Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Europe

Identity verification
built for Poland Flag of Poland

Polish dowód osobisty, paszport, and karta pobytu on one session, cross-checked against the Polish credit bureau — $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in Poland.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Polish identity fraud: high-volume deepfake and injection attacks on Warsaw's neobank cluster (Revolut Polska, Aion, ING Bank Śląski) and the Polish crypto sector (Zonda/Bitbay, kanga.exchange, kantor.ai), document forgery against the dowód osobisty and the Polish driving licence, and AML pressure on the Polish-Ukrainian remittance corridor following the post-2022 migration flows. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • Polish AML Act (Ustawa o przeciwdziałaniu praniu pieniędzy oraz finansowaniu terroryzmu)
  • AMLD6
  • MiCA
  • DORA
  • GDPR / Polish Personal Data Protection Act
  • PSD2
  • eIDAS 2.0
Regulators

Who supervises identity verification in Poland.

These are the supervisors a Poland verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • KNF

    Komisja Nadzoru Finansowego — Polish Financial Supervision Authority. Supervises banks, payment institutions, electronic-money institutions, and crypto-asset service providers under the Polish AML Act.

  • GIIF

    Generalny Inspektor Informacji Finansowej — General Inspector of Financial Information. Poland's Financial Intelligence Unit. Receives every suspicious activity report.

  • UODO

    Urząd Ochrony Danych Osobowych — Polish Personal Data Protection Office. GDPR supervisor under the Polish Personal Data Protection Act for every identity verification on Polish residents.

  • KAS

    Krajowa Administracja Skarbowa — National Revenue Administration. Handles tax-side cross-checks for Polish identity verification flows.

  • MSWiA

    Ministerstwo Spraw Wewnętrznych i Administracji — Ministry of the Interior and Administration. Issues every dowód osobisty and passport, and maintains the Polish sanctions list.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a Poland database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • Works for every primary Polish credential — Dowód osobisty (EU 2019/1157), Paszport (with the chip read on e-Passports), Prawo jazdy, and the Karta pobytu residence permit.
  • Returns the name, PESEL, date of birth, sex, and expiry.
Read the docs
Stage 01Capture and read the ID
  • Dowód osobisty
  • Paszport — chip read on e-Passport
  • Prawo jazdy · Karta pobytu
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

Didit screens the user's name against the global pool of 1,300+ sanctions, Politically Exposed Persons (PEP), and adverse-media lists, plus every Polish regulatory watchlist (Sejm + Senat PEPs, the National Electoral Office, UOKiK, the Financial Supervision Authority KNF PEP register, the Ministry of Internal Affairs and Administration Polish Sanction List) and the European Union Consolidated List of Financial Sanctions + Travel Bans.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Cross-check against the Polish Credit Bureau.

Cross-checked against the authoritative civil registry.

  • The Polish Credit Bureau check (pol_credit_bureau, $1.17, ~50% coverage, consent required) cross-checks against credit-header data from the Credit Bureau in Poland, supplemented with Collection Agency data — useful for fintech credit underwriting and lending KYC.
  • The Polish consumer check (pol_consumer, $0.08, ~10% coverage) hits an aggregated consumer dataset for soft-signal name + DOB verification.
Read the docs
Stage 04Cross-check against the Polish Credit Bureau

Cross-check against the Polish Credit Bureau — see the docs for the full module surface.

Documents covered

Every Poland document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about Poland.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page