Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Asia-Pacific

Identity verification
built for Hong Kong SAR China Flag of Hong Kong SAR China

HKID and Passport on one session, with HKMA-aligned AML screening and a Land Registry residential cross-check — $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Hong Kong SAR China.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Hong Kong identity fraud: deepfake and synthetic-HKID attacks across the post-pandemic remote-onboarding boom for retail banking and stored-value-facility (SVF) e-wallets, virtual-asset trading platform (VATP) onboarding pressure following the SFC's June 2023 licensing regime, and cross-border identity fraud from non-Hong Kong passports presented at remote onboarding. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • AMLO (Anti-Money Laundering and Counter-Terrorist Financing Ordinance)
  • HKMA Supervisory Policy Manual AML-1
  • SFC VATP Licensing Regime (June 2023)
  • Personal Data (Privacy) Ordinance (Cap. 486)
  • Banking Ordinance (Cap. 155)
  • Payment Systems and Stored Value Facilities Ordinance
  • FATF 40 recommendations
Regulators

Who supervises identity verification in Hong Kong SAR China.

These are the supervisors a Hong Kong SAR China verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • HKMA

    Hong Kong Monetary Authority — de facto central bank and prudential supervisor for every Authorized Institution (licensed banks, restricted-licence banks, deposit-taking companies) and Stored Value Facility (SVF) operator. Sets AML/CFT requirements via Supervisory Policy Manual AML-1.

  • SFC

    Securities and Futures Commission — securities supervisor and licensor for Virtual Asset Trading Platforms (VATP) under the AMLO-amended regime that took effect June 2023.

  • JFIU

    Joint Financial Intelligence Unit — Hong Kong's Financial Intelligence Unit, run jointly by the Hong Kong Police Force and Hong Kong Customs & Excise Department. Receives Suspicious Transaction Reports under the AMLO and the Organized and Serious Crimes Ordinance.

  • PCPD

    Office of the Privacy Commissioner for Personal Data — enforces the Personal Data (Privacy) Ordinance (PDPO, Cap. 486). Governs how identity-verification data is collected, used, retained and disclosed.

  • Immigration Department

    Immigration Department of Hong Kong — issues every HKID and HKSAR Passport and controls entry / exit. The authoritative civil-registry authority for citizens, permanent residents and non-permanent residents.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Hong Kong SAR China database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • Works for every Hong Kong credential — HKID (the current Smart ID polycarbonate format), HKSAR Passport with the chip read on e-Passports, the Hong Kong Driving Licence, plus foreign passports for the city's large expat population.
  • Returns the name (English + Chinese), HKID number, date of birth, sex and code-of-residency markers.
Read the docs
Stage 01Capture and read the ID
  • HKID (Smart ID polycarbonate)
  • HKSAR Passport — chip read on e-Passport
  • Foreign passports across 220+ jurisdictions
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists — plus Hong Kong watchlists:

  • HKMA Register of Securities Staff of Authorized Institutions — staff of HKMA-supervised entities subject to fit-and-proper requirements.
  • HKMA Fraudulent Websites and Alerts — entities flagged by the Hong Kong Monetary Authority for unlicensed or suspicious activity.
  • SFC Public Register of Licensed Persons — licensed securities and futures intermediaries and restricted persons.
  • SFC Alert List — suspicious websites and unlicensed entities flagged by the Securities and Futures Commission.
  • Hong Kong Police Force Anti-Deception Coordination Centre — fraud alerts and deception-related enforcement targets.
  • JFIU Suspicious Transaction references — Joint Financial Intelligence Unit persons of interest under AMLO and the Organized and Serious Crimes Ordinance.
  • Customs and Excise Department — trade-based money laundering enforcement watchlist.
  • OFAC — US sanctions applicable to Hong Kong-nexus entities and individuals.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Cross-check against residential and utility records.

Cross-checked against the authoritative civil registry.

  • The Hong Kong Residential check (hkg_kong_residential, $1.02, >70% coverage) hits a government-agency database of property-ownership data for full name + address cross-check.
  • The Hong Kong Utility check (hkg_kong_utility, $1.65, ~35% coverage) hits combined consumer, telephone and utility records — useful as a Proof-of-Address signal for HKMA SPM AML-1 onboarding.
Read the docs
Stage 04Cross-check against residential and utility records

Cross-check against residential and utility records — see the docs for the full module surface.

Documents covered

Every Hong Kong SAR China document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Hong Kong SAR China.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page