Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Europe

Identity verification
built for Malta Flag of Malta

Maltese ID card, passport, driving licence on one session — MGA iGaming + MFSA + EU 2019/1157 + ICAO 9303 aligned. $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Malta.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Two pressures shape Maltese identity fraud: deepfake and synthetic-ID attacks on the world's densest online-gaming licensing regime (Malta Gaming Authority — MGA), and cross-border forgery pressure across the EU MiCA crypto-licensing window with MFSA-supervised Virtual Financial Asset providers. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • Chapter 373 (Prevention of Money Laundering Act)
  • AMLD6
  • MGA Gaming Act 2018
  • MFSA VFA Act
  • MiCA
  • DORA
  • GDPR
  • EU Reg. 2019/1157 (Maltese ID)
Regulators

Who supervises identity verification in Malta.

These are the supervisors a Malta verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • MGA

    Malta Gaming Authority — supervises B2C and B2B remote-gaming operators worldwide under the Gaming Act 2018. Player-onboarding, source-of-funds, and KYC requirements among the strictest in the EU.

  • MFSA

    Malta Financial Services Authority — unified supervisor for banks, payment institutions, electronic-money issuers, securities firms, insurers, and Virtual Financial Asset (VFA) Service Providers under VFA Act + MiCA.

  • FIAU

    Financial Intelligence Analysis Unit — Malta's Financial Intelligence Unit. Receives Suspicious Activity Reports under Chapter 373 (Prevention of Money Laundering Act).

  • IDPC

    Information and Data Protection Commissioner — General Data Protection Regulation (GDPR) supervisor for Malta. Governs every identity verification on Maltese residents.

  • ARC

    Asset Recovery Bureau — Malta's anti-criminal-asset authority. Maintains adverse-media and Special-Interest-Person (SIP) watchlists used in AML screening for Maltese nationals and entities.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Malta database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • Maltese Identity Card (the chip-enabled card mandated under EU Reg. 2019/1157), Maltese passport (with the chip read on e-Passports), driving licence, residence permit, and eResidence card for long-term residents.
  • Returns the name, ID number, date of birth, place of issue, and expiry. Same flow handles every EU/EEA national identity card under AMLD6 mutual recognition for players and customers crossing borders.
Read the docs
Stage 01Capture and read the ID
  • Maltese Identity Card · Residence permit
  • eResidence card · Driving licence
  • Maltese passport — chip read on e-Passport
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Same selfie is searched against the customer's prior users — catches anyone trying to onboard twice or under a different name. Critical for MGA-licensed operators chasing self-excluded players or multi-account fraud rings. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists — plus Maltese watchlists:

  • House of Assembly (Malta) — PEP register — PEP Level 1 elected officials and senior public figures.
  • Asset Recovery Bureau — Adverse media (SIP) — Special-Interest-Person adverse-media signals.
  • Malta Transport Maritime — Warnings — maritime regulatory warning register.
  • MFSA — Regulatory enforcement watchlist — Malta Financial Services Authority enforcement actions.
  • MGA — Player protection and enforcement register — Malta Gaming Authority licensed-operator enforcement.
  • Police Economic Crimes Unit — financial crime investigation register.
  • Malta Revenue Authority — tax enforcement and flagged entities.
  • EU Consolidated Sanctions — applies under EU law enforcement in Malta.
  • OFAC SDN — Specially Designated Nationals applicable to cross-border exposure.
  • UN Security Council Consolidated Sanctions — binding on all EU member states.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Add country-specific data sources as Malta partners onboard.

Malta does not currently expose a country-specific Database Validation service in Didit's open catalogue — there is no public government registry API for Malta that is open to third-party integrators today. The Maltese ID Card is captured + OCR + chip-read on the same session via the Identity Document Verification module, and authoritative-source residential checks ship as Malta data partners come online.

  • The full AML Screening surface ($0.20 per check) is live today — global sanctions, PEPs, adverse media, EU Consolidated Sanctions, OFAC SDN, UN sanctions, plus the Maltese watchlists listed above.
  • For elevated-assurance flows, pair Identity Document Verification with Active Liveness + Face Match 1:1 + AML Screening — the standard tier-1 onboarding stack for MGA-licensed operators and MFSA-supervised entities.
Read the docs
Stage 04Add country-specific data sources as Malta partners onboard

Add country-specific data sources as Malta partners onboard — see the docs for the full module surface.

Documents covered

Every Malta document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Authoritative datasets

Civil-registry and AML coverage for Malta.

One card per dataset Didit cross-checks against — civil registries on the Database Validation API plus the global AML watchlist pool. Each card links to the technical docs.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Malta.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page