Identity verification in United Kingdom
The United Kingdom is the most mature electronic identity verification market in Europe and arguably the world. It is the only major jurisdiction where regulators have explicitly endorsed database-only, document-free KYC for consumer onboarding, provided the firm meets the Joint Money Laundering Steering Group's electronic verification standard. At the same time, the UK is the single most aggressi
Documents supported
(Government IDs from 220+ countries)
Average verification time
Countries covered
(Government-issued IDs validated)
Market overview
The United Kingdom is Europe's largest financial services economy and the world's second largest fintech hub by funding after the United States. Population is approximately 67.6 million (ONS, mid-2024). Key segments driving identity verification demand: - Banking and fintech. 13 active clearing banks plus approximately 300 authorised e-money institutions and payment institutions under the Electronic Money Regulations 2011 and Payment Services Regulations 2017. Open Banking has 7m+ active users and has driven the single largest onboarding volume increase of any European market. Challenger banks (Monzo, Starling, Revolut, Atom, Zopa, Chase UK, Kroo) added roughly 20 million current accounts between 2018 and 2025. - Cryptoassets. Despite the restrictive registration regime, the UK remains the
Supported documents
Didit templates cover national IDs, passports, residence permits and regional documents — plus 14,000+ documents globally for cross-border flows.
Regulators
**Proceeds of Crime Act 2002 (POCA
**The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer
FCA — FSMA-authorised firms, e-money and payments institutions, cryptoasset firms under MLR, and consumer credit
MSBs, TCSPs, accountants (non-professional-body supervised
all GB-licensed remote and non-remote gambling operators under the Gambling Act 2005
22 PBSs (SRA, ICAEW, CLC etc
operational lead for money laundering investigations; UKFIU receives and processes SARs
UK GDPR, Data Protection Act 2018, Privacy and Electronic Communications Regulations 2003, enforced by the ICO
Home Office
regulated
Passport verification via DCS (Document Checking Service). Enables real-time passport validity checks for regulated organizations.
DVLA
regulated
Driver's license verification via DVLA Developer Portal. Provides driving licence data sharing for identity verification.
HMRC
restricted
Tax verification services. Access limited to authorized government and regulated entities.
GDS (Government Digital Service)
regulated
Digital identity platform launching 2025-2026. Aims to provide a single sign-on and identity verification system for government services.
Government & regulated databases
Compliance framework
AML framework
Supervised by Primary legislation
The UK AML framework is layered: a single statute (POCA 2002) creates the underlying offences; a statutory instrument (MLR 2017) sets the preventive obligations; and industry guidance (JMLSG) supplies the operational detail that the FCA treats as persuasive.
Data protection
Supervised by Data protection
- UK GDPR plus DPA 2018 govern processing. The UK has been granted an EU adequacy decision (extended to 27 December 2031 by the European Commission in December 2025), so EU–UK transfers remain free. UK-to-third-country transfers require either an ICO-recognised adequacy regulation, the UK Internatio
Penalties for non-compliance
The UK has the most active AML enforcement regime in Europe. Representative recent actions:
Use cases
Neobanks, EMIs, payment institutions, lenders, brokerages.
A UK authorised bank, e-money or payment institution operates under FCA Handbook SYSC 6.3 (financial crime systems and controls) and MLR 2017 Regulation 28. JMLSG Guidance Part I Chapter 5 provides the operational benchmark; the FCA treats it as "persuasive" and departures need to be justified.
Exchanges, custodians, wallets, on/off-ramps.
The UK's crypto AML regime sits in MLR 2017 Regulation 14A (registration) and Regulation 64A (Travel Rule), supplemented by JMLSG Part II Sector 22 (issued in December 2020 and revised September 2023).
Sports betting, online casinos, age-gated platforms.
Gambling Commission licensees operate under the Licence Conditions and Codes of Practice (LCCP) and must comply with the Gambling Act 2005 and the Gambling Commission's AML guidance (itself derived from MLR 2017 but with sector-specific thresholds).
Gig platforms, delivery, creator economy, e-commerce.
- DAC7 / OECD Model Rules. The International Tax Enforcement (Digital Platforms) Regulations 2023 require digital platforms to collect and verify seller TIN, legal name, business or residential address, date of birth (for individuals), VRN, and financial account identifier, and report annually to HM
Biometric liveness
The UK does not mandate a specific liveness standard in legislation. In practice, three frameworks converge to define "good": - ISO/IEC 30107-3 Presentation Attack Detection (PAD). The international standard for liveness. Level 2 (L2) is the de facto floor for regulated-sector UK onboarding and is required for DVS-certified Identity Document Validation Technology. Didit is certified at PAD Level 2. - GPG 45 — "How to prove and verify someone's identity", published by the Government Digital Servi
CERTIFICATIONS
Our platform meets the highest international standards for information security, data privacy, and biometric accuracy.
Full EU data protection compliance
Information security management
PAD (liveness + face match)
TRUSTED WORLDWIDE
Join thousands of companies that trust Didit for their verification needs
FAQ
Yes. United Kingdom permits remote KYC onboarding under its national AML framework, including document verification, biometric liveness and video identification where required by regulation.
Didit verifies all major national IDs, passports and residence permits issued in United Kingdom, plus 14,000+ document types globally for cross-border flows.
Didit charges $0.30 per verification with 500 free checks per month. No contracts, no minimums. Competitors typically charge $1.00–$2.50+ per verification.
Yes. Didit screens against 1,000+ global watchlists including PEP databases, sanctions lists (EU, UN, OFAC, OFSI), and adverse media — covering all AML obligations in United Kingdom.
Most regulated sectors in United Kingdom require or strongly recommend biometric liveness detection for remote onboarding. Didit provides ISO 30107-3 PAD Level 2 certified liveness.
Yes. Didit supports document verification, liveness, AML screening and ongoing monitoring aligned with United Kingdom’s crypto regulatory framework, including EU Travel Rule compliance where applicable.
Yes. Didit provides document-based age verification and identity confirmation suitable for United Kingdom’s iGaming regulatory requirements.
500 free verifications per month. No contracts, no minimums. $0.30 per verification after the free tier.