Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Middle East & Africa

Identity verification
built for Morocco Flag of Morocco

CNIE and Passport on one session, cross-checked against the Morocco Residential dataset and AMMC watchlists — $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Morocco.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Moroccan identity fraud: deepfake and synthetic-CNIE attacks targeting the country's mobile-money operators and Bank-Al-Maghrib-licensed payment institutions, CNIE and Permis de Conduire template forgery during the ongoing migration from the legacy paper credentials to the biometric chip-enabled formats, and AML pressure on the EU-Morocco remittance corridor under UTRF designations and AMMC Warnings. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • Law 43-05 on Anti-Money Laundering and Counter-Terrorism Financing
  • Law 09-08 on the Protection of Personal Data
  • Law 103-12 (Banking Law)
  • Bank Al-Maghrib Circulars on Remote Onboarding and Mobile Money
  • AMMC Circulars on Customer Due Diligence
  • FATF 40 recommendations
Regulators

Who supervises identity verification in Morocco.

These are the supervisors a Morocco verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • BAM

    Bank Al-Maghrib — central bank of Morocco. Prudential supervisor for banks, payment institutions, mobile-money operators, and the broader payment system under Law 103-12.

  • AMMC

    Autorité Marocaine du Marché des Capitaux — Moroccan Capital Market Authority. Securities and capital-markets supervisor; publishes the AMMC Warnings register.

  • UTRF

    Unité de Traitement du Renseignement Financier — Morocco's Financial Intelligence Unit. Administers Law 43-05 on Anti-Money Laundering and receives Suspicious Transaction Reports.

  • CNDP

    Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel — enforces Law 09-08 on the Protection of Personal Data. Governs every identity verification on Moroccan residents.

  • DGSN

    Direction Générale de la Sûreté Nationale (Ministry of Interior) — issuer of the CNIE biometric national identity card and the Moroccan passport. Maintains the underlying civil register.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Morocco database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • CNIE (Carte Nationale d'Identité Électronique), Moroccan Passport (with the chip read on e-Passports), Permis de Conduire, and the foreign-resident Carte de Séjour.
  • Returns the name, 8-character CNIE number, date of birth, sex, and expiry.
Read the docs
Stage 01Capture and read the ID
  • CNIE (Carte Nationale d'Identité Électronique)
  • Passport — chip read on e-Passport
  • Permis de Conduire · Carte de Séjour
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists — plus Moroccan watchlists:

  • AMMC Warnings register — Autorité Marocaine du Marché des Capitaux capital-market enforcement alerts.
  • Parliament of Morocco (Chambre des Représentants) PEP register — Members of Parliament (PEP Level 1).
  • Justice and Development Party (PJD) PEP register — senior party officials politically exposed at national level.
  • Cabinet of Morocco PEP register — ministerial and cabinet-level politically exposed persons.
  • UTRF Communiqués — Designated entities and individuals — Unité de Traitement du Renseignement Financier AML designations under Law 43-05.
  • Bank Al-Maghrib Circulars — Sanctioned counterparties — central-bank enforcement sanctions list.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Cross-check against the Morocco Residential dataset.

Cross-checked against the authoritative civil registry.

  • `mar_residential` ($1.08 per successful query, ~20% coverage) verifies the submitted first name, last name, and address against the Morocco Residential dataset — the authoritative real-time identity lookup for Morocco.
  • Pay-per-success: $1.08 per conclusive result. No charge when the source is unreachable, required fields are missing, or the request is rejected before lookup.
  • No user consent required — Didit handles the data-partner contract directly under Law 09-08 (Protection of Personal Data) supervised by CNDP.
Read the docs
Stage 04Cross-check against the Morocco Residential dataset

Cross-check against the Morocco Residential dataset — see the docs for the full module surface.

Documents covered

Every Morocco document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Morocco.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page