Identity verification
built for South Korea 
Resident Registration Card, Driver's Licence, Korean passport and Alien Registration Card on one session, with FSC-aligned AML screening, $0.33 full KYC, 500 free every month.




Trusted by 2,000+ organizations worldwide.
How identity verification works in South Korea.
- Fraud landscape
- Three pressures shape Korean identity fraud: deepfake and synthetic-RRC attacks on the wave of digital banks (KakaoBank, K Bank, Toss Bank) and big-tech payment platforms, VASP onboarding pressure following the September 2021 Specific Financial Information Act regime that requires every crypto exchange to register with KOFIU, and Alien Registration Card forgery across the 2.5M+ foreign-resident population. Didit scores 200+ real-time fraud signals on every session, face morph, replay, injection, document tampering, device intelligence, IP geolocation.
- Compliance frameworks
- Specific Financial Information Act (특정 금융거래정보법)
- Act on Reporting and Using Specified Financial Transaction Information
- Personal Information Protection Act (PIPA, 개인정보 보호법)
- FSC AML/CFT Operating Guidelines
- Banking Act
- Electronic Financial Transactions Act
- FATF 40 recommendations
Who supervises identity verification in South Korea.
FSC
Financial Services Commission (금융위원회), top-level policy supervisor for banks, securities firms, insurance carriers, payment service providers and Virtual Asset Service Providers (VASP). Sets remote-onboarding rules under the Specific Financial Information Act and the AML/CFT Operating Guidelines.
FSS
Financial Supervisory Service (금융감독원), operational examiner that inspects every regulated financial institution on the FSC's behalf. The on-the-ground AML/CFT auditor.
KOFIU
Korea Financial Intelligence Unit (한국금융정보분석원), South Korea's FIU, housed in the FSC. Receives Suspicious Transaction Reports and Currency Transaction Reports under the Specific Financial Information Act.
PIPC
Personal Information Protection Commission (개인정보보호위원회), enforces the Personal Information Protection Act (PIPA, 개인정보 보호법). Governs how identity-verification data (including the Resident Registration Number) is collected, used, retained and disclosed.
KISA
Korea Internet and Security Agency, enforces cybersecurity and information-security standards for online-service operators under the Network Act (정보통신망법). Identity-verification platforms processing Korean personal data must meet KISA security standards.
Four modules. One verification.
Capture and read the ID.
Captured on any phone, auto-classified, OCR-parsed, and template-verified.
- Works for every primary Korean credential, Resident Registration Card (주민등록증), Driver's Licence (new IC-chip format), Korean Passport with the chip read on e-Passports, and the Alien Registration Card issued to foreign residents staying longer than 90 days.
- Returns the name (Hangul + Romaji), Resident Registration Number / Alien Registration Number / passport number, date of birth, sex and address.
- Resident Registration Card · Driver's Licence
- Korean Passport, chip read on e-Passport
- Alien Registration Card (외국인등록증)
Match the face. Prove it's a real person..
Selfie confirmed live and matched against the ID portrait.
- Duplicate check: 1:N face search across existing users. Free.
- Active liveness ($0.15) for elevated-risk flows, user turns or blinks.
- Selfie on any phone or laptop camera
- Mobile-handoff QR when the user starts on desktop
Screen for sanctions, PEPs, and adverse media.
1,300+ global sanctions, PEP, and adverse-media lists, plus Korean watchlists:
- KRFSS, Korea Financial Supervisory Service, enforcement actions against regulated entities and individuals.
- FSC Designated Sanctions and Asset-Freezing Targets, Financial Services Commission designations under the Specific Financial Information Act.
- MOFA, Ministry of Foreign Affairs (Korea) Sanctions, North Korea-linked individuals and entities under UN Security Council resolutions.
- National Assembly of South Korea, Politically Exposed Persons register for Members of the National Assembly and State Ministers.
- KOFIU, Korea Financial Intelligence Unit suspicious-activity references.
- Korea Customs Service, trade-based money laundering and smuggling enforcement watchlist.
- Anti-Corruption and Civil Rights Commission (ACRC), enforcement targets and debarred officials.
- National Police Agency, Interpol Red Notices, internationally wanted persons and domestically sought fugitives.
Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.
Screen for sanctions, PEPs, and adverse media , see the docs for the full module surface.
Cross-check is not yet exposed for Korea.
South Korea does not currently expose a public consumer-grade identity-registry API the way India (Aadhaar) or Argentina (RENAPER) do, Resident Registration Number lookups are restricted under PIPA to entities holding a specific legal basis.
- The hosted flow already covers the Resident Registration Card / Alien Registration Card capture + OCR + biometric face-match against the document portrait.
- Didit ships Database Validation for 40+ countries; if you need a custom Korean third-party data partner (NICE, Korea Credit Bureau, SCI Information Service) integrated, the Enterprise tier includes BYO-source onboarding.
Cross-check is not yet exposed for Korea , see the docs for the full module surface.
Every South Korea document Didit accepts.
Civil-registry and AML coverage for South Korea.
Open a new country in one click. We do the hard work.
Common questions about South Korea.
What does Didit ship?
Didit is the infrastructure layer for identity and fraud. One Application Programming Interface (API), 25+ composable modules across four product lines:
- User Verification (KYC, know your customer), Identity Document Verification, liveness, face match, Anti-Money Laundering (AML) screening, Internet Protocol (IP) analysis. $0.33 per full bundle.
- Business Verification (KYB, know your business), registry, Ultimate Beneficial Owner (UBO), officers, entity AML, plus a linked KYC session per UBO.
- Transaction Monitoring, real-time rule engine, case management, Suspicious Activity Report (SAR) workflow.
- Wallet Screening (KYT, know your transaction), on-chain wallet risk at $0.15 per check, or bring your own screening provider and run it inside Didit.
Compose any module into a workflow with the visual no-code builder, ship in 5 minutes, 500 verifications free every month, forever.
How is Didit different from a single-product Know Your Customer (KYC) vendor?
Most identity vendors sell one slice, a KYC check, an Anti-Money Laundering (AML) list, a wallet screen. Didit ships the infrastructure underneath all of them, and the gap shows up on six axes:
- Pricing. Public price on every module, $0.33 for a full KYC, 500 verifications free every month, no minimums, no contracts. Single-product vendors hide six-figure minimums behind a sales call.
- Access. Sandbox in one click, self-serve from day one, production keys on signup. Single-product vendors gate the sandbox behind a contract, months to evaluate.
- Developer experience. Public docs, a Model Context Protocol (MCP) server for Claude Code and Cursor, and native Software Development Kits (SDKs) for Web, iOS, Android, React Native, and Flutter. Integrate in 5 minutes with an AI agent or in a working afternoon by hand.
- User experience. Highest pass rates in the market, sub-2-second end-to-end inference, country-specialised capture flows, 48+ languages out of the box.
- Flexibility. One
/v3/Application Programming Interface (API) composes 25+ modules across KYC, Know Your Business (KYB), Transaction Monitoring, and Wallet Screening (KYT, know your transaction). A KYB session spawns a linked KYC for every Ultimate Beneficial Owner (UBO); a flagged transaction spawns a step-up KYC remediation, same session, same webhook contract, same audit trail. Single-product vendors sell one shape of KYC and stop there. - AI-era fraud. 200+ real-time fraud signals scored on every session, deepfake, injection, synthetic-ID, document forgery, face-morph, device intelligence, replay. Single-product vendors treat deepfake and injection detection as roadmap items, not defaults.
Common in fintech and crypto, the same architecture fits marketplaces, iGaming, mobility, and any vertical where you need to know who someone is and what they are doing.
What does it cost? Is anything actually free?
500 verifications free every month, forever, on every account. No credit card. No sales call. No expiry.
Above the free tier, every module has a public per-success price on didit.me/pricing, $0.33 per full KYC bundle, $0.15 per Identity Document Verification, $0.15 per Wallet Screening, $0.20 per Anti-Money Laundering (AML) Screening, $0.10 per liveness, $0.05 per face match, $0.03 per Internet Protocol (IP) analysis.
Pay-as-you-go, no minimums, no overage surprises. Volume discounts kick in automatically as you grow.
Which Korean regulator covers identity verification on a digital onboarding?
Four sit on top of every Korean identity-verification flow:
- Financial Services Commission (FSC, 금융위원회), top-level policy supervisor for banks, securities firms, insurance carriers, payment service providers and Virtual Asset Service Providers (VASP). Sets remote-onboarding rules under the Specific Financial Information Act (특정 금융거래정보법) and the AML/CFT Operating Guidelines.
- Financial Supervisory Service (FSS, 금융감독원), operational examiner that inspects every regulated financial institution on the FSC's behalf.
- Korea Financial Intelligence Unit (KOFIU, 한국금융정보분석원), South Korea's FIU, housed in the FSC. Receives Suspicious Transaction Reports and Currency Transaction Reports.
- Personal Information Protection Commission (PIPC, 개인정보보호위원회), supervises the Personal Information Protection Act (PIPA, 개인정보 보호법). Governs how the verification data (including the Resident Registration Number) is captured, stored and disclosed.
Didit ships the hosted flow + the audit log + the watchlist coverage to satisfy all four at the same time, same POST /v3/session/ workflow, same JSON report, same SOC 2 Type 1 + ISO/IEC 27001 evidence pack.
Is Didit ready for a Virtual Asset Service Provider (VASP) registration under the Specific Financial Information Act?
Yes. The September 2021 Specific Financial Information Act regime requires every Korean crypto exchange, custodian and on-ramp operator to register with KOFIU as a Virtual Asset Service Provider (VASP), with mandatory KYC + AML controls per the FSC AML/CFT Operating Guidelines.
Didit covers the full stack on one workflow:
- Identity Document Verification + Active Liveness + Face Match 1:1 for the tier-1 onboarding check.
- AML Screening ($0.20 per check) against the global pool plus Korea Financial Supervisory Service enforcement actions, FSC Designated Sanctions, MOFA North Korea-linked sanctions, National Assembly PEP register and KOFIU suspicious-activity references.
- Wallet Screening (KYT) at $0.15 per check for the on-chain exposure assessment KOFIU expects from registered VASPs.
- Ongoing AML monitoring ($0.07 per user / year) for the periodic-review obligation.
KOFIU requires a real-name verified bank account linked to the exchange, Didit's hosted KYC plus the customer's bank-linkage integration together satisfy the operational baseline.
Does Didit have an authoritative Resident Registration Number (RRN) cross-check?
Not today, and no commercial provider does. RRN lookups are restricted by PIPA and the Resident Registration Act to entities holding a specific legal basis (banks, telcos, government), and the Ministry of the Interior and Safety register is not exposed as a consumer-grade API to private-sector KYC vendors.
What Didit covers today:
- Resident Registration Card capture + OCR, full field extraction including the 13-digit RRN, name, address.
- Document authenticity check, confirms the card is genuine, not a forgery or screen capture.
- Face Match against the photo on the card, biometric proof of cardholder presence.
- AML screening against Korean regulatory watchlists, KRFSS, FSC sanctions, MOFA sanctions, National Assembly PEP.
If a counterparty needs the RRN itself validated against the government register, that flow has to go through one of Korea's domestic credit bureaus (NICE, KCB, SCI) under a separate data-licensing agreement, outside the scope of any cross-border KYC platform.
How long does it take to integrate Didit in South Korea?
5 minutes to a working sandbox, a weekend to a production flow.
- Sign up at
business.didit.me, grab an API key, callPOST /v3/session/with aworkflow_idthat wires ID Verification + Active Liveness + Face Match + AML, done. - AI-agent path: paste the integration prompt at
docs.didit.me/integration/integration-promptinto Claude Code, Cursor, Codex, Devin, Aider, or Replit Agent. The agent provisions the application, builds the workflow, wires the webhook, and runs a smoke test. - Five SDKs share the same session model: Web, iOS, Android, React Native, Flutter.
The first 500 verifications every month are free, forever, pilot the full Korea stack at zero cost before flipping production traffic.
Which language does the hosted verification flow use for Korean users?
Korean (한국어), auto-detected from the user's browser / device locale. The hosted UI ships in 48+ languages; Korean users land on the Korean flow by default. English is also live on the same flow for cross-border or expat users.
The document-recognition layer is decoupled from the UI layer, Hangul names on the Resident Registration Card / Driver's Licence / Alien Registration Card are preserved verbatim through OCR alongside the Romaji transliteration, and the admin console can be set independently to whichever language your compliance team prefers.
What does the South Korea verification cost end-to-end?
Per-module public pricing, pay only for what runs on the session:
- ID Verification,
$0.15per document check. - Passive Liveness,
$0.10. Active Liveness,$0.15. - Face Match 1:1,
$0.05. Face Search 1:N, free. - AML Screening,
$0.20per check. Ongoing AML,$0.07 per user / year.
The full KYC bundle (Identity + Passive Liveness + Face Match + IP Analysis) is `$0.33`, same anchor price worldwide, no Korea surcharge. 500 verifications free every month, no credit card. Volume discounts auto-apply above the free tier; Enterprise adds a custom Master Services Agreement (MSA) and data-residency choice.
Infrastructure for identity and fraud.
One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.