Identity verification
built for Gibraltar

Didit is the infrastructure layer for identity and fraud. One Application Programming Interface (API), 25+ composable modules across four product lines:

• User Verification (KYC, know your customer), Identity Document Verification, liveness, face match, Anti-Money Laundering (AML) screening, Internet Protocol (IP) analysis. $0.33 per full bundle.
• Business Verification (KYB, know your business), registry, Ultimate Beneficial Owner (UBO), officers, entity AML, plus a linked KYC session per UBO.
• Transaction Monitoring, real-time rule engine, case management, Suspicious Activity Report (SAR) workflow.
• Wallet Screening (KYT, know your transaction), on-chain wallet risk at $0.15 per check, or bring your own screening provider and run it inside Didit.

Compose any module into a workflow with the visual no-code builder, ship in 5 minutes, 500 verifications free every month, forever.

Most identity vendors sell one slice, a KYC check, an Anti-Money Laundering (AML) list, a wallet screen. Didit ships the infrastructure underneath all of them, and the gap shows up on six axes:

• Pricing. Public price on every module, $0.33 for a full KYC, 500 verifications free every month, no minimums, no contracts. Single-product vendors hide six-figure minimums behind a sales call.
• Access. Sandbox in one click, self-serve from day one, production keys on signup. Single-product vendors gate the sandbox behind a contract, months to evaluate.
• Developer experience. Public docs, a Model Context Protocol (MCP) server for Claude Code and Cursor, and native Software Development Kits (SDKs) for Web, iOS, Android, React Native, and Flutter. Integrate in 5 minutes with an AI agent or in a working afternoon by hand.
• User experience. Highest pass rates in the market, sub-2-second end-to-end inference, country-specialised capture flows, 48+ languages out of the box.
• Flexibility. One /v3/ Application Programming Interface (API) composes 25+ modules across KYC, Know Your Business (KYB), Transaction Monitoring, and Wallet Screening (KYT, know your transaction). A KYB session spawns a linked KYC for every Ultimate Beneficial Owner (UBO); a flagged transaction spawns a step-up KYC remediation, same session, same webhook contract, same audit trail. Single-product vendors sell one shape of KYC and stop there.
• AI-era fraud. 200+ real-time fraud signals scored on every session, deepfake, injection, synthetic-ID, document forgery, face-morph, device intelligence, replay. Single-product vendors treat deepfake and injection detection as roadmap items, not defaults.

Common in fintech and crypto, the same architecture fits marketplaces, iGaming, mobility, and any vertical where you need to know who someone is and what they are doing.

500 verifications free every month, forever, on every account. No credit card. No sales call. No expiry.

Above the free tier, every module has a public per-success price on didit.me/pricing, $0.33 per full KYC bundle, $0.15 per Identity Document Verification, $0.15 per Wallet Screening, $0.20 per Anti-Money Laundering (AML) Screening, $0.10 per liveness, $0.05 per face match, $0.03 per Internet Protocol (IP) analysis.

Pay-as-you-go, no minimums, no overage surprises. Volume discounts kick in automatically as you grow.

Yes. The Gibraltar Regulatory Authority (GRA) supervises every B2C and B2B remote-gambling operator under the Gambling Act 2005, Gibraltar hosts some of the world's largest licensed online-gambling brands (Bet365, Entain, William Hill, 888 Holdings) and the GRA's source-of-funds and Know-Your-Player (KYP) regime is among the strictest globally.

Didit covers the full GRA stack on one workflow:

• Identity Document Verification + Active Liveness + Face Match 1:1 for the tier-1 onboarding check.
• Age Estimation ($0.10) for under-18 gates on the marketing funnel before full KYC.
• AML Screening ($0.20 per check) against the global pool plus Gibraltar regulatory watchlists, UK OFSI, OFAC, and UN sanctions.
• Face Search 1:N (free) for self-exclusion enforcement and multi-account fraud detection.
• Ongoing AML monitoring ($0.07 per user / year) for the periodic-review obligation, plus a GFIU Suspicious Activity Report evidence pack on every hit.

Four sit on top of every Gibraltar identity-verification flow:

• Gibraltar Financial Services Commission (GFSC), unified prudential supervisor for banks, e-money institutions, payment service providers, insurers, securities firms, and Distributed Ledger Technology (DLT) providers. Post-Brexit, GFSC mirrors UK Financial Conduct Authority (FCA) standards.
• Gibraltar Regulatory Authority (GRA), supervises remote-gambling operators under the Gambling Act 2005 and runs the UK General Data Protection Regulation (UK GDPR) mandate as the Gibraltar Information Commissioner.
• Gibraltar Financial Intelligence Unit (GFIU), Gibraltar's Financial Intelligence Unit. Receives Suspicious Activity Reports under the Proceeds of Crime Act 2015 (POCA).
• HM Government of Gibraltar, issues the Gibraltar Stock Exchange Warnings register and runs the Companies House Gibraltar referenced by KYB onboarding.

Didit ships the hosted flow + the audit log + the watchlist coverage to satisfy all four at the same time, same POST /v3/session/ workflow, same JSON report, same SOC 2 Type 1 + ISO/IEC 27001 evidence pack.

The Gibraltar ID Card and the British passport with Gibraltar endorsement are both captured + OCR-parsed (and chip-read on the e-Passport) on the same session via the Identity Document Verification module.

A Gibraltar-specific Database Validation service_id is on the roadmap as Gibraltar data partners onboard, the open catalogue ships pay-per-call authoritative-source checks for the territory as each partner goes live. In the meantime:

• Identity Document Verification captures + reads + validates the Gibraltar ID Card and British passport with Gibraltar endorsement.
• AML Screening ($0.20 per check) covers the full Gibraltar regulatory watchlist surface (Gibraltar Stock Exchange Warnings) plus UK HM Treasury OFSI, OFAC SDN, UN Security Council Consolidated Sanctions, and EU Consolidated Sanctions.
• The same POST /v3/database-validation/ endpoint adds the Gibraltar service ID the moment it ships, no integration change for existing customers.

5 minutes to a working sandbox, a weekend to a production flow.

• Sign up at business.didit.me, grab an API key, call POST /v3/session/ with a workflow_id that wires ID Verification + Active Liveness + Face Match + AML, done.
• AI-agent path: paste the integration prompt at docs.didit.me/integration/integration-prompt into Claude Code, Cursor, Codex, Devin, Aider, or Replit Agent. The agent provisions the application, builds the workflow, wires the webhook, and runs a smoke test.
• Five SDKs share the same session model: Web, iOS, Android, React Native, Flutter.

The first 500 verifications every month are free, forever, pilot the full Gibraltar stack at zero cost before flipping production traffic.

English, auto-detected from the user's browser / device locale. English is the official language of Gibraltar, with the hosted UI also shipping in Spanish, Italian, Russian, and Portuguese for the cross-border player and customer base (Gibraltar shares a land border with Spain).

The document-recognition layer is decoupled from the UI layer, capture works in any language, and the admin console can be set independently to whichever language your compliance team prefers. The hosted UI ships in 48+ languages total.

Per-module public pricing, pay only for what runs on the session:

• ID Verification, $0.15 per document check.
• Passive Liveness, $0.10. Active Liveness, $0.15.
• Face Match 1:1, $0.05. Face Search 1:N, free (critical for self-exclusion enforcement).
• Age Estimation, $0.10 per check (useful for under-18 gates before full KYC on iGaming).
• AML Screening, $0.20 per check. Ongoing AML, $0.07 per user / year.

The full KYC bundle (Identity + Passive Liveness + Face Match + IP Analysis) is `$0.33`, same anchor price worldwide, no Gibraltar surcharge. 500 verifications free every month, no credit card. Volume discounts auto-apply above the free tier; Enterprise adds a custom Master Services Agreement (MSA) and data-residency choice.