Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
Asia-Pacific

Identity verification
built for South Korea Flag of South Korea

Resident Registration Card, Driver's Licence, Korean passport and Alien Registration Card on one session, with FSC-aligned AML screening — $0.33 full KYC, 500 free every month.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in South Korea.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape Korean identity fraud: deepfake and synthetic-RRC attacks on the wave of digital banks (KakaoBank, K Bank, Toss Bank) and big-tech payment platforms, VASP onboarding pressure following the September 2021 Specific Financial Information Act regime that requires every crypto exchange to register with KOFIU, and Alien Registration Card forgery across the 2.5M+ foreign-resident population. Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • Specific Financial Information Act (특정 금융거래정보법)
  • Act on Reporting and Using Specified Financial Transaction Information
  • Personal Information Protection Act (PIPA, 개인정보 보호법)
  • FSC AML/CFT Operating Guidelines
  • Banking Act
  • Electronic Financial Transactions Act
  • FATF 40 recommendations
Regulators

Who supervises identity verification in South Korea.

These are the supervisors a South Korea verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • FSC

    Financial Services Commission (금융위원회) — top-level policy supervisor for banks, securities firms, insurance carriers, payment service providers and Virtual Asset Service Providers (VASP). Sets remote-onboarding rules under the Specific Financial Information Act and the AML/CFT Operating Guidelines.

  • FSS

    Financial Supervisory Service (금융감독원) — operational examiner that inspects every regulated financial institution on the FSC's behalf. The on-the-ground AML/CFT auditor.

  • KOFIU

    Korea Financial Intelligence Unit (한국금융정보분석원) — South Korea's FIU, housed in the FSC. Receives Suspicious Transaction Reports and Currency Transaction Reports under the Specific Financial Information Act.

  • PIPC

    Personal Information Protection Commission (개인정보보호위원회) — enforces the Personal Information Protection Act (PIPA, 개인정보 보호법). Governs how identity-verification data (including the Resident Registration Number) is collected, used, retained and disclosed.

  • KISA

    Korea Internet and Security Agency — enforces cybersecurity and information-security standards for online-service operators under the Network Act (정보통신망법). Identity-verification platforms processing Korean personal data must meet KISA security standards.

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a South Korea database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • Works for every primary Korean credential — Resident Registration Card (주민등록증), Driver's Licence (new IC-chip format), Korean Passport with the chip read on e-Passports, and the Alien Registration Card issued to foreign residents staying longer than 90 days.
  • Returns the name (Hangul + Romaji), Resident Registration Number / Alien Registration Number / passport number, date of birth, sex and address.
Read the docs
Stage 01Capture and read the ID
  • Resident Registration Card · Driver's Licence
  • Korean Passport — chip read on e-Passport
  • Alien Registration Card (외국인등록증)
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

1,300+ global sanctions, PEP, and adverse-media lists — plus Korean watchlists:

  • KRFSS — Korea Financial Supervisory Service — enforcement actions against regulated entities and individuals.
  • FSC Designated Sanctions and Asset-Freezing Targets — Financial Services Commission designations under the Specific Financial Information Act.
  • MOFA — Ministry of Foreign Affairs (Korea) Sanctions — North Korea-linked individuals and entities under UN Security Council resolutions.
  • National Assembly of South Korea — Politically Exposed Persons register for Members of the National Assembly and State Ministers.
  • KOFIU — Korea Financial Intelligence Unit suspicious-activity references.
  • Korea Customs Service — trade-based money laundering and smuggling enforcement watchlist.
  • Anti-Corruption and Civil Rights Commission (ACRC) — enforcement targets and debarred officials.
  • National Police Agency — Interpol Red Notices — internationally wanted persons and domestically sought fugitives.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Cross-check is not yet exposed for Korea.

South Korea does not currently expose a public consumer-grade identity-registry API the way India (Aadhaar) or Argentina (RENAPER) do — Resident Registration Number lookups are restricted under PIPA to entities holding a specific legal basis.

  • The hosted flow already covers the Resident Registration Card / Alien Registration Card capture + OCR + biometric face-match against the document portrait.
  • Didit ships Database Validation for 40+ countries; if you need a custom Korean third-party data partner (NICE, Korea Credit Bureau, SCI Information Service) integrated, the Enterprise tier includes BYO-source onboarding.
Read the docs
Stage 04Cross-check is not yet exposed for Korea

Cross-check is not yet exposed for Korea — see the docs for the full module surface.

Documents covered

Every South Korea document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Authoritative datasets

Civil-registry and AML coverage for South Korea.

One card per dataset Didit cross-checks against — civil registries on the Database Validation API plus the global AML watchlist pool. Each card links to the technical docs.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about South Korea.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page