Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Latin America

Identity verification
built for Brazil Flag of Brazil

RG, CIN, CNH and Pasaporte on one session, cross-checked against Receita Federal (CPF/CNPJ) — $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Brazil.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Brazilian identity fraud: deepfake and synthetic-CPF attacks targeting the explosion of PIX-enabled neobanks and digital wallets, CNH and RG document forgery, and a fast-growing iGaming surface (legalised by Lei 14.790/2023) where SPA-MF demands tight onboarding controls. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • LGPD (Lei Nº 13.709/2018)
  • Circular BCB 3.978/2020 (PLD/FT)
  • Resolução BCB 96 (PIX onboarding)
  • Resoluções CVM 24 · 35 · 175
  • Lei 9.613/1998 (lavagem de dinheiro)
  • Lei 14.790/2023 (apostas + iGaming)
Regulators

Who supervises identity verification in Brazil.

These are the supervisors a Brazil verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • BCB

    Banco Central do Brasil — central bank and prudential supervisor for banks, payment institutions, EMIs, and the PIX instant-payment scheme. Sets AML/CFT rules via Circular BCB 3.978/2020.

  • CVM

    Comissão de Valores Mobiliários — securities and Virtual Asset Service Provider (VASP) supervisor. Sets remote-onboarding rules under Resoluções CVM 24, 35 and 175.

  • COAF

    Conselho de Controle de Atividades Financeiras — Brazil's Financial Intelligence Unit. Receives Suspicious Activity Reports (Comunicações de Operações Suspeitas).

  • ANPD

    Autoridade Nacional de Proteção de Dados — LGPD (Lei Geral de Proteção de Dados, Lei Nº 13.709/2018) supervisor. Governs every identity verification on Brazilian residents.

  • Receita Federal

    Federal tax and customs authority. Maintains the CPF (individuals) and CNPJ (companies) registries used by every KYC and KYB flow in Brazil.

  • SPA-MF

    Secretaria de Prêmios e Apostas (Ministério da Fazenda) — sports-betting and online-casino supervisor under Lei 14.790/2023. Sets KYC + AML obligations for licensed operators.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Brazil database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • CIN, RG (all 27 state templates), CNH (including the QR-coded CNH Digital), Pasaporte (with the chip read on e-Passports), and CRNM for foreign residents.
  • Returns the name, CPF, date of birth, place of issue, and expiry.
Read the docs
Stage 01Capture and read the ID
  • Carteira de Identidade Nacional (CIN)
  • RG · CNH · CRNM (foreign residents)
  • Pasaporte — chip read on e-Passport
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

Didit screens the user's name against the global pool of 1,300+ sanctions, Politically Exposed Persons (PEP), and adverse-media lists, plus every Brazilian regulatory watchlist (CVM, Receita Federal Transparency Portal, Ministério da Justiça, ANEEL, ANAC, CADE, IBAMA, Ministério Público MG, plus federal-government sanctions).

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Cross-check against Receita Federal.

Cross-checked against the authoritative civil registry.

  • The CPF status check is the fast, low-cost first pass — name and CPF status (regular / suspended / cancelled) from Receita Federal via SERPRO.
  • The National ID lookups (bra_national_id, bra_national_id_2) hit Receita Federal directly with ~98–100% coverage. Pick the cheaper one first; escalate to the deeper one when needed.
  • Tax Registration, Residential (electoral roll) and Phone (MNO) cross-checks complete the picture — every service is pay-per-success, no consent required.
Read the docs
Stage 04Cross-check against Receita Federal

Cross-check against Receita Federal — see the docs for the full module surface.

Documents covered

Every Brazil document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Brazil.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page