Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Europe

Identity verification
built for Portugal Flag of Portugal

Cartão de Cidadão and Portuguese passport on one session, AMLD6 + GDPR aligned — $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Portugal.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Portuguese identity fraud: synthetic Cartão de Cidadão attacks on the wave of MiCA-licensed crypto exchanges and fintech wallets, deepfake injection on digital-nomad-visa remote onboarding flows, and cross-border iGaming pressure as SRIJ-licensed operators expand. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • Lei 83/2017 (PBC/FT)
  • AMLD6
  • MiCA
  • eIDAS 2.0
  • DORA
  • GDPR / Lei 58/2019
  • Aviso 1/2022 do Banco de Portugal (PBC/FT)
Regulators

Who supervises identity verification in Portugal.

These are the supervisors a Portugal verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • Banco de Portugal

    Central bank and prudential supervisor for banks, payment institutions (IP) and electronic money institutions (IME).

  • CMVM

    Comissão do Mercado de Valores Mobiliários — securities supervisor and competent authority for crypto-asset service providers under the Markets in Crypto-Assets (MiCA) Regulation.

  • ASF

    Autoridade de Supervisão de Seguros e Fundos de Pensões — supervisor for insurance undertakings and pension funds.

  • CNPD

    Comissão Nacional de Proteção de Dados — General Data Protection Regulation (GDPR) and Lei 58/2019 supervisor.

  • Autoridade Tributária

    Autoridade Tributária e Aduaneira — tax and customs authority. Operates the NIF (Número de Identificação Fiscal) registry used in KYB and treasury onboarding.

  • UIF Portugal

    Unidade de Informação Financeira at the Polícia Judiciária — Financial Intelligence Unit. Receives suspicious-transaction reports under Lei 83/2017.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Portugal database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • Works for every active Portuguese credential — Cartão de Cidadão (with chip read on the contactless interface), Passaporte português (chip read on e-Passports), Título de Residência for foreign nationals, every EU / EEA national identity card, and the Carta de Condução.
  • Returns the name, document number, NIF (where present), date of birth, sex, and expiry.
Read the docs
Stage 01Capture and read the ID
  • Cartão de Cidadão (chip + NFC)
  • Passaporte português · Título de Residência
  • EU / EEA national IDs · Carta de Condução
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

Didit screens the user's name against the global pool of 1,300+ sanctions, Politically Exposed Persons (PEP), and adverse-media lists, plus every Portuguese regulatory watchlist (National Assembly PEP register, Banco Português de Gestão, Caixa Geral de Depósitos PEP, Portugal OSAE warnings, UIF Portugal alerts at the Polícia Judiciária).

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Cross-check residential address against Portuguese records.

Cross-checked against the authoritative civil registry.

  • The `prt_residential` check ($1.02 per successful query, ~50% coverage, no consent required) aggregates Portuguese residential records — first_name, last_name, address in, validated address envelope out.
  • The Cartão de Cidadão chip read is the authoritative-source path for civil-registry data — the residential check complements that with a real-world address signal.
Read the docs
Stage 04Cross-check residential address against Portuguese records

Cross-check residential address against Portuguese records — see the docs for the full module surface.

Documents covered

Every Portugal document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Portugal.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page