Verification APIs your engineers can test today
Individual REST endpoints for the identity, bank, document and financial checks your risk rules already require. Documented, sandboxed, and callable from anywhere in your stack.
Eleven checks, one integration pattern
Same authentication, same request shape, same error handling across every endpoint. Integrate one and you have effectively integrated all of them.
Face verification
Match a selfie against the photograph on a government ID and confirm the person is physically present. Passive liveness detection defeats the common attacks — a printed photograph, a picture of a screen, a pre-recorded video — without asking the user to blink or turn their head on command.
- Face match with configurable confidence threshold
- Passive liveness and presentation attack detection
- Selfie against Aadhaar, PAN or passport photo
- Works on mid-range handsets in poor lighting
- Sub-second response with match score returned
DigiLocker
Fetch government-issued documents straight from the issuing authority with the customer's consent. Because the document comes from the source rather than from an upload, there is nothing to forge and nothing to verify manually.
- Consent-based document fetch
- Aadhaar, PAN, driving licence, vehicle RC
- Education certificates and marksheets
- Issuer-signed, tamper-proof documents
- Structured data returned alongside the file
Penny drop & reverse penny drop
Confirm a bank account exists and learn the registered account holder name before you send money to it. Penny drop credits one rupee and returns the name from the bank. Reverse penny drop has the customer send a small amount from their own account, which proves ownership rather than merely existence.
- Account validity confirmation with holder name
- Name match scoring against your record
- IFSC validation and bank branch lookup
- Reverse penny drop for stronger ownership proof
- UPI-based validation option
Aadhaar & PAN verification
Validate Aadhaar and PAN against the issuing sources, with name and date-of-birth matching. PAN checks return status and, where available, the Aadhaar-PAN linkage position — which matters for the tax and onboarding rules most financial products are now bound by.
- Aadhaar authentication and demographic match
- Masked Aadhaar handling per UIDAI guidelines
- PAN validity, status and holder name
- Aadhaar-PAN linkage status
- Fuzzy name matching with configurable tolerance
Marksheet verification
Confirm education credentials against university and board records. Used in hiring, in education lending and anywhere a claimed qualification carries real weight. Combined with DigiLocker where the institution has digitised its records, and manual verification where it has not.
- Degree and marksheet authenticity checks
- University and board record matching
- DigiLocker-sourced certificates where available
- Institution verification for lesser-known bodies
- Verification report with evidence attached
Driving licence verification
Validate a licence number against transport authority records and return holder name, validity dates and vehicle classes authorised. Essential for mobility, logistics and delivery platforms where an expired or invalid licence is a live liability.
- Licence validity and expiry confirmation
- Holder name and date of birth match
- Authorised vehicle class details
- Issuing RTO information
- Bulk verification for fleet onboarding
OCR verification
Read documents instead of typing them. Aadhaar, PAN, passport, driving licence, cheques, GST certificates, bank statements and utility bills are parsed into structured fields, with blur, glare and cropping checks that reject an unreadable image at capture time rather than three steps later.
- Structured extraction from Indian ID documents
- Cheque and bank statement parsing
- Image quality checks at point of capture
- Tamper and manipulation detection
- Confidence score per extracted field
eNACH
Set up recurring payment mandates electronically, authenticated by net banking, debit card or Aadhaar. No paper mandate, no branch submission, no waiting for physical registration. Mandate status, amendments and cancellations are all handled through the API.
- Electronic mandate registration
- Net banking, debit card and Aadhaar authentication
- Mandate status tracking and webhooks
- Amendment and cancellation handling
- Presentation and collection reporting
Account Aggregator
Access a customer's financial data with their explicit, revocable consent through the RBI-regulated Account Aggregator framework. Bank statements, deposits, investments and insurance arrive as structured data rather than as a PDF someone has to read — which is what makes underwriting from it practical.
- Consent-based financial data access
- Bank statement, deposit and investment data
- Structured, machine-readable output
- Granular and revocable consent management
- Income and cash-flow analysis inputs
Built for the people who integrate them
Sandbox before commitment
Credentials, documentation and sample payloads up front. Prove it works before anyone signs a purchase order.
One integration pattern
Same auth, request shape and error handling across every endpoint. The second integration takes an afternoon.
Honest error responses
Specific, actionable error codes instead of a generic failure that leaves you guessing at the cause.
Webhooks for async checks
Long-running verifications call you back rather than making you poll an endpoint on a timer.
Volume pricing
Per-call slab rates quoted against your projected volumes, with no minimum bundle to buy around.
Support that reads logs
When something fails in production you reach someone who can look at the actual request, not a ticket queue.
Verification APIs — frequently asked questions
Can we test the APIs before signing anything?
Yes. We issue sandbox credentials with documentation and sample payloads for every endpoint, so your engineering team can build and test the complete integration before any commercial commitment.
What is the difference between penny drop and reverse penny drop?
Penny drop credits one rupee to the account and returns the registered account holder name from the bank, confirming the account exists and who it belongs to. Reverse penny drop asks the customer to send a small amount from that account to you, which proves they control it. Reverse penny drop is stronger; penny drop is smoother for the customer. Many lenders use penny drop by default and reverse penny drop for higher-risk cases.
How fast are the API responses?
Most synchronous checks — PAN verification, face match, OCR — return in under two seconds. Penny drop depends on the destination bank and typically takes a few seconds. Longer-running checks such as marksheet verification are asynchronous and call your webhook when complete.
Do you support bulk verification?
Yes. Batch endpoints handle bulk PAN, bank account and driving licence verification, which is how most customers process existing databases or onboard fleets and vendor lists in one operation.
How is customer consent recorded?
Every check that requires consent captures it with a timestamp, the consent text shown to the customer and the authentication method used. The record is retrievable through the API for your audit file. Account Aggregator consent is managed through the RBI framework itself, with granular scope and revocation.
What are the uptime and support commitments?
We provide an SLA-backed uptime commitment with a status page and incident notification, and named technical support for integrated customers. The specific numbers are set in your agreement and we will not promise you something in a brochure that the contract does not carry.