Ruka hadi maudhui makuu
Didit Yakusanya $2M na Kujiunga na Y Combinator (W26)
Didit
Uchunguzi wa Udanganyifu wa Mnunuzi

Chunguza malipo ya hatari kubwa katika hatua mbili. Ishara za bei nafuu kwanza. Biometriska tu inapohitajika.

Pima mtandao na kifaa kwenye kila gari la hatari kubwa kwa $0.03. Ongeza ukaguzi wa biometriska kwenye sehemu ndogo ambapo ishara pekee hazitoshi. Uthibitishaji 500 bure kila mwezi.

Inaungwa mkono na
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Inaaminika na mashirika 2,000+ duniani kote.

Mrundikano wa giza usioeleweka wa udanganyifu wa mnunuzi — paneli nne zinazoelea, zisizo wazi, za kioo cheusi katika mtazamo wa 3D kwenye nyeusi safi, zikipitishwa na mstari wima wa Didit Blue unaong'aa na kuwekewa fremu na mabano ya skana yanayong'aa. Kila paneli hubeba motifu moja ndogo nyeupe-nyepesi isiyo dhahiri (gari la ununuzi lenye ngao, ramani ya dunia yenye alama mbili, simu mahiri yenye arcs za ishara, kitelezi cha hatari).

Kwa nini malipo mengi hayahitaji msuguano

Bila msuguano kwa wanunuzi wanaoaminika. Uamuzi kwenye kilele.

90% ya maagizo ni wanunuzi wa kila siku kwenye vifaa vinavyoaminika — wanapaswa kupita bila shida. 10% yenye kilele cha hatari hupata uchunguzi: IP ya $0.03 + kifaa kwenye kesi za bei nafuu, hatua ya biometriska ya $0.10 kwenye zile za thamani kubwa. Uthibitishaji 500 bure kila mwezi.

Jinsi inavyofanya kazi

Kutoka kujisajili hadi mtumiaji aliyethibitishwa katika hatua nne.

  1. Hatua 01

    Unda mtiririko wa kazi

    Chagua ukaguzi unaotaka — Kitambulisho, uhai, kulinganisha uso, vikwazo, anwani, umri, simu, barua pepe, maswali maalum. Ziburute kwenye mtiririko kwenye dashibodi, au chapisha mtiririko huo huo kwenye API yetu. Tawi kwenye masharti, endesha majaribio ya A/B, hakuna msimbo unaohitajika.

  2. Hatua 02

    Unganisha

    Pachika asili na Web, iOS, Android, React Native, au Flutter SDK yetu. Elekeza kwenye ukurasa uliopangishwa. Au tuma tu kiungo kwa mtumiaji wako — kwa barua pepe, SMS, WhatsApp, popote. Chagua kinachofaa mfumo wako.

  3. Hatua 03

    Mtumiaji anapitia mchakato

    Didit huandaa kamera, ishara za mwanga, uhamishaji wa simu, na ufikiaji. Wakati mtumiaji yuko kwenye mtiririko, tunapata alama za ishara 200+ za ulaghai kwa wakati halisi na kuthibitisha kila sehemu dhidi ya vyanzo vya data vya mamlaka. Matokeo chini ya sekunde mbili.

  4. Hatua 04

    Unapokea matokeo

    Webhooks zilizotiwa saini za wakati halisi huweka hifadhidata yako ikiwa sawa mara tu mtumiaji anapoidhinishwa, kukataliwa, au kutumwa kwa ukaguzi. Uliza API inapohitajika. Au fungua koni ili kukagua kila kipindi, kila ishara, na kudhibiti kesi kwa njia yako.

Imejengwa kwa ajili ya malipo · Bei kama miundombinu

Hatua mbili. $0.03 kwenye kesi za bei nafuu. $0.13 kwenye zile za thamani kubwa.

Skrini ya ulaghai wa mnunuzi ni muundo — vichochezi vya rukwama, ishara za mtandao, hatua ya kibayometriki, kifurushi cha ukaguzi, uaminifu wa mnunuzi anayerudi. Washa kila moja kwa kila mtiririko wa kazi katika Mjenzi wa Mtiririko wa Kazi.
01 · Vichochezi vya malipo

Unachagua wakati. Didit inaendesha skrini.

Jumla ya rukwama juu ya kiwango chako. Staki ya kadi za zawadi tatu au zaidi. Nchi ya usafirishaji isiyolingana na kadi ya malipo. Ununuzi wa kwanza kutoka kwa kifaa kipya. Hitilafu ya kasi — maagizo N ndani ya dirisha W. Malipo / marudio ya kurejesha pesa yamebadilika katikati ya mtiririko. Zote zinaweza kuhaririwa katika Mjenzi wa Mtiririko wa Kazi usio na msimbo.
Moduli ya Mratibu wa Mtiririko wa Kazi
02 · IP ya bei nafuu + skrini ya kifaa

Ishara kwanza. Nafuu. Inayoamua.

Uchambuzi wa Kifaa na IP unarudisha alama ya hatari ya 0–100 pamoja na Virtual Private Network (VPN), Tor, kituo cha data, nchi, Autonomous System Number (ASN), na bendera za alama za vidole vya kifaa. $0.03 kwa kila simu, chini ya 100ms. Inayoamua katika kesi zilizo wazi — imekataliwa au kuidhinishwa papo hapo, hakuna kamera inayohitajika.
Moduli ya Uchambuzi wa Kifaa na IP
03 · Hatua ya kibayometriki

Ukaguzi wa uso wakati ishara hazitoshi.

Pandisha hadi Passive Liveness ($0.10) pamoja na kulinganisha uso wa hiari wa 1:1 dhidi ya picha ya mnunuzi iliyohifadhiwa ($0.05) kwenye rukwama za thamani ya juu. Imethibitishwa na iBeta Level 1 Presentation Attack Detection (PAD). Uamuzi wa chini ya sekunde mbili. Ukaguzi wa uso wakati wa malipo hauwezi kutatuliwa na kadi iliyoibiwa.
Moduli ya Uthibitishaji wa Kibayometriki
04 · Kifurushi cha ushahidi wa malipo ya kurudisha

Kifurushi cha ukaguzi kwa kila mzozo.

Malipo ya uamuzi ni faili ya kesi ya malipo ya kurudisha — uamuzi wa kibayometriki, alama ya IP, alama ya vidole vya kifaa, nchi, Autonomous System Number (ASN), historia ya agizo la awali. Inaendana kawaida na mabadiliko ya dhima ya 3-D Secure 2.x kwenye kadi za EU na kizingiti cha mteja anayeaminika cha Visa Compelling Evidence 3.0 (CE3.0).
Rejea ya Webhook
05 · Uaminifu unaoweza kutumika tena kwa wanunuzi wanaorudi

Wanunuzi wanaoaminika wanaorudi huruka msuguano.

Mara tu mnunuzi anapopitisha kitambulisho mara moja kwenye jukwaa, kitambulisho kinaweza kuchezwa tena kwenye malipo ya baadaye bila gharama kupitia Reusable KYC. Tafuta session_id ya awali ya mnunuzi; ikiwa kitambulisho ni halali na cha hivi karibuni, ruka skrini ya moja kwa moja. Bure milele.
Moduli ya Reusable KYC
06 · Bomba la Webhook + hatua ya rukwama

Uamuzi uliotiwa saini. Hatua ya rukwama imeunganishwa.

Webhook iliyotiwa saini inatua na Imeidhinishwa, Inakaguliwa, au Imekataliwa. Thibitisha X-Signature-V2 na Hash-based Message Authentication Code (HMAC) SHA-256. Imeidhinishwa inasafirisha agizo. Inakaguliwa inashikilia kwa ukaguzi wa mwongozo na ishara za moduli kama faili ya kesi ya ufunguzi. Imekataliwa inaghairi na kurejesha pesa.
Rejea ya Webhook
Unganisha

Kipindi kimoja. Hatua mbili. Uamuzi mmoja uliotiwa saini.

Fungua skrini dhidi ya mtiririko wa kazi wa skrini ya mnunuzi. Soma uamuzi uliotiwa saini. Safirisha, shikilia, au ghairi.
POST /v3/session/Skrini ya mnunuzi
$ curl -X POST https://verification.didit.me/v3/session/ \
  -H "x-api-key: $DIDIT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "workflow_id": "wf_buyer_screen",
    "vendor_data": "order-A4421",
    "metadata": { "cart_total_cents": 78500 }
  }'
201Imeundwa{ "session_url": "verify.didit.me/..." }
Shikilia agizo hadi webhook itue status: Approved.nyaraka →
POST /webhooks/diditUamuzi
// X-Signature-V2 verified upstream
if (payload.status === "Imeidhinishwa") {
  shipOrder(payload.vendor_data);
} vinginevyo ikiwa (payload.status === "Imekataliwa") {
  cancelAndRefund(payload.vendor_data);
}
200Sawahali Imeidhinishwa · Imekataliwa · Inapitiwa · Haijakamilika
Thibitisha X-Signature-V2 kabla ya kusoma malipo.nyaraka →
Ujumuishaji tayari kwa wakala

Tuma skrini ya udanganyifu wa mnunuzi kwa haraka.

Bandika kwenye Claude Code, Cursor, Codex, Devin, Aider, au Replit Agent. Jaza stack yako. Wakala huunganisha vichochezi vya rukwama, huendesha skrini ya hatua mbili, huthibitisha webhook, na husafirisha au kushikilia agizo.
didit-integration-prompt.md
You are integrating a Didit buyer-side fraud screen on a marketplace / e-commerce checkout. Goal: catch stolen-card use, account takeover, gift-card stack abuse, geo-mismatch friendly fraud, and bot scalping on high-value carts. Two stages — cheap signals first, biometric step-up only when signals aren't enough.

WHY THIS SHAPE
  - Most checkouts don't need any friction. Day-to-day buyers on trusted devices from residential networks should sail through.
  - A small percentage are high-value or high-risk — cart over a threshold, gift-card stack, payout to a new card, geo mismatch, new device, velocity anomaly. On those, run a screen.
  - Two stages keep the cost and the friction proportional to the risk. Cheap IP + device check ($0.03) is decisive on the obvious cases. Biometric step-up ($0.10) only fires when the cheap signals are inconclusive AND the order is high-value.
  - 500 verifications free every month. The screen runs inside the free tier for most teams while they tune the thresholds.

PRE-REQUISITES
  - Production API key from https://business.didit.me (sandbox key in 60 seconds, no credit card).
  - A webhook endpoint with HMAC SHA-256 verification of the X-Signature-V2 header using your webhook secret.
  - A Workflow Builder workflow with Device & IP Analysis and optionally Passive Liveness + Face Match 1:1 against the stored buyer portrait.
  - A server-side cart-gate that defaults to BLOCK on the high-risk path and only unblocks on a verified webhook with status: Approved.

STEP 1 — Decide WHEN to screen (your code, not Didit's)
  Run your usual checkout signals. Default triggers worth a screen:
    - Cart total above your account-level tier (e.g. > $500)
    - Gift-card stack of three or more cards in one order
    - Shipping country that doesn't match the billing-card country
    - First buy from a new device
    - Velocity anomaly — N orders within window W from the same buyer
    - Payout / refund destination changed mid-flow

  Day-to-day reads from trusted-device + residential-network buyers do NOT need a screen.

STEP 2 — Open the screen session
  POST https://verification.didit.me/v3/session/
  Headers:
    x-api-key: <your api key>
    Content-Type: application/json
  Body:
    {
      "workflow_id": "<wf id with Device & IP Analysis + optional Passive Liveness + Face Match 1:1>",
      "vendor_data": "<your order id, max 256 chars>",
      "callback": "https://<your-app>/checkout/screen/callback",
      "metadata": {
        "cart_total_cents": 78500,
        "currency": "EUR",
        "trigger": "high_value_cart"
      }
    }

  Response: 201 Created with a hosted session URL. Show inline at checkout (web), or open in a Software Development Kit (SDK) webview (mobile). The order stays in HOLD on your side until the signed webhook lands.

STEP 3 — Read the signed webhook
  Didit POSTs the verdict. Verify X-Signature-V2 (HMAC SHA-256 of the raw body) BEFORE reading the JSON.

  Payload (excerpted):
    {
      "session_id": "<uuid>",
      "vendor_data": "<your order id>",
      "status": "Approved",
      "ip_analysis": { "status": "Approved", "score": 11 },
      "liveness":    { "status": "Approved" },
      "face":        { "status": "Approved", "similarity_score": 0.93 }
    }

  Session status enum (exact case, Title Case With Spaces): Approved | Declined | In Review | Resubmitted | Expired | Not Finished | Kyc Expired | Abandoned.

STEP 4 — Branch the cart action
  Approved      → ship the order, capture the auth, send the confirmation.
  In Review     → hold the order. Route to manual review with the per-module signals as the case file.
  Declined      → cancel the order, refund the auth, log warnings (liveness / face-match / ip flags), throttle the source IP.
  Not Finished  → invite the buyer to retry the screen with a fresh session URL. Don't ship.

STEP 5 — (Optional) Reusable Know Your Customer (KYC) for returning trusted buyers
  Once a buyer has passed identity once on the platform, the credential can replay on future checkouts at no cost via Reusable KYC. Look up the buyer's prior session_id; if the credential is valid and recent, skip the live screen.

  That keeps the friction on the unknown traffic only. Free forever.

STEP 6 — Use the decision payload as the chargeback evidence pack
  When a dispute lands, pull the full decision payload via:
    GET https://verification.didit.me/v3/session/{session_id}/decision/
    Headers:
      x-api-key: <your api key>

  Pairs naturally with:
    - 3-D Secure 2.x (3DS2) liability shift on EU cards
    - Visa Compelling Evidence 3.0 (CE3.0) — biometric + IP + device fingerprint + prior-order history meets the "trusted customer" bar
    - Mastercard Identity Check chargeback dispute kit

WEBHOOK EVENT NAMES
  - Sessions: standard session webhook. One endpoint, status field tells you the lifecycle.
  - Verify X-Signature-V2 (HMAC SHA-256) on every payload.

WHAT IT BLOCKS
  - Stolen-card use on first-time-buy + geo mismatch
  - Account takeover on a previously-verified buyer (the step-up is the second-factor)
  - Friendly fraud where the cardholder disputes a charge they actually authorised
  - Bot scalpers running multi-item carts from datacenter Internet Protocol (IP) addresses
  - Gift-card stack drains funded by a stolen card
  - Reshipper / mule patterns (ship-to address inconsistent with prior orders)

CONSTRAINTS
  - Session statuses use Title Case With Spaces. Never UPPER_SNAKE_CASE — that's the Transactions API.
  - Start with IP-only on the cheap cases. Add the biometric step-up only on high-value carts or when IP alone is inconclusive — keeps cost down and friction proportional.
  - 200+ fraud signals are evaluated on every session at no extra cost — read them off the decision payload, don't re-query.

Read the docs:
  - https://docs.didit.me/sessions-api/create-session
  - https://docs.didit.me/core-technology/ip-analysis/overview
  - https://docs.didit.me/core-technology/biometric-auth/overview
  - https://docs.didit.me/core-technology/reusable-kyc/overview
  - https://docs.didit.me/integration/webhooks

Start free at https://business.didit.me — sandbox key in 60 seconds, 500 verifications free every month, no credit card.
Unahitaji maelezo zaidi? Tazama nyaraka kamili za moduli.docs.didit.me →
Inatii kwa muundo

Fungua nchi mpya kwa kubofya mara moja. Tunafanya kazi ngumu.

Tunafungua kampuni tanzu za ndani, tunapata leseni, tunafanya majaribio ya kupenya, tunapata vyeti, na tunalingana na kila kanuni mpya. Ili kusafirisha uthibitishaji katika nchi mpya, geuza swichi. Nchi 220+ zinafanya kazi, zinakaguliwa na kujaribiwa kila robo mwaka — mtoa huduma pekee wa utambulisho ambaye serikali ya nchi mwanachama wa EU imemwita rasmi kuwa salama zaidi kuliko uthibitishaji wa ana kwa ana.
Soma jalada la usalama na utiifu
Sanduku la majaribio la kifedha la EU
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Usalama wa habari · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
Inalingana na EU kwa muundo

Nambari za uthibitisho

Nambari za uthibitisho
  • $0.00
    Kwa kila kifaa na uchambuzi wa IP kwenye kesi za bei nafuu — huamua kwenye zile zilizo wazi.
  • $0.00
    Kwa kila tukio la rukwama yenye thamani ya juu na hatua ya biometriska — $0.10 hatua ya juu + $0.03 IP.
  • <0s
    Uamuzi wa hatua ya juu mwisho hadi mwisho kwenye Android ya kiwango cha kuingia.
  • 0
    Uthibitishaji wa bure kila mwezi, kwenye kila akaunti.
Ngazi tatu, orodha moja ya bei

Anza bure. Lipa kwa matumizi. Panua hadi Biashara.

Uthibitishaji 500 bila malipo kila mwezi, milele. Lipa kadri unavyotumia kwa uzalishaji. Mikataba maalum, makazi ya data, na SLA (Mikataba ya Kiwango cha Huduma) kwenye Biashara.
Bure

Bure

$0 / mwezi. Hakuna kadi ya mkopo inayohitajika.

  • Kifurushi cha KYC cha bure (Uthibitishaji wa Kitambulisho + Uhai Usio na Kazi + Kulinganisha Uso + Uchambuzi wa Kifaa na IP) — 500 / mwezi, kila mwezi
  • Watumiaji Waliozuiliwa
  • Kugundua Marudio
  • Ishara 200+ za udanganyifu kwenye kila kipindi
  • KYC inayoweza kutumika tena kwenye mtandao wa Didit
  • Jukwaa la Usimamizi wa Kesi
  • Mjenzi wa Mtiririko wa Kazi
  • Hati za umma, sandbox, SDKs, seva ya MCP (Model Context Protocol)
  • Usaidizi wa jamii
Maarufu zaidi
Lipa kwa matumizi

Kulingana na Matumizi

Lipa tu kwa kile unachotumia. Moduli 25+. Bei ya umma kwa kila moduli, hakuna ada ya chini ya kila mwezi.

  • KYC kamili kwa $0.33 (Kitambulisho + Biometriska + IP / Kifaa)
  • Hifadhidata 10,000+ za AML — vikwazo, PEPs, vyombo vya habari hasi
  • Vyanzo 1,000+ vya data ya serikali kwa Uthibitishaji wa Hifadhidata
  • Ufuatiliaji wa Miamala kwa $0.02 kwa kila muamala
  • KYB ya Moja kwa Moja kwa $2.00 kwa kila biashara
  • Uchunguzi wa Wallet kwa $0.15 kwa kila ukaguzi
  • Mtiririko wa uthibitishaji wa Whitelabel — chapa yako, miundombinu yetu
Biashara

Biashara

MSA & SLA maalum. Kwa idadi kubwa na programu zilizodhibitiwa.

  • Mikataba ya kila mwaka
  • MSA, DPA, na SLA maalum
  • Kituo maalum cha Slack na WhatsApp
  • Wakaguzi wa mikono kwa mahitaji
  • Masharti ya muuzaji na white-label
  • Vipengele vya kipekee na ushirikiano wa washirika
  • CSM aliyetajwa, ukaguzi wa usalama, usaidizi wa kufuata

Anza bure → lipa tu wakati ukaguzi unafanyika → fungua Biashara kwa mkataba maalum, SLA, au makazi ya data.

FAQ

Maswali ya kawaida

Miundombinu ya utambulisho na udanganyifu.

API moja kwa KYC, KYB, Ufuatiliaji wa Miamala, na Uchunguzi wa Wallet. Unganisha kwa dakika 5.

Uliza AI ifupishe ukurasa huu