Skip to main content
Didit Raises $7.5M to Build the Infrastructure for Identity and Fraud
Didit
Asia-Pacific

Identity verification
built for Vietnam Flag of Vietnam

CCCD chip card and passport read on one session, with liveness, face match and AML screening against Vietnamese watchlists. $0.33 full KYC, 500 free every month.

Backed by
Y CombinatorRobinhood Ventures
Firecrawl
Slash
Crnogorski Telekom
UCSF Neuroscape
Bit2Me

Trusted by 3,000+ organizations worldwide.

Country brief

How identity verification works in Vietnam.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Vietnamese identity fraud: deepfake injection against the SBV-mandated eKYC flows on mobile banking and securities apps under Circular 17/2024/TT-NHNN, forgery of legacy CMND (9- and 12-digit) cards still in circulation during the CCCD transition, and mule-account farming against NAPAS-connected wallets. Didit scores 200+ real-time fraud signals on every session, face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • AML Law 2022 (Law No. 14/2022/QH15)
  • Personal Data Protection Law (Law No. 91/2025/QH15) and Decree 356/2025/ND-CP, in force from 1 January 2026
  • SBV Circular 17/2024/TT-NHNN (Electronic KYC)
  • Law on Identification 2023 (Law No. 26/2023/QH15)
  • Securities Law 54/2019/QH14
  • FATF 40 recommendations
  • Decree 320/2026/ND-CP (accounts in listed sectors linked to an e-identification account, from 28 September 2026)
Regulators

Who supervises identity verification in Vietnam.

These are the supervisors a Vietnam verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them, no separate integration per agency.
  • SBV

    State Bank of Vietnam (Ngân hàng Nhà nước Việt Nam), central bank and prudential supervisor for banks, payment service providers, e-wallets and intermediary payment services. Issues Circular 17/2024/TT-NHNN on electronic KYC.

  • SSC

    State Securities Commission of Vietnam, securities and capital-markets supervisor. Sets KYC rules for securities companies, fund managers and investment firms under the Securities Law 54/2019/QH14.

  • AMLD

    Anti-Money Laundering Department within the State Bank of Vietnam, Vietnam's Financial Intelligence Unit. Receives Suspicious Transaction Reports under the AML Law 2022 (Law No. 14/2022/QH15).

  • MPS

    Ministry of Public Security (Bộ Công an), civil-registry authority. Issues the CCCD national identity card via Cục C06 and operates the VNeID e-identification system under the 2023 Law on Identification and Decree 69/2024/ND-CP, as amended by Decree 320/2026/ND-CP. A Ministry of Public Security unit is the data-protection authority under the Personal Data Protection Law (Law No. 91/2025/QH15) and Decree 356/2025/ND-CP, in force from 1 January 2026.

  • NAPAS

    National Payment Corporation of Vietnam, interbank payment network operator. Sets technical standards for eKYC flows used by payment intermediaries and e-wallets connected to the NAPAS domestic payment scheme.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Vietnam database cross-check, composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone, auto-classified, OCR-parsed, and template-verified.

  • CCCD (the current chip card), legacy CMND, Vietnamese Passport with the chip read on the NFC channel, Driver's Licence, and Residence Card.
  • Returns the full name, 12-digit CCCD number, date of birth, sex, place of origin, and address.
Read the docs
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows, user turns or blinks.
Read the docs
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists, plus Vietnamese watchlists:

  • Ministry of Public Security (Vietnam), Sanctions, MPS-designated individuals and organisations.
  • National Assembly of Vietnam, Politically Exposed Persons register for National Assembly Deputies and Cabinet Ministers.
  • People's Court of Bình Thuận Province, judicial enforcement targets from provincial court proceedings.
  • Ho Chi Minh City People's Committee, municipal enforcement and debarment watchlist.
  • AMLD (SBV), Anti-Money Laundering Department, suspicious-transaction references under the AML Law 2022.
  • State Securities Commission enforcement, individuals and entities under SSC regulatory action.
  • Ministry of Finance AML Division, tax-fraud and financial-crime enforcement targets.
  • Interpol Vietnam, National Central Bureau, internationally wanted persons with Vietnamese red notices.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
04 · Registry

Validate inputs against global identity infrastructure.

Vietnam does not currently expose a public consumer-grade identity-registry API to cross-border KYC vendors. Access to VNeID authentication runs through the Ministry of Public Security's system and the providers it licenses, under a plan the system operator approves (Decree 320/2026/ND-CP).

  • The hosted flow already covers the SBV Circular 17/2024/TT-NHNN eKYC baseline: CCCD OCR + chip read, Active Liveness, Face Match 1:1, and AML screening against Vietnamese regulatory watchlists.
  • Didit ships Database Validation for 40+ countries; country-specific government-source services for Vietnam are on the roadmap, contact the team if you need a custom SBV-source contract for the Circular 17/2024/TT-NHNN source-verification requirement.
  • Platforms that must link accounts to VNeID under Decree 320/2026 can talk to Didit about connecting it; the chip-checked CCCD path works today.
Read the docs
Documents covered

Every Vietnam document Didit accepts.

Every accepted credential, with the document family it belongs to. Live from the Didit Business Console.
Authoritative datasets

Civil-registry and AML coverage for Vietnam.

One card per dataset Didit cross-checks against, civil registries on the Database Validation API plus the global AML watchlist pool. Each card links to the technical docs.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter, the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
SOC 2 · Type II — AICPA · 2026
SOC 2 · Type I — AICPA · 2026
ISO/IEC 27001 — Information security · 2026
EU financial sandbox — Tesoro · SEPBLAC · BdE
FIDO Alliance — Associate member · 2026
iBeta Level 1 PAD — NIST / NIAP · 2026
GDPR — EU 2016/679
HIPAA — 45 CFR §160 · §164
DORA — EU 2022/2554
MiCA — EU 2023/1114
EBA remote onboarding — EBA/GL/2022/15
AMLD6 · eIDAS 2.0 — EU-aligned by design
Jugendschutz geprüft — FSM · JMStV §4(2) · 2026
FAQ

Common questions about Vietnam.

What does Didit ship?

Didit is the infrastructure layer for identity and fraud. One Application Programming Interface (API), 25+ composable modules across four product lines:

  • User Verification (KYC, know your customer), Identity Document Verification, liveness, face match, Anti-Money Laundering (AML) screening, Internet Protocol (IP) analysis. $0.33 per full bundle.
  • Business Verification (KYB, know your business), registry, Ultimate Beneficial Owner (UBO), officers, entity AML, plus a linked KYC session per UBO.
  • Transaction Monitoring, real-time rule engine, case management, Suspicious Activity Report (SAR) workflow.
  • Wallet Screening (KYT, know your transaction), on-chain wallet risk at $0.15 per check, or bring your own screening provider and run it inside Didit.

Compose any module into a workflow with the visual no-code builder, ship in 5 minutes, 500 verifications free every month, forever.

How is Didit different from a single-product Know Your Customer (KYC) vendor?

Most identity vendors sell one slice, a KYC check, an Anti-Money Laundering (AML) list, a wallet screen. Didit ships the infrastructure underneath all of them, and the gap shows up on six axes:

  • Pricing. Public price on every module, $0.33 for a full KYC, 500 verifications free every month, no minimums, no contracts. Single-product vendors hide six-figure minimums behind a sales call.
  • Access. Sandbox in one click, self-serve from day one, production keys on signup. Single-product vendors gate the sandbox behind a contract, months to evaluate.
  • Developer experience. Public docs, a Model Context Protocol (MCP) server for Claude Code and Cursor, and native Software Development Kits (SDKs) for Web, iOS, Android, React Native, and Flutter. Integrate in 5 minutes with an AI agent or in a working afternoon by hand.
  • User experience. Highest pass rates in the market, sub-2-second end-to-end inference, country-specialised capture flows, 48+ languages out of the box.
  • Flexibility. One /v3/ Application Programming Interface (API) composes 25+ modules across KYC, Know Your Business (KYB), Transaction Monitoring, and Wallet Screening (KYT, know your transaction). A KYB session spawns a linked KYC for every Ultimate Beneficial Owner (UBO); a flagged transaction spawns a step-up KYC remediation, same session, same webhook contract, same audit trail. Single-product vendors sell one shape of KYC and stop there.
  • AI-era fraud. 200+ real-time fraud signals scored on every session, deepfake, injection, synthetic-ID, document forgery, face-morph, device intelligence, replay. Single-product vendors treat deepfake and injection detection as roadmap items, not defaults.

Common in fintech and crypto, the same architecture fits marketplaces, iGaming, mobility, and any vertical where you need to know who someone is and what they are doing.

What does it cost? Is anything actually free?

500 verifications free every month, forever, on every account. No credit card. No sales call. No expiry.

Above the free tier, every module has a public per-success price on didit.me/pricing, $0.33 per full KYC bundle, $0.15 per Identity Document Verification, $0.15 per Wallet Screening, $0.20 per Anti-Money Laundering (AML) Screening, $0.10 per liveness, $0.05 per face match, $0.03 per Internet Protocol (IP) analysis.

Pay-as-you-go, no minimums, no overage surprises. Volume discounts kick in automatically as you grow.

Which Vietnamese regulator covers identity verification on a digital onboarding?

Four sit on top of every Vietnamese identity-verification flow:

  • State Bank of Vietnam (SBV), central bank and prudential supervisor. Sets remote-onboarding requirements under Circular 17/2024/TT-NHNN binding on banks, e-money issuers and intermediary payment services.
  • State Securities Commission (SSC), securities and capital-markets supervisor. Sets KYC rules under the Securities Law 54/2019/QH14.
  • Anti-Money Laundering Department (AMLD) within the SBV, Vietnam's Financial Intelligence Unit. Receives Suspicious Transaction Reports under the AML Law 2022 (Law No. 14/2022/QH15).
  • Ministry of Public Security (MPS), its data-protection unit is the authority under the Personal Data Protection Law (Law No. 91/2025/QH15) and Decree 356/2025/ND-CP, in force from 1 January 2026, and it operates the CCCD + VNeID identity infrastructure under the Law on Identification 2023.

Didit ships the hosted flow, the audit log and the watchlist coverage that teams under all four regulators use, same POST /v3/session/ workflow, same JSON report, same SOC 2 Type 1 & Type 2 + ISO/IEC 27001 evidence pack.

Which Vietnamese documents does Didit accept on a verification session?

Didit accepts the primary Vietnamese identity documents:

  • CCCD (Căn cước công dân), the current 12-digit chip-enabled national identity card. OCR + machine-readable parse, with chip read on chip-enabled variants.
  • Legacy CMND, 9- and 12-digit pre-CCCD national identity card still held by older citizens during the migration.
  • Vietnamese Passport, ICAO 9303-compliant, chip-enabled variants captured via NFC.
  • Driver's Licence, A, B, C, D, E classes via document-template parse.
  • Residence Card, temporary (Thẻ tạm trú) and permanent (Thẻ thường trú) for foreign nationals.

The broader Didit catalogue covers 14,000+ document types globally, the same Vietnamese session also accepts foreign-issued passports for cross-border onboarding.

VNeID is the Ministry of Public Security's e-identification app, not a document Didit reads today. Platforms that must link accounts to VNeID under Decree 320/2026 can talk to Didit about connecting it; the chip-checked CCCD path works today.

Does Didit cover the SBV Circular 17/2024/TT-NHNN eKYC requirements?

Yes. Circular 17/2024/TT-NHNN is the SBV's binding electronic-KYC framework, it mandates document authenticity, biometric assurance and source-data verification for remote onboarding at banks, e-wallets and intermediary payment services.

Didit covers the regulated stack on one workflow:

  • Identity Document Verification, full OCR + authenticity check on every CCCD + legacy CMND + Passport.
  • Active Liveness + Face Match 1:1, biometric assurance with the regulator-expected challenge-response prompts.
  • AML Screening ($0.20 per check) against the global pool plus Vietnamese regulatory watchlists (MPS sanctions, National Assembly PEP register, provincial People's Courts and Committees, adverse-media sources).
  • Wallet Screening (KYT) at $0.15 per check for the on-chain exposure assessment crypto-adjacent operators need.
  • Ongoing AML monitoring ($0.07 per user / year) for the periodic-review obligation under the AML Law 2022.
What does Decree 320 require?

Decree 320/2026/ND-CP, dated 13 August 2026 and in force from 28 September 2026, amends Decree 69/2024/ND-CP on electronic identification and authentication. It requires electronic transaction accounts on digital platforms in listed sectors (education, securities, telecoms, banking, e-commerce sellers, livestream sellers and affiliate marketers, e-invoices, transport, tourism, pharmaceuticals, healthcare and social networks in Vietnam) to be linked and authenticated with an e-identification account, the account used in the VNeID app.

  • Accounts created before 28 September 2026 must be linked before 31 December 2026; banking accounts before 30 June 2027.
  • The decree names only the e-identification account for this link. A document check alone does not replace it.
  • Didit does not connect to VNeID today. Platforms that need it can talk to Didit about connecting it; the chip-checked CCCD path (document, liveness and face match) works today.

Read the full guide: Vietnam Decree 320 and VNeID account verification. Related: CCCD chip verification with NFC and seller KYB for livestream sellers and affiliates. This is a summary of the decree, not legal advice.

How long does it take to integrate Didit in Vietnam?

5 minutes to a working sandbox, a weekend to a production flow.

  • Sign up at business.didit.me, grab an API key, call POST /v3/session/ with a workflow_id that wires ID Verification + Active Liveness + Face Match + AML, done.
  • AI-agent path: paste the integration prompt at docs.didit.me/integration/integration-prompt into Claude Code, Cursor, Codex, Devin, Aider, or Replit Agent. The agent provisions the application, builds the workflow, wires the webhook, and runs a smoke test.
  • Five SDKs share the same session model: Web, iOS, Android, React Native, Flutter.

The first 500 verifications every month are free, forever, pilot the full Vietnam stack at zero cost before flipping production traffic.

Which language does the hosted verification flow use for Vietnamese users?

Vietnamese, auto-detected from the user's browser / device locale. The hosted UI ships in 48+ languages; Vietnamese users land on the Vietnamese flow by default. English is also live on the same flow for cross-border or expat users.

The document-recognition layer is decoupled from the UI layer, Vietnamese-script OCR is tuned for the CCCD and Driver's Licence templates with full diacritic preservation, and the admin console can be set independently to whichever language your compliance team prefers.

What does the Vietnam verification cost end-to-end?

Per-module public pricing, pay only for what runs on the session:

  • ID Verification, $0.15 per document check.
  • Passive Liveness, $0.10. Active Liveness, $0.15.
  • Face Match 1:1, $0.05. Face Search 1:N, free.
  • AML Screening, $0.20 per check. Ongoing AML, $0.07 per user / year.
  • Wallet Screening (KYT), $0.15 per check.

The full KYC bundle (Identity + Passive Liveness + Face Match + IP Analysis) is `$0.33`, same anchor price worldwide, no Vietnam surcharge. 500 verifications free every month, no credit card. Volume discounts auto-apply above the free tier; Enterprise adds a custom Master Services Agreement (MSA) and data-residency choice.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page