Didit
Sign upGet a Demo
United Kingdom flag

Identity verification in United Kingdom

Identity verification and KYC/AML in United Kingdom

The United Kingdom is the most mature electronic identity verification market in Europe and arguably the world. It is the only major jurisdiction where regulators have explicitly endorsed database-only, document-free KYC for consumer onboarding, provided the firm meets the Joint Money Laundering Steering Group's electronic verification standard. At the same time, the UK is the single most aggressi

14K+

Documents supported

(Government IDs from 220+ countries)

<30 sec

Average verification time

220+

Countries covered

(Government-issued IDs validated)

Market overview

KYC in United Kingdom, at a glance

The United Kingdom is Europe's largest financial services economy and the world's second largest fintech hub by funding after the United States. Population is approximately 67.6 million (ONS, mid-2024). Key segments driving identity verification demand: - Banking and fintech. 13 active clearing banks plus approximately 300 authorised e-money institutions and payment institutions under the Electronic Money Regulations 2011 and Payment Services Regulations 2017. Open Banking has 7m+ active users and has driven the single largest onboarding volume increase of any European market. Challenger banks (Monzo, Starling, Revolut, Atom, Zopa, Chase UK, Kroo) added roughly 20 million current accounts between 2018 and 2025. - Cryptoassets. Despite the restrictive registration regime, the UK remains the

Supported documents

Every major ID in United Kingdom

Didit templates cover national IDs, passports, residence permits and regional documents — plus 14,000+ documents globally for cross-border flows.

UK passport

UK photocard driving licence

Biometric Residence Permit (BRP)

Share Codes

EEA/EU national ID cards

Irish passport and Irish passport card

HM Forces Identity Card

Regulators

Who supervises KYC/AML in United Kingdom

Primary legislation

**Proceeds of Crime Act 2002 (POCA

Preventive regulation

**The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer

Supervisors

FCA — FSMA-authorised firms, e-money and payments institutions, cryptoasset firms under MLR, and consumer credit

HMRC

MSBs, TCSPs, accountants (non-professional-body supervised

Gambling Commission

all GB-licensed remote and non-remote gambling operators under the Gambling Act 2005

Professional Body Supervisors

22 PBSs (SRA, ICAEW, CLC etc

NCA

operational lead for money laundering investigations; UKFIU receives and processes SARs

Data protection

UK GDPR, Data Protection Act 2018, Privacy and Electronic Communications Regulations 2003, enforced by the ICO

HMPO (His Majesty's Passport Office)

Home Office

regulated

Passport verification via DCS (Document Checking Service). Enables real-time passport validity checks for regulated organizations.

DVLA (Driver and Vehicle Licensing Agency)

DVLA

regulated

Driver's license verification via DVLA Developer Portal. Provides driving licence data sharing for identity verification.

HMRC (His Majesty's Revenue and Customs)

HMRC

restricted

Tax verification services. Access limited to authorized government and regulated entities.

GOV.UK One Login

GDS (Government Digital Service)

regulated

Digital identity platform launching 2025-2026. Aims to provide a single sign-on and identity verification system for government services.

Government & regulated databases

Authoritative sources Didit can cross-check against

Compliance framework

The law behind KYC in United Kingdom

AML framework

Primary legislation

Supervised by Primary legislation

The UK AML framework is layered: a single statute (POCA 2002) creates the underlying offences; a statutory instrument (MLR 2017) sets the preventive obligations; and industry guidance (JMLSG) supplies the operational detail that the FCA treats as persuasive.

Data protection

UK GDPR (Data Protection Act 2018)

Supervised by Data protection

- UK GDPR plus DPA 2018 govern processing. The UK has been granted an EU adequacy decision (extended to 27 December 2031 by the European Commission in December 2025), so EU–UK transfers remain free. UK-to-third-country transfers require either an ICO-recognised adequacy regulation, the UK Internatio

Penalties for non-compliance

The UK has the most active AML enforcement regime in Europe. Representative recent actions:

Use cases

Built for the industries that regulate United Kingdom

Fintech

Neobanks, EMIs, payment institutions, lenders, brokerages.

A UK authorised bank, e-money or payment institution operates under FCA Handbook SYSC 6.3 (financial crime systems and controls) and MLR 2017 Regulation 28. JMLSG Guidance Part I Chapter 5 provides the operational benchmark; the FCA treats it as "persuasive" and departures need to be justified.

Crypto / VASPs

Exchanges, custodians, wallets, on/off-ramps.

The UK's crypto AML regime sits in MLR 2017 Regulation 14A (registration) and Regulation 64A (Travel Rule), supplemented by JMLSG Part II Sector 22 (issued in December 2020 and revised September 2023).

iGaming

Sports betting, online casinos, age-gated platforms.

Gambling Commission licensees operate under the Licence Conditions and Codes of Practice (LCCP) and must comply with the Gambling Act 2005 and the Gambling Commission's AML guidance (itself derived from MLR 2017 but with sector-specific thresholds).

Marketplaces

Gig platforms, delivery, creator economy, e-commerce.

- DAC7 / OECD Model Rules. The International Tax Enforcement (Digital Platforms) Regulations 2023 require digital platforms to collect and verify seller TIN, legal name, business or residential address, date of birth (for individuals), VRN, and financial account identifier, and report annually to HM

Biometric liveness

ISO 30107-3 PAD Level 2 liveness, ready for United Kingdom

The UK does not mandate a specific liveness standard in legislation. In practice, three frameworks converge to define "good": - ISO/IEC 30107-3 Presentation Attack Detection (PAD). The international standard for liveness. Level 2 (L2) is the de facto floor for regulated-sector UK onboarding and is required for DVS-certified Identity Document Validation Technology. Didit is certified at PAD Level 2. - GPG 45 — "How to prove and verify someone's identity", published by the Government Digital Servi

CERTIFICATIONS

Certified for enterprise trust

Our platform meets the highest international standards for information security, data privacy, and biometric accuracy.

translation_v21.securityCompliance.certifications.items.gdpr.title

GDPR Compliant

Full EU data protection compliance

ISO 27001

ISO 27001

Information security management

translation_v21.securityCompliance.certifications.items.ibeta.title

iBeta Level 1

PAD (liveness + face match)

TRUSTED WORLDWIDE

What our customers say

Join thousands of companies that trust Didit for their verification needs

Logo

Didit’s NFC + active biometrics technology blocks the most advanced fraud scenarios, offering a level of security equivalent to or superior to in-person verification.

Spanish Financial Sandbox

CNMV, SEPBLAC & Spanish Treasury — Conclusions Report

Logo

Didit is an exceptionally valuable partner, delivering a stable and highly adaptable solution”.

Vuk Adžić

Head of the E-Business Department at Crnogorski Telekom

Logo

Didit offered us a robust technology with a simple implementation and adaptability to different markets”.

Fernando Pinto

CEO & CoFounder at TucanPay

Logo

Thanks to Didit we have been able to reduce manual processes and improve data extraction accuracy”.

Diana Garcia

Trust & Safety Executive at Shiply

Logo

Didit’s integration slashed verification times and costs, freeing resources for other projects”.

Guillem Medina

COO at GBTC Finance

Logo

Didit removed KYC costs, enabling faster scaling with high verification standards and less fraud.”

Paul Martin

VP Marketing & Growth at Bondex

Logo

Didit’s secure, user-friendly verification boosts customer trust and optimizes our process.”

Cristofer Montenegro

Executive assistant to the CEO at Adelantos

Logo

Didit ensures a precise, secure digital onboarding without slowing negotiations or client time.”

Ernesto Betancourth

Gerente de riesgos at CrediDemo

FAQ

Questions about KYC in United Kingdom

Is remote identity verification legal in United Kingdom?

Yes. United Kingdom permits remote KYC onboarding under its national AML framework, including document verification, biometric liveness and video identification where required by regulation.

What identity documents does Didit verify in United Kingdom?

Didit verifies all major national IDs, passports and residence permits issued in United Kingdom, plus 14,000+ document types globally for cross-border flows.

How much does identity verification cost in United Kingdom?

Didit charges $0.30 per verification with 500 free checks per month. No contracts, no minimums. Competitors typically charge $1.00–$2.50+ per verification.

Does Didit support AML screening for United Kingdom?

Yes. Didit screens against 1,000+ global watchlists including PEP databases, sanctions lists (EU, UN, OFAC, OFSI), and adverse media — covering all AML obligations in United Kingdom.

Is biometric liveness required?

Most regulated sectors in United Kingdom require or strongly recommend biometric liveness detection for remote onboarding. Didit provides ISO 30107-3 PAD Level 2 certified liveness.

Can Didit help with crypto/VASP compliance in United Kingdom?

Yes. Didit supports document verification, liveness, AML screening and ongoing monitoring aligned with United Kingdom’s crypto regulatory framework, including EU Travel Rule compliance where applicable.

Does Didit support age verification for iGaming in United Kingdom?

Yes. Didit provides document-based age verification and identity confirmation suitable for United Kingdom’s iGaming regulatory requirements.

Launch compliant KYC in United Kingdom today

500 free verifications per month. No contracts, no minimums. $0.30 per verification after the free tier.