Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Asia-Pacific

Identity verification
built for Indonesia Flag of Indonesia

KTP-el and Indonesian e-Passport on one session, cross-checked against the Dukcapil residential registry with biometric face-match — $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Indonesia.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Indonesian identity fraud: synthetic-KTP attacks against the wave of OJK-licensed fintech lenders and PJP-registered payment providers, deepfake injection on Active Liveness during e-wallet onboarding, and chip-cloning attempts against e-Passports issued by Ditjen Imigrasi. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • UU 8/2010 (Tindak Pidana Pencucian Uang)
  • UU 27/2022 (Personal Data Protection / UU PDP)
  • POJK 12/POJK.01/2017 (Customer Due Diligence)
  • BI PBI 23/6/PBI/2021 (Payment Service Providers)
  • POJK 27/2022 (Innovation in Financial Sector)
  • FATF 40 recommendations
Regulators

Who supervises identity verification in Indonesia.

These are the supervisors a Indonesia verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • OJK

    Otoritas Jasa Keuangan — the unified financial supervisor for banks, fintech lending, securities, insurance, capital markets and crypto-asset service providers. Issues the binding remote-onboarding rules for every regulated entity.

  • BI

    Bank Indonesia — central bank and payment-system regulator. Licenses Penyedia Jasa Pembayaran (PJP) under PBI 23/6/PBI/2021 and supervises Indonesia's QRIS national payment scheme.

  • PPATK

    Pusat Pelaporan dan Analisis Transaksi Keuangan — Indonesia's Financial Intelligence Unit. Receives Laporan Transaksi Keuangan Mencurigakan under UU 8/2010 (Tindak Pidana Pencucian Uang).

  • Kominfo

    Kementerian Komunikasi dan Informatika — enforces UU 27/2022 (Personal Data Protection Law / UU PDP). Governs how identity-verification data is collected, processed and stored in Indonesia.

  • Dukcapil

    Direktorat Jenderal Kependudukan dan Pencatatan Sipil — civil-registry authority. Issues every KTP-el and serves as the authoritative-source database for identity verification.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Indonesia database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • KTP-el (the current chip card), SIM (driving licence), KITAS / KITAP residence cards, and Indonesian e-Passport with the chip read on the NFC channel.
  • Returns the full name, NIK, date of birth, place of birth, sex, and address.
Read the docs
Stage 01Capture and read the ID
  • KTP-el — 16-digit NIK
  • SIM A · SIM B · SIM C
  • Indonesian e-Passport — chip read
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists — plus Indonesian watchlists:

  • PPATK — DTTOT — List of Suspected Terrorists and Terrorist Organizations maintained by Indonesia's Financial Intelligence Unit.
  • Indonesia Deposit Insurance Corporation (LPS) — bank-liquidation and debarment watchlist.
  • BAPPEBTI — Badan Pengawas Perdagangan Berjangka Komoditi warnings for unlicensed crypto-asset and futures operators.
  • DPR RI — House of Representatives Politically Exposed Persons register for Anggota DPR and Cabinet Ministers.
  • BPJS Ketenagakerjaan — Workers Social Security Agency enforcement targets.
  • Indonesian Supreme Court (IDMA) — judicial enforcement targets from Mahkamah Agung proceedings.
  • LPSE Sulawesi Selatan — provincial procurement-debarment watchlist.
  • KPK — Corruption Eradication Commission — debarred officials and corruption enforcement targets under UU 31/1999 (Tipikor).

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Cross-check against the Dukcapil registry.

Cross-checked against the authoritative civil registry.

  • The Indonesia Residential Identity Card check (idn_residential_identity_card, $0.16, ~90% coverage) is the Dukcapil residential lookup — name, date of birth, NIK and address are verified against the civil registry on file.
  • The Indonesia Phone check (idn_phone, $0.16, ~35% coverage) cross-checks name + DOB against Indonesian telco billing records — useful for second-factor identity assurance on fintech onboarding.
Read the docs
Stage 04Cross-check against the Dukcapil registry

Cross-check against the Dukcapil registry — see the docs for the full module surface.

Documents covered

Every Indonesia document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Indonesia.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page