Non-Document Verification in Brazil: Identity Checks via SERPRO and DataValid

What Is Non-Document Verification?

Traditional identity verification asks users to photograph their government-issued ID, upload it, and wait while OCR and manual review extract their data. It works, but it introduces friction: bad lighting, blurry photos, expired documents, and the awkwardness of holding up a passport to your phone camera.

Non-document verification eliminates all of that. Instead of uploading document photos, the user provides their national ID number and completes a liveness selfie check. The system matches that selfie against the official government database photo tied to their ID number, validates biographical data against the same source, and returns an instant decision.

The result is the same level of assurance with significantly less friction. Onboarding flows that once took minutes now take seconds. Drop-off rates fall. Conversion rates rise. And because the data comes directly from the government source of truth, the risk of forged or tampered documents disappears entirely.

How Non-Doc Verification Works in Brazil

Brazil has one of the most mature digital identity infrastructures in Latin America, built around a few key systems.

SERPRO (Servico Federal de Processamento de Dados) is Brazil's federal data processing service, the government entity responsible for building and maintaining the country's core digital infrastructure. SERPRO manages tax systems, digital signatures, and critically, identity databases.

DataValid is SERPRO's identity validation API. It provides a standardized, regulated way for authorized businesses to verify citizen data against official government records. DataValid supports both biographical checks (name, date of birth, mother's name) and biometric checks (facial photo matching against government-held images).

The foundation of identity in Brazil is the CPF (Cadastro de Pessoas Fisicas), an 11-digit tax identification number assigned to every Brazilian citizen and resident. The CPF is mandatory for banking, employment, tax filing, credit applications, and digital services. With over 150 million active CPFs, it functions as a universal identifier.

Beyond the CPF, Brazil's CNH (Carteira Nacional de Habilitacao) database, managed by DENATRAN (the National Traffic Department), provides another rich source of biometric and biographical data. The CNH database contains facial photographs, full names, dates of birth, and other identifying information for tens of millions of licensed drivers.

Population coverage for non-doc verification in Brazil ranges from approximately 65% to 95% depending on the matching method used. CPF biographical validation covers the broadest population, while biometric face matching is available for those with photos in the SERPRO or DENATRAN databases. For users not covered, traditional document-based verification serves as an automatic fallback.

The Verification Flow: Step by Step

A typical non-document verification in Brazil follows five steps:

1. CPF submission. The user enters their 11-digit CPF number, either manually in the onboarding form or passed programmatically by the business via API. This is the only piece of information the user needs to provide.

2. Liveness check. The user completes a quick selfie capture with liveness detection. This confirms they are a real, physically present person and not a photograph, deepfake, or mask.

3. Face match against government records. The captured selfie is compared against the official facial photograph stored in SERPRO's biometric database (linked to the submitted CPF). This is a 1:1 biometric comparison, not a search. The system knows exactly which record to compare against, which makes the match both fast and highly accurate.

4. Data validation. Biographical data associated with the CPF is validated against SERPRO/DataValid records: full name, date of birth, mother's name, and other fields. Any discrepancy flags the verification for review.

5. Instant decision. Based on the liveness score, face match confidence, and data validation results, the system returns an approved, declined, or manual review decision in real time. The entire flow typically completes in under 10 seconds.

Why Brazilian Businesses Need Non-Doc Verification

Brazil's regulatory environment makes identity verification mandatory across a growing number of sectors.

BACEN (Banco Central do Brasil) requires all financial institutions to implement KYC procedures. With over 800 fintechs operating in Brazil, including Nubank, PicPay, Inter, and C6 Bank, the demand for fast, affordable verification at scale is enormous. Brazil is the largest fintech market in Latin America, and every second of onboarding friction costs conversions.

PIX, Brazil's instant payment system, has onboarded over 150 million users and driven a massive wave of digital financial inclusion. Open Finance Brasil is expanding that even further. Both trends mean more people entering the financial system digitally, all of whom need to be verified.

iGaming regulation is another major driver. Lei 14.790/2023 established the legal framework for online sports betting and gaming in Brazil, requiring licensed operators to verify the identity and age of all users. With the regulated market now live, operators face high-volume verification needs from day one.

Crypto regulation in Brazil falls under CVM (Comissao de Valores Mobiliarios) oversight, with exchanges required to verify users as part of anti-money laundering obligations.

Across all these sectors, the math is straightforward: Brazil has 215+ million people, verification volumes are high, and the difference between $0.30 and $1.50 per check adds up fast. Non-doc verification reduces both cost and friction simultaneously.

How Didit Makes Non-Doc Verification Simple

Didit connects directly to SERPRO/DataValid for real-time CPF validation and biometric matching, giving businesses a single integration point for non-document verification in Brazil.

Here is what that looks like in practice:

• Core KYC at $0.30/verification, making Didit 3-5x cheaper than legacy providers like Jumio, Onfido, or Veriff. At Brazilian verification volumes, the savings are significant.
• No minimums, no contracts, 500 free checks/month. Startups can launch verification without upfront commitment. Scale when ready.
• API-first integration. A single API call initiates the full verification flow: CPF validation, liveness, face match, and data check. Webhook callbacks deliver results in real time.
• Combined with full KYC capabilities. Non-doc verification in Brazil works alongside Didit's global verification stack: document verification for 14,000+ document types across 220+ countries, AML screening against 1,000+ sanctions and watchlists, ongoing monitoring, proof of address, and phone verification.
• Automatic fallback. For users whose biometric data is not in the SERPRO database, Didit automatically falls back to document-based verification, ensuring no one is left unverifiable.
• Brazilian and international users in one flow. Businesses serving both Brazilian and international customers use a single Didit integration. Brazilian users get the fast, non-doc CPF flow. International users go through standard document verification. Same API, same dashboard, same pricing.

For fintechs, iGaming operators, crypto exchanges, and marketplaces operating in Brazil, non-document verification through SERPRO/DataValid represents the fastest path to compliant, low-friction onboarding. Didit makes it accessible at a price point that works at any scale.

Ready to verify Brazilian users without document uploads? Start for free at business.didit.me or explore the docs.