KYC Verification Process Step by Step

The Stages of a Modern KYC Verification

A digital identity verification process executes in a matter of seconds, but behind the scenes, multiple layers of technology work in parallel. Here we break down each stage.

Step 1: Identity Document Capture

The user presents their identity document (passport, driving licence, national ID card) to the camera on their mobile device or webcam.

What happens behind the scenes:

• AI automatically detects the document type and issuing country.
• The system verifies that the image has sufficient quality (no glare, cropping, or blur).
• Data is extracted from the document using OCR (Optical Character Recognition): name, date of birth, document number, expiry date.

Technologies involved: Computer vision, OCR, document classification.

Step 2: Document Authenticity Analysis

Once captured, the document undergoes automated forensic analysis:

• Security features: Holograms, microprinting, guilloche patterns, UV inks.
• Data consistency: The MRZ (Machine Readable Zone) data matches the visual fields.
• Tampering detection: AI searches for signs of digital editing, photo substitution, or field alteration.
• Template matching: The document is compared against the official template for its type and country.

Advanced solutions like those from Joinble analyse over 200 control points per document.

Step 3: Facial Biometric Verification

The user takes a selfie or records a short video. The system compares their face to the photograph on the document.

The process includes:

• Facial comparison (1:1): Facial recognition algorithms calculate the similarity between the selfie and the document photo.
• Liveness detection: The system verifies that a real person is in front of the camera, not a printed photograph, a screen, or a deepfake.
• Passive vs. active liveness: Passive liveness analyses texture and depth. Active liveness asks the user to perform actions (turn their head, blink).

Step 4: Risk List Screening

Customer data is screened in real time against risk databases:

• Sanctions lists: OFAC (US), HMT (UK), EU consolidated list, UN sanctions.
• PEPs (Politically Exposed Persons): Public officials, their immediate family members, and known close associates.
• Adverse media: News and databases linking the individual to criminal activity.
• Internal watchlists: Previously rejected or blocked customers.

Step 5: Risk Assessment and Decision

All collected information is consolidated into a risk profile that determines the outcome:

• Approved: All checks passed, low risk. The user gains access to the service immediately.
• Manual review: A check has generated an alert requiring human intervention.
• Rejected: The document is forged, biometrics do not match, or the customer appears on a sanctions list.

Modern platforms allow decision rules to be configured according to each company's risk appetite.

Step 6: Compliance File Generation

Each verification automatically generates a digital compliance file that includes:

• Scanned document image
• Biometric verification result
• Risk score
• Screening results against sanctions and PEP lists
• Timestamp and geolocation
• Final decision (approved/rejected/manual review)

This file is stored in encrypted form and is available for regulatory audits throughout the legally required retention period (5 years in the UK and US, up to 10 years in some EU jurisdictions).

Real-World Verification Times

Stage	Time
Document capture	3-5 seconds
Authenticity analysis	1-2 seconds
Biometric verification	2-3 seconds
Risk list screening	1 second
Decision	Instant
Total	Under 10 seconds

Integrating Into Your Platform

The KYC process integrates into your application or website via:

• Mobile SDK: Native libraries for iOS and Android that open the camera and guide the user through the process.
• Web SDK: A JavaScript component that can be embedded in any web page.
• REST API: For custom integrations or backend-to-backend flows.
• Web link: A link you can send via email, SMS, or WhatsApp for remote verifications.

Joinble offers all these options with an integration timeline of less than one week.

Frequently Asked Questions

What documents are accepted?

Modern solutions accept over 10,000 document types from more than 200 countries: passports, national ID cards, residence permits, driving licences, and more.

Does it work on any device?

Yes. Verification works on any smartphone with a camera (iOS or Android) and on modern web browsers.

What happens if the user has poor internet connectivity?

The best solutions compress images and optimise the process to work on slow connections (3G).

How is biometric data protected?

Biometric data is processed in real time and can be discarded immediately after verification. There is no need to store it, ensuring compliance with GDPR, the UK Data Protection Act, and similar regulations.

---

Want to see the process in action? Request a demo at Joinble and verify your own identity in under 10 seconds.