e-KYC and digital ID verification

We build the identity check into your own app or sign-up website. Customers photograph the front and back of their ID card with their phone, and the system reads the name, ID number, date of birth, expiry date and the laser ID on the back, then fills in the form for them to check and correct. Next they take a face capture as the screen guides them. A liveness check catches a photo, a screen or a mask held up in place of a real person, and the face is matched against the card photo. When customers come to a branch, staff put the card in a reader and take the data straight from the chip.

Which official checks you can run depends on what your business is permitted to use. Organisations authorised by the Department of Provincial Administration can check whether a card is still valid, and can send customers to verify in ThaID and come back to finish signing up in your app. Many people in Thailand already have ThaID, since the Social Security Office’s e-Self Service has accepted only ThaID logins since 2 April 2026. Financial businesses that are NDID members can let customers verify through a banking app where they have already proven their identity. At the start we check with you which of these your business qualifies for and which methods your regulator accepts.

Cases that pass every check move on under the rules you set. Anything that doesn’t match, such as a low face-match score, a name on the form that differs from the card, an expired card or a failed liveness check, goes to the review queue with the evidence side by side. The system never approves or rejects a doubtful case on its own: a member of staff chooses to approve, reject or ask for another document, and every decision records who made it, when and why. Verified data goes into your core system or CRM through its API, and credit limits or underwriting follow your existing process. Customers give consent before the card and face are captured, images are encrypted in your own systems, staff open them only in the review screen their role allows, every view is logged, and data is kept for the period the law requires, then deleted on schedule.