Chunguza malipo ya hatari kubwa katika hatua mbili. Ishara za bei nafuu kwanza. Biometriska tu inapohitajika.
Pima mtandao na kifaa kwenye kila gari la hatari kubwa kwa $0.03. Ongeza ukaguzi wa biometriska kwenye sehemu ndogo ambapo ishara pekee hazitoshi. Uthibitishaji 500 bure kila mwezi.
Bila msuguano kwa wanunuzi wanaoaminika. Uamuzi kwenye kilele.
90% ya maagizo ni wanunuzi wa kila siku kwenye vifaa vinavyoaminika — wanapaswa kupita
bila shida. 10% yenye kilele cha hatari hupata uchunguzi: IP ya $0.03 + kifaa kwenye
kesi za bei nafuu, hatua ya biometriska ya $0.10 kwenye zile za thamani kubwa. Uthibitishaji 500
bure kila mwezi.
Jinsi inavyofanya kazi
Kutoka kujisajili hadi mtumiaji aliyethibitishwa katika hatua nne.
Hatua 01
Unda mtiririko wa kazi
Chagua ukaguzi unaotaka — Kitambulisho, uhai, kulinganisha uso, vikwazo, anwani, umri, simu, barua pepe, maswali maalum. Ziburute kwenye mtiririko kwenye dashibodi, au chapisha mtiririko huo huo kwenye API yetu. Tawi kwenye masharti, endesha majaribio ya A/B, hakuna msimbo unaohitajika.
Hatua 02
Unganisha
Pachika asili na Web, iOS, Android, React Native, au Flutter SDK yetu. Elekeza kwenye ukurasa uliopangishwa. Au tuma tu kiungo kwa mtumiaji wako — kwa barua pepe, SMS, WhatsApp, popote. Chagua kinachofaa mfumo wako.
Hatua 03
Mtumiaji anapitia mchakato
Didit huandaa kamera, ishara za mwanga, uhamishaji wa simu, na ufikiaji. Wakati mtumiaji yuko kwenye mtiririko, tunapata alama za ishara 200+ za ulaghai kwa wakati halisi na kuthibitisha kila sehemu dhidi ya vyanzo vya data vya mamlaka. Matokeo chini ya sekunde mbili.
Hatua 04
Unapokea matokeo
Webhooks zilizotiwa saini za wakati halisi huweka hifadhidata yako ikiwa sawa mara tu mtumiaji anapoidhinishwa, kukataliwa, au kutumwa kwa ukaguzi. Uliza API inapohitajika. Au fungua koni ili kukagua kila kipindi, kila ishara, na kudhibiti kesi kwa njia yako.
Imejengwa kwa ajili ya malipo · Bei kama miundombinu
Hatua mbili. $0.03 kwenye kesi za bei nafuu. $0.13 kwenye zile za thamani kubwa.
Skrini ya ulaghai wa mnunuzi ni muundo — vichochezi vya rukwama, ishara za mtandao, hatua ya kibayometriki, kifurushi cha ukaguzi, uaminifu wa mnunuzi anayerudi. Washa kila moja kwa kila mtiririko wa kazi katika Mjenzi wa Mtiririko wa Kazi.
Jumla ya rukwama juu ya kiwango chako. Staki ya kadi za zawadi tatu au zaidi. Nchi ya usafirishaji isiyolingana na kadi ya malipo. Ununuzi wa kwanza kutoka kwa kifaa kipya. Hitilafu ya kasi — maagizo N ndani ya dirisha W. Malipo / marudio ya kurejesha pesa yamebadilika katikati ya mtiririko. Zote zinaweza kuhaririwa katika Mjenzi wa Mtiririko wa Kazi usio na msimbo.
Jumla ya rukwama juu ya kiwango> $500IP + hatua ya juu
Mrundikano wa kadi ya zawadi≥ kadi 3Hatua ya juu
Kutolingana kwa eneo la kijiografia · usafirishajiMabadiliko ya nchiIP pekee
Kifaa kipya · ununuzi wa kwanzaImeonekana mara ya kwanzaIP pekee
Mnunuzi anayerudi · safiInayoaminikaPita
Hariri sheria katika Kijenzi cha Mtiririko wa Kazi. Hakuna usambazaji upya.
02 · IP ya bei nafuu + skrini ya kifaa
Ishara kwanza. Nafuu. Inayoamua.
Uchambuzi wa Kifaa na IP unarudisha alama ya hatari ya 0–100 pamoja na Virtual Private Network (VPN), Tor, kituo cha data, nchi, Autonomous System Number (ASN), na bendera za alama za vidole vya kifaa. $0.03 kwa kila simu, chini ya 100ms. Inayoamua katika kesi zilizo wazi — imekataliwa au kuidhinishwa papo hapo, hakuna kamera inayohitajika.
Kutolingana kwa nchi · usafirishaji kwaKadi Marekani → Usafirishaji NigeriaPanda ngazi
Bendera ya kivinjari kisicho na kichwanavigator.webdriverZuia
Kasi ya kifaaMaagizo 8 · dakika 30Panda ngazi
ISP ya makazi · kifaa kinachoaminikaVodafone · iOSPita
Alama, bendera, nchi, ASN — chini ya milisekunde 100.
03 · Hatua ya kibayometriki
Ukaguzi wa uso wakati ishara hazitoshi.
Pandisha hadi Passive Liveness ($0.10) pamoja na kulinganisha uso wa hiari wa 1:1 dhidi ya picha ya mnunuzi iliyohifadhiwa ($0.05) kwenye rukwama za thamani ya juu. Imethibitishwa na iBeta Level 1 Presentation Attack Detection (PAD). Uamuzi wa chini ya sekunde mbili. Ukaguzi wa uso wakati wa malipo hauwezi kutatuliwa na kadi iliyoibiwa.
iBeta Level 1 PAD · chini ya sekunde 2~$0.13 kwa tukio
04 · Kifurushi cha ushahidi wa malipo ya kurudisha
Kifurushi cha ukaguzi kwa kila mzozo.
Malipo ya uamuzi ni faili ya kesi ya malipo ya kurudisha — uamuzi wa kibayometriki, alama ya IP, alama ya vidole vya kifaa, nchi, Autonomous System Number (ASN), historia ya agizo la awali. Inaendana kawaida na mabadiliko ya dhima ya 3-D Secure 2.x kwenye kadi za EU na kizingiti cha mteja anayeaminika cha Visa Compelling Evidence 3.0 (CE3.0).
Uboreshaji wa kibayometrikiImeidhinishwa · 0.94 sim
IP + alama ya kifaa11 / 100 · safi
Nchi + ASNES · Movistar
Mzigo wa malipo wa webhook uliotiwa sainiSHA-256 imethibitishwa
Maagizo ya awali ya mnunuziSiku 120 · maagizo 14
Pairs with 3-D Secure 2.x and Visa Compelling Evidence 3.0.
05 · Uaminifu unaoweza kutumika tena kwa wanunuzi wanaorudi
Wanunuzi wanaoaminika wanaorudi huruka msuguano.
Mara tu mnunuzi anapopitisha kitambulisho mara moja kwenye jukwaa, kitambulisho kinaweza kuchezwa tena kwenye malipo ya baadaye bila gharama kupitia Reusable KYC. Tafuta session_id ya awali ya mnunuzi; ikiwa kitambulisho ni halali na cha hivi karibuni, ruka skrini ya moja kwa moja. Bure milele.
Mnunuzi mmoja aliyethibitishwa. Malipo mengi yenye msuguano mdogo.Bure milele
06 · Bomba la Webhook + hatua ya rukwama
Uamuzi uliotiwa saini. Hatua ya rukwama imeunganishwa.
Webhook iliyotiwa saini inatua na Imeidhinishwa, Inakaguliwa, au Imekataliwa. Thibitisha X-Signature-V2 na Hash-based Message Authentication Code (HMAC) SHA-256. Imeidhinishwa inasafirisha agizo. Inakaguliwa inashikilia kwa ukaguzi wa mwongozo na ishara za moduli kama faili ya kesi ya ufunguzi. Imekataliwa inaghairi na kurejesha pesa.
Thibitisha X-Signature-V2 kabla ya kusoma malipo.nyaraka →
Ujumuishaji tayari kwa wakala
Tuma skrini ya udanganyifu wa mnunuzi kwa haraka.
Bandika kwenye Claude Code, Cursor, Codex, Devin, Aider, au Replit Agent. Jaza stack yako. Wakala huunganisha vichochezi vya rukwama, huendesha skrini ya hatua mbili, huthibitisha webhook, na husafirisha au kushikilia agizo.
didit-integration-prompt.md
You are integrating a Didit buyer-side fraud screen on a marketplace / e-commerce checkout. Goal: catch stolen-card use, account takeover, gift-card stack abuse, geo-mismatch friendly fraud, and bot scalping on high-value carts. Two stages — cheap signals first, biometric step-up only when signals aren't enough.
WHY THIS SHAPE
- Most checkouts don't need any friction. Day-to-day buyers on trusted devices from residential networks should sail through.
- A small percentage are high-value or high-risk — cart over a threshold, gift-card stack, payout to a new card, geo mismatch, new device, velocity anomaly. On those, run a screen.
- Two stages keep the cost and the friction proportional to the risk. Cheap IP + device check ($0.03) is decisive on the obvious cases. Biometric step-up ($0.10) only fires when the cheap signals are inconclusive AND the order is high-value.
- 500 verifications free every month. The screen runs inside the free tier for most teams while they tune the thresholds.
PRE-REQUISITES
- Production API key from https://business.didit.me (sandbox key in 60 seconds, no credit card).
- A webhook endpoint with HMAC SHA-256 verification of the X-Signature-V2 header using your webhook secret.
- A Workflow Builder workflow with Device & IP Analysis and optionally Passive Liveness + Face Match 1:1 against the stored buyer portrait.
- A server-side cart-gate that defaults to BLOCK on the high-risk path and only unblocks on a verified webhook with status: Approved.
STEP 1 — Decide WHEN to screen (your code, not Didit's)
Run your usual checkout signals. Default triggers worth a screen:
- Cart total above your account-level tier (e.g. > $500)
- Gift-card stack of three or more cards in one order
- Shipping country that doesn't match the billing-card country
- First buy from a new device
- Velocity anomaly — N orders within window W from the same buyer
- Payout / refund destination changed mid-flow
Day-to-day reads from trusted-device + residential-network buyers do NOT need a screen.
STEP 2 — Open the screen session
POST https://verification.didit.me/v3/session/
Headers:
x-api-key: <your api key>
Content-Type: application/json
Body:
{
"workflow_id": "<wf id with Device & IP Analysis + optional Passive Liveness + Face Match 1:1>",
"vendor_data": "<your order id, max 256 chars>",
"callback": "https://<your-app>/checkout/screen/callback",
"metadata": {
"cart_total_cents": 78500,
"currency": "EUR",
"trigger": "high_value_cart"
}
}
Response: 201 Created with a hosted session URL. Show inline at checkout (web), or open in a Software Development Kit (SDK) webview (mobile). The order stays in HOLD on your side until the signed webhook lands.
STEP 3 — Read the signed webhook
Didit POSTs the verdict. Verify X-Signature-V2 (HMAC SHA-256 of the raw body) BEFORE reading the JSON.
Payload (excerpted):
{
"session_id": "<uuid>",
"vendor_data": "<your order id>",
"status": "Approved",
"ip_analysis": { "status": "Approved", "score": 11 },
"liveness": { "status": "Approved" },
"face": { "status": "Approved", "similarity_score": 0.93 }
}
Session status enum (exact case, Title Case With Spaces): Approved | Declined | In Review | Resubmitted | Expired | Not Finished | Kyc Expired | Abandoned.
STEP 4 — Branch the cart action
Approved → ship the order, capture the auth, send the confirmation.
In Review → hold the order. Route to manual review with the per-module signals as the case file.
Declined → cancel the order, refund the auth, log warnings (liveness / face-match / ip flags), throttle the source IP.
Not Finished → invite the buyer to retry the screen with a fresh session URL. Don't ship.
STEP 5 — (Optional) Reusable Know Your Customer (KYC) for returning trusted buyers
Once a buyer has passed identity once on the platform, the credential can replay on future checkouts at no cost via Reusable KYC. Look up the buyer's prior session_id; if the credential is valid and recent, skip the live screen.
That keeps the friction on the unknown traffic only. Free forever.
STEP 6 — Use the decision payload as the chargeback evidence pack
When a dispute lands, pull the full decision payload via:
GET https://verification.didit.me/v3/session/{session_id}/decision/
Headers:
x-api-key: <your api key>
Pairs naturally with:
- 3-D Secure 2.x (3DS2) liability shift on EU cards
- Visa Compelling Evidence 3.0 (CE3.0) — biometric + IP + device fingerprint + prior-order history meets the "trusted customer" bar
- Mastercard Identity Check chargeback dispute kit
WEBHOOK EVENT NAMES
- Sessions: standard session webhook. One endpoint, status field tells you the lifecycle.
- Verify X-Signature-V2 (HMAC SHA-256) on every payload.
WHAT IT BLOCKS
- Stolen-card use on first-time-buy + geo mismatch
- Account takeover on a previously-verified buyer (the step-up is the second-factor)
- Friendly fraud where the cardholder disputes a charge they actually authorised
- Bot scalpers running multi-item carts from datacenter Internet Protocol (IP) addresses
- Gift-card stack drains funded by a stolen card
- Reshipper / mule patterns (ship-to address inconsistent with prior orders)
CONSTRAINTS
- Session statuses use Title Case With Spaces. Never UPPER_SNAKE_CASE — that's the Transactions API.
- Start with IP-only on the cheap cases. Add the biometric step-up only on high-value carts or when IP alone is inconclusive — keeps cost down and friction proportional.
- 200+ fraud signals are evaluated on every session at no extra cost — read them off the decision payload, don't re-query.
Read the docs:
- https://docs.didit.me/sessions-api/create-session
- https://docs.didit.me/core-technology/ip-analysis/overview
- https://docs.didit.me/core-technology/biometric-auth/overview
- https://docs.didit.me/core-technology/reusable-kyc/overview
- https://docs.didit.me/integration/webhooks
Start free at https://business.didit.me — sandbox key in 60 seconds, 500 verifications free every month, no credit card.
Unahitaji maelezo zaidi? Tazama nyaraka kamili za moduli.docs.didit.me →
Inatii kwa muundo
Fungua nchi mpya kwa kubofya mara moja. Tunafanya kazi ngumu.
Tunafungua kampuni tanzu za ndani, tunapata leseni, tunafanya majaribio ya kupenya, tunapata vyeti, na tunalingana na kila kanuni mpya. Ili kusafirisha uthibitishaji katika nchi mpya, geuza swichi. Nchi 220+ zinafanya kazi, zinakaguliwa na kujaribiwa kila robo mwaka — mtoa huduma pekee wa utambulisho ambaye serikali ya nchi mwanachama wa EU imemwita rasmi kuwa salama zaidi kuliko uthibitishaji wa ana kwa ana.
Kwa kila kifaa na uchambuzi wa IP kwenye kesi za bei nafuu — huamua kwenye zile zilizo wazi.
$0.00
Kwa kila tukio la rukwama yenye thamani ya juu na hatua ya biometriska — $0.10 hatua ya juu + $0.03 IP.
<0s
Uamuzi wa hatua ya juu mwisho hadi mwisho kwenye Android ya kiwango cha kuingia.
0
Uthibitishaji wa bure kila mwezi, kwenye kila akaunti.
Ngazi tatu, orodha moja ya bei
Anza bure. Lipa kwa matumizi. Panua hadi Biashara.
Uthibitishaji 500 bila malipo kila mwezi, milele. Lipa kadri unavyotumia kwa uzalishaji. Mikataba maalum, makazi ya data, na SLA (Mikataba ya Kiwango cha Huduma) kwenye Biashara.
Bure
Bure
$0 / mwezi. Hakuna kadi ya mkopo inayohitajika.
Kifurushi cha KYC cha bure (Uthibitishaji wa Kitambulisho + Uhai Usio na Kazi + Kulinganisha Uso + Uchambuzi wa Kifaa na IP) — 500 / mwezi, kila mwezi
Watumiaji Waliozuiliwa
Kugundua Marudio
Ishara 200+ za udanganyifu kwenye kila kipindi
KYC inayoweza kutumika tena kwenye mtandao wa Didit
Jukwaa la Usimamizi wa Kesi
Mjenzi wa Mtiririko wa Kazi
Hati za umma, sandbox, SDKs, seva ya MCP (Model Context Protocol)