1 Best APIs for Active Liveness Detection in Nigeria

Jumio is an enterprise-grade identity verification and fraud prevention platform used by banks, fintechs, insurers, and regulated businesses across more than 200 countries. Founded in 2010 and headquartered in Sunnyvale, California, Jumio pioneered the use of artificial intelligence and computer vision for automated ID document authentication and biometric face verification. The company processes hundreds of millions of identity verifications annually and serves clients including Coinbase, Monzo, United Airlines, and various top-tier banks. ## What the API Does Jumio's core product is its KYX Platform — an end-to-end identity orchestration layer that brings together document verification, biometric authentication, AML screening, and fraud signals into a single configurable workflow. Unlike simpler KYC APIs, the KYX Platform allows compliance teams to design multi-step verification journeys with conditional logic, retry flows, and escalation paths — all without writing additional backend code. At the document layer, Jumio supports over 1,500 ID document types globally, including Nigerian international passports, National Identity Management Commission (NIMC) NIN slips, driver's licenses, and voter cards. The platform uses AI-powered OCR to extract machine-readable data from documents, multi-factor authenticity checks to detect forgeries and tampering, and document liveness detection to reject printed or screen-captured documents. The biometric layer performs face matching between the selfie captured during onboarding and the photo on the submitted document. Active liveness detection (requiring the user to perform real-time gestures) prevents spoofing via static photos, videos, and increasingly sophisticated deepfake attacks. ## How Developers Use It Jumio is integrated via REST API or through pre-built SDKs for Web, iOS, and Android. Because Jumio is enterprise-only, the typical integration path is: (1) sign a contract and receive API credentials, (2) initialize a verification transaction on your server, (3) embed the Jumio Web SDK or Mobile SDK to collect the user's document and selfie in a guided capture experience, and (4) receive verification results via webhook when processing completes. Key API endpoints include `POST /initiate` to create a new verification session and obtain an SDK token, `GET /verifications/{transactionReference}` to retrieve detailed results including extracted data fields, authenticity scores, and individual check outcomes, and event webhooks that fire on verification completion, expiry, or manual review escalation. ## Pricing & Fees Jumio operates exclusively on custom enterprise pricing negotiated through their sales team. There are no publicly listed per-check rates. Pricing varies based on verification volume, geographic markets, product modules selected (e.g., document-only vs. document + AML), and contract length. Jumio does not offer a self-serve free tier. A sandbox environment with test credentials is provided during the sales/onboarding process for integration development and QA testing. ## Authentication Jumio uses OAuth 2.0 with the Client Credentials grant type. Developers exchange their API Key and API Secret for a short-lived bearer token via the `/oauth2/token` endpoint. This bearer token is then included as an `Authorization: Bearer {token}` header on all subsequent API requests. Tokens have a configurable expiry (default typically 30 minutes) and must be refreshed. Webhook payloads from Jumio are signed, and the signature should be verified before processing the payload. ## Rate Limits Jumio does not publish rate limit specifications. As an enterprise platform, throughput limits are negotiated per contract and scaled to the client's expected verification volume. Jumio's infrastructure is designed to handle burst verification loads (e.g., product launches, marketing campaigns) without throttling, subject to contractual terms. ## Compliance & Regulations Jumio holds ISO 27001 certification (information security), SOC 2 Type II attestation, PCI DSS compliance, and GDPR compliance. The platform supports FATF recommendations for identity verification, AMLD5/6 requirements in Europe, FinCEN guidelines in the US, and CBN KYC requirements for Nigerian financial institutions. Jumio's AML module screens against OFAC, EU, UN, UK Treasury, and other major watchlists for PEPs and sanctioned individuals. ## Challenges & Gotchas for Nigerian Developers 1. **Enterprise-only onboarding**: There is no self-serve signup. Nigerian startups must go through a sales process, which can take weeks. This makes Jumio unsuitable for developers who need to get started quickly. 2. **USD-denominated pricing**: Jumio bills in USD, and at enterprise volumes, costs can be substantial. Budget carefully based on your verification volume estimates. 3. **No native BVN integration**: Jumio does not directly query the NIBSS BVN database — for BVN verification, you need a separate Nigerian-specific API. 4. **Data residency**: Verify data residency options with Jumio during contract negotiation, particularly for NDPR compliance regarding Nigerian user biometric data. 5. **SDK hosting requirements**: The Jumio Web SDK must be served over HTTPS. Ensure your hosting environment is SSL-configured before testing. ## Company Background Jumio was founded in 2010 by Daniel Mattes and is backed by investors including Centana Growth Partners and Millennium Technology Value Partners. The company processes over 500 million verifications annually and has won multiple industry awards for fraud prevention technology. In recent years, Jumio has expanded its AI capabilities significantly, adding deepfake detection and synthetic identity fraud prevention to its core product. ## Frequently Asked Questions **Q: Can a Nigerian startup use Jumio without a US entity?** A: Yes. Jumio onboards international businesses including Nigerian companies. You will need to complete their enterprise onboarding process with valid business registration documents. **Q: How long does enterprise onboarding take?** A: Typically 2–4 weeks from initial contact to receiving live API credentials, depending on contract negotiation and compliance documentation. **Q: Does Jumio support NGN billing?** A: No. Jumio invoices in USD only. **Q: What happens if a user fails verification?** A: Jumio returns a detailed decision including the specific check that failed (e.g., document authenticity, liveness, face match). You can configure retry flows within the KYX Platform or redirect users to a manual review queue.