Identity verification
built for Iraq 
Iraqi National ID Card and Passport on one session, screened against AMCT Fund Freezing and Local Lists plus global sanctions, $0.33 full KYC, 500 free every month.
Robinhood Ventures
Trusted by 2,000+ organizations worldwide.
How identity verification works in Iraq.
- Fraud landscape
- Three pressures shape Iraqi identity fraud: deepfake and synthetic-ID attacks targeting CBI-licensed mobile-money operators and payment service providers, National ID Card template forgery during the ongoing biometric INSAF rollout across all 18 governorates, and AML pressure from AMCT-designated entities and OFAC Iraq-sanctions programmes. Didit scores 200+ real-time fraud signals on every session, face morph, replay, injection, document tampering, device intelligence, IP geolocation.
- Compliance frameworks
- Anti-Money Laundering Law No. 39 of 2015
- Central Bank of Iraq Law No. 56 of 2004
- Banks Law No. 94 of 2004
- Counter-Terrorism Law No. 13 of 2005
- UN Security Council Resolution 1373 (counter-terrorism financing)
- MENAFATF 40 recommendations (FATF-style regional body)
Who supervises identity verification in Iraq.
CBI
Central Bank of Iraq, primary financial supervisor for banks, payment service providers, and electronic money institutions under the Central Bank of Iraq Law No. 56 of 2004 and the Banks Law No. 94 of 2004.
AMCT Office
Anti-Money Laundering and Countering Financing of Terrorism Office, Iraq's Financial Intelligence Unit. Administers Anti-Money Laundering Law No. 39 of 2015 and maintains the Fund Freezing List and Local List of designated persons and entities.
ISC
Iraqi Securities Commission, capital-markets regulator supervising securities dealers, investment funds, and listed entities. Maintains an enforcement and debarment register.
ISED
Information and Supervisory Employees Directorate · Ministry of Interior, civil registry authority responsible for the INSAF national ID programme and the civil status database.
KRG MoI
Kurdistan Regional Government Ministry of Interior, issues civil and residence documents in the Kurdistan Region of Iraq. Identity documents from the Kurdistan Region are OCR-parsed on the hosted flow.
Four modules. One verification.
Capture and read the ID.
Captured on any phone, auto-classified, OCR-parsed, and template-verified.
- Iraqi National ID Card (INSAF), Passport, Civil Status ID Card, Driving Licence, and Residence Permit (Iqama).
- Returns: full name, civil record number, date of birth, governorate of issue, nationality, expiry.
- National ID Card (INSAF biometric)
- Passport, NFC chip read on biometric series
- Civil Status ID Card · Driving Licence · Residence Permit (Iqama)
Match the face. Prove it's a real person..
Selfie confirmed live and matched against the ID portrait.
- Duplicate check: 1:N face search across existing users. Free.
- Active liveness ($0.15) for elevated-risk flows, user turns or blinks.
- Selfie on any phone or laptop camera
- Mobile-handoff QR when the user starts on desktop
Screen for sanctions, PEPs, and adverse media.
1,300+ global sanctions, PEP, and adverse-media lists, plus Iraq watchlists:
- AMCT Office, Fund Freezing List, Iraq's primary asset-freezing designations under Anti-Money Laundering Law No. 39 of 2015.
- AMCT Office, Local List, domestic terrorist and terror-financing designations maintained by the AMCT Financial Intelligence Unit.
- UN Security Council, Consolidated List, ISIL/Al-Qaida (1267/1989/2253) and Taliban (1988) designations applied in Iraq.
- OFAC SDN List, Iraq sanctions programmes, US Treasury designations targeting Iraqi regime assets, terror financing, and sanctions evasion.
- EU Consolidated Financial Sanctions List, Iraq-specific measures under EU Council regulations.
- UK Sanctions List, Iraq regime, FCDO-administered designations with asset-freeze and travel-ban components.
- MENAFATF regional risk typologies, Middle East and North Africa FATF-body guidance on designated entities and high-risk persons.
- House of Representatives of Iraq, PEP register, senior legislative-branch Politically Exposed Persons.
Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.
Screen for sanctions, PEPs, and adverse media , see the docs for the full module surface.
Cross-check the identity at scale.
- There is no public government database validation API for Iraq currently exposed as a standalone Didit service, the AMCT Office and Ministry of Interior civil registry do not currently offer a public consumer API open to third-party integrators.
The OCR + biometric + AML stack is the authoritative CBI-compliant path today: the civil record number is OCR-parsed from the INSAF card, the face is matched against the portrait, and the AML stage screens the extracted name against every Iraqi regulatory watchlist. Enterprise customers can talk to sales about emerging registry-linkage options as CBI-authorised data partners onboard.
Cross-check the identity at scale , see the docs for the full module surface.
Every Iraq document Didit accepts.
Civil-registry and AML coverage for Iraq.
Open a new country in one click. We do the hard work.
Common questions about Iraq.
What does Didit ship?
Didit is the infrastructure layer for identity and fraud. One Application Programming Interface (API), 25+ composable modules across four product lines:
- User Verification (KYC, know your customer), Identity Document Verification, liveness, face match, Anti-Money Laundering (AML) screening, Internet Protocol (IP) analysis. $0.33 per full bundle.
- Business Verification (KYB, know your business), registry, Ultimate Beneficial Owner (UBO), officers, entity AML, plus a linked KYC session per UBO.
- Transaction Monitoring, real-time rule engine, case management, Suspicious Activity Report (SAR) workflow.
- Wallet Screening (KYT, know your transaction), on-chain wallet risk at $0.15 per check, or bring your own screening provider and run it inside Didit.
Compose any module into a workflow with the visual no-code builder, ship in 5 minutes, 500 verifications free every month, forever.
How is Didit different from a single-product Know Your Customer (KYC) vendor?
Most identity vendors sell one slice, a KYC check, an Anti-Money Laundering (AML) list, a wallet screen. Didit ships the infrastructure underneath all of them, and the gap shows up on six axes:
- Pricing. Public price on every module, $0.33 for a full KYC, 500 verifications free every month, no minimums, no contracts.
- Access. Sandbox in one click, self-serve from day one, production keys on signup.
- Developer experience. Public docs, a Model Context Protocol (MCP) server, and native Software Development Kits (SDKs) for Web, iOS, Android, React Native, and Flutter. Integrate in 5 minutes.
- User experience. Highest pass rates in the market, sub-2-second inference, country-specialised capture flows, 48+ languages.
- Flexibility. One API composes 25+ modules across KYC, KYB, Transaction Monitoring, and Wallet Screening. Same webhook contract, same audit trail.
- AI-era fraud. 200+ real-time fraud signals on every session, deepfake, injection, synthetic-ID, document forgery, face-morph, device intelligence, replay.
Common in fintech and crypto, the same architecture fits marketplaces and any vertical where you need to know who someone is.
What does it cost? Is anything actually free?
500 verifications free every month, forever, on every account. No credit card. No sales call. No expiry.
Above the free tier, every module has a public per-success price on didit.me/pricing, $0.33 per full KYC bundle, $0.15 per Identity Document Verification, $0.20 per Anti-Money Laundering (AML) Screening, $0.10 per liveness, $0.05 per face match.
Pay-as-you-go, no minimums, no overage surprises. Volume discounts kick in automatically as you grow.
Which Iraqi regulator covers identity verification on a digital onboarding?
Two bodies govern every Iraqi identity-verification flow:
- Central Bank of Iraq (CBI), prudential supervisor for banks, payment service providers, and electronic money institutions under Central Bank of Iraq Law No. 56 of 2004 and Banks Law No. 94 of 2004. CBI-licensed entities must perform customer due diligence on onboarding.
- Anti-Money Laundering and Countering Financing of Terrorism Office (AMCT Office), Iraq's Financial Intelligence Unit. Administers Anti-Money Laundering Law No. 39 of 2015 and maintains the Fund Freezing List and Local List.
Didit ships the hosted flow + the audit log + the watchlist coverage to satisfy both at the same time, same POST /v3/session/ workflow, same JSON report, same SOC 2 Type 1 + ISO/IEC 27001 evidence pack.
Does Didit screen against Iraqi sanctions lists?
Yes, on every AML Screening call.
- Didit screens against the global pool of 1,300+ sanctions, PEP, and adverse-media lists.
- Plus Iraq-specific lists: AMCT Fund Freezing List, AMCT Local List, UN Security Council Consolidated List (ISIL/Al-Qaida 1267 + Taliban 1988), and OFAC SDN Iraq sanctions programmes.
- AML Screening costs
$0.20per check; Ongoing AML monitoring costs$0.07 per user / yearand re-checks every customer daily, what AMCT-obliged institutions need for the continuous-monitoring obligation under Law No. 39 of 2015.
How long does it take to integrate Didit in Iraq?
5 minutes to a working sandbox, a weekend to a production flow.
- Sign up at
business.didit.me, grab an API key, callPOST /v3/session/with aworkflow_idthat wires ID Verification + Active Liveness + Face Match + AML, done. - AI-agent path: paste the integration prompt at
docs.didit.me/integration/integration-promptinto Claude Code, Cursor, Codex, or any AI coding agent. The agent provisions the application, builds the workflow, wires the webhook, and runs a smoke test. - Five SDKs share the same session model: Web, iOS, Android, React Native, Flutter.
The first 500 verifications every month are free, forever, pilot the full Iraq stack at zero cost before flipping production traffic.
Which language does the hosted verification flow use for Iraqi users?
Arabic, auto-detected from the user's browser or device locale. The hosted UI ships in 48+ languages with full right-to-left support; Iraqi users land on the Arabic flow by default. Kurdish is also supported for users in the Kurdistan Region.
The document-recognition layer is decoupled from the UI layer, capture works in any language, and the admin console can be set to whichever language your compliance team prefers.
Infrastructure for identity and fraud.
One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.