Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Asia-Pacific

Identity verification
built for Cambodia Flag of Cambodia

National ID and passport cross-checked against Cambodia's government registry via `khm_national_id` — biometric liveness, AML screening across NBC, SERC, and global lists. $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Cambodia.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Cambodian identity fraud: synthetic-ID attacks exploiting the relatively recent digitisation of the National ID Card system, document forgery across the older laminate ID cards and the newer biometric format, and cross-border fraud flows between Cambodia, Vietnam, and Thailand as regional remittance volumes expand. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • Anti-Money Laundering Law 2007
  • Law on Counter-Terrorism Financing 2007
  • Personal Data Protection Law 2023 (Sub-Decree 56/2023)
  • Prakas B7-017-344 (NBC Payment Service Operator Licensing)
  • FATF 40 Recommendations
  • APG Mutual Evaluation Framework
Regulators

Who supervises identity verification in Cambodia.

These are the supervisors a Cambodia verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • NBC

    National Bank of Cambodia — central bank and prudential supervisor for banks, microfinance institutions, and payment service providers. Sets Customer Due Diligence requirements under the Anti-Money Laundering Law 2007 and Prakas B7-017-344.

  • FIU-Cambodia

    Financial Intelligence Unit — Cambodia's national FIU, operating under NBC. Receives Suspicious Transaction Reports from reporting entities under the Anti-Money Laundering Law 2007 and the Law on Counter-Terrorism Financing.

  • SERC

    Securities and Exchange Regulator of Cambodia — supervises capital-market participants, collective investment schemes, and securities dealers. Issues licensing and compliance requirements for KYC at onboarding.

  • GDT

    General Department of Taxation under the Ministry of Economy and Finance — operates the Tax Identification Number (TIN) registry used in KYB and corporate treasury onboarding.

  • Ministry of Interior

    Oversees the General Department of Identification and the population registry — the authoritative source for National ID Card data cross-checked by `khm_national_id`.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Cambodia database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • National Identity Card (both the older laminate and the newer biometric chip format), biometric passport (with the chip read on e-Passports), Voter ID, and Driving Licence.
  • Returns the name, date of birth, document number, gender, and expiry.
Read the docs
Stage 01Capture and read the ID
  • National Identity Card (laminate and biometric chip formats)
  • Biometric Passport — chip read on e-Passport
  • Voter ID · Driving Licence · Foreign National ID
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists — plus Cambodian watchlists:

  • Minister of Economy and Finance — PEP Level 1 (heads of economic policy).
  • National Bank of Cambodia — PEP Level 2 (NBC senior officials).
  • Cambodia National Assembly — PEP Level 2 (lower-house members).
  • Cambodia Senate — PEP Level 2 (upper-house senators).
  • Cambodian People's Party — PEP Level 2 (ruling party senior figures).
  • Cambodia National Rescue Party — PEP Level 2 (opposition senior figures).
  • Kingdom of Cambodia Business Registration — SIE (state-invested entities).
  • Securities and Exchange Regulators of Cambodia — Warnings (regulatory enforcement notices).
  • UN Security Council Consolidated Sanctions List — global designations.
  • OFAC Specially Designated Nationals (SDN) — US Treasury designations.
  • FATF 40 Recommendations — high-risk jurisdiction monitoring applicable to Cambodian cross-border flows.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Cross-check against Cambodia's government registry.

Cross-checked against the authoritative civil registry.

  • The `khm_national_id` check ($0.16 per successful query, ~80% coverage, consent required) hits the government agency database of citizen records directly — first_name, last_name, date_of_birth, voter_id in, normalised match results out (identification_number, date_of_birth, full_name, name_match_score, address).
  • The voter_id field must match the pattern (?:\d{8,9}|\d{2}-\d{3}-\d{3}) — Didit validates the format before the lookup runs.
  • Pair with Identity Document Verification + Passive Liveness + AML for the full NBC Customer Due Diligence workflow on one POST /v3/session/ call.
Read the docs
Stage 04Cross-check against Cambodia's government registry

Cross-check against Cambodia's government registry — see the docs for the full module surface.

Documents covered

Every Cambodia document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Cambodia.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page