Identity verification
built for Morocco 
CNIE and Passport on one session, cross-checked against the Morocco Residential dataset and AMMC watchlists, $0.33 full KYC, 500 free every month.




Trusted by 2,000+ organizations worldwide.
How identity verification works in Morocco.
- Fraud landscape
- Three pressures shape Moroccan identity fraud: deepfake and synthetic-CNIE attacks targeting the country's mobile-money operators and Bank-Al-Maghrib-licensed payment institutions, CNIE and Permis de Conduire template forgery during the ongoing migration from the legacy paper credentials to the biometric chip-enabled formats, and AML pressure on the EU-Morocco remittance corridor under UTRF designations and AMMC Warnings. Didit scores 200+ real-time fraud signals on every session, face morph, replay, injection, document tampering, device intelligence, IP geolocation.
- Compliance frameworks
- Law 43-05 on Anti-Money Laundering and Counter-Terrorism Financing
- Law 09-08 on the Protection of Personal Data
- Law 103-12 (Banking Law)
- Bank Al-Maghrib Circulars on Remote Onboarding and Mobile Money
- AMMC Circulars on Customer Due Diligence
- FATF 40 recommendations
Who supervises identity verification in Morocco.
BAM
Bank Al-Maghrib, central bank of Morocco. Prudential supervisor for banks, payment institutions, mobile-money operators, and the broader payment system under Law 103-12.
AMMC
Autorité Marocaine du Marché des Capitaux, Moroccan Capital Market Authority. Securities and capital-markets supervisor; publishes the AMMC Warnings register.
UTRF
Unité de Traitement du Renseignement Financier, Morocco's Financial Intelligence Unit. Administers Law 43-05 on Anti-Money Laundering and receives Suspicious Transaction Reports.
CNDP
Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel, enforces Law 09-08 on the Protection of Personal Data. Governs every identity verification on Moroccan residents.
DGSN
Direction Générale de la Sûreté Nationale (Ministry of Interior), issuer of the CNIE biometric national identity card and the Moroccan passport. Maintains the underlying civil register.
Four modules. One verification.
Capture and read the ID.
Captured on any phone, auto-classified, OCR-parsed, and template-verified.
- CNIE (Carte Nationale d'Identité Électronique), Moroccan Passport (with the chip read on e-Passports), Permis de Conduire, and the foreign-resident Carte de Séjour.
- Returns the name, 8-character CNIE number, date of birth, sex, and expiry.
- CNIE (Carte Nationale d'Identité Électronique)
- Passport, chip read on e-Passport
- Permis de Conduire · Carte de Séjour
Match the face. Prove it's a real person..
Selfie confirmed live and matched against the ID portrait.
- Duplicate check: 1:N face search across existing users. Free.
- Active liveness ($0.15) for elevated-risk flows, user turns or blinks.
- Selfie on any phone or laptop camera
- Mobile-handoff QR when the user starts on desktop
Screen for sanctions, PEPs, and adverse media.
1,300+ global sanctions, PEP, and adverse-media lists, plus Moroccan watchlists:
- AMMC Warnings register, Autorité Marocaine du Marché des Capitaux capital-market enforcement alerts.
- Parliament of Morocco (Chambre des Représentants) PEP register, Members of Parliament (PEP Level 1).
- Justice and Development Party (PJD) PEP register, senior party officials politically exposed at national level.
- Cabinet of Morocco PEP register, ministerial and cabinet-level politically exposed persons.
- UTRF Communiqués, Designated entities and individuals, Unité de Traitement du Renseignement Financier AML designations under Law 43-05.
- Bank Al-Maghrib Circulars, Sanctioned counterparties, central-bank enforcement sanctions list.
Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.
Screen for sanctions, PEPs, and adverse media , see the docs for the full module surface.
Cross-check against the Morocco Residential dataset.
Cross-checked against the authoritative civil registry.
- `mar_residential` (
$1.08 per successful query, ~20% coverage) verifies the submitted first name, last name, and address against the Morocco Residential dataset, the authoritative real-time identity lookup for Morocco. - Pay-per-success:
$1.08per conclusive result. No charge when the source is unreachable, required fields are missing, or the request is rejected before lookup. - No user consent required, Didit handles the data-partner contract directly under Law 09-08 (Protection of Personal Data) supervised by CNDP.
Cross-check against the Morocco Residential dataset , see the docs for the full module surface.
Every Morocco document Didit accepts.
Civil-registry and AML coverage for Morocco.
Morocco Residential
Source: Telco billing records and authoritative phone data. $1.08 per successful query. Coverage ~20% of adult population.
AML lists screened in Morocco
1,300+ sanctions, Politically Exposed Persons (PEP), and adverse-media lists, plus the country's regulatory watchlists and PEP registries.
Open a new country in one click. We do the hard work.
Common questions about Morocco.
What does Didit ship?
Didit is the infrastructure layer for identity and fraud. One Application Programming Interface (API), 25+ composable modules across four product lines:
- User Verification (KYC, know your customer), Identity Document Verification, liveness, face match, Anti-Money Laundering (AML) screening, Internet Protocol (IP) analysis. $0.33 per full bundle.
- Business Verification (KYB, know your business), registry, Ultimate Beneficial Owner (UBO), officers, entity AML, plus a linked KYC session per UBO.
- Transaction Monitoring, real-time rule engine, case management, Suspicious Activity Report (SAR) workflow.
- Wallet Screening (KYT, know your transaction), on-chain wallet risk at $0.15 per check, or bring your own screening provider and run it inside Didit.
Compose any module into a workflow with the visual no-code builder, ship in 5 minutes, 500 verifications free every month, forever.
How is Didit different from a single-product Know Your Customer (KYC) vendor?
Most identity vendors sell one slice, a KYC check, an Anti-Money Laundering (AML) list, a wallet screen. Didit ships the infrastructure underneath all of them, and the gap shows up on six axes:
- Pricing. Public price on every module, $0.33 for a full KYC, 500 verifications free every month, no minimums, no contracts. Single-product vendors hide six-figure minimums behind a sales call.
- Access. Sandbox in one click, self-serve from day one, production keys on signup. Single-product vendors gate the sandbox behind a contract, months to evaluate.
- Developer experience. Public docs, a Model Context Protocol (MCP) server for Claude Code and Cursor, and native Software Development Kits (SDKs) for Web, iOS, Android, React Native, and Flutter. Integrate in 5 minutes with an AI agent or in a working afternoon by hand.
- User experience. Highest pass rates in the market, sub-2-second end-to-end inference, country-specialised capture flows, 48+ languages out of the box.
- Flexibility. One
/v3/Application Programming Interface (API) composes 25+ modules across KYC, Know Your Business (KYB), Transaction Monitoring, and Wallet Screening (KYT, know your transaction). A KYB session spawns a linked KYC for every Ultimate Beneficial Owner (UBO); a flagged transaction spawns a step-up KYC remediation, same session, same webhook contract, same audit trail. Single-product vendors sell one shape of KYC and stop there. - AI-era fraud. 200+ real-time fraud signals scored on every session, deepfake, injection, synthetic-ID, document forgery, face-morph, device intelligence, replay. Single-product vendors treat deepfake and injection detection as roadmap items, not defaults.
Common in fintech and crypto, the same architecture fits marketplaces, iGaming, mobility, and any vertical where you need to know who someone is and what they are doing.
What does it cost? Is anything actually free?
500 verifications free every month, forever, on every account. No credit card. No sales call. No expiry.
Above the free tier, every module has a public per-success price on didit.me/pricing, $0.33 per full KYC bundle, $0.15 per Identity Document Verification, $0.15 per Wallet Screening, $0.20 per Anti-Money Laundering (AML) Screening, $0.10 per liveness, $0.05 per face match, $0.03 per Internet Protocol (IP) analysis.
Pay-as-you-go, no minimums, no overage surprises. Volume discounts kick in automatically as you grow.
Which Moroccan regulator covers identity verification on a digital onboarding?
Four sit on top of every Moroccan identity-verification flow:
- Bank Al-Maghrib (BAM), central bank and prudential supervisor for banks, payment institutions, and mobile-money operators under Law 103-12 (Banking Law).
- Autorité Marocaine du Marché des Capitaux (AMMC), securities and capital-markets supervisor. Publishes the AMMC Warnings register.
- Unité de Traitement du Renseignement Financier (UTRF), Morocco's Financial Intelligence Unit. Administers Law 43-05 on Anti-Money Laundering and receives Suspicious Transaction Reports.
- Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP), enforces Law 09-08 on the Protection of Personal Data. Governs how the verification data is captured, stored, and disclosed.
Didit ships the hosted flow + the audit log + the watchlist coverage to satisfy all four at the same time, same POST /v3/session/ workflow, same JSON report, same SOC 2 Type 1 + ISO/IEC 27001 evidence pack.
Does Didit cross-check Moroccan identities against an authoritative dataset?
Yes, via the `mar_residential` Database Validation service (POST /v3/database-validation/ with services=mar_residential).
- Source: Morocco Residential, telco billing records and authoritative phone data.
- Coverage: ~20% of the adult population.
- Price:
$1.08 per successful query. - Required inputs:
first_name,last_name,address. Optionalphone. No user consent required. - Returns: normalised
address,first_name,last_nameplus per-fieldvalidationoutcomes.
The service is documented at docs.didit.me/api-reference/database-validation/morocco/residential. Pay-per-success, no contracts, you are not charged when the registry is unreachable or required fields are missing.
Does Didit screen against the Moroccan AMMC Warnings register?
Yes, on every AML Screening call.
- Didit screens names against the global pool of 1,300+ sanctions, PEP, and adverse-media lists.
- Plus every Moroccan national list UTRF expects an obliged entity to monitor, AMMC Warnings register, Parliament of Morocco PEP register, Cabinet PEP register, UTRF communiqué designations, Bank Al-Maghrib sanctioned-counterparty circulars.
- AML Screening costs
$0.20per check; Ongoing AML monitoring costs$0.07 per user / yearand re-checks every customer daily, what UTRF-obliged institutions need for the periodic-review obligation under Law 43-05.
How long does it take to integrate Didit in Morocco?
5 minutes to a working sandbox, a weekend to a production flow.
- Sign up at
business.didit.me, grab an API key, callPOST /v3/session/with aworkflow_idthat wires ID Verification + Active Liveness + Face Match + AML + Morocco Residential database, done. - AI-agent path: paste the integration prompt at
docs.didit.me/integration/integration-promptinto Claude Code, Cursor, Codex, Devin, Aider, or Replit Agent. The agent provisions the application, builds the workflow, wires the webhook, and runs a smoke test. - Five SDKs share the same session model: Web, iOS, Android, React Native, Flutter.
The first 500 verifications every month are free, forever, pilot the full Morocco stack at zero cost before flipping production traffic.
Which language does the hosted verification flow use for Moroccan users?
Arabic, auto-detected from the user's browser / device locale. The hosted UI ships in 48+ languages with full right-to-left support; Moroccan users land on the Arabic flow by default, and French and English are live on the same flow for cross-language teams.
The document-recognition layer is decoupled from the UI layer, capture works in any language, and the admin console can be set independently to whichever language your compliance team prefers.
What does the Morocco verification cost end-to-end?
Per-module public pricing, pay only for what runs on the session:
- ID Verification,
$0.15per document check. - Passive Liveness,
$0.10. Active Liveness,$0.15. - Face Match 1:1,
$0.05. Face Search 1:N, free. - AML Screening,
$0.20per check. Ongoing AML,$0.07 per user / year. - `mar_residential` (Morocco Residential, telco billing records),
$1.08per successful query.
The full KYC bundle (Identity + Passive Liveness + Face Match + IP Analysis) is `$0.33`, same anchor price worldwide, no Morocco surcharge. 500 verifications free every month, no credit card. Volume discounts auto-apply above the free tier; Enterprise adds a custom Master Services Agreement (MSA) and data-residency choice.
Infrastructure for identity and fraud.
One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.