September 2025 Summaries

Didit offers a seamless and cost-effective solution for integrating full identity verification systems, allowing companies to launch within hours using either a no-code verification flow or a flexible API for more complex needs. The platform is designed to meet strict compliance requirements while preserving user experience, offering free and unlimited scalability from the outset, which enables businesses to automate processes like anti-money laundering compliance and fraud protection efficiently. Didit's KYC API supports real-time tracking with signed webhooks and provides a production-grade flow for document and biometric verification, ensuring a smooth integration process that reduces manual work, enhances fraud detection, and offers significant savings compared to traditional vendors. The service includes features such as ID Verification, 1:1 Face Match, Passive Liveness, and AML Screening, and provides a sandbox that mirrors production environments to facilitate testing and deployment.

By 2025, age verification on social media platforms is set to become mandatory, as countries like Australia, the UK, and the EU implement stringent regulations to protect minors and ensure platform accountability. Australia is preparing to ban users under 16, while the UK requires "highly effective" verification methods, and the EU is working towards an interoperable, privacy-focused solution. The preferred approach combines AI-based age estimation with liveness checks, using documentary fallback only when necessary, to balance compliance and user experience. Non-compliance could result in significant financial penalties, such as fines up to £18 million or 10% of global revenue in the UK, up to 6% of worldwide turnover in the EU, and multimillion-dollar fines in Australia. These measures aim to shift social networks from self-attestation to verifiable methods, minimizing harm to minors while addressing privacy concerns, model accuracy, and potential user exclusion.

Ecommerce age verification is increasingly crucial for online retailers selling restricted products, as it ensures compliance with regulatory requirements while enhancing user experience and conversion rates. Advanced verification systems utilize AI-based age estimation as a primary method, complemented by documentary fallback options for instances where AI confidence is insufficient. This approach balances the need for security and compliance with maintaining low friction during the checkout process, thereby reducing abandonment rates and ensuring high conversion among legitimate users. Effective age verification strategies involve setting risk-based thresholds according to jurisdiction and product category, ensuring privacy by minimizing data collection and defaulting to data deletion post-verification. Didit’s Age Estimation system exemplifies this by providing a quick and seamless user experience, with real-time AI analysis supported by a robust fallback mechanism, which is easily integrable into ecommerce platforms. The emphasis is on creating a verification process that is both auditable and adaptable to varying regulatory environments, thus protecting minors while optimizing business outcomes.

France has implemented stringent age-verification requirements for platforms providing access to pornographic content, underpinned by the SREN Law and enforced by Arcom. These regulations mandate the use of at least two age-verification methods, one of which must employ a double-blind privacy model, ensuring that verification is independent of the platform, includes per-session proofs, and incorporates anti-spoofing and liveness controls. Aimed at safeguarding minors, these rules apply to any service accessible from France, regardless of where it is hosted, and require compliance by January 2025. Non-compliance can result in significant fines, ISP blocking, and de-indexing. The Didit Age Estimation system offers a solution by providing a low-friction, privacy-focused verification process using AI-driven selfies and liveness detection, with a fallback to document verification for borderline cases, aligning with the French framework's emphasis on privacy, reliability, and data minimization while maintaining a user-friendly experience.

The Online Safety Act 2023 in the UK mandates stringent age verification measures to prevent minors from accessing harmful content online, under the supervision of Ofcom, the national communications regulator. Effective from 2025, platforms must employ "highly effective" methods beyond self-attestation, such as AI-based biometric age estimation and document verification, to demonstrate compliance. Non-compliance risks include substantial fines and potential service blocking. The legislation applies broadly to services that publish or allow access to adult content, with implications for a range of platforms including social networks and search engines. It emphasizes a privacy-by-design approach, requiring proportionality in data handling, minimal data retention, and transparent communication with users. The act has sparked debate between those advocating for stronger child protections and privacy advocates concerned about free speech and proportionality. Companies are urged to adopt low-friction verification methods complemented by higher-assurance fallbacks to maintain user experience and compliance.

SERPRO, Brazil's federal IT company, offers Datavalid, a real-time identity verification service that checks biographic, document, and biometric data against official government records to enhance onboarding and authentication accuracy. This service is crucial for combating Brazil's high rate of identity fraud, which sees an attempted scam every 2.2 seconds. As companies in Brazil face increasing identity theft pressures, integrating services like Datavalid into their verification processes helps ensure compliance with the LGPD (Lei Geral de Proteção de Dados) and reduces fraud by adding a robust security layer. Didit, a verification platform, integrates Datavalid to provide automated workflows that include document checks, face biometrics, and AML screening, offering businesses a seamless and efficient way to verify identities while maintaining traceability and compliance. By automating these processes, Didit helps Brazilian companies significantly reduce fraud and manual reviews, delivering a tailored approach that meets the market's demand for effective fraud prevention.

Age verification in the iGaming industry is a crucial measure to ensure compliance with diverse regulatory frameworks across different jurisdictions, such as the UK's pre-verification demands and the EU's Digital Services Act (DSA) requirements for proportionate age-assurance. Methods like biometrics-driven Age Estimation, document verification, and identity wallets are utilized to balance regulatory compliance, user experience, and conversion rates. The Didit platform exemplifies innovation in age verification by offering a selfie-first, low-friction system that uses AI and biometrics for initial checks, with the option to request document verification in uncertain cases. This approach not only protects minors from accessing inappropriate content but also reduces costs and enhances user retention by minimizing verification-related friction. As regulatory landscapes evolve, particularly in regions like the UK and the EU, iGaming companies are urged to adopt versatile age verification processes to avoid fines, maintain platform reputation, and appeal to compliance and growth teams as a competitive advantage.

In the rapidly evolving iGaming industry, effective Know Your Customer (KYC) processes have become crucial to combat rising fraud, particularly with the advent of generative AI and deepfakes, which are increasingly used to bypass identity verification. Regulators across regions, like the UK and Brazil, have tightened requirements to ensure age and identity verification before gambling activities, emphasizing the protection of minors and compliance with anti-money laundering (AML) obligations. The use of risk-based KYC flows that incorporate document verification, biometrics, and network signals is encouraged to balance security and user experience, reducing friction while maintaining compliance. The article highlights the challenges and strategies for iGaming operators, emphasizing continuous monitoring post-KYC as most fraudulent activities occur after initial verification. Solutions like Didit offer advanced KYC platforms that streamline onboarding, reduce manual reviews, and enhance fraud detection, thereby achieving significant operational efficiencies and compliance across global jurisdictions.

Brazil has experienced a significant rise in fraud attempts, recording 3.47 million incidents in the first quarter of 2025, with banking and card sectors being primary targets, accounting for 54% of these attempts. In response to a major cyberattack in July 2025, which exploited weaknesses in the Pix ecosystem, the Banco Central do Brasil (BCB) imposed a R$ 15,000 cap on certain transactions and mandated the rejection of payments flagged for potential fraud. The regulatory framework in Brazil requires comprehensive Know Your Customer (KYC) and Anti-Money Laundering (AML) measures, emphasizing continuous monitoring and risk-based profiling. New regulations like Resolução Conjunta nº 6/2023 and Instrução Normativa BCB nº 491/2024 aim to enhance fraud detection by institutionalizing data sharing and device management. Companies like Didit are leveraging automation and no-code workflows to streamline KYC processes, reduce fraud, and maintain customer experience without sacrificing security.

Mobile fraud in Brazil is primarily driven by SIM swap schemes and the "Mão Fantasma" scam, posing significant challenges for telecommunications carriers and financial institutions. SIM swap fraud occurs when criminals convince carriers to issue a new SIM card for a victim's number, allowing them to intercept one-time passwords (OTPs) and gain unauthorized access to bank accounts and sensitive apps. The "Mão Fantasma" scam tricks victims into installing a remote-access app, enabling fraudsters to control their devices and conduct fraudulent transactions. These tactics exploit weaknesses in traditional identity verification, such as reliance on static data and human processes, which are further compromised by data leaks on the dark web. Regulatory bodies like Anatel require SMS confirmations for number portability, but this alone is insufficient for high-risk scenarios. Solutions like real-time Know Your Customer (KYC) processes, biometrics, and multi-factor authentication (MFA) are recommended to bolster security. Platforms like Didit aim to mitigate these risks by offering automated and flexible identity verification systems that reduce dependence on manual reviews and enhance fraud detection capabilities, integrating with government sources and utilizing global fraud intelligence to improve security for carriers.

Didit is presented as a more cost-effective and comprehensive alternative to Incode for identity verification services, offering a price of $0.30 per check, which represents a potential savings of over 70% compared to Incode's custom pricing. Didit boasts faster verification times at under 2 seconds, broader global coverage across 220+ countries, support for 14,000+ document types, and a robust set of features including real-time fraud detection, AI agent integration, and a free tier of 500 checks per month. In contrast, Incode, though well-funded and strong in AI/ML technology, operates in a more limited geographical scope of 50+ countries and lacks several features such as reusable KYC, public documentation, and a free tier. Didit emphasizes its developer-friendly approach with instant sandbox access, extensive API documentation, and white-label customization, making it suitable for startups, globally scaling companies, and privacy-focused organizations seeking affordable and rapid identity verification solutions.

Brazil, despite being one of the world's most digitalized countries, faces a severe identity fraud crisis, with nearly 1.9 million fraud attempts in just the first quarter of 2025. This surge is driven by factors such as high mobile phone theft rates, fragmented civil identity systems, and weak consent controls, making Brazil a fertile ground for organized crime. Traditional verification methods fail against sophisticated fraud tactics like deepfakes and impersonations, necessitating a defense-in-depth strategy combining document verification, advanced biometrics, continuous monitoring, and traceable consent, supported by public-private cooperation. Criminals exploit stolen phones to gain access to banking and messaging apps, leading to account takeovers and financial fraud, while banks and fintechs face significant financial, reputational, and operational costs. Effective fraud prevention in Brazil requires evolving verification processes into comprehensive fraud prevention systems, improving digital literacy, and fostering collaboration between government, financial institutions, and regulators. The emergence of innovative solutions like Didit, which offers a flexible and cost-effective platform for identity verification, highlights the shift towards proactive and continuous fraud defense measures.

Brazil's fintech market, the largest in Latin America with over 2,000 active companies, is seeing significant growth and regulatory challenges, particularly concerning compliance with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations. Identity fraud poses a severe threat, with Brazil leading globally in deepfake-related fraud and experiencing a surge in synthetic identities and forged documents. In response, Brazilian regulators now require fintechs to adhere to the same rules as traditional banks, mandating continuous monitoring and robust compliance programs. Didit emerges as a solution by providing a platform that enables secure, fast, and transparent identity verification, helping fintechs manage compliance and fraud risks efficiently. This regulatory landscape is overseen by multiple authorities, including the Central Bank of Brazil, COAF, and ANPD, who enforce laws and guidelines critical for fintechs handling personal data.

Didit emerges as a more cost-effective and comprehensive alternative to idwall for identity verification, offering services at $0.30 per check, which can result in savings of up to 80% compared to idwall's pricing, which starts around $14,000 annually. Didit provides faster verification times of under two seconds, broader global coverage across 220+ countries, and compatibility with 14,000+ document types and 48+ languages. In contrast, idwall is primarily focused on Brazil and LATAM regions and lacks several features that Didit offers, such as AI agent integration, phone/email verification, and real-time fraud checks. Didit also offers a free tier of 500 verifications per month, providing a developer-friendly, AI-native platform with extensive documentation and integration capabilities, making it a preferred choice for companies seeking speed, affordability, and extensive global reach.