Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Asia-Pacific

Identity verification
built for Kazakhstan Flag of Kazakhstan

Kazakh ID Card (Куәлік), Foreign Passport and Driving Licence on one session, screened against Kazakh regulatory watchlists — $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Kazakhstan.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Kazakh identity fraud: deepfake and synthetic-ID attacks on the rapidly-growing fintech and crypto markets centred on the AIFC, ID Card forgery across the chip-card format, and cross-border AML pressure across the Central Asian remittance corridor. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • Law 191-IV (PLA/FT)
  • Law 94-V (Personal Data)
  • NBRK + AFR Regulations on CDD
  • AIFC AML/CFT Rules (off-shore)
  • FATF 40 recommendations
Regulators

Who supervises identity verification in Kazakhstan.

These are the supervisors a Kazakhstan verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • NBRK

    National Bank of the Republic of Kazakhstan — central bank, monetary-policy authority, and operator of the national payment system.

  • AFR

    Agency of the Republic of Kazakhstan for Regulation and Development of the Financial Market — supervises banks, payment institutions, microfinance organisations, insurers, and non-bank financial organisations.

  • Financial Monitoring Agency

    Financial Monitoring Agency of the Republic of Kazakhstan — Kazakhstan's Financial Intelligence Unit. Receives Suspicious Transaction Reports under Law 191-IV on countering money laundering and the financing of terrorism.

  • PDP Committee

    Personal Data Protection Committee under the Ministry of Digital Development, Innovation and Aerospace Industry — enforces Law 94-V on Personal Data and its Protection.

  • AIFC

    Astana International Financial Centre — independent financial-services jurisdiction with its own English-law-based regulator (AFSA), separate from the on-shore Kazakh regime.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Kazakhstan database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • the chip-enabled ID Card (Жеке куәлік), Foreign Passport (Қазақстан паспорты, with the chip read on e-Passports), Driving Licence and Residence Permit.
  • Returns the name, 12-digit Individual Identification Number (IIN), date of birth, place of issue, and expiry.
Read the docs
Stage 01Capture and read the ID
  • Kazakh ID Card (Куәлік)
  • Foreign Passport — chip read on e-Passport
  • Driving Licence · Residence Permit
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists — plus Kazakh watchlists:

  • Government of Kazakhstan — State-Invested Enterprise (SIE) register — entities with state beneficial ownership.
  • State Revenue Committee (KZKGD) — SIE register — Ministry of Finance state-invested entity designations.
  • Anti-Corruption Agency (KZACA) — State-Invested Person (SIP) register — persons with connections to state-owned entities.
  • State Register of Industrial Property Objects — Warnings — regulatory warnings register.
  • Assembly of the Republic — PEP Level 1 — senators and senior legislative officials.
  • House of Representatives — PEP Level 3 — Majilis deputies.
  • Kazakhstan Railways (KTZ) — PEP Level 3 — senior officers of the national railway state enterprise.
  • Financial Monitoring Agency — terrorist-financing designated entities — FMA-maintained AML/CFT designations under Law 191-IV.
  • National Security Committee (KNB) — security watchlist — persons of interest and security-service notices.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Bind every check to one audited session.

Kazakhstan does not currently expose a public consumer government API for civil-registry lookups — no database validation service exists for the State Corporation 'Government for Citizens' IIN register.

  • The 12-digit Individual Identification Number (IIN) is OCR-parsed from the Kazakh ID Card on every capture and surfaced on the JSON report — cross-checkable against the customer's in-house registry without a separate Didit call.
  • Wire ID Verification + Active Liveness + Face Match + AML into a single workflow in the visual no-code builder. The full bundle anchors at $0.33 per session with a tamper-evident audit log the Financial Monitoring Agency expects under Law 191-IV.
  • An authoritative-source IIN lookup against eGov.kz is on the upcoming Database Validation roadmap — Enterprise customers can talk to sales to wire it into their workflow.
Read the docs
Stage 04Bind every check to one audited session

Bind every check to one audited session — see the docs for the full module surface.

Documents covered

Every Kazakhstan document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Authoritative datasets

Civil-registry and AML coverage for Kazakhstan.

One card per dataset Didit cross-checks against — civil registries on the Database Validation API plus the global AML watchlist pool. Each card links to the technical docs.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Kazakhstan.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page