match + AML + Credit Bureau (FINTRAC), done. - AI-agent path: paste the integration prompt at
docs.didit.me/integration/integration-promptinto Claude Code, Cursor, Codex, Devin, Aider, or Replit Agent. The agent provisions the application, builds the workflow, wires the webhook, and runs a smoke test. - Five SDKs share the same session model: Web, iOS, Android, React Native, Flutter.
The first 500 verifications every month are free, forever, pilot the full Canada stack at zero cost before flipping production traffic.
Which language does the hosted verification flow use for Canadian users?
Canadian English and Canadian French, auto-detected from the user's browser / device locale. The hosted UI ships in 48+ languages; Canadian users land on the English flow by default, with Quebec users landing on the French flow when their device locale signals it.
The document-recognition layer is decoupled from the UI layer, capture works in any language, and the admin console can be set independently to whichever language your compliance team prefers.
What does the Canada verification cost end-to-end?
Per-module public pricing, pay only for what runs on the session:
- ID Verification,
$0.15per document check (all 13 provincial / territorial Driver's Licence templates). - Passive Liveness,
$0.10. Active Liveness,$0.15. - Face Match 1:1,
$0.05. Face Search 1:N, free. - AML Screening,
$0.20per check (Government of Canada consolidated sanctions included). Ongoing AML,$0.07 per user / year. - `can_consumer`,
$0.05. `can_residential`,$0.19. `can_phone`,$0.36. - `can_credit_bureau_2_non_fintrac`,
$1.05. `can_credit_bureau_fintrac`,$2.10.
The full KYC bundle (Identity + Passive Liveness + Face Match + IP Analysis) is `$0.33`, same anchor price worldwide, no Canada surcharge. 500 verifications free every month, no credit card. Volume discounts auto-apply above the free tier; Enterprise adds a custom Master Services Agreement (MSA) and data-residency choice.
Infrastructure for identity and fraud.
One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.