Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Europe

Identity verification
built for Iceland Flag of Iceland

Iceland's Financial Supervisory Authority (FME) mandates CDD for every regulated entity — Didit delivers ID, liveness, AML, and the $0.33 bundle at 500 free checks per month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Iceland.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Iceland faces deepfake and synthetic-identity fraud pressure on its growing fintech and crypto sectors, amplified by cross-border exposure from the Schengen zone. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • Act on Measures Against Money Laundering and Terrorist Financing No. 140/2018
  • GDPR (via EEA Agreement, Act No. 90/2018)
  • FATF 40 Recommendations
  • MONEYVAL evaluation framework
  • eIDAS 2.0 (via EEA Agreement alignment)
Regulators

Who supervises identity verification in Iceland.

These are the supervisors a Iceland verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • FME

    Fjármálaeftirlitið (Financial Supervisory Authority) — primary regulator for banks, payment institutions, insurers, and securities dealers. Enforces AML/CFT under Act No. 140/2018 (the AMLD transposition).

  • Persónuvernd

    Icelandic Data Protection Authority — enforces GDPR as adopted under the EEA Agreement. Governs every identity verification conducted on Icelandic residents.

  • Þjóðskrá Íslands

    Statistics Iceland / National Registry — issues national IDs, maintains the Kennitala personal identification number registry, and is the authoritative source of civil identity records.

  • Seðlabanki Íslands

    Central Bank of Iceland — oversees payment systems, foreign exchange, and macro-prudential stability. Coordinates with FME on systemic financial risk.

  • Ríkisskattstjóri

    Directorate of Internal Revenue — collects beneficial ownership and UBO information under the Company Registration Act and AML framework for tax-compliance cross-referencing.

  • Samkeppniseftirlitið

    Icelandic Competition Authority — PEP Level 3 regulatory body whose senior officials appear in the Didit AML screening layer under FME guidance.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Iceland database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the Icelandic ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • Vegabréf (biometric passport), Nafnskírteini (national ID card), Ökuskírteini, and EEA residence permits.
  • Returns: full name, Kennitala (personal ID number), date of birth, document number, expiry, MRZ.
Read the docs
Stage 01Capture and read the Icelandic ID
  • Vegabréf (biometric passport) — NFC chip read
  • Nafnskírteini (national identity card)
  • Ökuskírteini (driving licence)
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists — plus Iceland watchlists:

  • Parliament of Iceland (Alþingi) — PEP Level 1 (legislators and senior state officials).
  • Supreme Court of Iceland — judgements and enforcement designations.
  • Fjármálaeftirlitið (FME) — regulatory warnings and enforcement notices.
  • Financial Intelligence Unit Iceland (FIU-IS) — SAR-derived designations.
  • MONEYVAL — Council of Europe AML evaluation findings.
  • FATF 40 Recommendations — risk-jurisdiction monitoring.
  • UN Security Council Consolidated Sanctions List — global designations (S/RES/1267 et seq.).
  • OFAC Specially Designated Nationals (SDN) — US Treasury designations.
  • EU Consolidated Financial Sanctions List — EEA-applicable enforcement.
  • Interpol Notices — international law enforcement designations.
  • Basel AML Index — annual risk-scoring for Iceland.
  • Europol Most Wanted — cross-border European law enforcement.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Document validation — no public registry API in Iceland.

There is no public government database validation API for Iceland currently exposed as a standalone Didit service — Þjóðskrá Íslands (the National Registry) does not currently offer a public consumer API open to third-party integrators for Kennitala cross-checks.
Read the docs
Stage 04Document validation — no public registry API in Iceland

Document validation — no public registry API in Iceland — see the docs for the full module surface.

Documents covered

Every Iceland document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Authoritative datasets

Civil-registry and AML coverage for Iceland.

One card per dataset Didit cross-checks against — civil registries on the Database Validation API plus the global AML watchlist pool. Each card links to the technical docs.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Iceland.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page