Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Asia-Pacific

Identity verification
built for India Flag of India

Aadhaar, PAN, Voter ID and Indian passport on one session, cross-checked against UIDAI, the Income Tax Department, the Election Commission, the Road Transport Office and Passport Seva — $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in India.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Indian identity fraud: deepfake and synthetic-Aadhaar attacks on neobank and UPI-PSP onboarding, high-volume PAN and Voter-ID forgery, and the explosive growth of cross-border crypto on-ramps under the PMLA-mandated VDA Service Provider regime. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • RBI Customer Due Diligence Master Direction
  • Prevention of Money Laundering Act (PMLA)
  • SEBI KYC Registration Agency framework
  • Aadhaar Act 2016
  • Digital Personal Data Protection Act 2023
  • PMLA VDA Service Provider regime (crypto)
Regulators

Who supervises identity verification in India.

These are the supervisors a India verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • RBI

    Reserve Bank of India — central bank. Issues the Customer Due Diligence Master Direction binding on banks, payment aggregators, Payments Banks, and Non-Banking Financial Companies (NBFCs).

  • SEBI

    Securities and Exchange Board of India — capital-markets supervisor. Sets the KYC Registration Agency (KRA) framework for mutual funds, brokers, and depository participants.

  • UIDAI

    Unique Identification Authority of India — issues Aadhaar and governs the offline-XML, paperless-eKYC, and online-eKYC channels under the Aadhaar Act 2016.

  • FIU-IND

    Financial Intelligence Unit-India — receives Suspicious Transaction Reports under the Prevention of Money Laundering Act (PMLA). Regulates VDA Service Providers (crypto).

  • MeitY

    Ministry of Electronics and Information Technology — implementing authority for the Digital Personal Data Protection Act 2023. Governs how the verification data is captured, stored, and disclosed.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a India database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • Aadhaar, PAN, Voter ID, Indian e-Passport (with the chip read), driving licence (all 29 state templates), and DigiLocker issuer-signed credentials.
  • Returns the name, document number, date of birth, address, and gender. Devanagari, Bengali, Tamil, and the other regional scripts are preserved verbatim through OCR.
Read the docs
Stage 01Capture and read the ID
  • Aadhaar (offline XML or live UIDAI eKYC for AUA-licensed entities)
  • Permanent Account Number (PAN)
  • Voter ID (EPIC) — Elector Photo Identity Card
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

Didit screens the user's name against the global pool of 1,300+ sanctions, Politically Exposed Persons (PEP), and adverse-media lists, plus every Indian regulatory watchlist (Ministry of Home Affairs Banned Organisations + Unlawful Associations, Parliament of India + Council of States, every Ministry of the Government of India PEP register, Insolvency and Bankruptcy Board of India).

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Cross-check against UIDAI, ITD, ECI, RTO and Passport Seva.

Cross-checked against the authoritative civil registry.

  • The Aadhaar check (ind_aadhaar, ~100% coverage) hits UIDAI directly with name + DOB + Aadhaar number + PAN.
  • The PAN check (ind_pan_permanent_account_number, ~100% coverage) hits the Income Tax Department database.
  • EPIC (ind_epic_voter_s_registration), Driver's Licence (ind_drivers_licence), and Passport (ind_passport) round out the coverage on the Election Commission, the Road Transport Offices, and Passport Seva Kendra respectively.
  • Run them in parallel and Didit picks the cheap one first, only paying for the deeper check when the first one is inconclusive.
Read the docs
Stage 04Cross-check against UIDAI, ITD, ECI, RTO and Passport Seva

Cross-check against UIDAI, ITD, ECI, RTO and Passport Seva — see the docs for the full module surface.

Documents covered

Every India document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Authoritative datasets

Civil-registry and AML coverage for India.

One card per dataset Didit cross-checks against — civil registries on the Database Validation API plus the global AML watchlist pool. Each card links to the technical docs.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about India.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page