39 Best GetOTP Alternatives & Competitors

1. NIMC NIN API

Identity & KYC, Development Tools

The NIMC NIN API refers to the suite of identity verification services provided by the National Identity Management Commission (NIMC) — the Nigerian government agency responsible for establishing, managing, and maintaining the National Identity Database (NIDB). NIMC is the authoritative source for Nigerian identity data, having enrolled over 100 million Nigerians in its National Identity Management System (NIMS) since its establishment under the NIMC Act of 2007. NIMC provides two primary API products for identity verification: the NIMC Verification Service (NVS) — a SOAP-based enterprise web service for direct database queries — and NINAuth, a newer OAuth 2.0-based digital identity authentication service designed for seamless integration into government and private-sector applications. **NIMC Verification Service (NVS)** NVS is the original NIMC API, exposing Nigeria's National Identity Database as a SOAP (Simple Object Access Protocol) web service. The service provides five levels of data access: - Level 1: Minimum — confirms NIN exists and is valid (name only) - Level 2: Basic demographic data (name, DOB, gender) - Level 3: Extended demographic + contact details - Level 4: Full demographics + enrollment details - Level 5: Maximum — full data including biometric indicators Verification can be performed using three input methods: 1. **NIN-based lookup**: Provide the 11-digit NIN to retrieve identity data 2. **Fingerprint-based verification**: Submit biometric data for fingerprint matching against the NIMC database 3. **Demographic search**: Search by name/DOB combination to locate identity records Access to NVS is secured via dedicated VPN connections, providing an additional layer of security beyond standard HTTPS. This enterprise-grade security posture makes NVS appropriate only for institutional integrators with the technical infrastructure to manage VPN connections. **NINAuth — Modern Digital Identity Authentication** In 2023–2024, NIMC launched NINAuth (ninauth.nimc.gov.ng), a new identity authentication service designed to modernize NIN-based verification. NINAuth uses OAuth 2.0 and is designed for: - Government service portals needing federated Nigerian identity login - Private sector applications wanting NIMC-backed user authentication - Any platform where "Login with NIN" is appropriate NINAuth provides a developer-friendly interface at app.ninauth.nimc.gov.ng/developers and represents NIMC's move toward a more accessible, REST-friendly verification experience. **Tokenization and Virtual NIN (vNIN)** To address data privacy concerns around the raw 11-digit NIN, NIMC introduced vNIN (Virtual NIN) — a tokenized alias generated per-institution that allows verification without exposing or storing the raw NIN. Under NIMC's new policy, no entity in Nigeria is permitted to verify or store the raw 11-digit NIN — they must use vNIN tokens instead. This is a critical compliance requirement for all new NIN verification integrations as of 2024. **Who Can Access NIMC APIs** Direct NIMC NVS access is not self-serve — it requires institutional authorization. The typical path: - CBN-licensed banks, fintechs, insurance companies, and regulated businesses apply to NIMC - Government agencies have institutional data-sharing agreements with NIMC - Most Nigerian startups and SMEs access NIN verification indirectly via licensed aggregators (Prembly, Dojah, Youverify, Smile Identity) who hold NIMC data processor licenses **Pricing** NIMC offers tiered pricing for the NVS: - **SME Service Plans**: Bronze, Silver, Gold — tiered by monthly verification volume - **Enterprise Bulk Purchasing Groups**: Five enterprise tiers for high-volume institutional use Current pricing schedules are available at the NIMC pricing portal (wiki.nimc.gov.ng/en/pricing/enterprises). NINAuth pricing is separate. **NDPR Compliance** All NIMC data access is governed by the Nigeria Data Protection Regulation (NDPR). Organizations accessing NIN data must implement appropriate data protection measures, complete Data Protection Impact Assessments (DPIAs) where required, and must not store raw NINs beyond what is necessary for the immediate verification purpose. **Challenges for Nigerian Developers** The main challenge for Nigerian startup developers is that direct NIMC access requires institutional authorization that most early-stage companies do not have. The SOAP protocol (rather than REST) adds integration complexity for modern web applications. The recommended path for startups is to use a licensed aggregator API (Prembly, Dojah, Youverify) rather than attempting direct NIMC integration — the aggregators have already obtained NIMC licenses and provide modern REST APIs with developer-friendly onboarding. **Frequently Asked Questions** Q: Can a startup developer access NIMC NVS directly? A: Generally no — direct NVS access requires institutional authorization. Use a licensed aggregator like Prembly, Dojah, or Youverify instead. Q: What is vNIN and why does it matter? A: Virtual NIN is a tokenized alias for the raw NIN. NIMC now prohibits storing or sharing the raw 11-digit NIN — all new integrations must use vNIN for compliance. Q: What is NINAuth? A: NINAuth is NIMC's newer OAuth 2.0-based authentication service, providing a more developer-friendly "Login with NIN" capability for government and private-sector portals. Q: Is there a free tier? A: No. NIMC NVS is a paid institutional service. There is no free tier or sandbox environment for NVS. Q: What protocol does NIMC NVS use? A: SOAP (Simple Object Access Protocol), not REST. NINAuth uses REST/OAuth 2.0.

2. NIMC Verification Service API

Data Validation, Development Tools, Identity & KYC

SOAP-based API for NIN verification at multiple levels (1-5) with biometric support including fingerprint and facial recognition. Enables identity verification for KYC, onboarding, and identity services.

3. Fingerprint Pro (formerly FingerprintJS)

Security

Fingerprint Pro (formerly FingerprintJS Pro) is a browser and device fingerprinting API that generates a unique, persistent visitor identifier (visitorId) for each browser or device that loads a webpage or app. Unlike cookies that can be deleted, browser fingerprints are derived from device characteristics — browser version, OS, fonts, screen resolution, hardware identifiers, network parameters, and dozens of other signals — producing a stable ID that remains consistent even when a user browses in incognito mode, uses a VPN, clears cookies, or switches browser profiles. For Nigerian fintech and e-commerce applications, Fingerprint Pro provides the device intelligence layer for fraud prevention, bot detection, and account security. Nigeria's digital economy faces significant fraud challenges: credit card fraud, account takeover attacks, identity theft, and promotional abuse are common threats that cost Nigerian businesses millions of naira annually. Traditional security measures like IP blocking and cookie-based tracking are easily circumvented by sophisticated fraudsters who use VPNs, proxy networks, and private browsing. Fingerprint Pro provides a more durable identification layer that is significantly harder to evade, enabling Nigerian applications to identify suspicious patterns even when fraudsters try to appear as new visitors. The fingerprinting process works in two parts. A small JavaScript snippet loaded in the browser (or a mobile SDK loaded in the app) collects device signals and communicates with Fingerprint's servers to generate the visitorId. This process is transparent to the user and adds minimal page load time (typically under 100ms). On the server side, the application validates the visitorId using the secret API key and retrieves associated data: visit history, geolocation, IP intelligence (VPN/proxy/Tor detection), browser tamper signals, and bot detection results. Bot detection is a critical capability for Nigerian applications under automated attack. Fingerprint Pro analyzes traffic patterns and browser behavior to identify automated browsers (headless Chrome, Selenium-driven browsers, and other automation tools) with high accuracy. Nigerian fintech applications that receive automated login attempts or account creation bots can use this signal to block non-human traffic before it reaches authentication logic. VPN and proxy detection identifies visitors using VPN services or proxy networks to hide their real IP address. While VPN usage is not inherently fraudulent, it is a risk signal worth incorporating into fraud scoring — a Nigerian banking app that has never seen a user's device and detects VPN usage on a login attempt has reason to require additional verification. IP reputation data identifies IP addresses associated with data centers, known proxies, and Tor exit nodes. The server-side Events API provides the full request history for any visitorId: when did this device first visit? How many times? What IP addresses? What geolocation data? This historical context powers sophisticated fraud rules: a device with 50 failed login attempts in the past hour is likely a brute-force attack; a device that has successfully logged into 20 different accounts is likely an account takeover tool. The free tier provides 20,000 API calls per month, sufficient for Nigerian development and small-scale production use. The Plus plan at $99/month provides 100,000 calls monthly. All plans include bot detection, VPN detection, and historical visit data. Fingerprint Pro's Smart Signals extend beyond device fingerprinting to provide additional risk signals: VPN detection, TOR exit node detection, bot detection, browser tampering detection, and IP geolocation. These layered signals give Nigerian fraud detection systems multiple independent evidence points for evaluating session risk without relying on any single indicator.

4. GreyNoise

Security

GreyNoise is a cybersecurity intelligence API that helps security teams distinguish between targeted attacks and the constant background noise of benign internet scanning activity. Rather than alerting on every connection attempt hitting a network, GreyNoise classifies internet traffic so that security operations centers can focus their limited attention on genuine threats rather than the thousands of automated scanners, research organizations, and security companies that continuously probe the entire internet. The fundamental insight behind GreyNoise is that a large proportion of internet traffic that triggers security alerts is not actually malicious. Search engines, academic researchers, vulnerability scanners, ISPs, cloud providers, and security companies all run automated systems that systematically scan IP address ranges. When these scans hit enterprise firewalls and intrusion detection systems, they generate alerts that look identical to the early stages of a targeted attack. Analysts who must investigate these false positives waste enormous amounts of time, leading to alert fatigue and missed real threats. GreyNoise addresses this through its sensor network, which consists of thousands of IP addresses distributed globally that passively collect internet-wide scanning data. Any IP address that probes these sensors is classified based on its behavior, and that classification is made available through the GreyNoise API. When a security team queries an IP address that has been seen scanning the GreyNoise sensor network, they receive a verdict: this IP is a known internet background noise source and is likely not targeting your organization specifically. The API provides two primary datasets. The first is the GreyNoise dataset, which covers IPs observed actively scanning the internet. Each entry includes the IP address, classification as malicious or benign, tags describing what the IP was doing such as scanning for specific vulnerabilities or running specific tools, country of origin, organization, and ASN details. The second dataset is RIOT, which stands for Rule It Out, covering IP addresses associated with well-known business services such as Google, Amazon, Microsoft, and other cloud providers that appear frequently in security logs but are almost never genuinely malicious. For Nigerian security operations centers operating in Nigerian banks, telecommunications companies, government agencies, and large enterprises, GreyNoise dramatically reduces the operational burden of managing security alerts. Nigerian SOC teams frequently deal with high volumes of alerts from their SIEM systems, and a significant portion of these alerts involve IP addresses that are simply running automated internet scans with no specific interest in Nigerian targets. GreyNoise context allows analysts to quickly dismiss these false positives and focus on IPs that are engaged in targeted, suspicious behavior. The API integrates natively with major SIEM platforms including Splunk, IBM QRadar, and Microsoft Sentinel, as well as threat intelligence platforms. Nigerian organizations using any of these security tools can install GreyNoise integration apps that automatically enrich security alerts with GreyNoise classifications, reducing the mean time to investigate and close false positive alerts. Tag-based filtering is one of GreyNoise most powerful features for Nigerian security teams. When a new vulnerability is announced, GreyNoise quickly adds a tag identifying IPs that are scanning for that specific vulnerability. Nigerian security teams can query for IPs currently scanning for vulnerabilities present in their specific technology stack, enabling proactive threat hunting before an exploitation attempt actually reaches their network. GreyNoise offers a community tier with basic IP lookup functionality at no cost, making it accessible to Nigerian security researchers, independent consultants, and smaller organizations that cannot afford enterprise security intelligence subscriptions. The community API allows unlimited IP queries with basic classification data, providing immediate value for any security team that wants to begin filtering background noise from their alerts. The GreyNoise visualization and query interface allows complex boolean searches across the sensor data, enabling analysts to discover patterns in who is scanning for what vulnerabilities and from where. This bulk analysis capability is valuable for Nigerian threat intelligence teams building reports on the threat landscape facing Nigerian organizations, identifying the most active scanning activity targeting African IP address space and the vulnerabilities being most aggressively probed.

5. JuheAPI Temp Mail

Security, Communications

JuheAPI Temp Mail is a disposable temporary email address API provided by Juhe Data (juhe.cn), one of China's largest API aggregator platforms. The service allows developers to programmatically generate throwaway email addresses and retrieve any messages sent to those addresses via API calls — without needing a real email account or mailbox infrastructure. The primary use case for temporary email APIs is automated testing and development workflows. When building applications that include email-based registration, verification, or notification features, developers need to test these flows end-to-end. Using real email accounts for testing is impractical — it clutters inboxes, requires manual checking, and cannot be easily automated. Temporary email APIs solve this by providing programmatically accessible inboxes that exist only for the duration of the test and can be checked and cleared via API. The typical workflow with a temp mail API is: generate a new disposable email address, use that address as input to the feature being tested (such as a registration form), wait briefly for the email to arrive, poll the inbox via API to retrieve the email, extract the verification code or confirmation link, and complete the test flow. This entire sequence can be fully automated in integration tests without any human intervention. For Nigerian development teams building platforms that require email verification — fintech apps, e-commerce sites, community platforms, healthcare portals — having reliable temp email capabilities in the test environment ensures that the registration and verification flows are actually tested end-to-end rather than mocked. This catches real bugs that mocked tests miss. Beyond testing, temporary email APIs have legitimate uses in privacy protection and spam prevention workflows. Applications that need to provide a temporary email address to an external service without exposing the user's real address can use temp mail as an intermediary. Similarly, developers building web scraping or research tools sometimes need to register accounts on services to access data. The JuheAPI platform hosts hundreds of APIs across various categories, and the Temp Mail API follows the standard Juhe authentication pattern — API key registration and key-based request authentication. The platform primarily serves the Chinese developer market, so documentation and the registration process are in Chinese. However, the API itself is internationally accessible, and Nigerian developers who navigate the registration can access the service. For Nigerian developers who prefer English-language documentation, alternatives like Mailinator, Guerrilla Mail, or TempMail.org also offer similar APIs. However, JuheAPI Temp Mail may offer pricing or availability advantages for specific use cases. Integration requires registering on juhe.cn, obtaining an API key, and making HTTP GET requests with the key as a parameter. Response data returns in JSON format with the generated email address and message list. JuheAPI Temp Mail's inbox polling mechanism allows applications to repeatedly check whether an expected email has arrived — making it suitable for automated test loops that register an account, poll for the verification email, extract the OTP or confirmation link, and complete verification in a single automated flow without human intervention. The Juhe platform offers additional complementary APIs in its catalog — phone number validation, ID verification, weather data, and other utilities commonly needed by Chinese and international developers. Nigerian developers who find value in JuheAPI Temp Mail may find other Juhe APIs useful for their projects, consolidating multiple data service integrations under one account and billing relationship. For Nigerian developers who prefer English-language alternatives to JuheAPI Temp Mail, Mailinator, Guerrilla Mail, and TempMail.org offer similar temporary email APIs with English documentation. However, JuheAPI may offer pricing or availability advantages worth evaluating alongside these alternatives depending on specific use case volumes and requirements.

6. URLhaus API

Development Tools, Security

URLhaus is a free threat intelligence API by Abuse.ch that provides access to a community-curated database of malicious URLs used for distributing malware, phishing, and exploit kits. The URLhaus API allows developers and security researchers to query URLs, payloads, and tags — checking whether a URL is flagged as malicious before allowing users to visit or download from it. Security-focused Nigerian developers building browser extensions, email security tools, link shorteners, and web application firewalls use URLhaus to add real-time URL threat intelligence. The API is completely free with no authentication required for basic queries. Supports bulk URL submission for contributing to the community database.

7. VumaAPI

Security, Communications

VumaAPI is a Nigerian bulk SMS service provider offering an affordable, easy-to-integrate SMS API designed specifically for the Nigerian market. As a locally-owned and operated platform, VumaAPI prices its services in Nigerian naira (NGN), eliminating the foreign exchange overhead that Nigerian businesses face when using international SMS providers that bill in USD or EUR. This local pricing model makes VumaAPI particularly attractive for Nigerian SMEs and startups that are managing tight budgets in naira and want predictable, naira-denominated communication costs. The core offering is a simple REST API for sending SMS messages to Nigerian mobile phone numbers across all major networks — MTN, Glo, Airtel, and 9mobile. The API accepts standard HTTP requests with JSON payloads, making integration straightforward for any developer familiar with REST APIs. Authentication is handled via an API key, which is generated in the VumaAPI dashboard after account creation and funding. Sending an SMS requires the recipient number, the message text, and optionally a sender ID. Delivery reports are included with VumaAPI, giving businesses confirmation of whether messages were successfully delivered to recipients. This is essential for Nigerian businesses sending OTP codes or transactional alerts where delivery confirmation is needed for security or compliance purposes. Delivery status updates can be retrieved via the API or delivered via webhooks. Alphanumeric sender IDs allow Nigerian businesses to display their brand name as the SMS sender. Instead of recipients seeing an unknown phone number, they see the business name — improving brand recognition and message open rates. For Nigerian businesses, this is particularly valuable for customer communications where trust and brand familiarity are important. Sender ID registration may be required to comply with NCC (Nigerian Communications Commission) regulations for commercial bulk SMS. VumaAPI is suited for a wide range of Nigerian use cases. Retail businesses use it for promotional campaigns and discount notifications. Financial services companies use it for transaction confirmations and account alerts. Healthcare providers use it for appointment reminders. Logistics companies use it for delivery status updates. NGOs and government agencies use it for public information campaigns. Churches and community organizations use it for event notifications to their congregations. The NGN pricing model deserves special emphasis for Nigerian businesses. International SMS providers typically charge in USD, meaning Nigerian businesses must either purchase foreign exchange or use a payment processor that automatically converts NGN to USD. This introduces forex rate risk, bank charges for international transactions, and the administrative burden of managing foreign currency payments. VumaAPI's NGN pricing eliminates all of this — businesses fund their account in naira via local bank transfer or payment gateway and pay for messages in naira. For developers evaluating VumaAPI, the integration complexity is low compared to enterprise platforms like Infobip or Sinch. There is no multi-channel complexity, no conversation management, no flow builders — just a clean SMS API. This simplicity is a feature, not a limitation, for teams that want to add SMS capability quickly without learning a complex platform. Customer support for VumaAPI is local, meaning Nigerian businesses can get support in Nigerian time zones, in the context of Nigerian network issues, and with awareness of local regulatory requirements. This local support advantage is meaningful when troubleshooting SMS delivery issues specific to Nigerian carrier configurations. For Nigerian businesses that purely need bulk SMS — no WhatsApp, no voice, no email — VumaAPI provides a cost-effective, locally-operated solution that avoids the forex and complexity overhead of international providers. It is especially well-suited for SMEs, startups, and organizations operating with NGN budgets who want reliable SMS delivery to Nigerian numbers at locally competitive rates.

8. ErcasPay

Payments, Security

ErcasPay is a CBN PSSP-licensed, PCI DSS-certified, and NDPA-compliant multicurrency payment gateway built specifically for Nigerian businesses. The platform supports 8 currencies — NGN, USD, GBP, EUR, CAD, GHS, GMD, and KES — enabling Nigerian merchants to accept both local and international payments through a single API integration. ErcasPay processes transactions from 5,000+ businesses and has offices in Lagos, Abuja, and Ibadan. What the API Does The ErcasPay REST API enables developers to: initiate and process local card payments (Verve, Visa, Mastercard), bank transfers, USSD, and QR code payments; accept international card payments in 7 foreign currencies; issue and manage virtual account numbers for NGN collections; generate payment links; and create invoices. The API uses separate sandbox and live environments with distinct base URLs. How Developers Use It Developers create an account at ercaspay.com, obtain API keys from the dashboard under developer settings, and integrate using the documentation at docs.ercaspay.com. Authentication uses Bearer tokens with secret keys prefixed ECRS-TEST-SK (sandbox) and ECRS-LIVE-SK (live). Sandbox base URL: api-staging.ercaspay.com/api/v1. Live base URL: api.ercaspay.com/api/v1. All requests require Accept: application/json and Content-Type: application/json headers. Pricing Local transactions (cards, bank transfer, QR, USSD): 1.4% per transaction, capped at ₦2,000. International card transactions: 4.8% per transaction. International payments first settle to a USD wallet; conversion to NGN is triggered from there. A 10% rolling reserve is applied on international card transactions, held for 180 days — refundable if no chargebacks occur. No monthly subscription fee. Authentication Bearer token authentication. Secret key placed in the Authorization header as "Bearer {SECRET_KEY}". Separate keys for test and live modes. Keys managed from the ErcasPay Dashboard. Compliance CBN PSSP-licensed, PCI DSS certified, and compliant with the Nigeria Data Protection Act (NDPA). Multi-location presence in Lagos, Abuja, and Ibadan. Challenges and Gotchas (1) 10% rolling reserve on international card transactions held 180 days can be a significant cash flow constraint for new merchants. (2) International payments do not settle directly in NGN — they go to a USD wallet first. (3) No recurring billing or split payment support currently. (4) Rate limits not publicly documented — confirm with ErcasPay before high-volume implementations. Company Background ErcasPay is operated by ErcasPay Nigeria Limited, headquartered in Lagos with offices in Abuja and Ibadan. The company targets Nigerian businesses of all sizes needing a reliable, multi-currency alternative payment gateway. FAQs Q: What is the fee for local card payments? A: 1.4% capped at ₦2,000 per transaction. Q: Does ErcasPay support USSD payments? A: Yes. USSD is supported at the same 1.4% (capped ₦2,000) local rate. Q: What currencies can I accept through ErcasPay? A: NGN, USD, GBP, EUR, CAD, GHS, GMD, and KES — 8 currencies total. Q: Is there a sandbox? A: Yes. Sandbox at api-staging.ercaspay.com/api/v1 using ECRS-TEST-SK keys. Q: What is the rolling reserve? A: A 10% hold on international card transaction amounts, retained for 180 days. It is refunded in full if no chargebacks are filed during that period. ErcasPay's multi-currency acceptance — NGN plus USD, GBP, EUR, CAD, and additional international currencies — enables Nigerian merchants to accept payments from both domestic customers paying in naira and international customers paying in their home currency. This dual-currency capability in a single gateway integration eliminates the need for separate domestic and international payment gateway relationships, reducing integration complexity and ongoing vendor management for Nigerian businesses serving both local and global customer segments. PCI DSS certification at ErcasPay ensures that card data handling meets international security standards, protecting Nigerian merchants from the liability and reputational risk of card data breaches. For Nigerian SMEs that lack the resources to implement independent PCI compliance infrastructure, using a certified gateway like ErcasPay allows them to accept card payments within a compliant infrastructure environment without bearing the cost and complexity of independent certification.

9. scrapestack

Development Tools, Web Scraping, Security

scrapestack is a real-time web scraping REST API operated by APILayer that provides automatic proxy rotation and a zero-ban guarantee for extracting HTML content from any publicly accessible website. It is part of the APILayer ecosystem (the same company behind IPstack, Numverify, and MailboxLayer), meaning it uses the familiar `access_key` query parameter authentication and offers the same developer-friendly documentation style. Nigerian developers can use scrapestack to build data extraction pipelines for Nigerian and international websites without managing their own proxy infrastructure. **What scrapestack Does** scrapestack accepts a target URL and returns the full HTML content of that page, routing the request through its rotating proxy network to avoid IP-based blocks. The core value proposition is simplicity: one API endpoint, one access key, and automatic handling of proxy rotation and request headers. Key features: - **Automatic proxy rotation**: Each request goes through a different IP from scrapestack's proxy pool, preventing IP-based rate limiting and banning - **Zero-ban guarantee**: scrapestack's infrastructure is designed to ensure requests reach the target page without being blocked by standard anti-bot measures - **Standard HTTP scraping**: Returns the full HTML response of static and server-side rendered pages - **Render JavaScript** (on paid plans): Option to render JavaScript for dynamic pages - **HTTPS on paid plans**: Free tier uses HTTP; HTTPS encryption requires a paid plan - **Fast response times**: Infrastructure optimized for scraping speed **How Developers Use scrapestack** Authentication uses the same `access_key` pattern as other APILayer products: ``` GET http://api.scrapestack.com/scrape?access_key=YOUR_KEY&url=https://www.vanguardngr.com/ ``` For HTTPS (paid plans): ``` GET https://api.scrapestack.com/scrape?access_key=YOUR_KEY&url=https://www.jumia.com.ng/ ``` The response is the raw HTML of the target page. Parse it with your preferred HTML parsing library (Cheerio, BeautifulSoup, Jsoup) to extract specific data points. **Pricing** - **Free Tier**: 100 requests/month. No credit card required. HTTP only. - **Basic Plan**: $19.99/month for 250,000 requests. HTTPS enabled. - **Professional Plan**: $49.99/month for 1,000,000 requests - **Business Plan**: $99.99/month for 3,000,000 requests - **Enterprise**: Up to 10,000,000 requests/month - **Annual Billing**: Saves 2 months of cost across all paid plans The free tier's 100 requests/month is the lowest in the category (Crawlbase offers 1,000 free/month), but the paid plans are competitively priced — $19.99/month for 250,000 requests is excellent value for production Nigerian data pipelines. **Authentication and Security** scrapestack uses the APILayer `access_key` format — a simple query parameter. For security: - Store the access key in environment variables - Never expose it in client-side JavaScript - HTTP-only free tier should not be used for scraping pages that contain sensitive data - Upgrade to HTTPS paid plan for any production scraping involving personal or financial data **Comparison to Alternatives** | Feature | scrapestack | Crawlbase | JuheAPI Page Scraper | |---------|-------------|-----------|---------------------| | Free tier | 100/month | 1,000/month | Limited/month | | JS rendering | Paid only | Yes (JS tokens) | No | | HTTPS | Paid only | Yes | Yes | | CAPTCHA | No | Yes (JS mode) | No | | Platform language | English | English | Chinese | | Base paid price | $19.99/month | $29/month | CNY pricing | scrapestack is the better choice when you want a familiar APILayer platform, English documentation, and affordable paid plans starting at $19.99/month. Crawlbase is better when you need JavaScript rendering or more free requests. **Nigerian Web Scraping Use Cases** **News Monitoring**: Nigerian news sites (Vanguard, Punch, Channels, ThisDay, Premium Times) use standard HTML that scrapestack handles well. Build a media monitoring service that scrapes these sites for mentions of keywords (company names, products, regulatory actions) for Nigerian PR and compliance teams. **Price Intelligence**: Monitor public pricing pages on Nigerian retail platforms for commodity goods, electronics, or fuel prices. Use the 250,000/month plan to monitor hundreds of SKUs across multiple retailers daily. **Regulatory Monitoring**: Nigerian financial regulators (CBN, SEC, PENCOM) publish circulars and policy updates as HTML pages. A scraping pipeline using scrapestack can automatically detect and extract new publications for a compliance alerts service. **Job Market Research**: Scrape Nigerian job listings from Jobberman, NGCareers, and other platforms to analyze skill demand trends in the Nigerian tech and finance markets. **Legal and Ethical Use** Use scrapestack only for publicly accessible content. Respect robots.txt directives of target sites. Do not scrape personal information without legal basis. Comply with target website terms of service. For any Nigerian website data, handle it in compliance with the NDPR (Nigeria Data Protection Regulation). **Company Background** scrapestack is a product of APILayer, a Vienna-based API marketplace that operates multiple developer APIs including IPstack, Numverify, MailboxLayer, CurrencyLayer, and others. APILayer was founded with the goal of making data APIs affordable and accessible to small teams and individual developers. scrapestack was developed to fill the market gap between expensive enterprise scraping platforms and unreliable free proxy lists. scrapestack is an ideal choice for Nigerian developers in the APILayer ecosystem looking for a consistent, well-documented scraping API that integrates naturally with their existing APILayer subscriptions.

10. Mailgun Validation

Development Tools, Identity & KYC

Mailgun Email Validation is an email verification service built into the Mailgun email platform, powered by real-world delivery data from billions of emails sent through Mailgun's infrastructure. Because Mailgun operates one of the largest email sending platforms globally, its validation engine uses actual send history and recipient engagement data — not just DNS checks — to make more accurate predictions about whether a given email address is deliverable. Available as a standalone validation API or as part of the Mailgun Optimize suite, the service enables Nigerian developers and businesses to validate email addresses in real time at point of entry, or clean existing lists in bulk before campaigns, reducing bounce rates that damage domain sender reputation. ## What the API Does Mailgun email validation performs multi-layer verification: - **Syntax check**: Validates email address format. - **Domain validation**: Verifies that the domain exists and has valid DNS records. - **MX record check**: Confirms the domain has mail exchange records configured to receive email. - **Mailbox existence**: Verifies the specific mailbox exists on the mail server via SMTP probing. - **Disposable email detection**: Flags addresses from temporary email services. - **Risk assessment**: Leverages Mailgun's historical send data to assign deliverability risk scores based on whether similar addresses have historically been undeliverable, bounced, or marked as spam. The Mailgun Optimize plan adds inbox placement testing (verifying your emails actually reach inboxes, not spam folders) and email preview rendering (testing how your email looks across email clients) alongside validation. ## How Developers Use It Real-time validation via REST API: `GET https://api.mailgun.net/v4/address/validate?address=user@example.com` authenticated with HTTP Basic Auth (username: `api`, password: `YOUR_API_KEY`). Bulk validation: Upload a CSV file through the Mailgun dashboard or API and retrieve validated results by file ID. ## Pricing & Fees - **Optimize Plan**: $49/month — includes 2,500 email validations, 25 inbox placement tests, and 500 email preview renders per month. - **Add-on validation on Foundation+**: $1.20 per 100 validations as overage. - **Email sending**: Separate from validation — Mailgun offers free 100 emails/day for sending, with paid sending plans starting at $15/month. Note: After October 2025, Mailgun increased pricing on its Flex send plan by 100%. Verify current pricing at mailgun.com/pricing before committing. ## Authentication HTTP Basic Authentication. Username is always the literal string `api`; password is your Mailgun API key. This scheme is shared across all Mailgun API calls (email sending, validation, analytics). ## Rate Limits Rate limits depend on your plan. The Optimize plan includes 2,500 validations/month. Overage above the plan limit is billed per 100 validations. Real-time API throughput is not explicitly published — contact Mailgun for high-volume limit details. ## Compliance & Regulations Mailgun is GDPR compliant and SOC 2 Type II certified. Email addresses submitted for validation are processed per Mailgun's data processing agreement. For Nigerian deployments under NDPR, Mailgun's data handling policies support appropriate treatment of user email data. ## Challenges & Gotchas for Nigerian Developers 1. **Validation separate from sending**: The Optimize plan for validation is separate from Mailgun's email sending plans. You may need two plans (one for sending, one for validation) if you use both. 2. **Catch-all domains**: Corporate Nigerian email domains configured as catch-all return "risky" or "unknown" results — Mailgun cannot definitively confirm individual mailbox validity on catch-all domains. 3. **Price increase awareness**: Mailgun increased its Flex send plan pricing by 100% in December 2025. Review current pricing at mailgun.com before subscribing. 4. **USD billing**: Mailgun charges in USD. Nigerian developers need a USD-capable payment method. 5. **Best used within the Mailgun ecosystem**: Mailgun Validation is most valuable if you're already using Mailgun for email sending — combining both means validation and delivery in one account and one API key. ## Company Background Mailgun was founded in 2010 in San Francisco as a developer-focused transactional email API. The company was acquired by Sinch (a Swedish communications platform) in 2021. Mailgun serves over 150,000 businesses globally and processes over 100 billion emails per year. The email validation product is part of Mailgun's Optimize suite, which also includes inbox testing and email preview tools. ## Frequently Asked Questions **Q: Do I need a Mailgun sending account to use email validation?** A: No. Email validation is available as a standalone product through the Mailgun Optimize plan without requiring a sending subscription. **Q: How accurate is Mailgun email validation?** A: Mailgun claims industry-leading accuracy by leveraging real delivery data from billions of emails sent through its platform, not just DNS checks. **Q: What's the difference between Mailgun Validate and ZeroBounce?** A: ZeroBounce is a standalone validation specialist with more detailed categorization (spam traps, abuse emails, etc.) and non-expiring credits. Mailgun Validate is best for teams already in the Mailgun ecosystem who want validation + inbox testing + email delivery in one platform. **Q: Is there a free trial for validation?** A: Mailgun provides some validation credits with account registration. The Optimize plan includes validation, inbox testing, and email preview starting at $49/month.

11. Dojah

Identity & KYC, Development Tools

Dojah is an AI-powered identity verification and fraud prevention infrastructure platform trusted by African and global businesses for KYC, AML compliance, biometric authentication, and secure customer onboarding. Built for the African market but deployed globally, Dojah provides a single API that consolidates BVN verification, NIN verification, government document scanning, facial recognition with liveness detection, CAC company lookup, digital address verification, and AML screening — eliminating the need for multiple separate vendor integrations. Headquartered in Nigeria and serving businesses across Africa, Dojah integrates multiple data sources — including Nigerian government databases (NIMC, CBN/NIBSS), telecoms networks, banks, and utility providers — to enable businesses to verify customer identities with speed, accuracy, and regulatory compliance. **Easy Lookup API — The Standout Feature** Dojah's Easy Lookup API is one of its most powerful and developer-friendly products. By passing a single data point — either a phone number or a BVN — the API returns a comprehensive identity profile: full name, date of birth, photo, residential address, phone number, and enrollment details. This single-call approach dramatically simplifies KYC for Nigerian applications, reducing what would normally require multiple API calls and document uploads into a single instant lookup. It is particularly powerful for lending apps that need to verify a borrower's identity quickly at the point of application. **BVN & NIN Verification** Standard BVN and NIN verification endpoints confirm the identity data attached to a Bank Verification Number or National Identification Number. A successful BVN/NIN lookup returns name, DOB, phone number, and photo — providing the minimum data needed to auto-populate a KYC record and confirm the user is who they claim to be. Dojah also integrates blog guidance on BVN/NIN verification to help developers navigate CBN's mandate for BVN-NIN linkage requirements. **AI Facial Recognition & Liveness Detection** Dojah's biometric verification module uses AI to compare a live selfie against the photo on a government ID or on file in a government database. The liveness detection layer confirms the user is physically present — not a static photo or a video replay — preventing one of the most common forms of identity fraud in digital onboarding. This is available as a standalone verification step or combined with document scanning in a full biometric onboarding flow. **Government ID Document Verification** Dojah can scan and validate Nigerian government-issued documents — NIN slip, passport data page, driver's license, voter's card — extracting data via OCR and cross-referencing it against issuing authority databases to confirm authenticity. This is critical for CBN Tier 2 and Tier 3 KYC. **Digital Address Verification** Unlike traditional address verification that requires physical field agent visits (which are slow and expensive), Dojah offers digital address verification using telco location data, utility records, and cross-referenced data sources. This allows Nigerian fintechs to complete address verification within minutes rather than days, at a fraction of the cost of physical visits. **CAC Company Verification (KYB)** The CAC lookup endpoint queries Nigeria's Corporate Affairs Commission database to confirm a company's registration status, legal name, directors, and business type. This is the foundation of Know Your Business (KYB) compliance for B2B platforms, lenders, and payment companies onboarding business customers. **Identity Hub — AML & Fraud Prevention** Dojah's Identity Hub is a compliance product that combines AML screening, fraud detection, and case management. It screens customers against global sanctions lists, PEP (Politically Exposed Persons) databases, and adverse media — meeting FATF and CBN AML requirements. The Identity Hub also provides tools for detecting synthetic identities and fraudulent document submissions. **Authentication & Pricing** Dojah uses API key authentication — keys are issued through the Dojah dashboard and passed in the Authorization header. Pricing is per-API-call: the Starting Out plan starts at $0.06/call, with volume discounts available on the Optimizing plan (from $0.04/call). Specific per-verification prices vary by check type. A free sandbox environment is available immediately upon account registration — no credit card required. **Nigeria Data Compliance** All Dojah verifications comply with NIMC data handling requirements, CBN KYC mandates, and the Nigeria Data Protection Regulation (NDPR). Dojah does not store raw NINs beyond the immediate verification transaction, in line with NIMC's tokenization requirements. **Frequently Asked Questions** Q: What is the Easy Lookup API? A: Pass a phone number or BVN and receive a full identity profile in one call — name, DOB, photo, address. Ideal for fast, low-friction KYC. Q: Does Dojah require a credit card to test? A: No. A free sandbox account is available at app.dojah.io with no credit card required. Q: What is the starting price for Dojah verifications? A: Starting at $0.06 per API call on the Starting Out plan, with volume discounts on higher tiers. Q: Does Dojah verify Nigerian addresses digitally? A: Yes. Dojah offers digital address verification using telco and data cross-referencing — no physical field agent visit required. Q: Does Dojah support businesses outside Nigeria? A: Yes. Dojah supports verification in multiple African markets beyond Nigeria through its pan-African data source integrations.

12. Bloc

Security, Banking & Fintech

Bloc is a Nigerian Banking-as-a-Service (BaaS) API platform that lets developers embed financial services directly into their products. Its banking infrastructure is provided through Bloc Microfinance Bank (Bloc MFB, CBN Licence No. FPR/LAD/CON/MFB/010/066, RC No. 7187722), a proprietary bank subsidiary rather than a third-party partnership — virtual account numbers issued through Bloc are native Bloc MFB account numbers, NDIC-insured up to ₦5 million. As of this review, Bloc's original developer-facing API portal (blochq.io) shows a "Launching Soon" placeholder rather than live product content, while Bloc MFB's direct banking site (blocmfb.com) is fully live, offering business accounts, supply chain financing, payroll disbursement, and payment collection directly to Nigerian businesses. This suggests the company's public-facing focus has shifted toward direct business/personal banking under the Bloc MFB brand; the standalone "embed Bloc's rails via API" product that this catalog entry originally described may be in transition, being rebuilt, or accessible only through direct sales contact rather than public self-serve signup. Developers interested in Bloc's API infrastructure should confirm current availability directly with the company before building on it. What the API previously offered (per Bloc's own documentation): four core products — Virtual Accounts (issuing NDIC-insured account numbers programmatically), Transfers (NIP transfers to any Nigerian bank), Bills Payment (airtime, data, electricity, cable TV, with a developer commission model), and Collections. Two virtual account types were supported: Fixed Accounts (persistent balance, can initiate transfers) and Collection Accounts (receive-only, for payment tracking). Authentication used a Secret Key from the Bloc Dashboard passed in request headers. Bloc MFB's current live business banking product (accessible directly, not via API) covers: NUBAN business accounts working across all Nigerian banks, vendor/supplier payments via NIP, bulk payroll disbursement, real-time transaction alerts, downloadable statements, multi-user role-based access, and supply chain financing (invoice financing, purchase order financing, supplier payment financing, working capital facilities). Security includes TLS 1.3 encryption, PIN authentication with device binding, and real-time fraud monitoring.

13. Fincra Identity

Identity & KYC, Payments

Fincra Identity is the identity management and verification feature set built into the Fincra API. It is not a standalone product — it is accessed using the same API credentials as Fincra payment services. Nigerian developers using Fincra for payments get identity verification capabilities included, enabling them to build compliant KYC flows without integrating a separate identity provider. What It Does Fincra Identity provides three core capabilities: (1) BVN Resolution — resolve a Nigerian Bank Verification Number to retrieve the associated identity details, enabling KYC verification against the CBN BVN database; (2) Bank Account Verification — verify that a Nigerian bank account number is valid and retrieve the account holder name via NIP lookup, preventing failed transfers before they happen; (3) Card BIN Resolution — look up a card BIN (Bank Identification Number) to identify the issuing bank, card network, card type, and country of origin for any card number prefix. How Developers Use It Fincra Identity endpoints are called using the same API key obtained from the Fincra Dashboard. Documentation is at docs.fincra.com under the Identity Management section. The same 50 req/sec rate limit applies. Sandbox and live environments are fully isolated as with all Fincra services. Pricing Included in the Fincra API subscription. Custom pricing based on volume — contact Fincra sales for current rates. Rate Limits 50 API calls per second, shared with all other Fincra API calls. HTTP 429 returned when exceeded. What Fincra Identity Does NOT Cover Unlike dedicated KYC providers such as Dojah, Smile Identity, or YouVerify, Fincra Identity does not provide: NIN verification, international passport verification, driver's licence lookup, liveness detection, document capture, or CAC business verification. For comprehensive KYC with selfie matching and multi-document support, a dedicated KYC provider is recommended. Challenges and Gotchas (1) Fincra Identity is only available to businesses that have an active Fincra account — you cannot use it without being a Fincra payments customer. (2) Feature set is narrower than dedicated KYC providers. (3) Live mode requires completing full Fincra compliance onboarding first. (4) No standalone pricing — bundled with Fincra payment costs. Company Background Fincra is a CBN PSSP-licensed payment gateway incorporated in the US (Fincra Inc.) and operating in Nigeria and across Africa. The company provides payment infrastructure to African businesses and fintechs, and includes identity verification as part of its end-to-end compliance toolkit. FAQs Q: Is Fincra Identity a separate product from Fincra payments? A: No. It is a feature set within the Fincra API accessed with the same credentials. Q: Can I use Fincra Identity without using Fincra for payments? A: Not independently — you need an active Fincra business account to access these endpoints. Q: Does Fincra Identity support NIN verification? A: Not currently. BVN resolution, bank account verification, and card BIN lookup are the currently documented identity features. Q: What is the rate limit? A: 50 requests per second, shared with all Fincra API calls. Fincra Identity's bank account verification feature resolves the account holder name associated with a provided Nigerian bank account number and bank sort code, confirming that the account belongs to the expected recipient before initiating a disbursement. This pre-disbursement verification step prevents both accidental wrong-account transfers (from typographical errors in account numbers) and deliberate fraud (where a bad actor substitutes their account number for a legitimate recipient). For Nigerian platforms processing large volumes of payouts — salary disbursements, vendor payments, refund processing — the operational cost savings from preventing failed and misdirected transfers justifies the verification step. Card BIN lookup from Fincra Identity allows platforms to identify the issuing bank, card type (debit/credit), card scheme (Visa/Mastercard/Verve), and country of origin from the first six digits of a card number before the transaction is processed. This BIN intelligence enables routing decisions — selecting the optimal payment processor for a card type, applying different processing flows for international versus domestic cards, flagging potentially high-risk card origins — that improve authorization rates and fraud management before authorization is even attempted.

14. Didit

Identity & KYC, Development Tools

Didit is an AI-native identity verification and fraud prevention platform purpose-built for developers, offering one of the most transparent and Nigeria-friendly pricing structures of any global KYC provider. With 500 free verifications per month (no credit card required), public per-module pricing, and explicit support for Nigerian National ID and BVN verification at published rates, Didit stands out as the most accessible enterprise-grade KYC option for Nigerian fintech developers. The platform provides 25+ composable verification modules across four product lines — KYC (individual identity), KYB (business identity), Transaction Monitoring, and Wallet Screening — all accessible through a single REST API with Web, iOS, Android, React Native, and Flutter SDKs. Didit raised $6 million in May 2025 to expand its identity and fraud infrastructure platform globally. ## What the API Does Didit's modular architecture allows developers to combine verification checks in any configuration needed: **Identity Document Verification**: Supports 14,000+ document types globally, including Nigerian international passports, NIN slips, voter cards, and driver's licenses. AI-powered OCR extraction and authentication analysis. **Nigerian Database Checks**: - **National ID Check**: $0.08 per successful query — checks the Nigerian National ID number against government database records with ~100% adult coverage. - **BVN Verification**: $0.80 per successful query — validates a Bank Verification Number against NIBSS records with ~100% banked-adult coverage. **Passive Liveness Detection**: Background liveness analysis during selfie capture without requiring the user to perform gestures. **Biometric Face Match**: Selfie-to-document face comparison for identity binding. **IP Analysis**: Risk signals from the user's IP address (geolocation, proxy/VPN detection, device fingerprinting) included in the full KYC bundle. **AML & Sanctions Screening**: Global PEP and sanctions watchlist checks. **KYB**: Business entity verification. **Transaction Monitoring**: Ongoing transaction risk monitoring. **Wallet Screening**: Cryptocurrency wallet address risk scoring against global databases. ## Full KYC Bundle The most commonly used configuration is the $0.33 full KYC bundle, which includes: Identity Document Verification + Passive Liveness + Face Match + IP Analysis — all in a single API call. For Nigerian developers, this can be supplemented with the $0.08 National ID check or $0.80 BVN check for database-confirmed identity verification. ## How Developers Use It Didit is designed for minimal integration friction. The platform offers: 1. **REST API**: Standard JSON REST API with OpenAPI 3 spec for auto-generating client libraries. 2. **Mobile/Web SDKs**: Web, iOS, Android, React Native, and Flutter SDKs for native capture experiences. 3. **No-Code Integrations**: Ready-made Zapier, Shopify, and Salesforce integrations for teams without engineering resources. 4. **Signed Webhooks**: Webhook payload signing for secure result delivery. Integration is documented as achievable in minutes — Didit explicitly states it can be shipped by AI coding agents like Claude Code in a single prompt using the OpenAPI spec. ## Pricing & Fees Didit offers the most transparent public pricing of any major KYC provider: - **500 free verifications/month** — No credit card required. Real production checks included. - **Full KYC Bundle**: $0.33/check (ID + Liveness + Face Match + IP) - **ID Document Check only**: $0.15/check - **Nigerian National ID Database**: $0.08/successful query - **Nigerian BVN Database**: $0.80/successful query - **AML Screening**: Available as additional module - No Nigeria surcharge — domestic users are priced at the same rate as global ## Authentication Didit uses API key authentication with Bearer token. Webhook payloads are signed for verification. The API key is passed as `Authorization: Bearer your_api_key` on all requests. ## Rate Limits Not publicly documented. The free tier includes 500 verifications/month. Contact Didit for rate limit details on paid plans. ## Compliance & Regulations Didit is designed to comply with CBN (Central Bank of Nigeria) remote onboarding requirements for banks and financial institutions. The platform supports FATF KYC recommendations and applicable AML/CFT compliance frameworks globally. AML screening covers OFAC, UN, EU, and UK Treasury watchlists and PEP databases. For Nigerian deployments, the combination of National ID, BVN, document, and biometric verification provides a robust foundation for meeting CBN KYC Tier 1 through Tier 3 requirements. ## Challenges & Gotchas for Nigerian Developers 1. **BVN pricing**: At $0.80/BVN check, this is higher per-check than the National ID option. For high-volume consumer apps, factor BVN check costs carefully into unit economics. 2. **Relatively new platform**: Didit is newer than Sumsub or Onfido. While technically strong, the ecosystem maturity (support depth, edge case coverage) may be less than established providers. 3. **Wallet screening scope**: Confirm the specific risk database coverage for Nigerian crypto users before relying on wallet screening for compliance purposes. 4. **NDPR compliance**: Biometric and personal data processed must be handled under appropriate data agreements. Review Didit's DPA for NDPR alignment. ## Company Background Didit is an AI-native identity and fraud infrastructure company. In May 2025, the company raised $6 million in funding to expand its global identity and fraud platform. Didit's platform is explicitly developer-focused, with documentation written to support AI-assisted integration via Claude Code, Codex, and Cursor. The company has a dedicated Nigeria solutions page (didit.me/solutions/countries/nigeria/) reflecting active investment in the Nigerian market. ## Frequently Asked Questions **Q: Does Didit support Nigerian BVN verification?** A: Yes. Didit offers BVN verification at $0.80 per successful query against NIBSS records, with ~100% coverage of banked Nigerian adults. **Q: Can I start without a credit card?** A: Yes. Didit's free tier includes 500 real production verifications per month with no credit card required. **Q: What is the cheapest way to verify a Nigerian user's identity with Didit?** A: The Nigerian National ID database check at $0.08/query provides the lowest-cost verification. The full KYC bundle at $0.33 includes document + liveness + face match + IP analysis. **Q: Is Didit CBN-compliant?** A: Didit's platform is designed to meet CBN remote onboarding requirements for banks and financial institutions in Nigeria.

15. Shufti Pro

Identity & KYC, Development Tools

Shufti Pro is an AI-powered identity verification, KYC (Know Your Customer), KYB (Know Your Business), and AML (Anti-Money Laundering) compliance platform that operates across more than 230 countries and territories. Founded in 2017 and headquartered in London, UK, Shufti Pro supports the verification of over 3,000 document types in more than 150 languages, making it one of the most linguistically and geographically comprehensive KYC platforms available to developers. The platform delivers 98.67% verification accuracy and processes checks in 15–60 seconds, combining OCR document analysis, AI-powered facial biometrics, passive and active liveness detection, and AML watchlist screening in a single unified API. ## What the API Does Shufti Pro provides a complete suite of identity verification services accessible through a REST API and pre-built SDKs. Core products include: **Document Verification**: The AI engine authenticates government-issued IDs — passports, national ID cards, driver's licenses, and voter cards — by analyzing security features, MRZ data, and document template integrity. For Nigerian users, this covers international passports, NIMC NIN slips, INEC voter cards, and FRSC driver's licenses. **Biometric Face Verification**: A selfie-based face match against the submitted document photo, with passive liveness detection (background analysis) and active liveness detection (gesture prompts) to prevent spoofing. **Video KYC**: A live video session-based identity check where an agent interacts with the customer in real time, capturing document evidence and biometric verification in a recorded session. This feature is particularly relevant for Nigerian financial institutions required to conduct video-based customer due diligence under CBN AML/CFT regulations. **KYB (Business Verification)**: Corporate entity verification checking business registration documents, director identities, and UBO structures. **AML Screening**: Screening against global sanctions lists (OFAC, UN, EU, UK Treasury), PEP databases, and adverse media sources. **Age Verification**: Document-based age extraction for age-gating platforms. ## How Developers Use It Integration is via REST API or pre-built SDKs for Web, iOS, and Android. The typical flow: 1. Send a POST request to the Shufti Pro API endpoint with your verification requirements (which checks to run, which document types to accept) and a callback URL. 2. Shufti Pro returns a verification URL that you redirect the end user to, or you embed using the SDK. 3. The user completes document capture and selfie steps in the Shufti Pro-hosted UI. 4. Results are delivered to your callback URL via webhook, and are also available via a GET request to the status endpoint. Shufti Pro also provides a no-code journey builder in its dashboard where compliance teams can design KYC flows by dragging and dropping verification steps, configure conditional rules, and instantly generate shareable verification links or QR codes — without any engineering work. ## Pricing & Fees Shufti Pro offers flexible pricing structures: - **Pay-as-you-go**: Pay per verification check with no monthly minimum. - **Monthly commitment**: Pre-purchase a volume of verifications at a discounted per-check rate. - **Enterprise**: Custom pricing for high-volume clients with dedicated support and SLA guarantees. A 7-day free trial is available, providing full access to test the platform before committing. Exact per-check rates are not publicly listed — contact Shufti Pro sales for a quote based on your expected volume and verification types. ## Authentication Shufti Pro uses HTTP Basic Authentication. The Client ID is the username and the Secret Key is the password, encoded in Base64 in the Authorization header of each request. For webhook response verification, Shufti Pro generates a SHA256 signature — developers must recalculate the signature on their server using the Secret Key and compare it to the received signature to confirm the webhook payload's authenticity. Never skip response signature verification in production. ## Rate Limits Rate limits are not publicly documented and vary by plan tier. Contact Shufti Pro to confirm the throughput limits applicable to your subscription. ## Compliance & Regulations Shufti Pro is GDPR compliant, ISO 27001 certified, and PCI DSS compliant. The platform supports FATF KYC/AML recommendations globally and is used by regulated businesses across banking, fintech, crypto, insurance, and gaming sectors. For Nigerian deployments, Shufti Pro's Video KYC module aligns with CBN's AML/CFT (Anti-Money Laundering/Combating the Financing of Terrorism) compliance regulations that require video-based identity confirmation for certain customer tiers. AML screening covers OFAC, EU, UN, UK Treasury, and global PEP databases. ## Challenges & Gotchas for Nigerian Developers 1. **Pricing opacity**: Per-check rates are not publicly listed. Budget uncertainty is a challenge — request a detailed quote before committing. 2. **No native BVN verification**: Shufti Pro does not query the NIBSS BVN database directly. Pair with a Nigerian BVN API if BVN verification is required. 3. **USD billing**: Shufti Pro charges in USD. Nigerian developers need a USD-capable payment method. 4. **Webhook signature verification**: Always verify incoming webhook signatures using SHA256 before processing results. Skipping this step makes your system vulnerable to forged verification decisions. 5. **Video KYC setup**: The Video KYC module requires configuring a compliance team to conduct the live video sessions, or using Shufti Pro's agent network. Factor in operational overhead for regulated use cases. ## Company Background Shufti Pro was founded in 2017 by Victor Fredung (CEO) in London, UK. The company serves over 1,000 businesses globally across fintech, crypto, banking, insurance, gaming, and healthcare sectors. Shufti Pro has been recognized as a G2 Summer 2026 Leader in identity verification and operates verification data centers across multiple regions for GDPR-compliant data localization. ## Frequently Asked Questions **Q: Does Shufti Pro support Nigerian IDs specifically?** A: Yes. Nigerian international passports, NIN slips (NIMC), voter cards (INEC), and driver's licenses (FRSC) are included in Shufti Pro's 3,000+ global document library. **Q: Can I try before paying?** A: Yes. Shufti Pro offers a 7-day free trial with full access to test verification flows before committing to a paid plan. **Q: Does Shufti Pro support Video KYC for CBN compliance?** A: Yes. The Video KYC module enables live-agent video verification sessions that satisfy CBN's video-based customer due diligence requirements. **Q: What languages are supported?** A: Shufti Pro can verify and extract data from documents in 150+ languages, including those relevant to Nigerian multilingual contexts.

16. Website Carbon

Development Tools, Security

Website Carbon API estimates the carbon footprint of any website by analyzing the data transferred per page load and calculating the resulting CO2 emissions based on the energy consumed by data centers, networks, and end-user devices that serve and render the page. As sustainability reporting becomes a growing expectation for Nigerian businesses, technology companies, and organizations seeking international investment or partnerships, the Website Carbon API enables developers to build green tech tools, sustainability dashboards, and web performance optimization workflows that include environmental impact metrics alongside traditional performance metrics. The carbon estimation methodology used by Website Carbon considers the amount of data transferred per page visit (in bytes), the energy intensity of the global internet infrastructure, and carbon intensity of the electricity grid powering the data centers where the website is hosted. The API checks whether the hosting provider is a verified green hosting provider using renewable energy — a distinction that significantly affects the carbon estimate, since green-hosted sites produce roughly 0.6 times the emissions of conventionally hosted sites. Nigerian tech companies that host on providers certified for renewable energy use can communicate this advantage through carbon rating displays powered by the Website Carbon API. The API returns a carbon rating (A+ through F) alongside the numeric estimate of grams of CO2 produced per page visit, the percentage of websites that produce less CO2 than the queried site, and whether the site's hosting is classified as green. This rating system makes environmental impact instantly communicable to non-technical stakeholders — a Nigerian company's CSR report can state "our website is rated A for carbon efficiency" rather than explaining grams of CO2 to non-technical executives. Website carbon badges are a popular use case: displaying a small widget on a website that shows its carbon rating in real time, demonstrating environmental commitment to visitors. Nigerian tech startups and digital agencies that want to signal sustainability values to clients and the international investment community can integrate the Website Carbon API to show their site's carbon rating. Some Nigerian web development agencies have begun offering "green web audits" as a service that includes carbon footprint assessment. Digital sustainability auditing for Nigerian organizations can be powered by the Website Carbon API as part of a broader web performance and sustainability audit tool. Combining carbon estimates from Website Carbon with Core Web Vitals data, image optimization analysis, and hosting provider assessment gives a holistic picture of a website's environmental and performance efficiency. Nigerian web agencies can differentiate by offering such sustainability audits as part of their service offering. ESG (Environmental, Social, and Governance) reporting requirements are growing in Nigeria, particularly for companies listed on the Nigerian Exchange Group (NGX) and those seeking international investment. Tech companies and digital businesses can use Website Carbon API data as one quantified data point in their environmental impact reporting, demonstrating carbon-consciousness in their digital operations alongside broader energy efficiency and waste reduction initiatives. The Website Carbon API is completely free with no authentication required and no usage limits documented, making it immediately accessible for Nigerian developers experimenting with sustainability features. Simply pass a URL as a query parameter and receive the carbon estimate and rating in JSON format. The API is rate-limited in practice to prevent abuse, but for typical sustainability dashboard use cases serving Nigerian users, the free and open access model is more than sufficient.

17. iDenfy

Identity & KYC, Development Tools

iDenfy is a developer-first identity verification platform offering automated KYC (Know Your Customer) through a pay-per-approved-verification model, where businesses are only charged when a user is successfully verified — rejected or abandoned sessions are completely free. Founded in 2017 and headquartered in Kaunas, Lithuania, iDenfy supports over 3,000 document types from more than 200 countries and territories, combining AI-powered document analysis, biometric face matching, liveness detection, and optional human review in a three-step verification pipeline. The platform is particularly notable for its no-code risk rule builder that allows compliance teams to configure custom verification logic — risk scoring, conditional check triggers, and decisioning rules — without requiring engineering involvement for each policy change. ## What the API Does iDenfy's core product is its three-step KYC flow: **Step 1 — Document Check**: The user uploads a government-issued ID (passport, national ID card, driver's license) using iDenfy's guided capture interface. The AI engine performs OCR extraction, authenticity analysis, and security feature validation against a library of 3,000+ document templates covering 200+ countries, including Nigerian international passports, NIN slips, voter cards, and driver's licenses. **Step 2 — Liveness Detection**: A selfie is captured with passive or active liveness checks to confirm the user is physically present. The biometric engine then matches the selfie against the document photo. **Step 3 — AI + Human Review**: iDenfy's AI processes the verification automatically. Cases flagged as uncertain are escalated to a human review queue where trained analysts make the final determination. This hybrid approach delivers higher accuracy than purely automated systems, particularly for low-quality document images or challenging lighting conditions common in mobile captures. Additional features include: **Address Verification** (extracting address data from proof-of-address documents), **AML & PEP Screening** (ongoing daily monitoring of approved users against global watchlists), and a **No-Code Risk Rule Builder** for defining custom verification policies without code. ## How Developers Use It Integration is via REST API or pre-built SDKs for Web, iOS, and Android. The authentication flow: 1. POST to `https://ivs.idenfy.com/api/v2/token` with your API key and secret to generate a short-lived `authToken` and `redirectUrl` for the user session. 2. Redirect the user to the `redirectUrl`, or embed the iDenfy Web SDK using the `authToken`. 3. The user completes document upload and selfie in iDenfy's hosted UI. 4. Results are delivered to your configured webhook callback URL when review completes (AI-instant for clean cases, human review for flagged cases). 5. Retrieve the full verification result via the API using the scan reference ID. ## Pricing & Fees iDenfy uses a pay-per-approved-verification model: - **Premium Plan**: $1.30 per approved verification - **Basic Plan**: $1.35 per approved verification - **Enterprise Plan**: $0.55–$0.65 per approved verification (down to $0.50 at high volume) Critically, **rejected and incomplete verifications are not charged**. This aligns iDenfy's pricing with your successful user conversions — you only pay when a user is cleared to proceed. Annual billing and volume discounts are available on enterprise plans. ## Authentication iDenfy uses an API key pair authentication model. Your API key and secret are exchanged via a POST request to the token generation endpoint (`/api/v2/token`), which returns a short-lived `authToken` specific to each user session. This session token is then used to initialize the verification flow for that user. The server-to-server API calls (status checks, result retrieval) use your API key directly as a Bearer token. ## Rate Limits Rate limits are not publicly documented and vary by plan tier. Contact iDenfy support for specific throughput limits on your subscription. ## Compliance & Regulations iDenfy is ISO 27001 certified and GDPR compliant. The platform supports FATF KYC recommendations and is designed for use by regulated financial institutions, crypto exchanges, and compliance-driven businesses. AML and PEP screening coverage includes OFAC, UN, EU, UK Treasury, and global adverse media databases. For Nigerian deployments, iDenfy's document verification capabilities align with CBN KYC Customer Due Diligence requirements for digital financial service providers. ## Challenges & Gotchas for Nigerian Developers 1. **Human review turnaround**: While AI decisions are near-instant, human review cases can take minutes to hours. Design your onboarding UX to handle asynchronous verification results gracefully. 2. **No native BVN integration**: iDenfy does not directly query the NIBSS BVN database. Pair with a Nigerian BVN API if BVN verification is a requirement. 3. **USD billing**: iDenfy bills in USD. Nigerian developers need a USD-capable payment method. 4. **NDPR considerations**: Biometric data processed by iDenfy qualifies as sensitive personal data under NDPR. Review the data processing agreement for Nigerian user data handling. 5. **Pricing tier selection**: The $0.10–$0.15 difference between Premium and Basic tiers is minor, but Enterprise pricing (down to $0.50) becomes significant at high volumes. Negotiate your plan based on projected monthly verification volume. ## Company Background iDenfy was founded in 2017 in Kaunas, Lithuania. The company provides identity verification services to clients across fintech, crypto, gaming, real estate, and other regulated industries globally. iDenfy emphasizes its hybrid AI + human review model as a differentiator — arguing that fully automated systems miss subtle forgeries that trained human reviewers catch, particularly for non-standard document types. ## Frequently Asked Questions **Q: Am I charged for failed verifications?** A: No. iDenfy only charges for approved verifications. Rejected, failed, and abandoned sessions are not billed. **Q: Does iDenfy support Nigerian identity documents?** A: Yes. Nigerian international passports, NIN slips, voter cards, and driver's licenses are covered within iDenfy's 3,000+ document template library. **Q: What is the turnaround time for verification?** A: AI-reviewed cases return decisions in seconds. Human review cases typically resolve within minutes to a few hours depending on queue load. **Q: Can compliance teams adjust rules without engineering help?** A: Yes. iDenfy's no-code risk rule builder allows compliance teams to configure verification logic, risk scoring, and conditional checks without any code changes.

18. Persona

Identity & KYC, Development Tools, Payments

Persona is a flexible identity verification and compliance platform that enables businesses to build custom KYC (Know Your Customer) workflows combining government ID verification, biometric liveness checks, database lookups, phone/email verification, and AML screening — all configurable through a no-code workflow builder without requiring engineering changes for each compliance update. Founded in 2018 and headquartered in San Francisco, Persona serves fintech companies, crypto exchanges, marketplaces, lending platforms, and gig economy businesses globally. The platform is notable for its native Nigeria Database Verification module, which checks Nigerian NIN (National Identification Number), BVN (Bank Verification Number), voter registration cards, and driver's licenses directly against authoritative Nigerian government databases — a capability that distinguishes Persona from most global KYC providers who rely on document OCR alone without database cross-referencing. ## What the API Does Persona's API enables developers to trigger, manage, and retrieve identity verifications called "Inquiries." Each Inquiry runs a configurable set of verification steps: document verification (passport, national ID, driver's license), selfie liveness detection (passive or active), database checks (government, watchlist, phone, email), and business verification (KYB). For Nigerian users specifically, the Nigeria Database Verification product cross-references the user's submitted identity data against Nigerian government records, providing a higher-assurance confirmation than document image analysis alone. The platform's Workflow engine (formerly called "Cases") allows teams to define multi-step verification journeys with conditional logic. For example: if a user submits a voter card that fails OCR, automatically prompt for an alternative document; if a database check returns a sanctions hit, escalate to manual review; if transaction value exceeds a threshold, trigger enhanced due diligence. These rules are configured in Persona's dashboard without code. ## How Developers Use It Integration follows a standard flow: 1. Create an Inquiry using `POST /api/v1/inquiries` — this initializes a verification session for the end user. 2. Redirect the user to Persona's hosted verification flow (URL returned in the response) or embed using the Persona Embedded Flow SDK. 3. The user completes document upload, selfie, and any database check steps within the Persona-hosted UI. 4. Receive results via webhook (`inquiry.completed`, `inquiry.failed`, etc.) when the user finishes, or poll `GET /api/v1/inquiries/{inquiry-id}` for status. 5. Retrieve the full verification report including extracted data, check outcomes, and overall decision from the Inquiry object. Persona also provides a Verifications API for accessing individual check results (document verification report, database check report, selfie report) with granular pass/fail scores and extracted data fields. ## Pricing & Fees Persona uses a pay-per-successful-verification model — you are only charged when a verification completes successfully, not for failed or abandoned sessions. Plans include: - **Essential Plan**: $250/month (annual contract) — includes 500 verifications per month, $1 per additional verification. - **Growth Plan**: Custom pricing based on your verification volume and product mix. Recommended for most growing businesses. - **Enterprise Plan**: Fully custom pricing with dedicated support, SLA guarantees, and volume discounts. A sandbox environment is available immediately after signup for testing. ## Authentication Persona uses API key authentication. Your API key is passed as a Bearer token in the `Authorization: Bearer your_api_key` header on all requests. Persona API keys have environment scopes — sandbox keys work only against the sandbox environment, and live keys are used in production. Webhook payloads include an `X-Persona-Signature` header for payload verification to prevent forgery. ## Rate Limits Persona does not publish specific rate limits in their public documentation. Limits vary by plan tier. Contact Persona's support team to confirm the applicable rate limits for your subscription. ## Nigeria-Specific Capabilities Persona's Nigeria Database Verification is a standout feature for Nigerian developers. It covers: - **NIN Verification**: Cross-check NIN (National Identification Number) against NIMC database records. - **BVN Verification**: Verify the Bank Verification Number against NIBSS records. - **Voter Card Check**: Validate voter registration data against INEC records. - **Driver's License Check**: Verify driver's license data against FRSC records. This level of native database integration means Nigerian fintechs can achieve higher-confidence identity verification than document OCR alone, satisfying CBN's customer due diligence requirements for higher-tier accounts. ## Compliance & Regulations Persona holds ISO 27001 and SOC 2 Type II certifications. The platform supports GDPR, CCPA, and NDPR compliance. Verification workflows align with FATF KYC recommendations and CBN Customer Due Diligence regulations for Nigerian financial institutions. AML screening covers OFAC, UN, EU, UK Treasury, and global PEP databases. For Nigerian fintech clients, Persona's database verification checks provide evidence-based identity confirmation suitable for CBN KYC Tier 2 and Tier 3 requirements. ## Challenges & Gotchas for Nigerian Developers 1. **Nigeria database checks as add-on**: While Persona supports Nigerian database verification, it may be priced as an add-on module on top of the base plan. Confirm availability on your chosen plan. 2. **Essential plan volume limits**: 500 verifications/month on the Essential plan is modest. Growing Nigerian apps with significant onboarding volumes will need to move to Growth pricing quickly. 3. **USD billing only**: Persona charges in USD. Use a USD virtual card or wire transfer for payment. 4. **NDPR biometric data**: Selfie and biometric data captured during Persona verifications qualify as sensitive personal data under NDPR. Ensure your data processing agreement covers Nigerian user biometric data retention and deletion. 5. **Workflow complexity**: Persona's no-code Workflow builder is powerful but has a learning curve. Budget time for workflow configuration and QA testing before going live. ## Company Background Persona was founded in 2018 by Rick Song and Charles Yeh. The company has raised over $200 million in funding from investors including Index Ventures, Coatue, and First Round Capital. Persona is widely used by US and international fintech companies, and its Nigeria support makes it one of the few global KYC platforms with genuine database-level verification for Nigerian identity documents. ## Frequently Asked Questions **Q: Does Persona support Nigerian BVN verification?** A: Yes. Persona's Nigeria Database Verification product supports BVN cross-checking against NIBSS records, NIN against NIMC, voter cards against INEC, and driver's licenses against FRSC. **Q: Can I use Persona without a sales call?** A: Yes. The Essential plan ($250/month) activates after online signup. Growth and Enterprise plans require a sales conversation. **Q: Am I charged for failed verifications?** A: No. Persona only charges for successfully completed verifications — abandoned or failed sessions are not billed. **Q: Is there a free trial?** A: Persona provides a sandbox environment for testing without charge. Production verifications require an active plan.

19. KYCAID

Identity & KYC, Development Tools, Security

KYCAID is a global identity verification and KYC compliance platform that supports more than 200 countries and 11,000 document templates, providing document verification, biometric liveness checks, and government database cross-referencing through a flexible pay-as-you-go API. Built for developers who need affordable, commitment-free KYC without monthly minimums, KYCAID is distinctive for its document-free verification capability — allowing users to enter just their ID number and receive a verification result in approximately 20 seconds via direct government database validation. For Nigerian developers specifically, KYCAID supports Nigerian NIN (National Identification Number) and driver's license verification against Nigerian government databases, making it one of the more accessible options for startups that want native Nigerian ID support without committing to enterprise KYC contracts. ## What the API Does KYCAID provides a suite of identity verification services: **Document Verification**: AI-powered analysis of physical ID documents — passports, national ID cards, driver's licenses, and residence permits — using OCR extraction and security feature analysis across 11,000+ document templates. **Document-Free Verification**: A standout feature that allows verification by ID number input alone, skipping document upload entirely. The system queries government databases directly and returns a verification result in around 20 seconds. For Nigerian users, this covers NIN and driver's license checks against NIMC and FRSC records respectively. **Biometric Face Verification**: Selfie-based face matching against the document photo, with both passive and active liveness detection to prevent spoofing. **AML & Sanctions Screening**: Screening against global watchlists for PEP and sanctioned individuals. ## How Developers Use It KYCAID offers three integration paths: 1. **Pure API Integration**: REST API calls from your backend to trigger verifications, check status, and retrieve results. Most flexible for custom workflows. Typically takes a few hours to integrate. 2. **Forms Integration**: Embed KYCAID's pre-built HTML forms into your web application. No SDK needed — users complete verification inline on your page. 3. **Mobile SDK**: iOS and Android SDKs for in-app verification with native camera capture and guided document + selfie flows. The typical API flow: Create a verification request specifying the required checks, receive a hosted verification URL or embed the form, collect the result via webhook callback or status polling. ## Pricing & Fees KYCAID uses a pure pay-as-you-go model with no monthly minimum commitment. Key pricing features: - **No subscription fee**: You pay only for verifications actually processed. - **€50 free credit**: New customers receive €50 in free credit to test real verifications before making any payment — not just a sandbox, but actual live verification credits. - **No hidden fees**: KYCAID explicitly prices as transparent, with all costs visible per verification type. - **Volume discounts**: Per-check rates decrease at higher volumes. Exact per-check rates are available in the KYCAID dashboard after registration or upon request. ## Authentication KYCAID uses API key authentication. Your API key is passed as a Bearer token in the `Authorization: Bearer your_api_key` header on all requests. Webhook payloads can be verified using a signature mechanism to confirm payload authenticity. ## Rate Limits Rate limits are not publicly documented. Contact KYCAID support for throughput details on your plan. ## Nigeria-Specific Capabilities KYCAID has documented support for Nigerian identity verification through both document-based and document-free pathways: - **NIN Verification**: Enter a National Identification Number for direct validation against NIMC database records without requiring a physical document scan. - **Driver's License Verification**: Validate FRSC-issued driver's license numbers against government records. - **Document-Based Nigerian IDs**: NIN slips, voter cards, international passports, and driver's licenses can be verified through the document upload flow with OCR and authentication checks. ## Compliance & Regulations KYCAID is GDPR compliant and operates in accordance with applicable data protection regulations. The platform's AML screening covers OFAC, UN, EU, UK Treasury, and other major sanctions and PEP lists. For Nigerian fintech deployments, KYCAID's verification checks align with CBN KYC requirements for digital onboarding. The document-free NIN verification provides a strong foundation for meeting CBN Tier 1 and Tier 2 KYC thresholds. ## Challenges & Gotchas for Nigerian Developers 1. **GDPR data handling**: KYCAID processes data under EU GDPR frameworks. For NDPR (Nigerian Data Protection Regulation) compliance, verify the data processing agreement covers Nigerian user personal data appropriately. 2. **Currency**: KYCAID prices in EUR. Nigerian developers will pay in USD equivalents depending on their payment method and the EUR/USD exchange rate. 3. **Document-free verification depth**: While NIN and driver's license document-free checks are supported, BVN verification may not be included — confirm the scope of Nigerian database checks in your account plan. 4. **Smaller ecosystem**: KYCAID is a smaller vendor compared to Sumsub or Jumio. Support response times and documentation depth reflect this — budget for some self-service troubleshooting. ## Company Background KYCAID is a European-based KYC technology company focused on making identity verification accessible to businesses of all sizes through transparent, affordable pricing. The platform emphasizes in-house technology for all verification processes, which allows it to keep per-check costs lower than enterprise competitors who license third-party components. KYCAID is listed among the top KYC providers for African markets by multiple industry publications. ## Frequently Asked Questions **Q: Can Nigerian startups use KYCAID without a monthly subscription?** A: Yes. KYCAID is entirely pay-as-you-go — no monthly fee, no minimum commitment. You receive €50 free credit on signup to test real verifications. **Q: Does KYCAID support Nigerian NIN verification without document upload?** A: Yes. KYCAID's document-free verification checks Nigerian NIN numbers directly against the NIMC government database in approximately 20 seconds. **Q: What is the accuracy of KYCAID verifications?** A: KYCAID does not publicly publish an aggregate accuracy rate, but the platform uses AI-based analysis across 11,000+ document templates for its document checks. **Q: How long does integration take?** A: KYCAID estimates API integration from a few hours to a couple of days, depending on integration complexity and which products are used.

20. SEAMFIX API

Identity & KYC, Development Tools

Identity management and KYC API for onboarding and verification. SEAMFIX provides APIs for identity verification, background checks, and compliance. Enables businesses to implement robust KYC/AML procedures.

21. Dynamic

Blockchain, Security, eCommerce

Dynamic is a Web3 authentication and wallet management platform built for product teams that want a polished, enterprise-grade user experience for wallet connection, embedded wallet creation, and Web3 user management. While other wallet connection libraries like RainbowKit and ConnectKit focus on the technical mechanics of wallet connection, Dynamic adds a full user management layer on top: analytics on user behavior, conversion tracking from visitor to connected wallet, allowlists, token gating, MFA, and a dashboard for managing your dApp's user base. For Nigerian Web3 startups and product teams that think seriously about user experience and product metrics, Dynamic offers capabilities far beyond basic wallet connection. Nigeria's Web3 user base is diverse — some users have MetaMask and hardware wallets, others are mobile-first users of Trust Wallet or Coinbase Wallet, and many are completely new to crypto and need embedded wallet creation via email or social login. Dynamic handles all of these users with one SDK. The wallet connection modal supports over 300 wallets and automatically detects which wallets are installed in the user's browser, presenting only relevant options and reducing confusion. Embedded Wallets in Dynamic create a self-custodial wallet secured by the user's email, Google, Apple, or other social authentication. The private key is managed through a distributed key system (similar to multi-party computation) that means no single server holds the complete key. Users can export their wallet's private key at any time, preserving true self-custody. For Nigerian consumer applications — e-commerce platforms, gaming, content monetization — embedded wallets convert any user into a Web3 participant without requiring any blockchain knowledge. Multi-Factor Authentication (MFA) is a security feature that Dynamic adds to Web3 wallets — something most wallet solutions omit. Nigerian businesses operating in regulated industries or handling high-value assets can require users to complete email or TOTP (Google Authenticator) 2FA before authorizing transactions. This adds a layer of security appropriate for Nigerian fintech and enterprise Web3 applications. Token and NFT gating allows Nigerian applications to restrict access to certain features, pages, or content based on on-chain ownership. A Nigerian DAO can gate its governance dashboard to holders of its governance token. A Nigerian creator can gate premium content to holders of their NFT collection. A Nigerian DeFi protocol can provide enhanced features to users holding more than a threshold of its native token. Dynamic's gating rules are configured in the dashboard without additional code. The User Management Dashboard gives Nigerian product teams visibility into their Web3 user base: how many wallets connected today, which wallet types are most popular, conversion rates through the onboarding funnel, and individual user activity. These analytics are typically absent from wallet connection libraries but are essential for product teams optimizing onboarding flows and retention. Webhooks allow Nigerian backends to receive real-time notifications when users connect wallets, complete authentication, or perform other events — enabling backend workflows like creating a database record for new users, triggering a welcome email, or updating a loyalty point balance when a wallet connects. The free tier supports up to 1,000 monthly active wallets — sufficient for Nigerian startups in early growth and hackathon projects. The Scale plan at $299/month supports up to 10,000 MAW with advanced analytics and priority support. Enterprise plans with custom pricing serve larger Nigerian Web3 platforms with compliance, SLA, and white-glove onboarding requirements.

22. Sumsub

Development Tools, Identity & KYC

Sumsub (Summary Verification) is a comprehensive identity verification and compliance platform used by over 2,000 businesses globally to verify users, screen for AML risks, monitor transactions, and onboard corporate entities. Headquartered in London with offices across Europe and the Americas, Sumsub powers KYC (Know Your Customer), KYB (Know Your Business), AML screening, and fraud prevention through a single API and no-code workflow builder. ## What the API Does Sumsub provides a suite of verification products accessible through a unified REST API. At the core is its document verification engine, which supports over 14,000 ID document types from more than 220 countries and territories. The platform extracts data from submitted documents using OCR, validates authenticity through tamper detection and security feature analysis, and cross-references extracted data against government databases where available. Beyond document checks, Sumsub offers biometric face matching — comparing a selfie to the document photo — combined with active and passive liveness detection to prevent spoofing attacks using printed photos, videos, or 3D masks. The platform also includes Nigerian NIN slip recognition, voter card parsing, and international passport verification, making it well-suited for Nigerian developer compliance requirements. ## How Developers Use It Developers integrate Sumsub via REST API or through pre-built mobile/web SDKs for iOS, Android, React Native, and Flutter. The typical integration flow involves creating an applicant (a user object in Sumsub), generating an SDK access token, and embedding the Sumsub Web SDK or Mobile SDK to collect the user's documents and selfie. The SDK handles the camera capture, liveness instructions, and document upload entirely in-browser or in-app, and fires a webhook back to your server when verification completes. For server-side processing, key endpoints include: `POST /resources/applicants` to create an applicant, `GET /resources/applicants/{applicantId}/status` to check verification status, `GET /resources/applicants/{applicantId}/one` to retrieve full check results, and `POST /resources/applicants/{applicantId}/requiredIdDocs` to configure which document types to accept. Sumsub Studio is the platform's no-code workflow builder where teams can design custom verification journeys — choosing which checks to run (document, biometric, AML, database, etc.) in what order, with conditional branching based on risk signals, without writing additional code. ## Pricing & Fees Sumsub operates on a per-verification pricing model with monthly minimum commitments. For non-regulated use cases (e.g., marketplaces, gig economy), pricing starts at $149/month with a per-verification cost of approximately $1.35. For regulated entities (fintechs, banks, crypto exchanges), the minimum rises to $299/month with per-verification costs around $1.85. Enterprise plans with custom pricing are available for high-volume customers. Sumsub does not publicly list a free tier; however, a sandbox environment with test credentials is available to all registered developers at no cost. ## Authentication Sumsub uses a dual-token authentication system. Each API request requires an App Token (passed in the `X-App-Token` header) and a request-specific HMAC SHA-256 signature (passed in the `X-App-Access-Sig` header, generated by signing the request body + timestamp using your Secret Key). This scheme prevents replay attacks and ensures requests cannot be tampered with in transit. Developers must store the Secret Key securely and never expose it client-side. The Sumsub SDK separately uses short-lived SDK Access Tokens generated server-side to authenticate end-user sessions. ## Rate Limits Rate limits are not publicly published and vary by plan tier. Sumsub's enterprise plans are designed for high-volume throughput, and production limits are negotiated as part of the contract. Developers on standard plans should contact Sumsub support to confirm their applicable limits. The sandbox environment has its own separate limits appropriate for testing. ## Compliance & Regulations Sumsub is ISO 27001 certified and GDPR compliant. The platform supports compliance with FATF (Financial Action Task Force) recommendations for AML screening, PEP and sanctions list checks against global watchlists including OFAC, EU, UN, and UK Treasury lists. For Nigerian businesses, Sumsub's checks are compatible with CBN KYC guidelines (customer due diligence requirements), NDPR data handling requirements, and EFCC AML obligations. For crypto businesses, the platform includes a Travel Rule module supporting compliance with the FATF Travel Rule for Virtual Asset Service Providers (VASPs), enabling originator/beneficiary data transmission for transactions above regulatory thresholds. ## Challenges & Gotchas for Nigerian Developers 1. **No native BVN lookup**: Sumsub does not directly query the NIBSS BVN database. For BVN verification, you would need to combine Sumsub with a Nigerian BVN API like Mono or Okra. 2. **HMAC signing complexity**: The request signing process is more involved than a simple API key — developers must correctly generate the HMAC SHA-256 signature on every request. Using the official SDK wrappers significantly reduces integration friction. 3. **Pricing for Nigerian scale**: At $1.35–$1.85 per verification, the cost can be significant for mass-market Nigerian apps with millions of users. Factor verification costs into your unit economics early. 4. **Data residency**: Sumsub stores verification data in EU-based infrastructure by default. For NDPR compliance, confirm your data processing agreement covers Nigerian user data appropriately. 5. **Webhook reliability**: Always verify incoming webhooks using the Sumsub signature header before trusting the payload — do not skip webhook signature validation in production. ## Company Background Sumsub was founded in 2015 and is headquartered in London, United Kingdom. The company has raised over $30 million in funding and serves clients in banking, crypto, lending, insurance, and marketplace industries. Notable clients include Bitpanda, Mercuryo, and Rapyd. Sumsub has a dedicated compliance team and regularly updates its watchlist databases and ID document templates. ## Frequently Asked Questions **Q: Can I use Sumsub without a business registration in Nigeria?** A: You can sign up and start testing in sandbox mode without a Nigerian business registration. Going live and enabling billing requires a valid business entity and may require compliance documentation. **Q: Does Sumsub support NGN billing?** A: Sumsub bills in USD. Nigerian businesses will need to pay via USD card, wire transfer, or through a payment provider that supports USD billing. **Q: How long does a verification take?** A: Automated decisions are returned in under 60 seconds in most cases. Manual review (for edge cases flagged by the system) typically takes a few hours. **Q: Is there a free trial?** A: Sumsub provides a full-featured sandbox environment for testing. A paid subscription is required to go live and run real verifications.

23. Onfido (Entrust)

Identity & KYC, Development Tools, eCommerce

Onfido is an enterprise identity verification platform that combines AI-powered document verification, biometric face authentication, and AML watchlist screening into a single developer API. Founded in 2012 in London and acquired by Entrust in April 2024, Onfido continues to operate under its own brand within the Entrust portfolio. The platform serves thousands of businesses globally including Revolut, Zipcar, Bitstamp, and numerous regulated financial institutions. Onfido processes hundreds of millions of identity checks annually across 195+ countries. ## What the API Does Onfido's verification stack has three primary layers. The first is document verification — automated analysis of government-issued ID documents including passports, national ID cards, driver's licenses, and residence permits. Onfido's AI engine validates document authenticity by checking security features, analyzing MRZ (Machine Readable Zone) data, detecting tampering or manipulation, and comparing document templates against its global library. The second layer is biometric verification — a selfie-based face match comparing the live user's face against the document photo. Onfido supports both passive liveness (background analysis without user prompts) and active liveness (guided motion challenges to confirm presence). The liveness engine is designed to prevent spoofing via printed photos, replay videos, 3D masks, and increasingly, AI-generated deepfake imagery. The third layer is watchlist screening — automatic checks against global AML (Anti-Money Laundering) databases, PEP (Politically Exposed Persons) lists, and sanctions registries including OFAC, EU, UN, and UK Treasury. For Nigerian users, the platform supports NIN slips, voter cards, international passports (e-passport with NFC), and Federal Road Safety Corps driver's licenses. Onfido Studio ties these together as a no-code workflow builder — compliance and product teams can drag and drop verification steps, configure conditional logic (e.g., run database check if document is expired), set retry limits, and deploy new verification flows without engineering involvement. ## How Developers Use It Developers integrate Onfido via REST API and SDKs for Web, iOS, Android, and React Native. The standard integration pattern: 1. Create an applicant server-side using `POST /v3.6/applicants` — this creates a user object in Onfido with name and email. 2. Generate an SDK token using `POST /v3.6/sdk_token` — this short-lived token authorizes the client-side SDK session. 3. Initialize the Onfido Web SDK or Mobile SDK on the client, passing the SDK token. 4. The user is guided through document capture and selfie/liveness steps in the Onfido-hosted UI. 5. Create a check on your server using `POST /v3.6/checks` specifying which reports to run (document, facial_similarity, watchlist, etc.). 6. Receive results via webhook when the check completes, or poll `GET /v3.6/checks/{check_id}`. ## Pricing & Fees Onfido operates on custom enterprise pricing. Industry data suggests median annual spend of approximately $60,475, with a wide range from $6,156 for smaller integrations to over $945,000 for high-volume enterprise deployments. Charges are per verification check — document verification, biometric checks, and add-ons like AML screening are priced separately. There is no public per-check rate card; pricing is negotiated based on volume and use case. A sandbox environment is provided to all registered developers during the sales process for full integration testing. ## Authentication Onfido uses JWT (JSON Web Token) authentication. Backend API calls use a long-lived API token stored as a Bearer token in the Authorization header. Client-side SDK sessions use short-lived SDK tokens generated server-side via the `/sdk_token` endpoint — these expire after a configurable period to prevent session hijacking. Webhook payloads include an `X-SHA2-Signature` header for payload verification. ## Rate Limits Onfido does not publish public rate limits. Enterprise contracts specify throughput limits based on expected volume. The API is designed to handle burst verification loads. Contact Onfido/Entrust sales for specific rate limit commitments in your contract. ## Compliance & Regulations Onfido holds ISO 27001 certification, SOC 2 Type II attestation, PCI DSS compliance, and full GDPR compliance. The platform supports compliance with FATF anti-money laundering recommendations, UK FCA guidelines, EU AMLD5/6, FinCEN in the US, and CBN KYC requirements in Nigeria. For Nigerian financial institutions, Onfido's document + biometric verification stack satisfies CBN Tier 2 and Tier 3 KYC requirements as outlined in the CBN Customer Due Diligence Regulation 2023. ## Challenges & Gotchas for Nigerian Developers 1. **No self-serve signup**: Onfido requires enterprise onboarding through their sales team. There is no instant-activation self-serve plan — budget 2–4 weeks for contract and credential setup. 2. **USD-only billing**: All pricing is in USD. Nigerian developers need a USD-capable payment method for invoicing. 3. **No native BVN integration**: Onfido does not query the NIBSS BVN database directly. Pair with a Nigerian BVN API for BVN-based verification. 4. **SDK version management**: Onfido releases frequent SDK updates, especially for mobile. Lock your SDK version and test upgrades before deploying to production. 5. **NDPR considerations**: Biometric data processed by Onfido falls under NDPR as sensitive personal data. Ensure your data processing agreement with Onfido covers Nigerian user data handling and retention policies. 6. **Post-Entrust acquisition uncertainty**: Some developers have noted pricing changes following the Entrust acquisition. Negotiate carefully and review renewal terms. ## Company Background Onfido was founded in 2012 by Husayn Kassai, Eamon Jubbawy, and Ruhul Amin — three Oxford University graduates. The company raised over $200 million in VC funding before being acquired by Entrust, a digital security company, in April 2024 for a reported $400 million. Onfido's technology is now part of Entrust's broader digital identity portfolio, which includes certificates, credentialing, and authentication products. ## Frequently Asked Questions **Q: Is Onfido available in Nigeria?** A: Yes. Onfido supports Nigerian government IDs including international passports, NIN slips, voter cards, and driver's licenses as part of their global document library covering 195+ countries. **Q: Has anything changed since the Entrust acquisition?** A: The Onfido API, documentation, and brand continue to operate independently. The main changes are in sales and enterprise support structure, which is now routed through Entrust channels. **Q: Can I use Onfido for KYB (business verification)?** A: Onfido focuses on individual KYC (Know Your Customer) verification. KYB (Know Your Business / corporate verification) is not a core Onfido product — consider Sumsub or Jumio for KYB requirements. **Q: How do I get started without a sales call?** A: Contact Onfido through onfido.com to initiate enterprise onboarding. There is no self-serve option.

24. IPstack

Development Tools, Security, eCommerce

IPstack is a leading IP geolocation API operated by APILayer, designed to provide developers with fast, accurate, and granular location intelligence based on IP addresses. Since its launch, IPstack has served millions of developers worldwide and has become one of the most popular geolocation APIs due to its generous free tier, comprehensive data modules, and developer-friendly documentation. **What IPstack Does** At its core, IPstack converts a raw IP address into a rich set of geographic and network data. A single API call returns the visitor's continent, country, region, city, ZIP/postal code, latitude, and longitude. But the platform goes significantly further with five distinct data modules that make it one of the most comprehensive IP intelligence APIs available. The five modules are: 1. **Location Module**: Returns continent name and code, country name and ISO code, region name and code, city, zip/postal code, latitude, longitude, and a flag image URL for the detected country. 2. **Currency Module**: Returns the local currency code (e.g., NGN for Nigeria), currency symbol, and name — essential for dynamic pricing and localized checkout flows. 3. **Timezone Module**: Returns the timezone identifier (e.g., Africa/Lagos), UTC offset, current local time, and whether DST is active — enabling you to schedule events and communications at correct local times. 4. **Connection Module**: Returns the ASN (Autonomous System Number), ISP name, and connection type (WiFi, Cable, DSL, Cellular) — valuable for adapting content delivery strategies to a user's network type. 5. **Security Module**: Returns flags for proxy usage, Tor exit nodes, crawler detection, and whether the IP belongs to a known hosting provider — enabling lightweight fraud prevention checks at the gateway layer. **How Developers Use IPstack** Integrating IPstack is straightforward. You register for a free API key at ipstack.com and make a GET request: ``` GET http://api.ipstack.com/{ip}?access_key=YOUR_KEY ``` The response is a JSON object. For paid plans, you switch to HTTPS: ``` GET https://api.ipstack.com/{ip}?access_key=YOUR_KEY&modules=location,currency,security ``` You can request multiple modules in a single call using the `modules` query parameter. You can also look up your own requester's IP by using `check` as the IP value: ``` GET https://api.ipstack.com/check?access_key=YOUR_KEY ``` IPstack is available in REST format and responses include standard JSON. The API is stateless, requires no SDK (though community SDKs exist for Python, PHP, Node.js, and others), and works seamlessly from any backend or serverless function. **Pricing** IPstack operates on a freemium model: - **Free Tier**: A set number of monthly requests at no cost. HTTPS is not available on the free tier — requests must be made over HTTP. - **Professional Plan**: Starts at $9.99/month. HTTPS enabled. Access to more monthly requests and all five data modules. - **Enterprise Plans**: Higher volume tiers up to $99.99/month with elevated monthly request caps, priority support, and dedicated infrastructure. - **Annual Billing**: Opting for annual billing gives you two months free across all paid plans. The HTTP-only limitation on the free tier is a notable constraint for production applications that require secure data transmission — all production deployments should be on at least the Professional plan. **Authentication** IPstack uses an API access key delivered as a query parameter: `?access_key=YOUR_KEY`. This is the same authentication pattern used across the APILayer ecosystem (e.g., Numverify). The key is tied to your account and rate-limit counters track usage per key. Store your access key in environment variables and never expose it in client-side code. **Rate Limits and Uptime** IPstack advertises a 99.9% uptime SLA. Rate limits vary by plan tier — free plan users have the lowest monthly caps, while enterprise plans offer higher volumes with burst capacity. For applications requiring very high-throughput geolocation (millions of requests per month), APILayer offers custom enterprise contracts. **Coverage and Accuracy** IPstack's database covers 200,000+ cities globally, including Nigerian cities such as Lagos, Abuja, Kano, Port Harcourt, Ibadan, Benin City, and others. Country-level accuracy is very high (99%+), while city-level accuracy depends on ISP database freshness. For Nigerian users on major ISPs (MTN, Airtel, Glo, 9mobile), coverage is generally reliable at the city level. **Nigeria-Specific Considerations** Nigerian developers should be aware of the following when integrating IPstack: - **Currency Detection**: IPstack will correctly return NGN (Nigerian Naira) for Nigerian IPs, making it ideal for dynamic currency display in e-commerce. - **Timezone**: Returns Africa/Lagos (UTC+1) for Nigerian IPs — correct for all of Nigeria, which operates on a single timezone. - **Connection Type**: Nigeria's mobile-heavy internet landscape means most users will show Cellular connection types via MTN, Airtel, Glo, and 9mobile. This insight can be used to serve lighter-weight media to mobile data users. - **Security Module**: The proxy/VPN detection capabilities are valuable in Nigeria's fintech space, where fraud prevention at the network level adds an additional security layer before heavier KYC checks. - **Free Tier HTTP Limitation**: During development and testing, the HTTP-only free tier is sufficient. For production Nigerian apps handling payment flows or user data, upgrade to HTTPS on a paid plan. **Compliance and Data Privacy** IPstack processes IP addresses, which in some jurisdictions are considered personal data under privacy regulations such as GDPR and Nigeria's NDPR (Nigeria Data Protection Regulation). Developers should: - Not log IP geolocation data unnecessarily - Disclose IP-based geolocation in their privacy policies - Use IPstack data for legitimate product improvement, not surveillance - Review APILayer's data processing agreement for enterprise deployments **Company Background** IPstack is a product of APILayer, a Vienna-based API marketplace that acquired and operates multiple APIs including Numverify (phone validation), MailboxLayer (email validation), CurrencyLayer (forex rates), and others. APILayer positions itself as an affordable, reliable API aggregator for small to medium development teams. The IPstack product has been active since 2013 and has served billions of API calls. **Alternatives** Comparable APIs include IPinfo (which offers a more generous free tier at 50,000 requests/month and includes ASN data), IP-API (free for non-commercial use), and MaxMind GeoIP2 (the industry standard for enterprise accuracy). IPstack's key advantage is its breadth of modules and its integration with the APILayer billing ecosystem. **Frequently Asked Questions** *Can I geolocate multiple IPs in a single request?* Bulk lookup is available on higher-tier plans via batch endpoint. *Is the free tier suitable for production use in Nigeria?* Not recommended due to HTTP-only limitation. Use paid plans for any production environment. *How do I detect Nigerian users specifically?* Check the `country_code` field in the response for `NG` and the `currency.code` for `NGN`. *Does IPstack support IPv6?* Yes, both IPv4 and IPv6 lookups are supported. IPstack is a reliable, affordable choice for Nigerian developers and businesses needing IP-based location intelligence, currency detection, and basic security screening without building or maintaining their own geolocation infrastructure.

25. Jumio

Identity & KYC, Development Tools

Jumio is an enterprise-grade identity verification and fraud prevention platform used by banks, fintechs, insurers, and regulated businesses across more than 200 countries. Founded in 2010 and headquartered in Sunnyvale, California, Jumio pioneered the use of artificial intelligence and computer vision for automated ID document authentication and biometric face verification. The company processes hundreds of millions of identity verifications annually and serves clients including Coinbase, Monzo, United Airlines, and various top-tier banks. ## What the API Does Jumio's core product is its KYX Platform — an end-to-end identity orchestration layer that brings together document verification, biometric authentication, AML screening, and fraud signals into a single configurable workflow. Unlike simpler KYC APIs, the KYX Platform allows compliance teams to design multi-step verification journeys with conditional logic, retry flows, and escalation paths — all without writing additional backend code. At the document layer, Jumio supports over 1,500 ID document types globally, including Nigerian international passports, National Identity Management Commission (NIMC) NIN slips, driver's licenses, and voter cards. The platform uses AI-powered OCR to extract machine-readable data from documents, multi-factor authenticity checks to detect forgeries and tampering, and document liveness detection to reject printed or screen-captured documents. The biometric layer performs face matching between the selfie captured during onboarding and the photo on the submitted document. Active liveness detection (requiring the user to perform real-time gestures) prevents spoofing via static photos, videos, and increasingly sophisticated deepfake attacks. ## How Developers Use It Jumio is integrated via REST API or through pre-built SDKs for Web, iOS, and Android. Because Jumio is enterprise-only, the typical integration path is: (1) sign a contract and receive API credentials, (2) initialize a verification transaction on your server, (3) embed the Jumio Web SDK or Mobile SDK to collect the user's document and selfie in a guided capture experience, and (4) receive verification results via webhook when processing completes. Key API endpoints include `POST /initiate` to create a new verification session and obtain an SDK token, `GET /verifications/{transactionReference}` to retrieve detailed results including extracted data fields, authenticity scores, and individual check outcomes, and event webhooks that fire on verification completion, expiry, or manual review escalation. ## Pricing & Fees Jumio operates exclusively on custom enterprise pricing negotiated through their sales team. There are no publicly listed per-check rates. Pricing varies based on verification volume, geographic markets, product modules selected (e.g., document-only vs. document + AML), and contract length. Jumio does not offer a self-serve free tier. A sandbox environment with test credentials is provided during the sales/onboarding process for integration development and QA testing. ## Authentication Jumio uses OAuth 2.0 with the Client Credentials grant type. Developers exchange their API Key and API Secret for a short-lived bearer token via the `/oauth2/token` endpoint. This bearer token is then included as an `Authorization: Bearer {token}` header on all subsequent API requests. Tokens have a configurable expiry (default typically 30 minutes) and must be refreshed. Webhook payloads from Jumio are signed, and the signature should be verified before processing the payload. ## Rate Limits Jumio does not publish rate limit specifications. As an enterprise platform, throughput limits are negotiated per contract and scaled to the client's expected verification volume. Jumio's infrastructure is designed to handle burst verification loads (e.g., product launches, marketing campaigns) without throttling, subject to contractual terms. ## Compliance & Regulations Jumio holds ISO 27001 certification (information security), SOC 2 Type II attestation, PCI DSS compliance, and GDPR compliance. The platform supports FATF recommendations for identity verification, AMLD5/6 requirements in Europe, FinCEN guidelines in the US, and CBN KYC requirements for Nigerian financial institutions. Jumio's AML module screens against OFAC, EU, UN, UK Treasury, and other major watchlists for PEPs and sanctioned individuals. ## Challenges & Gotchas for Nigerian Developers 1. **Enterprise-only onboarding**: There is no self-serve signup. Nigerian startups must go through a sales process, which can take weeks. This makes Jumio unsuitable for developers who need to get started quickly. 2. **USD-denominated pricing**: Jumio bills in USD, and at enterprise volumes, costs can be substantial. Budget carefully based on your verification volume estimates. 3. **No native BVN integration**: Jumio does not directly query the NIBSS BVN database — for BVN verification, you need a separate Nigerian-specific API. 4. **Data residency**: Verify data residency options with Jumio during contract negotiation, particularly for NDPR compliance regarding Nigerian user biometric data. 5. **SDK hosting requirements**: The Jumio Web SDK must be served over HTTPS. Ensure your hosting environment is SSL-configured before testing. ## Company Background Jumio was founded in 2010 by Daniel Mattes and is backed by investors including Centana Growth Partners and Millennium Technology Value Partners. The company processes over 500 million verifications annually and has won multiple industry awards for fraud prevention technology. In recent years, Jumio has expanded its AI capabilities significantly, adding deepfake detection and synthetic identity fraud prevention to its core product. ## Frequently Asked Questions **Q: Can a Nigerian startup use Jumio without a US entity?** A: Yes. Jumio onboards international businesses including Nigerian companies. You will need to complete their enterprise onboarding process with valid business registration documents. **Q: How long does enterprise onboarding take?** A: Typically 2–4 weeks from initial contact to receiving live API credentials, depending on contract negotiation and compliance documentation. **Q: Does Jumio support NGN billing?** A: No. Jumio invoices in USD only. **Q: What happens if a user fails verification?** A: Jumio returns a detailed decision including the specific check that failed (e.g., document authenticity, liveness, face match). You can configure retry flows within the KYX Platform or redirect users to a manual review queue.

26. Trulioo

Identity & KYC, Development Tools

Trulioo is a global identity and business verification platform that provides access to over 13,000 data sources across 195+ countries to verify identities, authenticate documents, and screen for AML risks. Founded in 2011 in Vancouver, Canada, Trulioo has built one of the world's largest identity data networks, capable of verifying approximately 5 billion consumers and 330 million business entities globally. The platform serves regulated financial institutions, fintech companies, crypto exchanges, and digital marketplaces that operate across multiple jurisdictions. ## What the API Does Trulioo's platform combines multiple verification methods accessible through a single API: database identity checks (cross-referencing submitted data against authoritative third-party data sources), document verification (AI-powered analysis of government-issued IDs), biometric face matching, and business entity verification (KYB). The platform's defining strength is its breadth of data source integrations — rather than relying solely on document OCR, Trulioo can validate identity data against credit bureaus, government databases, utility records, telecoms data, and other authoritative sources in each country. For Nigeria specifically, Trulioo covers the country within its 195+ country network, enabling identity verification for Nigerian users as part of multi-country verification flows. ## How Developers Use It The Trulioo Platform API is accessed via REST endpoints. Developers can directly call individual verification services (e.g., document verification, database check) or combine multiple services in a single API call using Trulioo's Flow Builder. The Flow Builder provides a no-code interface where teams can design multi-step verification journeys, configure conditional logic, and publish flows as authenticated API endpoints — meaning each configured flow gets its own API endpoint that can be called from your backend. Webhooks deliver real-time verification event updates to your configured callback URL, enabling asynchronous processing of verification results without polling. Key events include verification completion, status changes, and manual review escalations. ## Pricing & Fees Trulioo operates on a B2B SaaS subscription model. Entry-level pricing begins at approximately $99/month, with transaction-based fees applied per verification check. Enterprise plans with custom pricing, volume discounts, and SLA guarantees are available. Trulioo does not publish a public rate card — pricing varies significantly based on the countries targeted, data sources accessed, and verification types used. Contact Trulioo sales for a quote tailored to your use case. ## Authentication Trulioo uses API key authentication. Flows configured in the Flow Builder can be published as authenticated, restricting access to the Trulioo Platform API using your API key as a Bearer token in the Authorization header. Webhook delivery can be configured with signature verification to confirm payload authenticity. ## Rate Limits Rate limits are not publicly documented. Enterprise plans include throughput commitments negotiated based on expected verification volume. Contact Trulioo for specific limits. ## Compliance & Regulations Trulioo is ISO 27001 certified, SOC 2 Type II attested, and GDPR compliant. The platform supports FATF global KYC recommendations, FinCEN guidelines, FINTRAC (Canada), FCA (UK), and applicable AML/CFT regulations across the jurisdictions it operates in. For Nigerian deployments, Trulioo's identity verification capabilities align with CBN Customer Due Diligence regulations and EFCC AML obligations. AML screening covers OFAC, UN, EU, UK Treasury, and global PEP watchlists. ## Challenges & Gotchas for Nigerian Developers 1. **Enterprise-only model**: No self-serve signup is available. Budget 2–4 weeks for enterprise onboarding and contract negotiation. 2. **Pricing complexity**: Different data sources in different countries have different per-check costs. Verify Nigeria-specific pricing during the sales process. 3. **USD billing**: Trulioo invoices in USD. Nigerian developers need a USD-capable payment method. 4. **Data source depth by country**: Trulioo's database check depth varies by country depending on available data source partnerships. Confirm the depth of Nigerian data source coverage for your specific use case. 5. **No native BVN query**: Trulioo does not directly integrate with NIBSS BVN data — supplement with a dedicated Nigerian BVN API if BVN verification is required. ## Company Background Trulioo was founded in 2011 by Stephen Ufford and Tanis Jorge. The company has raised over $475 million in total funding, including a $394 million Series D in 2021, making it one of the most well-funded identity verification companies globally. In 2022, Steve Craig became CEO. Trulioo is headquartered in Vancouver, Canada with offices in Dublin, Austin, and London. The company's GlobalGateway product is particularly known for its breadth of global data source access. ## Frequently Asked Questions **Q: Is Nigeria covered by Trulioo?** A: Yes. Nigeria is included in Trulioo's 195+ country coverage. Identity data can be verified through document checks and database lookups using available Nigerian data sources. **Q: Can a Nigerian startup use Trulioo without an enterprise contract?** A: No. Trulioo requires an enterprise agreement before granting API access. There is no self-serve or starter plan. **Q: How does Trulioo differ from Onfido or Sumsub?** A: Trulioo's differentiator is its depth of database identity verification across 13,000+ data sources — going beyond document OCR to cross-reference against credit bureaus, telcos, and government databases. This is especially valuable for users without high-quality document images. **Q: Does Trulioo support business verification (KYB)?** A: Yes. Trulioo can verify 330 million+ business entities globally, making it well-suited for B2B platforms that need to verify corporate customers.

27. Prembly (IdentityPass)

Identity & KYC

Prembly (formerly known as IdentityPass) is a Nigerian-founded identity verification and compliance infrastructure company serving businesses across Africa. Originally launched as IdentityPass — with the Identitypass brand still widely recognized — the company now operates under the Prembly name while maintaining the "Identitypass by Prembly" product identity. All three domains (identitypass.com, myidentitypass.com, prembly.com) resolve to the same company, with prembly.com being the current primary brand. Prembly provides a comprehensive API that allows businesses to verify individual and business identities using government-backed data sources across seven African countries: Nigeria, Kenya, Ghana, Uganda, South Africa, Sierra Leone, and Rwanda. In Nigeria, Prembly is NIMC-licensed, meaning it has direct, authorized access to NIN data from Nigeria's National Identity Management Commission — one of the most critical authorizations for any Nigerian KYC provider. **Core Verification Services** For Nigeria, Prembly's API covers: 1. **BVN Verification (Basic and Advanced)**: Verify a Bank Verification Number against the CBN/NIBSS database. Basic returns name and DOB; Advanced returns full customer details including phone, enrollment bank, and photo. 2. **NIN Verification**: Verify a National Identification Number against NIMC's database, returning name, DOB, gender, and photo. Supports both standard NIN and Virtual NIN (vNIN) verification — the tokenized format required by NIMC's new data privacy policy. 3. **BVN + NIN + Phone Mashup**: A single API call that simultaneously verifies BVN, NIN, and phone number — dramatically simplifying KYC integration by reducing three separate calls into one. 4. **CAC Company Verification (KYB)**: Look up and verify a Nigerian company's CAC registration details — company name, registration number, directors, and status — for Know Your Business (KYB) compliance. 5. **FRSC Driver's License Verification**: Verify a Nigerian driver's license against the Federal Road Safety Commission database. 6. **International Passport Verification**: Verify a Nigerian international passport number and details. 7. **Vehicle Plate Number Verification**: Match a vehicle plate number to the registered owner's details. 8. **Stamp Duty Verification**: Verify stamp duty documents. 9. **Bank Account Name Verification**: Confirm that a bank account name matches the account number before initiating transfers — fraud prevention for disbursements. 10. **Address Verification**: Physical and digital address verification for Nigerian addresses. 11. **Facial Recognition & Liveness Detection**: Biometric verification matching a live selfie to a government ID photo, with liveness checks to prevent spoofing. **RadarR — AML & Compliance Screening** Prembly's RadarR product provides Anti-Money Laundering (AML) screening, sanctions list checking, and Politically Exposed Person (PEP) screening. This is a separate product within the Prembly ecosystem, designed for businesses with regulatory obligations to screen customers against global watchlists. **Pan-African Coverage** Beyond Nigeria, Prembly supports identity verification in Kenya, Ghana, Uganda, South Africa, Sierra Leone, and Rwanda — using country-specific national ID documents and verification databases. This makes Prembly a strong choice for platforms expanding across Africa without needing country-specific verification vendors. **Authentication & Developer Experience** API access is managed through dashboard.prembly.com. Keys are passed via the x-api-key header or as Bearer tokens. Sandbox credentials are available immediately upon account registration — no documents or credit card required for testing. Production access requires business verification (CAC + director ID). SDKs are available for Python (github.com/prembly/prembly_python) and JavaScript (Vanilla), with additional language support maintained in the Prembly GitHub organization. **Pricing** Prembly uses per-verification pricing. Rates vary by verification type (simpler lookups like NIN cost less than biometric or address verifications). No flat-rate pricing is publicly listed — sign up at dashboard.prembly.com for a pricing quote or enterprise plan. Volume discounts are available. **Compliance** Prembly is NIMC-licensed for NIN data access and complies with CBN KYC tiers 1–3, NDPR (Nigeria Data Protection Regulation), and relevant data privacy regulations in each supported country. All data handling adheres to NIMC's vNIN tokenization requirements. **Challenges** Pricing is not transparent without registration, which slows initial evaluation. Physical address verification involving field agents takes longer than instant digital checks. For international markets beyond Prembly's seven supported countries, a global KYC provider (Smile Identity, Sumsub, Jumio) would be needed. **Frequently Asked Questions** Q: Is Prembly the same as IdentityPass? A: Yes. Prembly is the parent company, and "Identitypass by Prembly" is the product name. All three domains (identitypass.com, myidentitypass.com, prembly.com) are the same company. Q: Can I test without a registered business? A: Yes. Sandbox access at dashboard.prembly.com requires only an email registration — no documents needed. Q: Does Prembly support AML screening? A: Yes, via the RadarR product — a separate AML and sanctions screening module within the Prembly ecosystem. Q: What is the BVN+NIN+Phone mashup endpoint? A: A single API call that verifies all three data points simultaneously, simplifying KYC for Nigerian customer onboarding. Q: Which African countries does Prembly support? A: Nigeria, Kenya, Ghana, Uganda, South Africa, Sierra Leone, and Rwanda.

28. VirusTotal API

Development Tools, Security, Communications

VirusTotal API is a security analysis platform that scans files, URLs, domains, and IP addresses against 70+ antivirus engines and threat intelligence databases in a single API call. Built by Google, VirusTotal aggregates results from industry-leading security vendors including Kaspersky, Bitdefender, McAfee, Sophos, and others to provide a comprehensive multi-engine threat verdict. Security engineers, developers, and SOC teams use the VirusTotal API to build automated malware scanning pipelines, enrich security alerts with threat context, check domain and IP reputation, and investigate incidents without subscribing to dozens of separate security products.

29. Twilio Verify

Security, Communications

Twilio Verify is a fully managed, multi-channel user authentication and phone verification API that enables developers to add one-time passcode (OTP) verification, two-factor authentication (2FA), and phone number validation to any application without building or maintaining their own verification infrastructure. Built on Twilio's global carrier network, Verify supports OTP delivery via SMS, WhatsApp, voice call, email, and push notifications — as well as frictionless verification methods like Silent Network Authentication and Passkeys. A standout feature for Nigerian developers is Fraud Guard, which provides 100% protection against SMS pumping fraud — a widespread attack where bad actors flood phone numbers with OTP requests to generate carrier revenue. Fraud Guard detects and blocks this automatically, preventing runaway SMS costs that can bankrupt Nigerian startups running OTP-based auth. ## What the API Does Twilio Verify handles the complete verification lifecycle: sending the OTP code via your chosen channel, managing code expiry and retry logic, validating the code entered by the user, and returning a verification result. The API abstracts all carrier relationships, message routing, and code management — developers only make two API calls: one to send the code and one to check it. Supported verification channels: - **SMS**: OTP delivered as a text message to any phone number including Nigerian (+234) numbers. - **WhatsApp**: OTP via WhatsApp message — useful for Nigerian users who prefer WhatsApp over standard SMS. - **Voice**: OTP read aloud via automated phone call — fallback option for users who cannot receive SMS. - **Email**: OTP sent via email for non-phone-based verification flows. - **Push**: In-app push notification verification via the Verify Push SDK for mobile apps. - **Silent Network Authentication (SNA)**: Verifies phone number ownership in the background without sending a code or requiring any user action — the carrier directly confirms the phone-SIM match silently. - **Passkeys**: WebAuthn-based biometric authentication as a password-free login option. Beyond OTP delivery, Twilio Verify includes phone number intelligence that validates the number format, identifies the carrier, detects line type (mobile vs. landline vs. VoIP), and flags risky or suspicious numbers before sending a verification — helping prevent waste on invalid or fraudulent numbers. ## How Developers Use It Integration requires two main API calls: 1. **Create Verification**: `POST /v2/Services/{ServiceSid}/Verifications` — specify the phone number, channel (sms/whatsapp/voice/email), and locale. Twilio sends the OTP. 2. **Check Verification**: `POST /v2/Services/{ServiceSid}/VerificationChecks` — submit the code entered by the user. Twilio returns `approved` or `pending`. A Verify Service is created once in the Twilio Console (or via API) and stores your configuration — OTP length, expiry time, rate limits, Fraud Guard settings, and code template. The Service SID is then used in all verification API calls. ## Pricing & Fees Twilio Verify uses pay-as-you-go pricing charged only for successful verifications: - Free trial available without credit card — includes test credits for development. - SMS OTP: approximately $0.05 per successful verification plus the underlying SMS carrier fee for the destination country. - WhatsApp OTP: WhatsApp business messaging rates apply. - Voice OTP: Voice call rates apply per destination country. - Email OTP: Email delivery is typically included in Twilio SendGrid pricing. - Exact per-channel rates for Nigeria are available at twilio.com/en-us/verify/pricing. ## Authentication Twilio uses HTTP Basic Authentication with your Account SID (username) and Auth Token (password). These credentials are found in the Twilio Console. For production, Twilio recommends using API Keys instead of the master Auth Token, scoping key access to specific services. ## Rate Limits Twilio Verify includes built-in configurable rate limiting per Verify Service — you can set maximum verification attempts per phone number per time window. This prevents abuse and limits fraud exposure. Additional rate limits at the Twilio account level apply to all API requests. ## Compliance & Regulations Twilio is ISO 27001 certified, SOC 2 Type II attested, and GDPR compliant. For Nigerian deployments, Twilio's global carrier network delivers SMS through local Nigerian carriers (MTN, Airtel, Glo, 9mobile). Twilio complies with NCC (Nigerian Communications Commission) regulations for business SMS delivery, including sender ID registration requirements for commercial messaging. Twilio Verify's Fraud Guard helps Nigerian businesses comply with cost management obligations and prevents fraudulent use of their messaging channels. ## Challenges & Gotchas for Nigerian Developers 1. **Sender ID registration**: Nigerian carriers require businesses to register alphanumeric sender IDs for SMS delivery. Twilio facilitates this but it requires supporting business documentation and approval time. 2. **SMS delivery rates**: Nigerian SMS delivery can be slower than in Western markets due to carrier routing. Use WhatsApp as a fallback channel for time-sensitive OTPs. 3. **SMS pumping fraud**: Always enable Fraud Guard in production. SMS pumping attacks targeting Nigerian apps can generate thousands of dollars in fraudulent charges before detection. 4. **Billing in USD**: Twilio charges in USD. Nigerian developers need a USD-capable payment method (virtual USD card or wire). 5. **Trial limitations**: The Twilio free trial can only send to verified phone numbers. Upgrade to a paid account for unrestricted testing with real Nigerian numbers. ## Company Background Twilio was founded in 2008 in San Francisco by Jeff Lawson, Evan Cooke, and John Wolthuis. The company is publicly listed (NYSE: TWLO) and serves over 300,000 businesses globally. Twilio Verify powers authentication for some of the world's largest consumer apps and fintech platforms. ## Frequently Asked Questions **Q: Can Twilio Verify send OTPs to Nigerian (+234) numbers?** A: Yes. Twilio's global carrier network supports Nigerian phone numbers on all major carriers (MTN, Airtel, Glo, 9mobile). **Q: What is SMS pumping fraud and how does Verify protect against it?** A: SMS pumping is an attack where fraudsters trigger mass OTP requests to generate carrier revenue at your expense. Twilio Verify's Fraud Guard automatically blocks these attacks, providing 100% protection according to Twilio. **Q: Is there a free tier?** A: Twilio provides a free trial account with test credits. No credit card required to start. Production use requires a paid account. **Q: Can I use WhatsApp OTP instead of SMS?** A: Yes. WhatsApp OTP is supported and preferred by many Nigerian users who use WhatsApp as their primary communication channel.

30. VerifyMe Nigeria

Identity & KYC

VerifyMe Nigeria is an identity verification and trust infrastructure company tackling "Africa's credibility gap" — the challenge of verifying identities, addresses, employment histories, and background information in markets where traditional verification methods fail. Founded in Nigeria and licensed by the National Identity Management Commission (NIMC), VerifyMe provides API-accessible verification services used by over 10,000 businesses across fintech, lending, HR, insurance, e-commerce, and logistics in Nigeria and across Africa. The company has verified over 500 million identities and 400,000 addresses, making it one of the most battle-tested identity verification platforms in Nigeria. Notable clients include Moniepoint (one of Nigeria's largest fintech companies, using VerifyMe for employment verification) and ALT Finance (using address verification for loan underwriting). **Core Verification Services** VerifyMe provides seven categories of verification, all accessible via REST API: 1. **NIN (National Identity Number) Verification** — Verifies a customer's NIN against NIMC's national identity database. NIMC-licensed access ensures government-authorized data retrieval. Supports standard NIN and Virtual NIN (vNIN) verification — the NIN alias format required by the NIMC for data privacy protection. 2. **BVN (Bank Verification Number) Verification** — Verifies a customer's BVN against the CBN/NIBSS database, confirming name, date of birth, and phone number match. Essential for CBN-mandated KYC for Nigerian financial services. 3. **FRSC Driver's License Verification** — Verifies Nigerian driver's license details against the Federal Road Safety Commission database — name, DOB, license number, and status. 4. **Address Verification** — Physical address verification using a network of field agents (GOVA) combined with 4D geo-location technology. Meets CBN Tier III KYC requirements for address confirmation. Verifies both residential and business addresses. 5. **Employment History Verification** — Confirms a person's current and past employment details — employer name, job title, employment period, and reason for leaving — useful for lending credit assessment and HR screening. 6. **Property Verification** — Verifies property ownership and occupancy details for loan collateral assessment, rental agreements, and real estate due diligence. 7. **Guarantor Verification** — Verifies the identity and contact details of loan guarantors, with optional physical visit confirmation. **AI-Powered Facial Recognition & Liveness Detection** VerifyMe integrates facial recognition with liveness detection for contactless customer onboarding. Customers can complete identity verification using selfie + government ID, with the AI system matching the face to the government ID photo and confirming the user is physically present (not a photo or video replay). This is particularly valuable for digital-first fintechs that cannot collect physical documents. **Core Products** **QoreID** — A KYC and compliance integration product that provides a centralized verification endpoint with configurable workflows. Developers can build custom KYC journeys combining multiple verification types (e.g., NIN + BVN + liveness + address) in a single flow. QoreID also includes VeriLinks — shareable verification links that customers complete without requiring the business to write any code. This makes KYC accessible to non-technical teams. **Pluto** — A background check platform for employment and pre-hire screening. Pluto enables HR departments and recruitment agencies to request remote candidate verification covering identity, employment history, educational credentials, address, and criminal history — all without scheduling in-person appointments. Reports include risk scoring and structured output for HR decision-making. **GOVA** — A network of VerifyMe verification agents deployed across Nigeria who conduct physical address and guarantor verifications. The agent network gives VerifyMe reach into informal Nigerian addresses and rural areas that digital-only verification cannot cover. **Authentication** VerifyMe uses API key authentication. Keys are issued after account creation and approval at app.verifyme.ng. API keys are passed as Bearer tokens in the Authorization header of all API requests. Test credentials are separate from production credentials. **Compliance** All VerifyMe verifications are compliant with: - **NIMC regulations**: Licensed data processor for NIN verification - **CBN Tier 1, 2, 3 KYC requirements**: Identity, BVN, and address verifications meet all CBN tier upgrade requirements - **AML (Anti-Money Laundering)** guidelines for regulated financial institutions - **NDPR (Nigeria Data Protection Regulation)**: Data handling complies with Nigeria's data privacy law **Pricing** VerifyMe uses per-verification pricing. No flat-rate pricing is publicly listed — rates vary by verification type (NIN is typically cheaper than address or employment verification). Contact sales@verifyme.ng or sign up at app.verifyme.ng for pricing. Enterprise volume pricing is available. **Challenges for Nigerian Developers** Pricing is not transparent without a sales engagement, which can slow initial evaluation. NIN verification requires NIMC licensing/certification, which VerifyMe holds — so developers do not need to obtain their own NIMC license. Address and employment verifications involving physical agent visits take longer (hours to days) than instant digital verifications. **Frequently Asked Questions** Q: Is VerifyMe licensed by NIMC? A: Yes. VerifyMe is a NIMC-licensed data processor, authorized to access Nigeria's NIN database. Q: Does VerifyMe support Virtual NIN (vNIN)? A: Yes. Both standard NIN and Virtual NIN verification are supported. Q: How do I get started with the API? A: Create an account at app.verifyme.ng to receive test credentials and access documentation at docs.verifyme.ng. Q: Does VerifyMe offer a no-code option? A: Yes. QoreID's VeriLinks allow KYC collection without any coding — share a link with the customer. Q: How long does address verification take? A: Physical address verification using the GOVA agent network typically takes hours to 1–2 business days depending on location and agent availability.

31. Auth0

Security, Development Tools

Auth0 (now part of Okta) is a cloud-based identity and authentication platform that provides a complete, customizable authentication and authorization system as a service. It handles the full spectrum of identity management concerns — user registration, login, password reset, social login, multi-factor authentication, single sign-on, and fine-grained access control — so developers do not need to build these complex and security-critical components from scratch. The Universal Login feature provides a hosted, customizable login page that handles all authentication flows. Developers redirect users to Auth0's hosted login page for sign-in, and Auth0 handles the entire authentication interaction before returning a verified user to the application. The login page is fully customizable with the application's branding, and because it is hosted by Auth0, security updates and compliance requirements are managed by Auth0's security team without developer intervention. Social login support covers the major social identity providers — Google, Facebook, Twitter/X, GitHub, LinkedIn, Apple, and many others — allowing users to authenticate using their existing accounts. For Nigerian applications where a significant portion of users already have Google or Facebook accounts and prefer not to create yet another password, social login dramatically reduces registration friction and improves conversion rates. Multi-factor authentication (MFA) options include SMS OTP, TOTP authenticator apps (Google Authenticator, Authy), email OTP, and biometric authentication. For Nigerian fintech applications regulated by the Central Bank of Nigeria (CBN), implementing MFA is a regulatory requirement. Auth0's MFA system meets these requirements without custom implementation. The Management API provides programmatic access to all user and configuration data: creating and updating user profiles, assigning roles and permissions, managing application settings, reviewing login events, blocking users, and exporting user data. This enables Nigerian platforms to integrate user management operations into their own admin dashboards and automation workflows. Role-Based Access Control (RBAC) allows fine-grained permission management — defining what different user types can do in the application and enforcing those permissions at the API level through Auth0-issued access tokens. For Nigerian startups, the free tier supporting 7,500 monthly active users is genuinely useful for MVPs and early-stage products. It covers most of the authentication features needed without any cost, allowing teams to defer the identity infrastructure investment until the product achieves meaningful traction. Auth0's Actions and Rules system allows developers to inject custom JavaScript logic into the authentication flow — running code at specific points during login, registration, token exchange, and other identity events. Nigerian fintech applications can use Actions to enforce custom business rules: blocking login from high-risk IP addresses, adding Nigeria-specific compliance checks at registration, or enriching user tokens with account-level data from the application database. The anomaly detection features automatically identify and block suspicious authentication activity — brute force attacks, credential stuffing attempts, and unusual login patterns. These protections operate transparently without requiring Nigerian developers to implement their own security monitoring for authentication endpoints. Log streaming exports real-time Auth0 authentication events to external monitoring systems, SIEM tools, or custom analytics platforms. Nigerian compliance teams that need audit logs of all authentication events for regulatory reporting can stream these logs directly to their preferred log management infrastructure. Auth0's extensive library of pre-built integrations covers all major frameworks — React, Angular, Vue, Next.js, Node.js, Python, Java, .NET, iOS, Android, Flutter — with official SDKs that implement OAuth 2.0 and OIDC correctly. Nigerian developers can integrate Auth0 into any stack without needing deep knowledge of the OAuth specification.

32. MetaMap

Identity & KYC

MetaMap (formerly known as Mati) is a global identity verification and KYC (Know Your Customer) platform that enables businesses to verify the identities of their users through document scanning, liveness detection, biometric face matching, and direct database verification against government records. For Nigerian businesses, MetaMap provides native verification of Nigerian government-issued identity documents and databases — NIN (National Identification Number), BVN (Bank Verification Number), CAC (Corporate Affairs Commission) registrations, international passports, driver's licenses, and voter cards — making it one of the most comprehensive KYC solutions available for the Nigerian market. **What MetaMap Does** MetaMap provides a complete identity verification pipeline with multiple layers: **1. Document OCR and Authentication** Users submit a photo or scan of a government-issued ID. MetaMap's OCR engine automatically extracts all text fields (name, date of birth, ID number, expiry date), classifies the document type, and performs authenticity checks (detecting tampering, font anomalies, security feature violations). Supported Nigerian documents include: - NIN card (National Identity Card) - International passport (Nigerian e-passport) - Driver's license (FRSC-issued) - Voter's card (INEC-issued) - BVN-linked bank account identity **2. Liveness Detection** A selfie-based liveness challenge confirms the user is physically present and not using a photo or video replay attack. MetaMap's liveness detection uses active challenges (blinking, turning head, smiling) combined with passive AI analysis to detect spoofing attempts, meeting the requirements of ISO 30107-3 Presentation Attack Detection standards. **3. Biometric Face Match** After liveness confirmation, MetaMap compares the selfie against the photo on the submitted ID document. The biometric match score determines whether the person holding the ID is the same person pictured on it — the core protection against using stolen documents. **4. Database Verification (Nigeria-Specific)** Beyond document verification, MetaMap queries Nigerian government databases directly: - **NIN verification**: Validates the NIN number against NIMC (National Identity Management Commission) records - **BVN verification**: Validates the Bank Verification Number against CBN/NIBSS records - **CAC verification**: Validates Nigerian business registration numbers against CAC records for KYB (Know Your Business) checks - **Driver's license**: Validates against FRSC (Federal Road Safety Corps) database This database verification layer is critical — it confirms the document is not only authentic but also belongs to the specific individual presenting it. **5. AML Watchlist Screening** MetaMap screens names against global sanctions lists (OFAC, EU, UN), PEP (Politically Exposed Persons) databases, and adverse media sources — an essential layer for Nigerian financial institutions complying with FATF recommendations and CBN AML/CFT regulations. **6. KYB (Know Your Business)** For B2B onboarding, MetaMap supports business verification: confirming Nigerian company registration status through CAC, verifying beneficial ownership, and screening company names and directors against sanctions databases. **How Developers Integrate MetaMap** MetaMap provides multiple integration options: - **Web SDK**: A JavaScript SDK that renders the complete KYC flow in-browser — camera capture, liveness challenge, and document upload in a white-labeled UI - **Mobile SDK (iOS and Android)**: Native SDKs for embedding the KYC flow directly into mobile apps, leveraging the device camera and biometric capabilities - **REST API**: For server-side orchestration — submit pre-captured images via API for processing without using the UI SDKs - **No-Code Flow Links**: Generate a unique verification link to share with users who complete KYC via a web browser without any custom integration Authentication uses OAuth 2.0 client credentials: exchange your API client ID and secret for an access token, then use the token for all API calls. **Webhooks** MetaMap sends webhook notifications when verification status changes — approved, rejected, or pending manual review. This enables real-time onboarding automation without polling. **Pricing** MetaMap uses custom, volume-based pricing. There is no published self-serve pricing — businesses contact MetaMap sales to negotiate pricing based on: - Verification volume (number of checks per month) - Document types required (NIN + BVN database checks cost more than document-only checks) - Geographic markets - Contract length A free sandbox environment is available for development and testing. **Nigerian Regulatory Context** Nigerian fintech regulation requires KYC compliance at multiple tiers: - **CBN KYC Regulations**: Tiered KYC (Tier 1/2/3) for mobile money and payment service banks - **NDPR Compliance**: MetaMap processes biometric data — a special category under Nigeria's NDPR requiring explicit consent and enhanced data protection measures - **FATF Recommendations**: AML screening is required for financial institutions and virtual asset service providers MetaMap's Nigerian document verification and AML screening capabilities directly address these regulatory requirements, enabling Nigerian fintechs to demonstrate compliance during CBN examinations. **Company Background** MetaMap was founded in 2019 as Mati Identity and rebranded to MetaMap around 2021. The company is headquartered in San Francisco with strong emerging market focus, particularly in Latin America and Africa. They have raised significant venture funding and serve hundreds of businesses globally. MetaMap's Nigerian operations include direct integrations with NIN, BVN, and CAC databases — demonstrating a genuine commitment to the Nigerian market rather than a generic global solution applied superficially. MetaMap is a leading choice for Nigerian businesses that need comprehensive, end-to-end KYC with native Nigerian database verification, biometric liveness detection, and AML screening in a single integrated platform.

33. Supabase Storage

Cloud Storage, Development Tools, Security

Supabase Storage is the file storage service embedded within the Supabase open-source backend platform, providing object storage with database-integrated access control and built-in image transformation capabilities. Unlike standalone cloud storage services, Supabase Storage is deeply connected to the Supabase PostgreSQL database and authentication system, enabling access control policies that reference the same user identities and database data as the rest of the application without separate permission management infrastructure. The storage data model in Supabase uses buckets as top-level containers and objects as individual stored files within those buckets. Buckets can be configured as public (all objects are publicly accessible via URL) or private (access requires authentication and policy authorization). This per-bucket visibility setting covers the default access model, while Row Level Security (RLS) policies on the storage schema tables provide fine-grained per-object and per-path access control for private buckets. Row Level Security integration is the defining technical characteristic of Supabase Storage's access control model. Rather than a separate permission system, Supabase Storage access is controlled by PostgreSQL RLS policies on the storage.objects table. This means access rules can reference any data in the PostgreSQL database — user roles, team memberships, subscription plans, content ownership — using the same SQL-based policy syntax used for all other RLS policies in a Supabase project. A single policy expression can restrict file access to the authenticated user who owns the file, members of a specific team, or users with specific subscription-granted permissions. The Supabase Storage API exposes standard REST endpoints for file operations: upload (single and multipart for large files), download, list objects within a bucket or path prefix, copy, move, and delete. Presigned URLs with configurable expiration times are supported for both uploads and downloads, enabling applications to generate time-limited direct-access URLs for private files. The JavaScript client library, available as part of the @supabase/supabase-js package, wraps these REST operations into a convenient SDK that handles authentication header injection automatically using the current session from Supabase Auth. Image transformation is built natively into Supabase Storage through the Transform API. Images stored in Supabase Storage can be resized, reformatted, and quality-adjusted by appending transform parameters to the image URL. A product image stored at its original resolution can be requested at a specified width and height, automatically cropped or scaled by Supabase Storage's transform service, without pre-generating multiple image variants at upload time. Format conversion to WebP for modern browsers is supported, reducing image payload size for Nigerian users on mobile data connections. Supabase Storage is backed by S3-compatible object storage, either Supabase's managed cloud infrastructure or a self-hosted MinIO or compatible storage backend when self-hosting Supabase. This architecture means that stored objects are durable and the Supabase Storage API layer handles authentication, policy evaluation, and transformation while the underlying storage provides the object persistence layer. For Nigerian developers building applications with Supabase as their backend, Storage is the natural file storage choice because it shares authentication state with Supabase Auth. When a user is signed in through Supabase Auth, the same JWT token that authorizes database queries also authorizes Storage operations — there is no separate file storage authentication flow to implement. This unified auth model significantly reduces the complexity of building file upload features into Supabase-backed applications. Common use cases for Nigerian Supabase projects include profile photo and avatar storage for social apps, document upload for KYC and verification workflows in fintech applications, media upload for content-sharing platforms, and attachment storage for productivity and communication tools. The combination of integrated auth, database-connected RLS policies, and image transformation makes Supabase Storage a complete file management solution that eliminates the need for integrating separate storage, CDN, and image processing services for most application needs.

34. Smile Identity

Identity & KYC, Development Tools

Smile Identity (also known as SmileID) is Africa's leading identity verification company, providing KYC, biometric authentication, document verification, and AML compliance infrastructure to businesses across 52 African countries. Founded with a specific focus on the African market, Smile Identity has built its technology to address a challenge that global identity verification providers consistently fail at: accurately verifying African identities using AI and biometrics trained on African faces. The company holds ISO 27001 (information security), SOC 2 Type 2 (security and availability), and ISO/IEC 30107-3:2023 Level 2 (biometric presentation attack detection) certifications — achieving a 0% biometric facial attack penetration rating, the highest level of liveness detection certification achievable. **Nigeria Coverage — 9 Government Databases, 132M+ Records** In Nigeria, Smile Identity verifies against nine government identity databases, providing the widest official data coverage of any single KYC provider in the market: 1. NIN (National Identification Number) — NIMC database 2. NIN V2 (enhanced NIN with additional fields) 3. V_NIN (Virtual NIN — tokenized format per NIMC policy) 4. BVN (Bank Verification Number) — NIBSS database 5. Bank Account verification 6. Phone Number verification 7. Voter ID (INEC — Independent National Electoral Commission) 8. FRSC Driver's License 9. International Passport This 9-database coverage gives Nigerian businesses access to 132 million+ identity records, ensuring that virtually any Nigerian customer with any government-issued ID can be verified through a single Smile Identity integration. **SmartSelfie — African-Face-Optimized Biometric Authentication** SmartSelfie is Smile Identity's proprietary biometric authentication system, built with six AI anti-spoof models specifically trained on African facial features. This is a critical differentiator: most global facial recognition systems are trained on predominantly Western facial data, resulting in significantly higher error rates (false rejections and false acceptances) for African users. SmartSelfie achieves 99.8% accuracy on African faces, making it the most reliable biometric tool for Nigerian and broader African customer onboarding. The system detects presentation attacks (photographs, videos, masks, deepfakes) at ISO/IEC 30107-3:2023 Level 2 — the highest certification level — with a documented 0% penetration rate in testing. **Document Verification & OCR** Smile Identity's document verification module uses OCR to extract data from physical and digital identity documents — passports, national IDs, driver's licenses — and cross-references the extracted data against government databases to confirm authenticity. This catches tampered, expired, or fabricated documents that database-only lookups would miss. **Business Verification (KYB)** For Know Your Business (KYB) compliance, Smile Identity verifies company registration details, directors, and ultimate beneficial ownership against business registry databases. This is used by B2B lenders, payment platforms, and corporate banking services. **AML Compliance** Smile Identity includes AML (Anti-Money Laundering) screening capabilities — checking customer identities against global sanctions lists, PEP databases, and adverse media — as part of the integrated compliance workflow. **52-Country African Coverage** Smile Identity supports identity verification across 52 African countries using country-specific national ID documents and government databases. This makes it the most geographically comprehensive African KYC provider, particularly valuable for platforms with pan-African ambitions. **Authentication & Integration** API access requires both an API Key and a Partner ID, issued after account registration at portal.usesmileid.com. Both credentials must be present in all API requests. SDKs are available for web, iOS, and Android — enabling both server-to-server integrations and embedded mobile verification flows. A free sandbox environment is available immediately upon registration. **Pricing** Per-verification pricing, tiered by volume. Specific rates vary by ID type and country. Enterprise volume pricing is available. Contact Smile Identity for current pricing schedules. **Why Choose Smile Identity Over Other Providers** The unique combination of 52-country African coverage, African-face-trained biometrics at ISO Level 2 certification, and 9 Nigerian government database access makes Smile Identity the strongest choice for African-market-focused KYC. Global providers like Jumio or Onfido offer broader international coverage but have weaker African-face accuracy and fewer Africa-specific database integrations. **Frequently Asked Questions** Q: What makes SmartSelfie different from standard facial recognition? A: SmartSelfie uses 6 AI models trained specifically on African faces, achieving 99.8% accuracy — far higher than Western-trained models. Q: How many Nigerian ID types can Smile Identity verify? A: Nine — NIN, NIN V2, vNIN, BVN, bank account, phone, Voter ID, FRSC Driver's License, and International Passport. Q: What certifications does Smile Identity hold? A: ISO 27001, SOC 2 Type 2, and ISO/IEC 30107-3:2023 Level 2 (0% biometric attack penetration). Q: Is there a sandbox for testing? A: Yes — register at portal.usesmileid.com to access sandbox credentials immediately. Q: Does Smile Identity cover countries outside Africa? A: Smile Identity is Africa-focused (52 countries). For non-African markets, use a global provider.

35. Youverify

Identity & KYC, Security

Youverify is a Nigerian-founded identity verification and compliance infrastructure company offering an end-to-end KYC, AML, and fraud prevention platform designed for African businesses operating under regulatory compliance requirements. Trusted by hundreds of businesses across Nigeria and 30+ African countries, Youverify's flagship product — the YouVerify Operating System (yvOS) — provides access to a global government-backed identity database of 300 million+ records through a single unified API. Youverify is particularly distinguished by its direct integrations with Nigerian government identity authorities: NIMC (NIN verification), NIBSS (BVN verification), and CAC (business registration) — meaning verifications return data directly from authoritative government sources, not from third-party aggregated copies. This direct-source approach significantly reduces false positives and data freshness issues. **yvOS — YouVerify Operating System** yvOS is Youverify's core product: a unified API endpoint that orchestrates the full KYC/AML workflow in a single session. Developers configure a verification flow (e.g., NIN + BVN + facial recognition + AML screening) and yvOS handles all data source routing, response aggregation, risk scoring, and audit trail generation automatically. This eliminates the need to manage multiple separate API integrations and build custom orchestration logic. **Nigerian ID Verifications Supported** - **BVN (Bank Verification Number)**: Direct NIBSS verification — returns name, DOB, phone, and enrollment details - **NIN (National Identification Number)**: Direct NIMC verification — confirms identity against Nigeria's national biometric database - **FRSC Driver's License**: FRSC database verification of license number, holder name, and validity - **International Passport**: Nigerian immigration service verification - **Voter ID (INEC)**: Independent National Electoral Commission voter registration verification - **CAC Company Verification**: Corporate Affairs Commission lookup for KYB compliance **Video KYC (vKYC) — CBN Compliant** Youverify's video KYC module allows businesses to conduct live identity verification sessions with customers via video call. The vKYC session is recorded, encrypted, and stored for the CBN-mandated minimum of five years. ISO 30107-3 compliant liveness detection with deepfake resistance is embedded in the session, providing a tamper-evident audit trail from initial onboarding through to ongoing compliance monitoring. **Biometrics & Liveness Detection** Facial recognition with active and passive liveness detection is available as a standalone verification step or integrated into the full KYC flow. The liveness detection is ISO 30107-3 compliant, meaning it meets the international standard for biometric presentation attack detection. Deepfake attacks — increasingly used to bypass identity checks — are specifically addressed. **AML & Compliance Screening** Automatic PEP (Politically Exposed Person) and sanctions screening is triggered at the point of vKYC or KYC completion. Results feed into the customer's initial risk score and the case management workflow in Youverify's compliance dashboard. AML screening covers global sanctions lists, PEP databases, and adverse media sources. **30+ African Countries** Beyond Nigeria, Youverify supports identity verification in 30+ African countries including Ghana, Kenya, South Africa, Ivory Coast, Senegal, and others. Country-specific national ID documents are supported, making it a strong choice for platforms expanding across Africa. **Authentication & Data Security** Youverify uses API key-based authentication. All data in transit is encrypted with TLS 1.2 minimum; data at rest uses AES-256 encryption. The platform is designed to comply with NDPR (Nigeria Data Protection Regulation) and CBN data handling requirements. **Integration Options** Youverify integrates via REST API or plug-and-play SDKs (available for web, iOS, and Android). The SDK approach enables non-technical teams to embed verification flows without writing custom API integration code. The platform delivers 99.9% uptime through enterprise-grade infrastructure. **Pricing** Per-verification pricing — rates vary by verification type (basic ID lookup vs. biometric + liveness vs. full video KYC) and country. Enterprise plans with volume pricing are available. Contact Youverify for a pricing schedule. **Challenges for Nigerian Developers** Pricing requires a sales engagement. While yvOS simplifies integration by providing a unified API, configuring complex multi-step verification flows may require compliance and product design input beyond standard developer integration. Physical address verification involves agent visits with associated delays. **Frequently Asked Questions** Q: Does Youverify use direct government data sources for Nigeria? A: Yes. Youverify integrates directly with NIMC (NIN), NIBSS (BVN), and CAC — not via aggregated copies. Q: Is Youverify's liveness detection certified? A: Yes — ISO 30107-3 compliant with deepfake resistance. Q: How many African countries does Youverify cover? A: 30+ African countries through the yvOS platform. Q: How long is vKYC session data retained? A: 5 years — the minimum required by CBN regulations. Q: Does Youverify support AML screening? A: Yes — automatic PEP and sanctions screening with risk scoring is included in the platform.

36. CarbonIVS

Identity & KYC, Development Tools

Carbon (OneFi Limited) is a Nigerian digital financial services company operating as Carbon Microfinance Bank, licensed and regulated by the Central Bank of Nigeria (CBN). Carbon offers two developer-facing API products: the Carbon Business API — a BaaS layer for virtual accounts, payouts, and transaction management — and CarbonIVS, an identity verification system that connects directly to Nigeria government identity databases including BVN, NIN, International Passport, Driver's Licence, and Voter Registration. What the APIs Do The Carbon Business API enables fintechs and businesses to issue virtual bank account numbers to customers (static or dynamic), initiate and monitor payouts to any Nigerian bank, retrieve transaction history, and receive webhook events for real-time transaction notifications. It is designed as a BaaS layer for building financial products on top of CBN-licensed infrastructure. CarbonIVS is a separate identity verification product that lets developers automate KYC flows by verifying users against all major Nigerian identity databases in real time. All verification results are reported on a dashboard in real time. CarbonIVS requests require AES encryption using your API key for additional security. How Developers Use It Developers access the API at docs.getcarbon.co. Authentication uses an API key passed via the x-carbon-key header. The sandbox base URL is carbonapistagingsecure.getcarbon.co/baas/api. Responses are JSON. To go live, businesses must complete Carbon onboarding and provide required compliance documents. Rate limits are not publicly documented — developers should contact Carbon support for current thresholds. Pricing Carbon does not publish pricing publicly. Both the Business API and CarbonIVS are enterprise products that require direct engagement with the Carbon sales team. A sandbox environment is available for testing at no cost. Authentication All API requests use an x-carbon-key header with your API key. CarbonIVS requests additionally require AES encryption of the payload using the API key for enhanced security during identity data transmission. Compliance Carbon operates as Carbon Microfinance Bank (RC 1642222), regulated by the Central Bank of Nigeria. This makes it one of the most credible BaaS providers in Nigeria for businesses requiring a licensed banking infrastructure partner. CBN mandates KYC compliance — Carbon handles this through CarbonIVS for its partners. Challenges and Gotchas (1) Pricing is not public — requires a sales call before you can estimate integration costs. (2) Business API and CarbonIVS are separate products with separate onboarding. (3) Rate limits undisclosed — must be requested directly. (4) AES encryption requirement for CarbonIVS adds implementation complexity. (5) Carbon is Nigeria-only — no cross-border or international payment support. Company Background Carbon was founded in Nigeria by Chijioke Dozie and is headquartered in Lagos at Plot 642C Akin Adesola Street. The company employs over 90 people and has served millions of Nigerian consumers through its personal finance app. The business API suite is a newer B2B offering targeting fintechs and enterprises needing CBN-backed infrastructure. FAQs Q: Is Carbon a bank? A: Yes. Carbon operates as Carbon Microfinance Bank, CBN-licensed and regulated. Q: Can I use Carbon API without being a Nigerian business? A: No. Carbon BaaS and CarbonIVS are designed for Nigeria-registered businesses operating in Nigeria. Q: Is there a sandbox? A: Yes. Sandbox access is available at carbonapistagingsecure.getcarbon.co. Q: What identity documents can CarbonIVS verify? A: BVN, NIN, International Passport, Driver's Licence, and Voter Registration card — all major Nigerian government IDs. Q: Do I need to encrypt requests for the Business API? A: AES encryption is specifically required for CarbonIVS identity verification calls. Standard Business API calls use the x-carbon-key header without additional encryption.

37. Abstract Phone Validation API

Data Validation, Development Tools, Identity & KYC

Abstract API Phone Validation is a REST API that validates phone numbers and returns carrier intelligence, line type classification, geographic data, and fraud signals for numbers across 190+ countries and territories. Part of Abstract API's broader suite of data validation APIs (email, IP, VAT, and more), the Phone Validation API is accessible under the same API key used for all Abstract API products — reducing credential management overhead for teams already using Abstract APIs for other validation tasks. The API maintains a large and frequently updated database of phone numbers, carriers, and number types including mobile, landline, VoIP, and disposable numbers — making it useful not just for formatting validation but for fraud detection during user onboarding. ## What the API Does Submitting a phone number to Abstract's validation endpoint returns: - **Validity**: Whether the number is valid and properly formatted. - **Format**: E.164 international format and local format. - **Country**: Country name and ISO code (NG for Nigeria). - **Location**: Regional or city-level data where available. - **Carrier**: Mobile network operator name. - **Line type**: Mobile, landline, VoIP, toll-free, or unknown. - **Is disposable**: Flag for disposable/temporary number services. For Nigerian numbers, this returns the carrier (MTN Nigeria, Airtel Nigeria, Globacom, or 9mobile), the line type, and the country/region data associated with the number prefix. ## How Developers Use It Simple GET request: `GET https://phonevalidation.abstractapi.com/v1/?api_key=YOUR_KEY&phone=2348012345678`. The `api_key` is passed as a query parameter. The phone number can be provided with or without country code. Response is a JSON object returned immediately. ## Pricing & Fees Abstract API Phone Validation requires a paid plan for production use: - **Starter**: $19/month — 1,000 API calls, 3 requests/second. - **Basic**: $39/month — 25,000 calls, 5 req/sec. - **Standard**: $69/month — 50,000 calls, 10 req/sec, multiple API keys. - **Business**: $99/month — 100,000 calls, 20 req/sec. - **Professional**: $199/month — 250,000 calls. - **Growth**: $499/month — 650,000 calls. A free trial is available on signup for initial testing. ## Authentication API key passed as a URL query parameter (`api_key=YOUR_KEY`) on every request. The same API key unlocks all Abstract API products under one account. ## Rate Limits Rate limits are per-plan: 3 req/sec on Starter, scaling to 100 req/sec on Growth. Requests exceeding the per-second limit are queued or rejected depending on plan settings. ## Compliance Abstract API processes phone numbers for validation purposes under GDPR-compliant data handling policies. Numbers are not stored for marketing or secondary use beyond the immediate validation request. ## Challenges & Gotchas for Nigerian Developers 1. **No free tier**: Unlike some competitors, Abstract API Phone Validation requires a paid plan for sustained use. The Starter plan at $19/month may feel expensive for low-volume Nigerian startups. 2. **No SIM Swap detection**: Abstract API does not provide SIM Swap signals — use Twilio Lookup for this capability. 3. **Carrier accuracy with number portability**: As with all carrier lookup services, Nigerian number portability (MNP) can cause carrier misidentification after a user switches networks. 4. **USD billing**: Abstract API charges in USD. Nigerian developers need a USD-capable payment method. 5. **Rate limits matter**: The 3 req/sec limit on the Starter plan can be a bottleneck if your registration flow triggers multiple validation calls simultaneously. ## Company Background Abstract API is a San Francisco-based API company offering a suite of simple, developer-focused data validation and enrichment APIs. The phone validation product is one of several offerings, alongside email verification, IP geolocation, VAT validation, and more. All products are accessible under a single account with a unified API key. ## Frequently Asked Questions **Q: Does Abstract API support Nigerian phone numbers (+234)?** A: Yes. Nigeria is included in the 190+ country coverage with carrier and line type identification. **Q: Is there a free tier?** A: A free trial is available on signup for initial testing. Sustained production use requires a paid plan starting at $19/month. **Q: Can I use one API key for phone, email, and IP validation?** A: Yes. A single Abstract API account key provides access to all Abstract API products including phone, email, IP, and VAT validation.

38. PhishTank API

Security, Development Tools

PhishTank is a free community-based anti-phishing service that maintains one of the world largest and most actively verified databases of phishing URLs. Operated by Cisco Talos, PhishTank allows developers to query whether a URL is a known phishing site and provides bulk data downloads for building comprehensive anti-phishing capabilities into applications, security tools, and email filtering systems. The core service relies on a community-driven verification model where security researchers, volunteers, and automated systems submit suspected phishing URLs. Each submitted URL is then voted on by the community to determine if it is genuinely phishing. This crowdsourced approach provides broad coverage and rapid identification of new phishing campaigns as they emerge, often detecting new phishing sites within minutes of them going live. The PhishTank API provides two primary query modes. The first is an individual URL check where developers submit a URL and receive back a JSON or XML response indicating whether the URL is in the PhishTank database, whether it has been verified as phishing, and additional metadata about when it was reported and verified. This is ideal for real-time URL scanning in web applications, browser extensions, and email clients. The second mode is bulk data access through regularly updated data feeds. PhishTank publishes downloadable databases in JSON, CSV, XML, and serialized PHP formats that contain all verified phishing URLs. These bulk feeds can be integrated into enterprise security solutions, email gateways, and network security appliances for offline verification without incurring per-query API costs. The bulk data is updated multiple times per hour to keep pace with new phishing activity. For Nigerian organizations and developers, PhishTank is particularly relevant given the high volume of phishing attacks targeting Nigerian internet users and businesses. Nigeria ranks among the top countries experiencing phishing attacks, with scammers frequently impersonating Nigerian banks, government agencies, payment processors, and telecommunications providers. Integrating PhishTank into applications used by Nigerian users provides an important layer of protection against these threats. Nigerian banks and fintech companies can integrate PhishTank into their online banking portals to warn customers attempting to visit known phishing sites that impersonate the bank. SMS and messaging platforms operating in Nigeria can scan outbound links before delivery to prevent phishing URLs from reaching recipients. Email service providers can use PhishTank data to filter messages containing known phishing links before they reach inboxes. The API provides detailed information about each phishing entry including the target organization being impersonated, submission timestamp, verification timestamp, verification status, and the number of votes received. This metadata is valuable for understanding phishing trends — security teams can analyze which organizations are most frequently impersonated and identify patterns in phishing campaigns. PhishTank maintains an open submission portal where anyone can report suspected phishing URLs. For Nigerian cybersecurity teams, this means they can contribute to the global database by reporting phishing sites targeting Nigerian users, which helps protect not just Nigerian internet users but the global internet community. The reciprocal nature of the community means that contributing submissions also improves the quality of data received. Integration into web applications is simple and well-documented. The API accepts POST requests with the URL to be checked encoded appropriately. Response times are typically fast, making real-time URL checking feasible for user-facing applications. The API supports both verified application keys for higher rate limits and anonymous access for development and testing purposes. From a technical perspective, PhishTank provides both synchronous API queries and the ability to maintain a local copy of the entire phishing database through bulk downloads. Organizations handling high query volumes benefit from maintaining the local database and refreshing it periodically, which eliminates network latency and removes dependency on PhishTank service availability. The combination of real-time API access and bulk data availability makes PhishTank flexible enough to fit a wide range of security architecture requirements. For Nigerian cybersecurity professionals building threat intelligence platforms, integrating PhishTank data alongside other threat feeds creates a comprehensive URL reputation system capable of protecting Nigerian internet users from the persistent threat of phishing attacks that continue to cause significant financial losses across the country.

39. Dojah Address Verification API

Identity & KYC, Data Validation

Dojah Address Verification API is a specialized endpoint within the broader Dojah identity verification platform, enabling Nigerian businesses to validate customer addresses programmatically and in real time. Part of a comprehensive KYC ecosystem that also includes BVN verification, NIN lookup, and document checks, the Address Verification API allows fintechs, lenders, e-commerce platforms, and logistics companies to confirm that submitted addresses are legitimate Nigerian locations — reducing fraud, improving delivery success rates, and maintaining regulatory compliance. Dojah was founded to make identity verification accessible and affordable for African businesses. The address verification product directly addresses a challenge unique to the Nigerian market: informal and inconsistent address formats. Unlike countries with standardized postal systems, Nigerian addresses often rely on local landmarks, neighborhood names, and abbreviated LGA references that vary by city and speaker. Dojah's API normalizes and validates these inputs against reference databases, providing a structured verification result. **How Address Verification Works** The API accepts address details including street, LGA, state, and postal code. It cross-references this against verified address databases and geospatial records to return a confidence score and structured verification result indicating whether the address exists and can be matched to a known location. For enhanced verification, Dojah can also cross-reference the address against identity records tied to BVN or NIN, confirming that the person claiming to live at an address actually has records linking them to that location. The API returns standardized responses in JSON format, making it straightforward to integrate into onboarding flows. A pass result indicates the address is verifiable; a fail or low-confidence result triggers manual review or additional verification steps. **KYC Compliance for Nigerian Fintechs** The Central Bank of Nigeria's KYC guidelines require financial institutions to verify customer addresses as part of customer due diligence. This applies to digital banks, lending platforms, cryptocurrency exchanges, investment apps, and payment processors operating under CBN regulation. Failing to adequately verify addresses exposes businesses to regulatory penalties and increases fraud exposure. Dojah's Address Verification API provides an automated, auditable way to fulfill this requirement. Each verification creates a timestamped record that can be stored and presented to regulators during audits. By automating what would otherwise be a manual document-review process, companies can onboard hundreds of customers per day without proportionally scaling their compliance team. **Fraud Prevention in E-Commerce and Lending** Nigerian online merchants face significant losses from card-not-present fraud and account takeover attempts. One common fraud signal is a mismatch between the billing address on file and the delivery address submitted at checkout. By verifying both addresses through Dojah's API, merchants can flag suspicious orders before fulfillment. For digital lenders using BNPL models or personal loan products, address verification is a key signal in credit risk assessment. A borrower who cannot verify their stated home address represents higher default risk. Automating this check at the application stage reduces manual underwriting time and improves the quality of the loan book. **Logistics and Last-Mile Delivery** Failed deliveries cost Nigerian logistics companies money in wasted fuel, courier time, and customer service overhead. A significant portion of failed deliveries result from incorrect or incomplete addresses submitted at checkout. The Dojah Address Verification API can be integrated at the point of checkout or dispatch to validate that a delivery address corresponds to a real, locatable Nigerian location before a courier is dispatched. This pre-dispatch validation reduces failed first-attempt deliveries, improves courier efficiency, and lowers the rate of customer refund requests. For high-volume logistics operations managing hundreds or thousands of daily deliveries across Lagos, Abuja, and other Nigerian cities, even a small improvement in first-attempt delivery success translates directly to significant cost savings. **Sandbox for Safe Testing** Dojah provides a sandbox environment that mirrors the production API with test data, allowing developers to build and test address verification flows without consuming paid API credits or exposing real customer data during development. The sandbox uses realistic Nigerian address formats and returns both pass and fail scenarios, enabling thorough testing of application error handling and edge cases. **Integration with the Dojah Ecosystem** One of the most powerful aspects of using Dojah Address Verification is its native integration with the wider Dojah platform. A business can combine address verification with BVN verification, NIN lookup, facial recognition, and document scanning in a single API relationship, simplifying vendor management and potentially reducing per-verification costs through bundled pricing. This makes Dojah an attractive one-stop KYC solution for Nigerian fintechs and regulated businesses. Authentication uses standard API Key headers, and the RESTful endpoints follow predictable patterns documented in the Dojah developer portal. Onboarding is fast — a developer can obtain API credentials, integrate the endpoint, and run their first verification within a day. For Nigerian businesses navigating the dual challenge of regulatory compliance and fraud prevention, Dojah Address Verification API is a targeted, effective tool that automates one of the most operationally complex parts of customer onboarding.