Identity verification
built for Hong Kong SAR China

Didit is the infrastructure layer for identity and fraud. One Application Programming Interface (API), 25+ composable modules across four product lines:

• User Verification (KYC, know your customer), Identity Document Verification, liveness, face match, Anti-Money Laundering (AML) screening, Internet Protocol (IP) analysis. $0.33 per full bundle.
• Business Verification (KYB, know your business), registry, Ultimate Beneficial Owner (UBO), officers, entity AML, plus a linked KYC session per UBO.
• Transaction Monitoring, real-time rule engine, case management, Suspicious Activity Report (SAR) workflow.
• Wallet Screening (KYT, know your transaction), on-chain wallet risk at $0.15 per check, or bring your own screening provider and run it inside Didit.

Compose any module into a workflow with the visual no-code builder, ship in 5 minutes, 500 verifications free every month, forever.

Most identity vendors sell one slice, a KYC check, an Anti-Money Laundering (AML) list, a wallet screen. Didit ships the infrastructure underneath all of them, and the gap shows up on six axes:

• Pricing. Public price on every module, $0.33 for a full KYC, 500 verifications free every month, no minimums, no contracts. Single-product vendors hide six-figure minimums behind a sales call.
• Access. Sandbox in one click, self-serve from day one, production keys on signup. Single-product vendors gate the sandbox behind a contract, months to evaluate.
• Developer experience. Public docs, a Model Context Protocol (MCP) server for Claude Code and Cursor, and native Software Development Kits (SDKs) for Web, iOS, Android, React Native, and Flutter. Integrate in 5 minutes with an AI agent or in a working afternoon by hand.
• User experience. Highest pass rates in the market, sub-2-second end-to-end inference, country-specialised capture flows, 48+ languages out of the box.
• Flexibility. One /v3/ Application Programming Interface (API) composes 25+ modules across KYC, Know Your Business (KYB), Transaction Monitoring, and Wallet Screening (KYT, know your transaction). A KYB session spawns a linked KYC for every Ultimate Beneficial Owner (UBO); a flagged transaction spawns a step-up KYC remediation, same session, same webhook contract, same audit trail. Single-product vendors sell one shape of KYC and stop there.
• AI-era fraud. 200+ real-time fraud signals scored on every session, deepfake, injection, synthetic-ID, document forgery, face-morph, device intelligence, replay. Single-product vendors treat deepfake and injection detection as roadmap items, not defaults.

Common in fintech and crypto, the same architecture fits marketplaces, iGaming, mobility, and any vertical where you need to know who someone is and what they are doing.

500 verifications free every month, forever, on every account. No credit card. No sales call. No expiry.

Above the free tier, every module has a public per-success price on didit.me/pricing, $0.33 per full KYC bundle, $0.15 per Identity Document Verification, $0.15 per Wallet Screening, $0.20 per Anti-Money Laundering (AML) Screening, $0.10 per liveness, $0.05 per face match, $0.03 per Internet Protocol (IP) analysis.

Pay-as-you-go, no minimums, no overage surprises. Volume discounts kick in automatically as you grow.

Four sit on top of every Hong Kong identity-verification flow:

• Hong Kong Monetary Authority (HKMA), de facto central bank and prudential supervisor for every Authorized Institution (AI). Sets remote-onboarding requirements under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO) and Supervisory Policy Manual AML-1.
• Securities and Futures Commission (SFC), securities supervisor and Virtual Asset Trading Platform (VATP) licensor under the AMLO-amended regime in force since June 2023.
• Joint Financial Intelligence Unit (JFIU), Hong Kong's Financial Intelligence Unit, jointly run by the Hong Kong Police Force and Hong Kong Customs & Excise Department. Receives Suspicious Transaction Reports under the AMLO and the Organized and Serious Crimes Ordinance.
• Office of the Privacy Commissioner for Personal Data (PCPD), supervises the Personal Data (Privacy) Ordinance (PDPO, Cap. 486). Governs how the verification data is captured, stored and disclosed.

Didit ships the hosted flow + the audit log + the watchlist coverage to satisfy all four at the same time, same POST /v3/session/ workflow, same JSON report, same SOC 2 Type 1 + ISO/IEC 27001 evidence pack.

Two Database Validation services are live for Hong Kong (POST /v3/database-validation/):

• `hkg_kong_residential`, government-agency property-ownership data for full name + address cross-check. $1.02 per successful query, >70% adult-population coverage, no consent required.
• `hkg_kong_utility`, combined consumer, telephone and utility records. $1.65 per successful query, ~35% coverage, no consent required.

HKID, HKSAR Passport and foreign passports are captured + OCR + biometric face-matched on the hosted Identity Document Verification flow. The Immigration Department does not expose a public consumer-grade HKID verification API; the residential + utility lookups are the closest equivalent the market provides today, and they double as the Proof-of-Address signal HKMA SPM AML-1 expects.

Yes. The SFC licenses every Hong Kong crypto exchange, custodian and on-ramp operator as a Virtual Asset Trading Platform (VATP) under the AMLO-amended regime that took effect June 2023, with mandatory KYC + AML controls aligned to HKMA SPM AML-1.

Didit covers the full stack on one workflow:

• Identity Document Verification + Active Liveness + Face Match 1:1 for the tier-1 onboarding check.
• `hkg_kong_residential` Database Validation against government property-ownership data, the Proof-of-Address signal SPM AML-1 expects.
• AML Screening ($0.20 per check) against the global pool plus HKMA Register of Securities Staff, HKMA Fraudulent Websites, SFC Public Register, SFC Alert List and Hong Kong Police Anti-Deception alerts.
• Wallet Screening (KYT) at $0.15 per check for the on-chain exposure assessment the SFC VATP regime requires.
• Ongoing AML monitoring ($0.07 per user / year) for the periodic-review obligation.

5 minutes to a working sandbox, a weekend to a production flow.

• Sign up at business.didit.me, grab an API key, call POST /v3/session/ with a workflow_id that wires ID Verification + Active Liveness + Face Match + AML + Hong Kong residential database, done.
• AI-agent path: paste the integration prompt at docs.didit.me/integration/integration-prompt into Claude Code, Cursor, Codex, Devin, Aider, or Replit Agent. The agent provisions the application, builds the workflow, wires the webhook, and runs a smoke test.
• Five SDKs share the same session model: Web, iOS, Android, React Native, Flutter.

The first 500 verifications every month are free, forever, pilot the full Hong Kong stack at zero cost before flipping production traffic.

English (Hong Kong), auto-detected from the user's browser / device locale. The hosted UI ships in 48+ languages; Hong Kong users land on the English flow by default. Cantonese and Mandarin Chinese (Traditional script) are also live for users whose device locale signals Chinese.

The document-recognition layer is decoupled from the UI layer, Chinese-character names on the HKID are preserved verbatim through OCR alongside the Latin transliteration, and the admin console can be set independently to whichever language your compliance team prefers.

Per-module public pricing, pay only for what runs on the session:

• ID Verification, $0.15 per document check.
• Passive Liveness, $0.10. Active Liveness, $0.15.
• Face Match 1:1, $0.05. Face Search 1:N, free.
• AML Screening, $0.20 per check. Ongoing AML, $0.07 per user / year.
• `hkg_kong_residential`, $1.02 per successful query.
• `hkg_kong_utility`, $1.65 per successful query.

The full KYC bundle (Identity + Passive Liveness + Face Match + IP Analysis) is `$0.33`, same anchor price worldwide, no Hong Kong surcharge. 500 verifications free every month, no credit card. Volume discounts auto-apply above the free tier; Enterprise adds a custom Master Services Agreement (MSA) and data-residency choice.