Identity verification in Portugal
Document verification, biometric liveness and AML screening for businesses operating in Portugal — at $0.30 per verification.
Documents supported
(Government IDs from 220+ countries)
Average verification time
Countries covered
(Government-issued IDs validated)
Market overview
Portugal is a EUR 270 billion-GDP EU economy with 10.5 million residents, a euro-area member since 1999, and one of the most outward-facing digital markets in Southern Europe. Lisbon is the gravitational centre: more than 60% of the country's fintechs are headquartered there, and the Portugal Fintech Report 2025 pegs cumulative fintech investment at close to EUR 1.2 billion for 2025 alone, with nearly a third of Portuguese fintechs having been founded in the previous two years. The city also hosts Web Summit every November, which in 2025 drew 70,000+ attendees, 2,725 startups from 108 countries, and 1,800+ investors, with fintech among the top five exhibited verticals. Beyond fintech, Portugal has three reinforcing tailwinds for identity verification vendors:
Supported documents
Didit templates cover national IDs, passports, residence permits and regional documents — plus 14,000+ documents globally for cross-border flows.
Regulators
primary AML supervisor for credit institutions, payment institutions, e-money institutions, exchange offices and crypto VASPs
Comissão do Mercado de Valores Mobiliários
Autoridade de Supervisão de Seguros e Fundos de Pensões
Unidade de Informação Financeira
Comissão Nacional de Proteção de Dados
the online and land-based gambling regulator under Turismo de Portugal
IRN (Instituto dos Registos e do Notariado)
regulated
Electronic ID card combining civil, tax, social security, and health numbers. Chip-based with digital certificates for authentication and signing.
AMA (Agência para a Modernização Administrativa)
regulated
Mobile digital identity solution. Enables remote identity verification for public and private services. eIDAS-notified.
AT (Autoridade Tributária e Aduaneira)
regulated
Tax identification number. Online validation available.
Government & regulated databases
Compliance framework
AML framework
Supervised by Banco de Portugal
Portuguese AML/CFT rules are consolidated in Lei n.º 83/2017, de 18 de agosto (published on dre.pt), which transposed the 4th AMLD and was later amended to transpose the 5th and 6th AMLDs. The law applies to credit institutions, payment and e-money institutions, investment firms, insurers, crypto-asset service providers, real estate agents, lawyers, notaries, accountants, casinos and SRIJ-licensed online gambling operators. Obliged entities must: identify and verify customers and beneficial owne
Data protection
Supervised by CNPD
- Legal basis for processing. GDPR + Lei n.º 58/2019 for data protection; Lei 83/2017 art. 50–53 for AML-specific record keeping; Lei n.º 41/2004 for e-privacy. - Retention. Identification data, verification evidence and transaction records must be kept for seven years after the end of the business
Penalties for non-compliance
Administrative AML enforcement in Portugal has tightened year on year. BdP can impose fines from EUR 50,000 to EUR 5,000,000 on legal persons for AML failings — including remote onboarding shortcomings, UBO gaps, and sanctions-screening failures — and publishes sanctioning decisions on its register.
Use cases
Neobanks, EMIs, payment institutions, lenders, brokerages.
Under Lei 83/2017 and Aviso BdP 1/2022, a compliant remote onboarding flow for a Portuguese resident opening a neobank account typically combines:
Exchanges, custodians, wallets, on/off-ramps.
Portugal introduced a mandatory VASP registration regime at BdP in 2020 (via the 5th AMLD transposition), making BdP the competent authority for AML supervision of crypto-asset exchange, custody and transfer services. The public list of registered entities on bportugal.pt currently includes roughly
Sports betting, online casinos, age-gated platforms.
SRIJ licences some of the EU's most active online gambling operators. Under the gambling legal framework (Decreto-Lei n.º 66/2015 as amended) and SRIJ technical regulations, operators must:
Gig platforms, delivery, creator economy, e-commerce.
Marketplaces and gig platforms are not directly regulated under Lei 83/2017 unless they provide regulated financial services, but EU rules (DSA, P2B, payments licensing via a BaaS partner) create heavy de-facto KYC requirements for seller, driver, host and creator onboarding. The standard Portuguese
Biometric liveness
BdP's Aviso 1/2022 explicitly contemplates technology-assisted remote onboarding, and BdP's March 2022 thematic paper Perspetivas sobre Onboarding Digital outlines the supervisor's expectation that operators deploy active or passive liveness detection, presentation-attack detection (PAD), and injection-attack defences calibrated to the risk of the product. ISO/IEC 30107-3 PAD compliance is the practical benchmark supervisors look for, and injection-attack defences (virtual cameras, deepfake vide
CERTIFICATIONS
Our platform meets the highest international standards for information security, data privacy, and biometric accuracy.
Full EU data protection compliance
Information security management
PAD (liveness + face match)
TRUSTED WORLDWIDE
Join thousands of companies that trust Didit for their verification needs
Didit’s NFC + active biometrics technology blocks the most advanced fraud scenarios, offering a level of security equivalent to or superior to in-person verification.
Spanish Financial Sandbox
CNMV, SEPBLAC & Spanish Treasury — Conclusions Report
Didit is an exceptionally valuable partner, delivering a stable and highly adaptable solution”.
Vuk Adžić
Head of the E-Business Department at Crnogorski Telekom
Didit offered us a robust technology with a simple implementation and adaptability to different markets”.
Fernando Pinto
CEO & CoFounder at TucanPay
Thanks to Didit we have been able to reduce manual processes and improve data extraction accuracy”.
Diana Garcia
Trust & Safety Executive at Shiply
Didit’s integration slashed verification times and costs, freeing resources for other projects”.
Guillem Medina
COO at GBTC Finance
Didit removed KYC costs, enabling faster scaling with high verification standards and less fraud.”
Paul Martin
VP Marketing & Growth at Bondex
Didit’s secure, user-friendly verification boosts customer trust and optimizes our process.”
Cristofer Montenegro
Executive assistant to the CEO at Adelantos
Didit ensures a precise, secure digital onboarding without slowing negotiations or client time.”
Ernesto Betancourth
Gerente de riesgos at CrediDemo
FAQ
Yes. Portugal permits remote KYC onboarding under its national AML framework, including document verification, biometric liveness and video identification where required by regulation.
Didit verifies all major national IDs, passports and residence permits issued in Portugal, plus 14,000+ document types globally for cross-border flows.
Didit charges $0.30 per verification with 500 free checks per month. No contracts, no minimums. Competitors typically charge $1.00–$2.50+ per verification.
Yes. Didit screens against 1,000+ global watchlists including PEP databases, sanctions lists (EU, UN, OFAC, OFSI), and adverse media — covering all AML obligations in Portugal.
Most regulated sectors in Portugal require or strongly recommend biometric liveness detection for remote onboarding. Didit provides ISO 30107-3 PAD Level 2 certified liveness.
Yes. Didit supports document verification, liveness, AML screening and ongoing monitoring aligned with Portugal’s crypto regulatory framework, including EU Travel Rule compliance where applicable.
Yes. Didit provides document-based age verification and identity confirmation suitable for Portugal’s iGaming regulatory requirements.
500 free verifications per month. No contracts, no minimums. $0.30 per verification after the free tier.
