Skip to main content
Didit Raises $7.5M to Build the Infrastructure for Identity and Fraud
Didit
Europe

Identity verification
built for United Kingdom Flag of United Kingdom

British passport, DVLA driving licence and BRP on one session, cross-checked against UK electoral roll + credit bureau data, $0.33 full KYC, 500 free every month.

Backed by
Y CombinatorRobinhood Ventures
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in United Kingdom.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
UK identity fraud is shaped by impersonation attacks on neobank and crypto-on-ramp onboarding, deepfake and injection attacks on remote video-ID flows, and DVLA driving-licence forgery driving cross-vertical synthetic-ID fraud. Didit scores 200+ real-time fraud signals on every session, face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • UK Money Laundering Regulations 2017 (MLR 2017)
  • FCA Senior Managers Regime
  • JMLSG guidance
  • OFSI consolidated sanctions
  • UK GDPR / Data Protection Act 2018
  • Online Safety Act 2023
Regulators

Who supervises identity verification in United Kingdom.

These are the supervisors a United Kingdom verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them, no separate integration per agency.
  • FCA

    Financial Conduct Authority, supervises banks, payment institutions, electronic money institutions, crypto-asset firms, and consumer credit lenders under the Senior Managers Regime.

  • HMT / OFSI

    His Majesty's Treasury Office of Financial Sanctions Implementation, maintains and enforces the UK consolidated sanctions list.

  • ICO

    Information Commissioner's Office, supervises UK GDPR (Data Protection Act 2018) and the Privacy and Electronic Communications Regulations (PECR).

  • Gambling Commission

    Licenses and regulates online and remote gambling operators in Great Britain. Issued under the Gambling Act 2005 and updated under the 2023 White Paper.

  • JMLSG

    Joint Money Laundering Steering Group, publishes the FCA-endorsed AML guidance for the UK financial sector. Didit returns the JMLSG evidence shape on every session.

  • Companies House

    UK statutory company register. Authoritative source for KYB registry, Persons with Significant Control (PSC), and officer data.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a United Kingdom database cross-check, composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone, auto-classified, OCR-parsed, and template-verified.

  • Works for every primary UK credential, British passport (with the chip read on e-Passports), DVLA driving licence, Biometric Residence Permit (BRP), every EU/EEA national identity card, UK Visa vignettes, and the PASS proof-of-age card.
  • Returns the name, document number, date of birth, place of issue, and expiry. The DVLA Developer Portal lookup runs inside the same module at no per-check surcharge.
Read the docs
Stage 01Capture and read the ID
  • British passport, chip read on e-Passport
  • DVLA driving licence (photocard)
  • Biometric Residence Permit (BRP)
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows, user turns or blinks. Age Estimation ($0.10) is also available for Online Safety Act 2023 age-gating.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists, plus UK watchlists:

  • Government of United Kingdom, The UK Sanctions List (Sanctions), HMT / OFSI consolidated UK autonomous sanctions list; asset-freeze and travel-ban designations.
  • House of Commons of the United Kingdom (Pep Level 1), Members of Parliament and senior parliamentary officials.
  • National Cyber Security Centre (Pep Level 2), senior NCSC officials and government cybersecurity figures.
  • University of St. Andrews (Pep Level 2), senior academic and public-sector officials at the historic Scottish institution.
  • Local Government Association (LGA) (Pep Level 3), senior local-government officials across England and Wales.
  • Lambeth London Borough Council · London Borough of Hackney · Royal Borough of Kensington and Chelsea (Pep Level 4), borough-level councillors and senior executives.
  • Organized Crime and Corruption Reporting Project, OCCRP (SIE), investigative-journalism-sourced organized crime and corruption exposure.
  • Bradford Telegraph and Argus (SIP), regional adverse-media signals.
  • Global Influence Operations Report (Warnings), disinformation and influence-operation actor warnings.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media , see the docs for the full module surface.

04 · Registry

Cross-check against the UK electoral roll + credit bureau.

Cross-checked against the authoritative civil registry.

  • The Citizens check (gbr_kingdom_citizens, ~70% coverage) hits government-sourced electoral-roll data directly, the authoritative-source check JMLSG calls out for tier-1 KYC.
  • The Residential check (gbr_kingdom_residential, ~90% coverage) is the highest-coverage low-cost first pass for name + address matching across aggregated government and public records.
  • The Credit Bureau check (gbr_kingdom_credit_bureau, ~85% coverage, $1.07, consent required) hits UK credit-header data for the deepest authoritative-source signal, the right pick when MLR 2017 calls for enhanced due diligence.
  • Financial Services (gbr_kingdom_financial_services, ~85%), Phone (gbr_kingdom_phone, >50%), Phone 2 (gbr_kingdom_phone_2, >75%), and Consumer ($0.09) complete the picture.
Read the docs
Stage 04Cross-check against the UK electoral roll + credit bureau

Cross-check against the UK electoral roll + credit bureau , see the docs for the full module surface.

Documents covered

Every United Kingdom document Didit accepts.

One row per accepted credential, flag, document name, document type. Live from the Didit Business Console.
Authoritative datasets

Civil-registry and AML coverage for United Kingdom.

One card per dataset Didit cross-checks against, civil registries on the Database Validation API plus the global AML watchlist pool. Each card links to the technical docs.
gbr_kingdom_citizens

United Kingdom — Citizens (electoral roll)

Source: Government-sourced electoral roll data. $0.75 per successful query. Coverage ~70% of adult population.

Read the API docs
gbr_kingdom_residential

United Kingdom — Residential

Source: Aggregated government, public, background, and professional records. $0.21 per successful query. Coverage ~90% of adult population.

Read the API docs
gbr_kingdom_credit_bureau

United Kingdom — Credit Bureau

Source: UK Credit Bureau credit-header data. $1.07 per successful query. End-user consent required. Coverage ~85% of adult population.

Read the API docs
gbr_kingdom_financial_services

United Kingdom — Financial Services

Source: Aggregated government, public, and background records. $0.95 per successful query. Coverage ~85% of adult population.

Read the API docs
gbr_kingdom_phone

United Kingdom — Phone (telco billing)

Source: Telco billing records. $0.36 per successful query. Coverage >50% of phone lines.

Read the API docs
gbr_kingdom_phone_2

United Kingdom — Phone 2 (MNO data)

Source: Mobile network operator data. $0.96 per successful query. Coverage >75% of mobile lines.

Read the API docs
gbr_kingdom_consumer

United Kingdom — Consumer

Source: Lead-generation consumer profile database. $0.09 per successful query. Coverage ~5% of adult population.

Read the API docs
aml-screening

AML lists screened in United Kingdom

1,300+ sanctions, Politically Exposed Persons (PEP), and adverse-media lists, plus the country's regulatory watchlists and PEP registries.

Read the AML coverage docs
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter, the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about United Kingdom.

What does Didit ship?

Didit is the infrastructure layer for identity and fraud. One Application Programming Interface (API), 25+ composable modules across four product lines:

  • User Verification (KYC, know your customer), Identity Document Verification, liveness, face match, Anti-Money Laundering (AML) screening, Internet Protocol (IP) analysis. $0.33 per full bundle.
  • Business Verification (KYB, know your business), registry, Ultimate Beneficial Owner (UBO), officers, entity AML, plus a linked KYC session per UBO.
  • Transaction Monitoring, real-time rule engine, case management, Suspicious Activity Report (SAR) workflow.
  • Wallet Screening (KYT, know your transaction), on-chain wallet risk at $0.15 per check, or bring your own screening provider and run it inside Didit.

Compose any module into a workflow with the visual no-code builder, ship in 5 minutes, 500 verifications free every month, forever.

How is Didit different from a single-product Know Your Customer (KYC) vendor?

Most identity vendors sell one slice, a KYC check, an Anti-Money Laundering (AML) list, a wallet screen. Didit ships the infrastructure underneath all of them, and the gap shows up on six axes:

  • Pricing. Public price on every module, $0.33 for a full KYC, 500 verifications free every month, no minimums, no contracts. Single-product vendors hide six-figure minimums behind a sales call.
  • Access. Sandbox in one click, self-serve from day one, production keys on signup. Single-product vendors gate the sandbox behind a contract, months to evaluate.
  • Developer experience. Public docs, a Model Context Protocol (MCP) server for Claude Code and Cursor, and native Software Development Kits (SDKs) for Web, iOS, Android, React Native, and Flutter. Integrate in 5 minutes with an AI agent or in a working afternoon by hand.
  • User experience. Highest pass rates in the market, sub-2-second end-to-end inference, country-specialised capture flows, 48+ languages out of the box.
  • Flexibility. One /v3/ Application Programming Interface (API) composes 25+ modules across KYC, Know Your Business (KYB), Transaction Monitoring, and Wallet Screening (KYT, know your transaction). A KYB session spawns a linked KYC for every Ultimate Beneficial Owner (UBO); a flagged transaction spawns a step-up KYC remediation, same session, same webhook contract, same audit trail. Single-product vendors sell one shape of KYC and stop there.
  • AI-era fraud. 200+ real-time fraud signals scored on every session, deepfake, injection, synthetic-ID, document forgery, face-morph, device intelligence, replay. Single-product vendors treat deepfake and injection detection as roadmap items, not defaults.

Common in fintech and crypto, the same architecture fits marketplaces, iGaming, mobility, and any vertical where you need to know who someone is and what they are doing.

What does it cost? Is anything actually free?

500 verifications free every month, forever, on every account. No credit card. No sales call. No expiry.

Above the free tier, every module has a public per-success price on didit.me/pricing, $0.33 per full KYC bundle, $0.15 per Identity Document Verification, $0.15 per Wallet Screening, $0.20 per Anti-Money Laundering (AML) Screening, $0.10 per liveness, $0.05 per face match, $0.03 per Internet Protocol (IP) analysis.

Pay-as-you-go, no minimums, no overage surprises. Volume discounts kick in automatically as you grow.

Which UK regulator covers identity verification on a digital onboarding?

Four sit on top of every UK identity-verification flow:

  • Financial Conduct Authority (FCA), supervises banks, payment institutions, electronic money institutions, crypto-asset firms, and consumer credit lenders. Customer Due Diligence rules come from the Money Laundering Regulations 2017 (MLR 2017) and the Senior Managers Regime.
  • His Majesty's Treasury Office of Financial Sanctions Implementation (HMT / OFSI), maintains and enforces the UK consolidated sanctions list.
  • Information Commissioner's Office (ICO), UK GDPR and Data Protection Act 2018 supervisor. Governs how the verification data is captured, stored, and disclosed.
  • Gambling Commission, licenses and regulates online gambling operators in Great Britain under the Gambling Act 2005 and the 2023 White Paper.

Didit ships the hosted flow + the audit log + the watchlist coverage to satisfy all four at the same time, same POST /v3/session/ workflow, same JSON report, same SOC 2 Type 1 + ISO/IEC 27001 evidence pack. The output matches the Joint Money Laundering Steering Group (JMLSG) evidence shape FCA examiners expect.

Does Didit cross-check UK identities against the electoral roll and credit bureau data?

Yes, via seven Database Validation services on POST /v3/database-validation/.

  • `gbr_kingdom_citizens` ($0.75, ~70% coverage), government-sourced electoral roll data.
  • `gbr_kingdom_residential` ($0.21, ~90% coverage), aggregated government, public, and background records.
  • `gbr_kingdom_credit_bureau` ($1.07, ~85% coverage, consent required), credit-header data from a UK Credit Bureau. The deepest authoritative-source signal.
  • `gbr_kingdom_financial_services` ($0.95, ~85% coverage), aggregated government and background records tuned for financial-services use cases.
  • `gbr_kingdom_phone` ($0.36, >50%) and `gbr_kingdom_phone_2` ($0.96, >75%), telco billing and mobile-network-operator lookups.
  • `gbr_kingdom_consumer` ($0.09, ~5%), low-cost lead-quality first pass.

All seven services are documented at docs.didit.me/api-reference/database-validation/united-kingdom/. Pay-per-success, run them in parallel and Didit picks the cheap one first, only paying for the deeper check when the first is inconclusive.

Does Didit support UK Online Safety Act 2023 age verification and Gambling Commission age gating?

Yes. Two paths run inside the same Workflow Orchestrator:

  • Age Estimation from a single selfie at $0.10, passive, low-friction, suited to the Online Safety Act 2023 highly-effective-age-assurance standard.
  • Identity Document Verification fallback at $0.15 + Active Liveness for the strongest age proof, the route Gambling-Commission-licensed operators ship for tier-1 onboarding.

Layer the PASS card (Proof of Age Standards Scheme) as a supplementary credential and the same flow covers age-gated retail, online gambling, and adult-content platforms with a single audit trail.

How long does it take to integrate Didit in the United Kingdom?

5 minutes to a working sandbox, a weekend to a production flow.

  • Sign up at business.didit.me, grab an API key, call POST /v3/session/ with a workflow_id that wires ID Verification + Active Liveness + Face Match + AML (OFSI included) + gbr_kingdom_citizens electoral-roll cross-check, done.
  • AI-agent path: paste the integration prompt at docs.didit.me/integration/integration-prompt into Claude Code, Cursor, Codex, Devin, Aider, or Replit Agent. The agent provisions the application, builds the workflow, wires the webhook, and runs a smoke test.
  • Five SDKs share the same session model: Web, iOS, Android, React Native, Flutter.

The first 500 verifications every month are free, forever, pilot the full UK stack at zero cost before flipping production traffic.

Which language does the hosted verification flow use for UK users?

English (UK), Welsh, Polish, Romanian, and Urdu are all live, auto-detected from the user's browser / device locale. The hosted UI ships in 48+ languages globally; UK users land on the en-GB flow by default, with Welsh, Polish, Romanian, and Urdu available for the largest non-English-speaking communities.

The document-recognition layer is decoupled from the UI layer, capture works in any language, and the admin console can be set independently to whichever language your compliance team prefers.

What does the United Kingdom verification cost end-to-end?

Per-module public pricing, pay only for what runs on the session:

  • ID Verification, $0.15 per document check. DVLA Developer Portal and HMPO DCS lookups run inside this module at no per-check surcharge.
  • Passive Liveness, $0.10. Active Liveness, $0.15. Age Estimation, $0.10.
  • Face Match 1:1, $0.05. Face Search 1:N, free.
  • AML Screening (OFSI + OFAC + 1,300+ lists), $0.20 per check. Ongoing AML, $0.07 per user / year.
  • `gbr_kingdom_consumer`, $0.09. `gbr_kingdom_residential`, $0.21. `gbr_kingdom_phone`, $0.36.
  • `gbr_kingdom_citizens`, $0.75. `gbr_kingdom_financial_services`, $0.95. `gbr_kingdom_phone_2`, $0.96. `gbr_kingdom_credit_bureau`, $1.07.

The full KYC bundle (Identity + Passive Liveness + Face Match + IP Analysis) is `$0.33`, same anchor price worldwide, no UK surcharge. 500 verifications free every month, no credit card. Volume discounts auto-apply above the free tier; Enterprise adds a custom Master Services Agreement (MSA) and data-residency choice.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page