Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Middle East & Africa

Identity verification
built for Iraq Flag of Iraq

Iraqi National ID Card and Passport on one session, screened against AMCT Fund Freezing and Local Lists plus global sanctions — $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Iraq.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Iraqi identity fraud: deepfake and synthetic-ID attacks targeting CBI-licensed mobile-money operators and payment service providers, National ID Card template forgery during the ongoing biometric INSAF rollout across all 18 governorates, and AML pressure from AMCT-designated entities and OFAC Iraq-sanctions programmes. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • Anti-Money Laundering Law No. 39 of 2015
  • Central Bank of Iraq Law No. 56 of 2004
  • Banks Law No. 94 of 2004
  • Counter-Terrorism Law No. 13 of 2005
  • UN Security Council Resolution 1373 (counter-terrorism financing)
  • MENAFATF 40 recommendations (FATF-style regional body)
Regulators

Who supervises identity verification in Iraq.

These are the supervisors a Iraq verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • CBI

    Central Bank of Iraq — primary financial supervisor for banks, payment service providers, and electronic money institutions under the Central Bank of Iraq Law No. 56 of 2004 and the Banks Law No. 94 of 2004.

  • AMCT Office

    Anti-Money Laundering and Countering Financing of Terrorism Office — Iraq's Financial Intelligence Unit. Administers Anti-Money Laundering Law No. 39 of 2015 and maintains the Fund Freezing List and Local List of designated persons and entities.

  • ISC

    Iraqi Securities Commission — capital-markets regulator supervising securities dealers, investment funds, and listed entities. Maintains an enforcement and debarment register.

  • ISED

    Information and Supervisory Employees Directorate · Ministry of Interior — civil registry authority responsible for the INSAF national ID programme and the civil status database.

  • KRG MoI

    Kurdistan Regional Government Ministry of Interior — issues civil and residence documents in the Kurdistan Region of Iraq. Identity documents from the Kurdistan Region are OCR-parsed on the hosted flow.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Iraq database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • Iraqi National ID Card (INSAF), Passport, Civil Status ID Card, Driving Licence, and Residence Permit (Iqama).
  • Returns: full name, civil record number, date of birth, governorate of issue, nationality, expiry.
Read the docs
Stage 01Capture and read the ID
  • National ID Card (INSAF biometric)
  • Passport — NFC chip read on biometric series
  • Civil Status ID Card · Driving Licence · Residence Permit (Iqama)
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists — plus Iraq watchlists:

  • AMCT Office — Fund Freezing List — Iraq's primary asset-freezing designations under Anti-Money Laundering Law No. 39 of 2015.
  • AMCT Office — Local List — domestic terrorist and terror-financing designations maintained by the AMCT Financial Intelligence Unit.
  • UN Security Council — Consolidated List — ISIL/Al-Qaida (1267/1989/2253) and Taliban (1988) designations applied in Iraq.
  • OFAC SDN List — Iraq sanctions programmes — US Treasury designations targeting Iraqi regime assets, terror financing, and sanctions evasion.
  • EU Consolidated Financial Sanctions List — Iraq-specific measures under EU Council regulations.
  • UK Sanctions List — Iraq regime — FCDO-administered designations with asset-freeze and travel-ban components.
  • MENAFATF regional risk typologies — Middle East and North Africa FATF-body guidance on designated entities and high-risk persons.
  • House of Representatives of Iraq — PEP register — senior legislative-branch Politically Exposed Persons.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Cross-check the identity at scale.

  • There is no public government database validation API for Iraq currently exposed as a standalone Didit service — the AMCT Office and Ministry of Interior civil registry do not currently offer a public consumer API open to third-party integrators.

The OCR + biometric + AML stack is the authoritative CBI-compliant path today: the civil record number is OCR-parsed from the INSAF card, the face is matched against the portrait, and the AML stage screens the extracted name against every Iraqi regulatory watchlist. Enterprise customers can talk to sales about emerging registry-linkage options as CBI-authorised data partners onboard.

Read the docs
Stage 04Cross-check the identity at scale

Cross-check the identity at scale — see the docs for the full module surface.

Documents covered

Every Iraq document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Authoritative datasets

Civil-registry and AML coverage for Iraq.

One card per dataset Didit cross-checks against — civil registries on the Database Validation API plus the global AML watchlist pool. Each card links to the technical docs.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Iraq.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page