Identity verification
built for El Salvador 
DUI cross-checked against the RNPN civil registry in real time, $0.33 full KYC, 500 free every month, the only crypto-native economy with a Bitcoin legal-tender mandate.




Trusted by 2,000+ organizations worldwide.
How identity verification works in El Salvador.
- Fraud landscape
- El Salvador's identity fraud landscape is shaped by DUI cloning for illicit wallet access, synthetic identities exploiting the Chivo onboarding flow, and remittance-corridor mule accounts bridging Bitcoin and USD corridors. Didit scores 200+ real-time fraud signals on every session, deepfake, injection, document tampering, device intelligence, IP geolocation.
- Compliance frameworks
- Decreto 498/1998, Ley Contra el Lavado de Dinero y de Activos (and reforms)
- Decreto Legislativo 57/2021, Ley Bitcoin
- Ley de Bancos (Decreto 697/1999)
- Transparency Portal, Ley de Acceso a la Información Pública (LAIP)
- GAFILAT 40 Recommendations
- FATF Methodology 2022
Who supervises identity verification in El Salvador.
SSF
Superintendencia del Sistema Financiero, prudential supervisor for banks, cooperativas, fintech lenders, and insurance. Owns KYC onboarding requirements and AML supervision for the Salvadoran financial system.
UIF-FGR
Unidad de Investigación Financiera de la Fiscalía General de la República, El Salvador's Financial Intelligence Unit. Receives Reportes de Operaciones Sospechosas under the Ley Contra el Lavado de Dinero y de Activos (Decreto 498/1998).
BCR
Banco Central de Reserva de El Salvador, central bank. Oversees the payment system, electronic-money operators, and provides guidance on both USD and Bitcoin legal-tender operations.
RNPN
Registro Nacional de las Personas Naturales, civil-registry authority. Issues the DUI and maintains the authoritative identity database queried by the `slv_dui` service.
IAIP
Instituto de Acceso a la Información Pública, data-protection and public-information supervisory body governing how personal data collected during digital onboarding is processed and disclosed.
Four modules. One verification.
Capture and read the DUI.
Captured on any phone, auto-classified, OCR-parsed, and template-verified.
- Documento Único de Identidad (DUI, exactly 9 digits), Pasaporte (chip read on biometric passports), Carné de Residente, Licencia de Conducir, and Carné de Minoridad.
- Returns the name, DUI number, date of birth, sex, and expiry.
- Documento Único de Identidad (DUI), 9-digit number
- Pasaporte, chip read on biometric e-Passport
- Carné de Residente
Match the face. Prove it's a real person..
Selfie confirmed live and matched against the ID portrait.
- Duplicate check: 1:N face search across existing users. Free.
- Active liveness ($0.15) for elevated-risk flows, user turns or blinks.
- Selfie on any phone or laptop camera
- Mobile-handoff QR when the user starts on desktop
Screen for sanctions, PEPs, and adverse media.
1,300+ global sanctions, PEP, and adverse-media lists, plus Salvadoran watchlists.
- Transparency Portal, Government Ethics Tribunal, El Salvador official sanctions register
- El Salvador Crime Stoppers Most Wanted, law-enforcement warnings list
- The Maritime Executive, El Salvador adverse media (SIE)
- El Salvador Times, adverse media (SIP)
- UIF-FGR, Unidad de Investigación Financiera suspicious-entity list
- SSF, Superintendencia del Sistema Financiero administrative sanctions
- BCR, Banco Central de Reserva regulatory warnings
- GAFILAT, Group of Financial Action of Latin America mutual evaluations
- FATF, Financial Action Task Force consolidated list
- UN Security Council, consolidated sanctions list
- OFAC SDN, Specially Designated Nationals
- Interpol, regional Central America red notices
Hits are scored by severity. Turn on ongoing monitoring ($0.07 per user / year) and Didit re-checks every customer daily, firing a webhook the moment a new hit appears, critical for Ley Contra el Lavado periodic-review obligations.
Screen for sanctions, PEPs, and adverse media , see the docs for the full module surface.
Cross-check against the RNPN civil registry.
Cross-checked against the authoritative civil registry.
- The `slv_dui` check (
$0.20per successful query, no end-user consent required) hits the Registro Nacional de las Personas Naturales directly,document_number(exactly 9 digits) +date_of_birthin, normalised identification fields out:identification_number,full_name. - Document number must be exactly 9 digits; remove hyphens before sending.
Cross-check against the RNPN civil registry , see the docs for the full module surface.
Every El Salvador document Didit accepts.
Civil-registry and AML coverage for El Salvador.
El Salvador — DUI verification (RNPN)
Source: Registro Nacional de las Personas Naturales (RNPN) — authoritative civil registry. $0.20 per successful query.
AML lists screened in El Salvador
1,300+ sanctions, Politically Exposed Persons (PEP), and adverse-media lists, plus the country's regulatory watchlists and PEP registries.
Open a new country in one click. We do the hard work.
Common questions about El Salvador.
What is Didit?
Didit is infrastructure for identity and fraud, the platform we wished existed when we were building products ourselves: open, flexible, and developer-friendly, so it works as a real part of your stack instead of a black box you integrate around.
One API covers verifying people (KYC, know your customer), verifying businesses (KYB, know your business), screening crypto wallets (KYT, know your transaction), and monitoring transactions in real time, on a stack built to be:
- Fast, sub-2-second p99 on every session
- Reliable, in production with 1,500+ companies across 220+ countries
- Secure, SOC 2 Type 1, ISO 27001, GDPR-native, and formally attested by Spain's financial regulator as safer than verifying someone in person
The footprint underneath: 14,000+ document types in 48+ languages, 1,000+ data sources, and 200+ fraud signals on every session. The Didit infrastructure dynamically learns from every session and gets better every day.
What does Didit ship?
Didit is the infrastructure layer for identity and fraud. One Application Programming Interface (API), 25+ composable modules across four product lines:
- User Verification (KYC, know your customer), Identity Document Verification, liveness, face match, Anti-Money Laundering (AML) screening, Internet Protocol (IP) analysis. $0.33 per full bundle.
- Business Verification (KYB, know your business), registry, Ultimate Beneficial Owner (UBO), officers, entity AML, plus a linked KYC session per UBO.
- Transaction Monitoring, real-time rule engine, case management, Suspicious Activity Report (SAR) workflow.
- Wallet Screening (KYT, know your transaction), on-chain wallet risk at $0.15 per check, or bring your own screening provider and run it inside Didit.
Compose any module into a workflow with the visual no-code builder, ship in 5 minutes, 500 verifications free every month, forever.
How is Didit different from a single-product Know Your Customer (KYC) vendor?
Most identity vendors sell one slice, a KYC check, an Anti-Money Laundering (AML) list, a wallet screen. Didit ships the infrastructure underneath all of them, and the gap shows up on six axes:
- Pricing. Public price on every module, $0.33 for a full KYC, 500 verifications free every month, no minimums, no contracts. Single-product vendors hide six-figure minimums behind a sales call.
- Access. Sandbox in one click, self-serve from day one, production keys on signup. Single-product vendors gate the sandbox behind a contract, months to evaluate.
- Developer experience. Public docs, a Model Context Protocol (MCP) server for Claude Code and Cursor, and native Software Development Kits (SDKs) for Web, iOS, Android, React Native, and Flutter. Integrate in 5 minutes with an AI agent or in a working afternoon by hand.
- User experience. Highest pass rates in the market, sub-2-second end-to-end inference, country-specialised capture flows, 48+ languages out of the box.
- Flexibility. One
/v3/Application Programming Interface (API) composes 25+ modules across KYC, Know Your Business (KYB), Transaction Monitoring, and Wallet Screening (KYT, know your transaction). A KYB session spawns a linked KYC for every Ultimate Beneficial Owner (UBO); a flagged transaction spawns a step-up KYC remediation, same session, same webhook contract, same audit trail. Single-product vendors sell one shape of KYC and stop there. - AI-era fraud. 200+ real-time fraud signals scored on every session, deepfake, injection, synthetic-ID, document forgery, face-morph, device intelligence, replay. Single-product vendors treat deepfake and injection detection as roadmap items, not defaults.
Common in fintech and crypto, the same architecture fits marketplaces, iGaming, mobility, and any vertical where you need to know who someone is and what they are doing.
Which regulators govern identity verification for digital onboarding in El Salvador?
Four authorities sit on top of every Salvadoran identity-verification flow:
- Superintendencia del Sistema Financiero (SSF), sets KYC onboarding requirements for banks, cooperativas, and fintech lenders.
- Unidad de Investigación Financiera (UIF-FGR), El Salvador's Financial Intelligence Unit. Receives Reportes de Operaciones Sospechosas under Decreto 498/1998 (Ley Contra el Lavado de Dinero y de Activos).
- Banco Central de Reserva (BCR), oversees the payment system and electronic-money operators, including guidance on Bitcoin operations under Decreto Legislativo 57/2021 (Ley Bitcoin).
- Registro Nacional de las Personas Naturales (RNPN), civil-registry authority that issues the DUI and underpins the
slv_duidatabase validation.
Didit ships the hosted flow + audit log + watchlist coverage to satisfy all four at the same time, same POST /v3/session/ workflow, same JSON report, same SOC 2 Type 1 + ISO/IEC 27001 evidence pack.
Does Didit cross-check Salvadoran identities against the RNPN registry?
Yes, via the `slv_dui` Database Validation service (POST /v3/database-validation/):
- `slv_dui`, hits the Registro Nacional de las Personas Naturales (RNPN) directly.
$0.20 per successful query, no end-user consent required. Inputs:document_number(exactly 9 digits, no hyphens) +date_of_birth. Returnsidentification_number,full_name.
Is Didit ready for crypto and Bitcoin service providers under the Ley Bitcoin?
Yes. Decreto Legislativo 57/2021 (Ley Bitcoin) made Bitcoin legal tender and created a new class of regulated service provider in El Salvador, Bitcoin wallet operators, exchanges, and payment processors, all subject to AML/CFT obligations under the existing Decreto 498/1998 (Ley Contra el Lavado).
Didit covers the full stack on one workflow:
- Identity Document Verification + Passive Liveness + Face Match 1:1 for the user-onboarding check.
- `slv_dui` Database Validation against RNPN, the authoritative source regulators expect.
- AML Screening ($0.20 per check) against the global pool plus Salvadoran regulatory watchlists (UIF-FGR lists, SSF sanctions, Ethics Tribunal, Crime Stoppers).
- Wallet Screening (KYT) at $0.15 per check for on-chain Bitcoin wallet risk scoring.
- Ongoing AML monitoring ($0.07 per user / year) for the Ley Contra el Lavado periodic-review obligation.
How long does it take to integrate Didit for El Salvador?
5 minutes to a working sandbox, a weekend to a production flow.
- Sign up at
business.didit.me, grab an API key, callPOST /v3/session/with aworkflow_idthat wires ID Verification + Passive Liveness + Face Match + AML + RNPN database, done. - AI-agent path: paste the integration prompt at
docs.didit.me/integration/integration-promptinto Claude Code, Cursor, Codex, Devin, Aider, or Replit Agent. The agent provisions the application, builds the workflow, wires the webhook, and runs a smoke test. - Five SDKs share the same session model: Web, iOS, Android, React Native, Flutter.
The first 500 verifications every month are free, forever, pilot the full El Salvador stack at zero cost before flipping production traffic.
Which language does the hosted verification flow use for Salvadoran users?
Salvadoran Spanish, auto-detected from the user's browser or device locale. The hosted UI ships in 48+ languages; Salvadoran users land on the Spanish flow by default. English is also live on the same flow for cross-border or expat users.
The document-recognition layer is decoupled from the UI layer, capture works in any language, and the admin console can be set independently to whichever language your compliance team prefers.
What does the El Salvador verification cost end-to-end?
Per-module public pricing, pay only for what runs on the session:
- ID Verification,
$0.15per document check. - Passive Liveness,
$0.10. Active Liveness,$0.15. - Face Match 1:1,
$0.05. Face Search 1:N, free. - AML Screening,
$0.20per check. Ongoing AML,$0.07 per user / year. - `slv_dui` (RNPN civil registry),
$0.20per successful query. - Wallet Screening (KYT),
$0.15per check for Bitcoin wallet risk.
The full KYC bundle (Identity + Passive Liveness + Face Match + IP Analysis) is `$0.33`, same anchor price worldwide. 500 verifications free every month, no credit card. Volume discounts auto-apply above the free tier.
Infrastructure for identity and fraud.
One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.