Reference

Common use cases

Typical module combinations and integration patterns by vertical — fintech, banking, crypto, marketplaces, telecom, healthcare, and rental screening.

The same engine — document verification, liveness, face match, AML/PEP screening, NFC, proof of address — serves very different risk profiles depending on what you're onboarding a user for. This page maps common verticals to the module combinations and delivery patterns teams in that space typically reach for.

Warning

This page describes general integration patterns, not legal advice. Every regulatory driver below is described generally — confirm the specific obligations that apply to your business with your own compliance and legal counsel before finalizing a workflow. Nothing here is a real customer case study; treat it as a starting point for your own workflow design in Console → Config → KYC Workflows.

How to read this page

Each vertical below lists three things:

  • Typical regulatory driver — the general category of obligation that usually motivates identity verification in that space (framed generally, not tied to a specific jurisdiction).
  • Recommended modules — a starting module combination. Add or remove modules per your own risk appetite; see KYC modules for what each one does.
  • Integration pattern — whether a hosted-flow redirect, an embedded SDK, or a mix is the more natural fit, and why.

Info

Module choice and strictness live entirely in the workflow you build in the console and reference by workflow_id — nothing below requires different API usage, just a different workflow configuration. See Concepts → Workflows.

Fintech / neobank onboarding

A typical fintech onboarding flow verifies a new account holder before they can fund an account or move money, balancing conversion (every extra step drops completions) against the obligation to know who holds the account.

Typical regulatory driverCustomer due diligence obligations attached to opening a deposit or e-money account.
Recommended modulesID_VERIFICATION + LIVENESS (passive, to minimize friction) + FACE_MATCH + AML_SCREENING
Integration patternEmbedded SDK inside the signup flow, so verification feels like a native step rather than a redirect away from the app.

A typical pattern: the user completes basic account details, the app calls POST /v3/session/ from its backend, and the SDK opens the flow inline. The account activates on the identity.kyc.session.approved webhook, with AML_SCREENING results routing borderline matches to manual review rather than blocking outright. See Verify a user, end to end.

Traditional banking KYC

Bank account opening — especially for higher-value products (loans, business accounts) — generally carries a stricter identity assurance bar than a fintech wallet, often alongside proof-of-address and enhanced due diligence for higher-risk customers.

Typical regulatory driverFormal customer identification programs and enhanced due diligence for higher-risk account types.
Recommended modulesID_VERIFICATION + LIVENESS + FACE_MATCH + AML_SCREENING + PROOF_OF_ADDRESS, with NFC_VERIFICATION added for the highest-assurance tier
Integration patternHosted flow via an emailed or branch-generated link works for branch-assisted onboarding; a mobile SDK is the better fit for full self-service digital account opening where NFC chip reads add meaningful assurance.

Tip

NFC_VERIFICATION reads and cryptographically validates the signed chip in an e-passport or biometric ID — materially stronger evidence than an OCR'd photo, but it needs a native mobile SDK (iOS, Android, Flutter); it's not available from a web-only hosted flow. See NFC verification.

Crypto exchange (Travel Rule context)

Exchanges generally need both to know their own customer and to be ready to exchange originator/beneficiary information with counterparty VASPs on qualifying transfers — which puts a premium on capturing clean, verified identity data up front rather than reconstructing it later.

Typical regulatory driverCustomer identification for account opening, plus counterparty data-sharing obligations on qualifying transfers between virtual asset service providers.
Recommended modulesID_VERIFICATION + LIVENESS (3D-action or colour-flash, for a higher anti-spoofing bar) + FACE_MATCH + AML_SCREENING (sanctions + PEP + adverse media)
Integration patternHosted flow or SDK both work; the distinguishing factor is usually the AML rolling re-screen — an approved customer who becomes sanctioned after onboarding should surface automatically, not just at signup.

Note

AML_SCREENING fails closed: if the screening engine is unreachable, the session lands in manual review rather than silently passing. For a higher-throughput exchange this makes the operator review queue a first-class piece of the launch plan, not an afterthought. See AML screening.

Marketplace / gig-economy identity

Two-sided marketplaces (delivery, rideshare, peer-to-peer rental, freelance) typically need to confirm that the person behind an account is a real, consistent individual — both to build trust between strangers transacting and to deter multi-accounting and fraud rings.

Typical regulatory driverPlatform trust-and-safety obligations rather than a single financial-services regime; often layered with sector-specific requirements (e.g. driver eligibility checks) depending on the marketplace.
Recommended modulesID_VERIFICATION + LIVENESS + FACE_MATCH; add AML_SCREENING if the marketplace moves funds directly between users, DATABASE_VALIDATION where an authoritative eligibility check is available
Integration patternEmbedded SDK inside the supply-side (driver/seller/host) onboarding app is the common pattern; demand-side (buyer/rider) verification, where used, is often a lighter hosted-flow step.

Telecom SIM registration

Many telecom markets require a verified identity behind every active SIM, generally to curb SIM-swap fraud and to support lawful-intercept and anti-fraud obligations. Volume is typically much higher and per-verification cost tolerance lower than in financial services.

Typical regulatory driverMandatory subscriber identity registration tied to SIM/line activation.
Recommended modulesID_VERIFICATION + LIVENESS (passive, to keep unit cost and friction low at high volume); FACE_MATCH where the regime requires biometric binding to the ID
Integration patternHosted flow at a retail point-of-sale kiosk or an agent-assisted link is common; a lightweight embedded SDK fits self-service e-SIM activation in a carrier's own app.

Healthcare patient identity

Confirming patient identity matters for both safety (matching the right person to the right record, especially for controlled substances or telehealth) and for preventing medical identity fraud — while handling correspondingly sensitive data.

Typical regulatory driverPatient-matching accuracy expectations for medical records, and heightened data-protection obligations given the sensitivity of health data.
Recommended modulesID_VERIFICATION + LIVENESS + FACE_MATCH; AML_SCREENING is typically unnecessary outside specific payer/provider risk contexts
Integration patternEmbedded SDK inside a telehealth or patient-portal app, run once at registration and optionally re-confirmed at the start of a sensitive encounter (e.g. before an e-prescription for a controlled substance).

Warning

Evidence captured (documents, selfies) is sensitive PII regardless of vertical, but healthcare deployments often sit alongside separately regulated health data. Confirm your own data-handling obligations extend correctly to verification evidence — see Go-live → Compliance.

Rental / property tenant screening

Tenant screening generally combines identity verification (this platform) with separate background/credit checks (typically a different, specialized provider) — the identity step exists to confirm the applicant is who the rest of the screening report is actually about.

Typical regulatory driverFair-housing and consumer-reporting rules generally govern the screening decision, not identity verification itself — but confirming the applicant's identity is a prerequisite most screening providers require before running a report.
Recommended modulesID_VERIFICATION + LIVENESS + FACE_MATCH; PROOF_OF_ADDRESS if verifying current residence matters for the application
Integration patternHosted flow via an emailed link is typical — tenant screening is usually a one-time, asynchronous step in a broader application, not something embedded in a daily-use app.

Module combinations at a glance

VerticalIDLivenessFace matchAMLNFCProof of address
Fintech / neobank⚠️ optional
Traditional banking✅ recommended
Crypto exchange✅ (strict)⚠️ optional
Marketplace / gig⚠️ if moving funds
Telecom SIM✅ (passive)⚠️ if required
Healthcare
Rental screening⚠️ optional

Hosted flow vs. SDK, by pattern

PatternFits best when
Hosted flow (redirect or link)One-time or low-frequency verification, agent-assisted flows, emailed/SMS/QR delivery, no NFC requirement.
Embedded SDKVerification is a step inside a broader app experience (signup, driver onboarding, patient portal) and should feel native rather than a navigation away.
Mobile SDK specificallyNFC passport/eID chip reads are in scope — web has no NFC fallback other than routing to manual review.

See Hosted flow overview and SDKs → Overview for the full comparison.

FAQ