Skip to content
kyc.af
Create Account Sign In
API REST API, signed webhooks and a WHMCS module

Secure Identity Verification for Your Business

Verify customers with government ID checks, OCR, live selfie and face matching, with a human reviewer for every decision. Integrate in minutes through the API or send a verification link.

Create Organization Account View API Documentation
  • Documents stay on kyc.af
  • Signed HMAC webhooks
  • Passkeys & 2FA for staff
Government ID
OCR
Selfie Verification
Face Matching
Manual Review
Secure API Integration

How it works

From request to decision in four steps

No customer data is stored in your own systems unless you choose to receive it through the API.

  1. Step 1

    Create Verification

    Your organization creates a verification request from the dashboard or API.

  2. Step 2

    Customer Uploads ID

    The customer securely uploads their identity document over a time-limited link.

  3. Step 3

    Customer Takes Selfie

    A live selfie is captured and compared against the identity document.

  4. Step 4

    Receive Result

    You receive the result in the dashboard, through the API, or via a signed webhook.

Platform

Everything you need to verify identities

Automated checks do the heavy lifting. Your reviewers make the final call with every signal in one workspace.

Identity Document Verification

Accept National ID, Passport, Driving License and other government IDs, captured by camera or uploaded as an image or PDF. OCR extracts the name, date of birth and document number for review.

Front & back separately Both sides in one image Single page PDF upload

Selfie & Face Matching

A live selfie with liveness scoring is compared against the document photo.

Manual Review

Zoom, rotate and compare documents side by side. Approve, reject with a reason, or request more information.

Desktop-to-mobile handoff

Customers on a computer scan a QR code and finish the selfie on their phone. The desktop page updates automatically.

Additional Document Requests

Ask the customer for a clearer image, another document or a new selfie through a secure follow-up link.

Organization Dashboard

Track volume, approval rates and processing time. Search verification history and manage your team, keys and webhooks.

Audit Logs

Every document view, decision, setting change and security event is recorded with the actor and IP address.

Developers

Built for Developers

Create a verification with a single API call. Send the customer the returned link, then listen for signed webhooks when review is complete.

  • Bearer API keysPer-key verification requirements and optional IP allow lists.
  • Signed webhooksHMAC-SHA256 over timestamp and body, with automatic retries.
  • Idempotent createsReusing a reference_id returns the existing verification.
View API Documentation 
curl -X POST https://www.kyc.af/api/v1/verifications \
  -H "Authorization: Bearer kyc_live_…" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "customer@example.com",
    "customer_name": "Ahmad Khan",
    "reference_id": "ORDER-125",
    "return_url": "https://your-app.example/done"
  }'
// 201 Created
{
  "id": "ver_01j8…",
  "reference_id": "ORDER-125",
  "status": "created",
  "requirements": { … },
  "verification_url": "https://www.kyc.af/v/ver_01j8…"
}
const expected = 'sha256=' + crypto
  .createHmac('sha256', process.env.KYC_WEBHOOK_SECRET)
  .update(`${req.headers['x-webhook-timestamp']}.${rawBody}`)
  .digest('hex');

if (expected !== req.headers['x-webhook-signature']) {
  return res.status(401).end();
}

// event.event === "verification.verified"

WHMCS module

Identity Verification for WHMCS

The official addon connects your WHMCS billing to kyc.af. Customers verify identity before a required product or domain is activated. WHMCS stores status only — ID images and selfies stay on this platform.

Name
Identity Verification
Type
WHMCS addon module
Install path
modules/addons/identityverification/
Author
KYC · ARYAN ICT Solutions
Sign in to download View API Documentation

Product & domain rules

Turn on Require IDV for selected products or TLDs. Save many rules at once.

Block provisioning

Pending services stay pending until the customer is verified.

Client notices

Homepage, product, and domain pages show a pending verification notice.

Auto-create after order

Checkout and payment create a verification when a required item is ordered.

Signed webhooks

HMAC webhooks update WHMCS when review finishes, then provisioning can continue.

No ID files in WHMCS

Documents never leave kyc.af. The addon keeps verification metadata only.

  1. 1 Copy the addon folder into your WHMCS tree.
  2. 2 Activate it under System Settings → Addon Modules.
  3. 3 Paste your kyc.af API key and webhook secret.
  4. 4 Enable Require IDV on the products or TLDs that need it.

Security

Security by design

Designed so documents and selfies stay on the platform. WHMCS and other clients store metadata only.

Private document storage

Documents and selfies are served only through authorized, time-limited links.

Encrypted sensitive information

Document numbers and secrets are encrypted at rest.

Secure verification links

Each customer link is unique and expires automatically.

Signed webhooks

Verify every delivery with an HMAC signature and timestamp.

Passkeys & two-factor

Staff can sign in with passkeys and authenticator apps, enforced per role.

Audit logging

Views, decisions and setting changes are recorded with actor and IP.

Role-based access & tenant isolation

Every organization only ever sees its own verifications.

Configurable retention

Selfies and ID images are deleted automatically after a set period.

Start verifying your customers today

Create an organization account. Our team reviews every registration before API access is enabled.

Create Organization Account Talk to us