Kagua kila muamala kwa wakati halisi dhidi ya sheria 150+ zilizowekwa awali, vikwazo, upangaji, kasi, mamlaka yenye hatari kubwa, hatari ya crypto wallet. Foleni ya kesi na mtiririko wa kazi wa SAR (ripoti ya shughuli za kutiliwa shaka) umejumuishwa. $0.02 kwa muamala, 500 bila malipo/mwezi.
Robinhood Ventures
Inaaminika na mashirika 2,000+ duniani kote.
Vifurushi 11 vilivyopandwa
Kasi, uundaji, mshirika aliyewekewa vikwazo, mamlaka yenye hatari kubwa. Foleni ya kesi, mtiririko wa kazi tayari kwa SAR, Sheria ya Kusafiri. Sitisha kiotomatiki na uthibitishe upya mtumiaji wakati sheria laini inapoanza.
Chagua ukaguzi unaotaka, ID, uhai, kulinganisha uso, vikwazo, anwani, umri, simu, barua pepe, maswali maalum. Ziburute kwenye mtiririko kwenye dashibodi, au tuma mtiririko huo huo kwenye API yetu. Panga masharti, fanya majaribio ya A/B, hakuna msimbo unaohitajika.
Pachika asili na SDK yetu ya Web, iOS, Android, React Native, au Flutter. Elekeza kwa ukurasa uliopangishwa. Au tuma tu mtumiaji wako kiungo, kwa barua pepe, SMS, WhatsApp, popote. Chagua kinachofaa stack yako.
Didit huandaa kamera, vidokezo vya mwanga, uhamishaji wa simu, na ufikiaji. Wakati mtumiaji yuko kwenye mtiririko, tunakagua ishara 200+ za udanganyifu kwa wakati halisi na kuthibitisha kila sehemu dhidi ya vyanzo vya data vyenye mamlaka. Matokeo chini ya sekunde mbili.
Webhooks zilizosainiwa kwa wakati halisi huweka database yako sawa mara tu mtumiaji anapoidhinishwa, kukataliwa, au kutumwa kwa ukaguzi. Piga API inapohitajika. Au fungua console kukagua kila kipindi, kila ishara, na kudhibiti kesi kwa njia yako.
$ curl -X POST https://verification.didit.me/v3/transactions/ \
-H "x-api-key: $DIDIT_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"txn_id": "finance0001",
"direction": "OUTBOUND",
"amount": "1200.00",
"currency": "EUR"
}'{ "status": "IN_REVIEW", "score": 62 }$ curl -X POST https://verification.didit.me/v3/webhook/destinations/ \
-H "x-api-key: $DIDIT_API_KEY" \
-d '{
"url": "https://api.you.com/hook",
"subscribed_events": [
"transaction.status.changed",
"transaction.alert.generated"
]
}'{ "secret_shared_key": "whsec_..." }# Didit Transaction Monitoring — integrate in 5 minutes
You are integrating Didit's Transaction Monitoring into the my_stack codebase.
Follow these steps exactly. Every URL, header, and enum value below is
canonical — do not paraphrase or "improve" them.
## 1. Provision an account
- Sign up: https://business.didit.me (no credit card required).
- Enable Transaction Monitoring on an application from
Console -> Applications -> [app] -> Transactions.
- The moment you enable it, the 150+ preset rule library is auto-created on
the application. You can tune thresholds in the console — there is no
public rule-CRUD API by design (compliance teams own rule config).
## 2. Submit transactions
Every transaction is screened in real time. One POST, one verdict.
POST https://verification.didit.me/v3/transactions/
Headers:
x-api-key: YOUR_API_KEY
Content-Type: application/json
Body (minimum viable shape — see docs for full schema):
{
"txn_id": "finance0001",
"transaction_category": "finance",
"transaction_details": {
"direction": "OUTBOUND",
"amount": "1200.00",
"currency": "EUR",
"currency_kind": "fiat"
},
"subject": {
"role": "applicant",
"entity_type": "individual",
"vendor_data": "user-123"
},
"counterparty": {
"role": "counterparty",
"entity_type": "individual",
"full_name": "Jane Doe",
"country_code": "DE"
}
}
Response (synchronous): JSON with the computed risk score, the matched
rules, and the verdict status (see step 3).
## 3. Read the verdict
Every transaction lands on one of four statuses (UPPERCASE, strict enum):
- APPROVED — below all thresholds
- IN_REVIEW — score >= review threshold (default 60) OR a rule
set change_status to IN_REVIEW
- DECLINED — score >= decline threshold (default 85) OR a rule
set change_status to DECLINED, OR an entity matched
a blocklist (blocklist always wins, evaluated first)
- AWAITING_USER — a rule fired with change_status AWAITING_USER; Didit
created a remediation Know Your Customer (KYC) session automatically and
the verification_url is included in the response
The response also includes:
- score (number) — cumulative risk score
- rule_runs[] — every rule evaluated, with match/no-match
- screening_results — Anti-Money Laundering (AML), wallet, and IP enrichment outcomes
- decision_reason — short string when DECLINED
- remediation_session_url — only when status is AWAITING_USER
## 4. Crypto + Travel Rule
For crypto transfers, set currency_kind to "crypto" and put the wallet
addresses in payment_method.account_id. Didit screens on-chain wallet
risk automatically — no extra API call.
For VASP transfers requiring FATF R.16 (Travel Rule), set
transaction_category to "travel_rule" and include travel_rule_details
with status, protocol (TRISA / TRP / OpenVASP), originator_data, and
beneficiary_data. 12 regional regimes ship with their own rule sets
(EU, UK, Singapore, Hong Kong, Japan, etc.).
## 5. Webhooks
Register one webhook destination once (you can reuse the same destination
for KYC, AML, and Transaction Monitoring events):
POST https://verification.didit.me/v3/webhook/destinations/
Body: url, subscribed_events: [
"transaction.created",
"transaction.updated",
"transaction.status.changed",
"transaction.alert.generated"
]
Every webhook delivery carries an X-Signature-V2 header you MUST verify
before trusting the payload. HMAC-SHA256 verification MUST run against the raw body bytes (the raw payload as Didit sent it) BEFORE any JSON parsing — re-serialising the parsed body changes whitespace and key order, which invalidates the signature.Algorithm:
1. sortKeys(payload) recursively
2. shortenFloats (truncate trailing zeros after the decimal point)
3. JSON.stringify the result
4. HMAC-SHA256 with secret_shared_key
5. Hex-encode, compare to X-Signature-V2.
## 6. Hard rules — do not change
- Base URL for /v3/* endpoints is verification.didit.me (NOT apx.didit.me).
- Auth header is x-api-key (lowercase, hyphenated).
- Status enums are UPPERCASE: APPROVED, IN_REVIEW, DECLINED, AWAITING_USER.
- Webhook signature header is X-Signature-V2 (NOT X-Signature).
- Always verify webhook signatures before trusting payload data.
- Do NOT create rules via API — rules are configured in the Business
Console only. This is a design choice: compliance teams own rule config.
## 7. Pricing reference (public)
- Transaction Monitoring: $0.02 per transaction monitored.
- AML screening fired by a Transaction Monitoring rule: billed at
$0.20 per AML check (separate line item).
- Wallet Screening (KYT) fired by a crypto rule: $0.15 per screening —
or bring your own screening provider and run it inside Didit.
- 500 free verifications every month, forever, on every account.
- No minimums, no contracts, no overage surprises.
## 8. Verify your integration
- Send a sandbox transaction with amount 9500 EUR — this trips the
single-transaction-just-below-threshold preset (+25 score) so you can
confirm the response carries rule_runs and a non-zero score.
- Trip a structuring pattern by submitting 20 sandbox transfers under
10,000 EUR for the same vendor_data within 30 days — the
structuring-outbound preset returns IN_REVIEW.
- Check the Business Console -> Transactions -> Cases tab to confirm an
alert was generated for every IN_REVIEW.
When in doubt: https://docs.didit.me/transaction-monitoring/overview
$0 / mwezi. Hakuna kadi ya mkopo inayohitajika.
Lipa tu kwa unachotumia. Moduli 25+. Bei za umma kwa kila moduli, hakuna ada ya chini ya kila mwezi.
MSA & SLA maalum. Kwa idadi kubwa na programu zilizodhibitiwa.
Anza bure → lipa tu wakati ukaguzi unafanyika → fungua Enterprise kwa mkataba maalum, SLA, au uhifadhi wa data.
Didit ni miundombinu ya utambulisho na udanganyifu, jukwaa ambalo tulitamani lingekuwepo tulipokuwa tukijenga bidhaa sisi wenyewe: wazi, rahisi, na rafiki kwa waendelezaji, ili lifanye kazi kama sehemu halisi ya stack yako badala ya sanduku jeusi unalounganisha.
API moja inashughulikia kuthibitisha watu (KYC, mjue mteja wako), kuthibitisha biashara (KYB, mjue biashara yako), kuchunguza pochi za crypto (KYT, mjue muamala wako), na kufuatilia miamala kwa wakati halisi, kwenye stack iliyojengwa kuwa:
Alama ya miguu chini: aina 14,000+ za nyaraka katika lugha 48+, vyanzo vya data 1,000+, na ishara za udanganyifu 200+ kwenye kila kipindi. Miundombinu ya Didit hujifunza kwa nguvu kutoka kila kipindi na inakuwa bora kila siku.
finance (muundo, miamala mikubwa, uwekaji tabaka, mule fan-in), aml_ctf (vikwazo vya mshirika, mfiduo wa Mtu Anayeshika Nafasi ya Kisiasa (PEP), marejeleo ya malipo ya kutiliwa shaka), aml_monitoring (chanzo cha fedha chenye hatari kubwa kinachotokana na blockchain), anomaly_detection (kasi kubwa, uanzishaji upya wa akaunti zilizolala), fatf (mfiduo wa mamlaka yenye hatari kubwa), device_intelligence (akaunti nyingi kupitia alama za vidole zinazoshirikiwa, Virtual Private Network (VPN) / proksi, safari isiyowezekana), fraud_prevention (uchukuaji wa akaunti, udanganyifu wa Malipo ya Push Yaliyoidhinishwa, washirika waliotiwa alama na consortium), crypto_monitoring (mfiduo wa pochi za mixer / darknet / zilizowekewa vikwazo, chain hopping, pochi zisizo na mwenyeji), travel_rule (mifumo 12 ya kikanda ya Kazi ya Kifedha ya Kimataifa (FATF) Pendekezo la 16), responsible_gaming (amana za haraka, kujitenga, kucheza nje ya saa), na e_commerce (upimaji wa kadi, viashiria vya chargeback, kutofautiana kwa nchi ya bili). Rekebisha kizingiti chochote, badilisha sheria iwe hali ya majaribio, au izime, lakini mipangilio ya awali haiwezi kufutwa, hivyo msingi wa mdhibiti unabaki salama kila wakati.POST /v3/transactions/ inarudisha uamuzi kwa usawa, latency ya kawaida ya mwisho hadi mwisho ni 150-350 ms kwa muamala wa fiat unaoendeshwa dhidi ya sheria 12 zinazotumika. Miamala ya crypto huongeza ~200 ms wakati uchunguzi wa pochi unapoanza (utafutaji wa hatari kwenye mnyororo). Ujumlishaji wa kasi kwa madirisha ya 7d / 30d umewekwa index mapema, hivyo ukubwa wa dirisha hauongezi latency. Huna haja ya kuuliza kila mara, uamuzi unapatikana kwenye response body.Mtiririko kamili kwa kawaida huchukua chini ya sekunde 30 kutoka mwanzo hadi mwisho, chukua kitambulisho, piga picha hati, piga selfie, umemaliza. Huu ndio uthibitishaji wa haraka zaidi sokoni. Watoa huduma wa zamani wa KYC kwa kawaida huchukua zaidi ya sekunde 90 kwa mtiririko huo huo.
Kwenye upande wa nyuma, Didit inarudisha matokeo kwa chini ya sekunde mbili kwa p99, ikipimwa kutoka wakati mtumiaji anamaliza selfie hadi wakati webhook yako inapoanza. Upigaji picha wa simu umeboreshwa kwa simu za polepole na mitandao ya polepole: ukandamizaji wa picha unaoendelea, upakiaji wa polepole wa software development kit, na uhamishaji wa kugusa mara moja kutoka kompyuta hadi simu kupitia msimbo wa QR ikiwa mtumiaji anaanza kwenye wavuti.
RULE kwa mechi ya preset, PROVIDER kwa pochi au hit ya AML), library_key ya sheria iliyolingana, mchango wa alama, na miamala iliyounganishwa. Wachambuzi hupanga kutoka /console/cases, huunganisha tahadhari zinazohusiana kwenye kesi moja, na kutatua kupitia mzunguko wa maisha wa OPEN / UNDER_REVIEW / AWAITING_USER / ON_HOLD / RESOLVED. Usimamizi wa Kesi ni bure na kila nafasi ya kazi ya Business Console, angalia /products/case-management kwa maelezo kamili.Kila kipindi huishia kwenye mojawapo ya hali saba zilizo wazi, hivyo code yako inajua nini cha kufanya kila wakati:
Approved, kila ukaguzi umefaulu. Endeleza mtumiaji.Declined, ukaguzi mmoja au zaidi umeshindwa. Unaweza kumruhusu mtumiaji kutuma upya hatua maalum iliyoshindwa (kwa mfano, kupiga selfie upya) bila kurudia mtiririko mzima.In Review, imetiwa alama kwa ukaguzi wa kufuata sheria. Fungua kesi kwenye console, angalia kila ishara, amua kuidhinisha au kukataa.In Progress, mtumiaji yuko katikati ya mtiririko.Not Started, kiungo kimetumwa, mtumiaji bado hajafungua. Tuma ukumbusho ikiwa itakaa muda mrefu sana.Abandoned, mtumiaji alifungua kiungo lakini hakumaliza kwa wakati. Mshirikishe tena au muda wake uishe.Expired, kiungo cha kipindi kimepitwa na wakati. Unda kipindi kipya.Webhook iliyosainiwa huwaka kwenye kila mabadiliko ya hali, hivyo database yako inabaki sawa kila wakati. Vipindi vilivyoachwa na vilivyokataliwa ni bure.
Data ya uzalishaji inachakatwa na kuhifadhiwa katika Umoja wa Ulaya kwa chaguo-msingi, kwenye Amazon Web Services. Mikataba ya biashara inaweza kuomba maeneo mbadala kwa mamlaka ambazo wadhibiti wao wanahitaji.
Usimbaji fiche kila mahali. AES-256 wakati wa kupumzika katika kila database, hifadhi ya vitu, na backup. Usalama wa Tabaka la Usafiri 1.3 wakati wa usafiri kwenye kila simu ya API, webhook, na kipindi cha Business Console. Data ya kibayometriki imesimbwa kwa kutumia Kitufe tofauti cha Mteja Mkuu.
Uhifadhi ni wako kudhibiti. Uhifadhi wa chaguo-msingi ni usio na kikomo (unlimited) isipokuwa ukisanidi mfupi zaidi, kati ya siku 30 na miaka 10 kwa kila programu, na unaweza kufuta kipindi chochote cha kibinafsi wakati wowote kutoka kwenye dashibodi au API.
Vyeti: SOC 2 Aina ya 1 (ukaguzi wa Aina ya 2 unaendelea), ISO/IEC 27001:2022, iBeta Level 1 PAD, na uthibitisho wa umma kutoka Tesoro / SEPBLAC / CNMV ya Uhispania kwamba uthibitishaji wa utambulisho wa mbali wa Didit ni salama zaidi kuliko kumthibitisha mtu ana kwa ana. Ripoti kamili inapatikana /security-compliance.
Didit inatii sheria kwa chaguo-msingi kwa wadhibiti muhimu kwa miundombinu ya utambulisho:
Memo ya kina, kila cheti, kila barua ya mdhibiti: /security-compliance.
Njia tatu za kuunganisha, chagua inayofaa stack yako:
Dashboard moja, bili moja, bei sawa ya kulipa-kwa-mafanikio kwa zote tatu. Mwongozo wa hatua kwa hatua unapatikana docs.didit.me/integration/integration-prompt.
API moja kwa KYC, KYB, Ufuatiliaji wa Miamala, na Uchunguzi wa Wallet. Unganisha ndani ya dakika 5.