Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
North America

Identity verification
built for Canada Flag of Canada

Provincial Driver Licences, Canadian Passport, PR Card on one session, with FINTRAC-compliant Credit Bureau cross-check — $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Canada.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Canadian identity fraud: deepfake and injection attacks on the chartered-bank online-onboarding flows, provincial Driver Licence forgery across the patchwork of 13 provincial / territorial templates, and provincial iGaming pressure as Ontario's AGCO-licensed market matures and BCLC's PlayNow expands. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • PCMLTFA + FINTRAC Regulations
  • FINTRAC Credit Bureau dual-process method
  • PIPEDA + provincial privacy laws (Quebec Law 25, BC PIPA, Alberta PIPA)
  • National Instrument 31-103 (CSA — securities KYC)
  • OSFI B-10 Outsourcing + E-21 Operational Risk
  • FATF 40 recommendations
Regulators

Who supervises identity verification in Canada.

These are the supervisors a Canada verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • FINTRAC

    Financial Transactions and Reports Analysis Centre of Canada — administers the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA). Sets the credit-bureau dual-process method for non-face-to-face identity verification.

  • OSFI

    Office of the Superintendent of Financial Institutions — prudential supervisor for federally-regulated banks, trust and loan companies, and federally-incorporated insurers.

  • CSA + Provincial Securities Commissions

    Canadian Securities Administrators — umbrella body coordinating the 13 provincial / territorial securities commissions (OSC, AMF, BCSC, ASC, etc.). Sets the National Instrument 31-103 KYC requirements for registered dealers.

  • OPC

    Office of the Privacy Commissioner of Canada — administers the Personal Information Protection and Electronic Documents Act (PIPEDA), the federal private-sector privacy law.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Canada database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • provincial Driver's Licence (Ontario MTO, BC ICBC, Alberta, Quebec SAAQ, etc.), Canadian Passport (with the chip read on e-Passports), PR Card, Secure Certificate of Indian Status, and provincial health cards where rules allow.
  • Returns the name, document number, date of birth, address, and province / territory of issue.
Read the docs
Stage 01Capture and read the ID
  • Provincial Driver's Licence (13 provincial / territorial templates)
  • Canadian Passport · PR Card
  • Secure Certificate of Indian Status · Provincial Health Card
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists — plus Canadian watchlists:

  • Government of Canada - Consolidated Canadian Autonomous Sanctions List (Sanctions) — the primary Canadian autonomous sanctions list under the Special Economic Measures Act.
  • Government of Canada - Justice for Victims of Corrupt Foreign Officials Regulations (Sanctions) — Magnitsky-style sanctions against corrupt foreign officials.
  • Government of Canada - Regulations Establishing a List of Entities (Sanctions) — terrorist entity designations under the Criminal Code.
  • Government of Canada - United Nations Resolutions on the Suppression of Terrorism (Sanctions) — UN Security Council terrorist designations implemented in Canadian law.
  • British Columbia Securities Commission (Disciplined List) (Sanctions) — BCSC enforcement actions and disciplined registrants.
  • Canadian Securities Administrators (Investor Alerts) (Warnings) — CSA investor alerts and unregistered activity warnings.
  • Supreme Court of Canada — PEP Level 1 — justices and senior judicial officers.
  • Cabinet of Canada — PEP Level 2 — federal Ministers and senior Cabinet officials.
  • Canada Named Research Organizations List (SIE) — state-invested entity designations for national-security screening.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Cross-check against the Canadian Credit Bureau.

After the ID is captured, Didit runs the FINTRAC-compliant Credit Bureau cross-check that the PCMLTFA non-face-to-face dual-process method requires.

  • The Credit Bureau (FINTRAC) check (can_credit_bureau_fintrac, $2.10, ~85% coverage, consent required) returns the credit-header data shaped for FINTRAC's identity-verification standard.
  • The Credit Bureau 2 (Non-FINTRAC) check (can_credit_bureau_2_non_fintrac, $1.05, ~85% coverage) adds extra fraud-detection flags without the FINTRAC restriction.
  • The Residential check (can_residential, $0.19, ~90% coverage, consent required) cross-checks the user against mobile-network-operator phone records.
  • The Consumer check (can_consumer, $0.05, ~10% coverage) is the lightweight lead-generation lookup.
Read the docs
Stage 04Cross-check against the Canadian Credit Bureau

Cross-check against the Canadian Credit Bureau — see the docs for the full module surface.

Documents covered

Every Canada document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Canada.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page