Skip to main content
Didit Raises $2M and Joins Y Combinator (W26)
Didit
North America

Identity verification
built for United States Flag of United States

AAMVA-aggregated driver licences, U.S. passports, Green Cards, OFAC SDN on every AML — $0.33 full KYC, 500 free every month, no state surcharge.

Backed by
Y Combinator
GBTC Finance
Bondex
Crnogorski Telekom
UCSF Neuroscape
Shiply
Adelantos

Trusted by 2,000+ organizations worldwide.

Country brief

How identity verification works in United States.

The fraud surface and the frameworks an engineering or compliance lead needs before scoping an integration.
Fraud landscape
Three pressures shape U.S. identity fraud: synthetic-ID attacks fueled by leaked SSNs targeting neobanks, crypto on-ramps, and BNPL onboarding; AAMVA driver-licence forgery across all 50 state templates; and AI-generated deepfake injection on remote-onboarding flows for the licensed iGaming markets (NJ, PA, NY, MI, IL). Didit scores 200+ real-time fraud signals on every session — face morph, replay, injection, document tampering, device intelligence, IP geolocation.
Compliance frameworks
  • Bank Secrecy Act (BSA)
  • FinCEN CDD Final Rule
  • OFAC SDN screening
  • USA PATRIOT Act § 326
  • Corporate Transparency Act
  • CCPA / CPRA + state privacy laws
Regulators

Who supervises identity verification in United States.

These are the supervisors a United States verification flow has to answer to. One Didit hosted flow + one audit log covers every one of them — no separate integration per agency.
  • FinCEN

    Financial Crimes Enforcement Network — Treasury bureau that administers the Bank Secrecy Act, the Customer Due Diligence Rule, and the Corporate Transparency Act beneficial-ownership regime.

  • OFAC

    Office of Foreign Assets Control — issues the Specially Designated Nationals (SDN) sanctions list screened on every Didit AML check, plus consolidated program lists.

  • CSBS / State MTRs

    Conference of State Bank Supervisors — coordinates ~60 state Money Transmitter Licences (MTLs) supervised through the Nationwide Multistate Licensing System (NMLS).

  • SEC + FINRA

    Securities and Exchange Commission and Financial Industry Regulatory Authority — securities + broker-dealer supervision under the Securities Exchange Act and FINRA Rule 3310 AML programs.

  • CFPB

    Consumer Financial Protection Bureau — supervises consumer financial products under the Consumer Financial Protection Act.

  • FTC + State AGs

    Federal Trade Commission and state Attorneys General — enforce the Red Flags Rule, CCPA/CPRA in California, and emerging state privacy regimes (VCDPA, CPA, CTDPA).

Verification flow · One API

Four modules. One verification.

ID, biometric, AML, and a United States database cross-check — composed on one workflow, billed per success, returned in one report.
01 · ID

Capture and read the ID.

Captured on any phone — auto-classified, OCR-parsed, and template-verified.

  • Works for every primary U.S. credential — state Driving Licence and State ID (PDF417 barcode decoded, AAMVA-aggregated, Real ID Act flagged), U.S. Passport (NFC chip read on e-Passport), Passport Card, Permanent Resident Card, and Employment Authorization Document.
  • Returns the name, document number, date of birth, address, and expiry.
Read the docs
Stage 01Capture and read the ID
  • Driving Licence — all 50 states + DC + 5 territories
  • U.S. Passport · Passport Card
  • Green Card · Employment Authorization Document
02 · Biometric

Match the face. Prove it's a real person..

Selfie confirmed live and matched against the ID portrait.

  • Duplicate check: 1:N face search across existing users. Free.
  • Active liveness ($0.15) for elevated-risk flows — user turns or blinks.
Read the docs
Stage 02Match the face. Prove it's a real person.
  • Selfie on any phone or laptop camera
  • Mobile-handoff QR when the user starts on desktop
03 · AML

Screen for sanctions, PEPs, and adverse media.

Didit screens the user's name against the global pool of 1,300+ sanctions, Politically Exposed Persons (PEP), and adverse-media lists, plus every U.S. federal regulatory watchlist:

  • Office of Foreign Assets Control (OFAC) — SDN and Blocked Persons List.
  • Office of Foreign Assets Control (OFAC) — Non-SDN Consolidated Sanctions List.
  • FinCEN — Money Laundering Concerns List.
  • Bureau of Industry and Security (BIS) — Denied Persons List, Entity List, Unverified List, and Military End User List.
  • Department of State — Nonproliferation Sanctions, Cuba Restricted List, and Terrorist Exclusion List.
  • Department of Homeland Security (DHS) — UFLPA Entity List.
  • International Trade Administration (ITA) — Consolidated Screening List (CSL).
  • Department of Justice — CyberCrime and enforcement actions.

Severity-scored. Ongoing monitoring ($0.07/user/yr) re-checks daily and fires a webhook on new hits.

Read the docs
Stage 03Screen for sanctions, PEPs, and adverse media

Screen for sanctions, PEPs, and adverse media — see the docs for the full module surface.

04 · Registry

Cross-check against U.S. credit-header and government records.

After the ID is captured, Didit cross-checks the name + date of birth + address against seven authoritative U.S. datasets so you know the person actually exists at the address they claimed.

  • `usa_states_death_check` ($0.05) — Social Security Death Master File, the cheapest fraud gate to run first.
  • `usa_states_credit_bureau` ($0.11, ~90% coverage) — aggregated credit-header data; name + DOB + address + optional SSN matching.
  • `usa_states_financial_services` ($0.19, ~85% coverage) — aggregated government + public + background records tuned for financial-services CDD.
  • `usa_states_residential` ($0.54, ~90% coverage) — full address-verification rigor for high-risk flows.
  • `usa_states_phone` ($0.30) and `usa_states_phone_2` ($0.52, >90% coverage) — telco-billing and MNO phone matching.
  • `usa_states_consumer` ($0.08) — lead-generation consumer database for supplementary coverage.

All seven services are documented at docs.didit.me/api-reference/database-validation/united-states/ — pay-per-success, no contracts.

Read the docs
Stage 04Cross-check against U.S. credit-header and government records

Cross-check against U.S. credit-header and government records — see the docs for the full module surface.

Documents covered

Every United States document Didit accepts.

One row per accepted credential — flag, document name, document type. Live from the Didit Business Console.
Authoritative datasets

Civil-registry and AML coverage for United States.

One card per dataset Didit cross-checks against — civil registries on the Database Validation API plus the global AML watchlist pool. Each card links to the technical docs.
Compliant by design

Open a new country in one click. We do the hard work.

We open the local subsidiaries, secure the licenses, run the penetration tests, earn the certifications, and align with every new regulation. To ship verifications in a new country, flip a toggle. 220+ countries live, audited and pen-tested every quarter — the only identity provider an EU member-state government has formally called safer than in-person verification.
Read the security & compliance dossier
EU financial sandbox
Tesoro · SEPBLAC · BdE
ISO/IEC 27001
Information security · 2026
SOC 2 · Type I
AICPA · 2026
iBeta Level 1 PAD
NIST / NIAP · 2026
GDPR
EU 2016/679
DORA
EU 2022/2554
MiCA
EU 2023/1114
AMLD6 · eIDAS 2.0
EU-aligned by design
FAQ

Common questions about United States.

Infrastructure for identity and fraud.

One API for KYC, KYB, Transaction Monitoring, and Wallet Screening. Integrate in 5 minutes.

Ask an AI to summarise this page