6 Best APIs for Fraud Detection in Nigeria

Dojah is an AI-powered identity verification and fraud prevention infrastructure platform trusted by African and global businesses for KYC, AML compliance, biometric authentication, and secure customer onboarding. Built for the African market but deployed globally, Dojah provides a single API that consolidates BVN verification, NIN verification, government document scanning, facial recognition with liveness detection, CAC company lookup, digital address verification, and AML screening — eliminating the need for multiple separate vendor integrations. Headquartered in Nigeria and serving businesses across Africa, Dojah integrates multiple data sources — including Nigerian government databases (NIMC, CBN/NIBSS), telecoms networks, banks, and utility providers — to enable businesses to verify customer identities with speed, accuracy, and regulatory compliance. **Easy Lookup API — The Standout Feature** Dojah's Easy Lookup API is one of its most powerful and developer-friendly products. By passing a single data point — either a phone number or a BVN — the API returns a comprehensive identity profile: full name, date of birth, photo, residential address, phone number, and enrollment details. This single-call approach dramatically simplifies KYC for Nigerian applications, reducing what would normally require multiple API calls and document uploads into a single instant lookup. It is particularly powerful for lending apps that need to verify a borrower's identity quickly at the point of application. **BVN & NIN Verification** Standard BVN and NIN verification endpoints confirm the identity data attached to a Bank Verification Number or National Identification Number. A successful BVN/NIN lookup returns name, DOB, phone number, and photo — providing the minimum data needed to auto-populate a KYC record and confirm the user is who they claim to be. Dojah also integrates blog guidance on BVN/NIN verification to help developers navigate CBN's mandate for BVN-NIN linkage requirements. **AI Facial Recognition & Liveness Detection** Dojah's biometric verification module uses AI to compare a live selfie against the photo on a government ID or on file in a government database. The liveness detection layer confirms the user is physically present — not a static photo or a video replay — preventing one of the most common forms of identity fraud in digital onboarding. This is available as a standalone verification step or combined with document scanning in a full biometric onboarding flow. **Government ID Document Verification** Dojah can scan and validate Nigerian government-issued documents — NIN slip, passport data page, driver's license, voter's card — extracting data via OCR and cross-referencing it against issuing authority databases to confirm authenticity. This is critical for CBN Tier 2 and Tier 3 KYC. **Digital Address Verification** Unlike traditional address verification that requires physical field agent visits (which are slow and expensive), Dojah offers digital address verification using telco location data, utility records, and cross-referenced data sources. This allows Nigerian fintechs to complete address verification within minutes rather than days, at a fraction of the cost of physical visits. **CAC Company Verification (KYB)** The CAC lookup endpoint queries Nigeria's Corporate Affairs Commission database to confirm a company's registration status, legal name, directors, and business type. This is the foundation of Know Your Business (KYB) compliance for B2B platforms, lenders, and payment companies onboarding business customers. **Identity Hub — AML & Fraud Prevention** Dojah's Identity Hub is a compliance product that combines AML screening, fraud detection, and case management. It screens customers against global sanctions lists, PEP (Politically Exposed Persons) databases, and adverse media — meeting FATF and CBN AML requirements. The Identity Hub also provides tools for detecting synthetic identities and fraudulent document submissions. **Authentication & Pricing** Dojah uses API key authentication — keys are issued through the Dojah dashboard and passed in the Authorization header. Pricing is per-API-call: the Starting Out plan starts at $0.06/call, with volume discounts available on the Optimizing plan (from $0.04/call). Specific per-verification prices vary by check type. A free sandbox environment is available immediately upon account registration — no credit card required. **Nigeria Data Compliance** All Dojah verifications comply with NIMC data handling requirements, CBN KYC mandates, and the Nigeria Data Protection Regulation (NDPR). Dojah does not store raw NINs beyond the immediate verification transaction, in line with NIMC's tokenization requirements. **Frequently Asked Questions** Q: What is the Easy Lookup API? A: Pass a phone number or BVN and receive a full identity profile in one call — name, DOB, photo, address. Ideal for fast, low-friction KYC. Q: Does Dojah require a credit card to test? A: No. A free sandbox account is available at app.dojah.io with no credit card required. Q: What is the starting price for Dojah verifications? A: Starting at $0.06 per API call on the Starting Out plan, with volume discounts on higher tiers. Q: Does Dojah verify Nigerian addresses digitally? A: Yes. Dojah offers digital address verification using telco and data cross-referencing — no physical field agent visit required. Q: Does Dojah support businesses outside Nigeria? A: Yes. Dojah supports verification in multiple African markets beyond Nigeria through its pan-African data source integrations.

Onfido is an enterprise identity verification platform that combines AI-powered document verification, biometric face authentication, and AML watchlist screening into a single developer API. Founded in 2012 in London and acquired by Entrust in April 2024, Onfido continues to operate under its own brand within the Entrust portfolio. The platform serves thousands of businesses globally including Revolut, Zipcar, Bitstamp, and numerous regulated financial institutions. Onfido processes hundreds of millions of identity checks annually across 195+ countries. ## What the API Does Onfido's verification stack has three primary layers. The first is document verification — automated analysis of government-issued ID documents including passports, national ID cards, driver's licenses, and residence permits. Onfido's AI engine validates document authenticity by checking security features, analyzing MRZ (Machine Readable Zone) data, detecting tampering or manipulation, and comparing document templates against its global library. The second layer is biometric verification — a selfie-based face match comparing the live user's face against the document photo. Onfido supports both passive liveness (background analysis without user prompts) and active liveness (guided motion challenges to confirm presence). The liveness engine is designed to prevent spoofing via printed photos, replay videos, 3D masks, and increasingly, AI-generated deepfake imagery. The third layer is watchlist screening — automatic checks against global AML (Anti-Money Laundering) databases, PEP (Politically Exposed Persons) lists, and sanctions registries including OFAC, EU, UN, and UK Treasury. For Nigerian users, the platform supports NIN slips, voter cards, international passports (e-passport with NFC), and Federal Road Safety Corps driver's licenses. Onfido Studio ties these together as a no-code workflow builder — compliance and product teams can drag and drop verification steps, configure conditional logic (e.g., run database check if document is expired), set retry limits, and deploy new verification flows without engineering involvement. ## How Developers Use It Developers integrate Onfido via REST API and SDKs for Web, iOS, Android, and React Native. The standard integration pattern: 1. Create an applicant server-side using `POST /v3.6/applicants` — this creates a user object in Onfido with name and email. 2. Generate an SDK token using `POST /v3.6/sdk_token` — this short-lived token authorizes the client-side SDK session. 3. Initialize the Onfido Web SDK or Mobile SDK on the client, passing the SDK token. 4. The user is guided through document capture and selfie/liveness steps in the Onfido-hosted UI. 5. Create a check on your server using `POST /v3.6/checks` specifying which reports to run (document, facial_similarity, watchlist, etc.). 6. Receive results via webhook when the check completes, or poll `GET /v3.6/checks/{check_id}`. ## Pricing & Fees Onfido operates on custom enterprise pricing. Industry data suggests median annual spend of approximately $60,475, with a wide range from $6,156 for smaller integrations to over $945,000 for high-volume enterprise deployments. Charges are per verification check — document verification, biometric checks, and add-ons like AML screening are priced separately. There is no public per-check rate card; pricing is negotiated based on volume and use case. A sandbox environment is provided to all registered developers during the sales process for full integration testing. ## Authentication Onfido uses JWT (JSON Web Token) authentication. Backend API calls use a long-lived API token stored as a Bearer token in the Authorization header. Client-side SDK sessions use short-lived SDK tokens generated server-side via the `/sdk_token` endpoint — these expire after a configurable period to prevent session hijacking. Webhook payloads include an `X-SHA2-Signature` header for payload verification. ## Rate Limits Onfido does not publish public rate limits. Enterprise contracts specify throughput limits based on expected volume. The API is designed to handle burst verification loads. Contact Onfido/Entrust sales for specific rate limit commitments in your contract. ## Compliance & Regulations Onfido holds ISO 27001 certification, SOC 2 Type II attestation, PCI DSS compliance, and full GDPR compliance. The platform supports compliance with FATF anti-money laundering recommendations, UK FCA guidelines, EU AMLD5/6, FinCEN in the US, and CBN KYC requirements in Nigeria. For Nigerian financial institutions, Onfido's document + biometric verification stack satisfies CBN Tier 2 and Tier 3 KYC requirements as outlined in the CBN Customer Due Diligence Regulation 2023. ## Challenges & Gotchas for Nigerian Developers 1. **No self-serve signup**: Onfido requires enterprise onboarding through their sales team. There is no instant-activation self-serve plan — budget 2–4 weeks for contract and credential setup. 2. **USD-only billing**: All pricing is in USD. Nigerian developers need a USD-capable payment method for invoicing. 3. **No native BVN integration**: Onfido does not query the NIBSS BVN database directly. Pair with a Nigerian BVN API for BVN-based verification. 4. **SDK version management**: Onfido releases frequent SDK updates, especially for mobile. Lock your SDK version and test upgrades before deploying to production. 5. **NDPR considerations**: Biometric data processed by Onfido falls under NDPR as sensitive personal data. Ensure your data processing agreement with Onfido covers Nigerian user data handling and retention policies. 6. **Post-Entrust acquisition uncertainty**: Some developers have noted pricing changes following the Entrust acquisition. Negotiate carefully and review renewal terms. ## Company Background Onfido was founded in 2012 by Husayn Kassai, Eamon Jubbawy, and Ruhul Amin — three Oxford University graduates. The company raised over $200 million in VC funding before being acquired by Entrust, a digital security company, in April 2024 for a reported $400 million. Onfido's technology is now part of Entrust's broader digital identity portfolio, which includes certificates, credentialing, and authentication products. ## Frequently Asked Questions **Q: Is Onfido available in Nigeria?** A: Yes. Onfido supports Nigerian government IDs including international passports, NIN slips, voter cards, and driver's licenses as part of their global document library covering 195+ countries. **Q: Has anything changed since the Entrust acquisition?** A: The Onfido API, documentation, and brand continue to operate independently. The main changes are in sales and enterprise support structure, which is now routed through Entrust channels. **Q: Can I use Onfido for KYB (business verification)?** A: Onfido focuses on individual KYC (Know Your Customer) verification. KYB (Know Your Business / corporate verification) is not a core Onfido product — consider Sumsub or Jumio for KYB requirements. **Q: How do I get started without a sales call?** A: Contact Onfido through onfido.com to initiate enterprise onboarding. There is no self-serve option.

Stripe is the world's leading developer-first payment infrastructure platform, offering a comprehensive suite of APIs for accepting payments, managing subscriptions, running marketplaces, issuing cards, and managing financial operations across 195+ countries. Stripe processes hundreds of billions of dollars annually for millions of businesses globally and is widely regarded as setting the gold standard for payment API design, documentation quality, and developer experience. CRITICAL NOTE FOR NIGERIAN BUSINESSES: Stripe does not currently support merchant account registration for Nigeria-incorporated businesses, NGN settlement to Nigerian bank accounts, or local Nigerian payment methods (bank transfers, USSD, Verve cards). Nigerian businesses cannot register a Stripe account as a Nigerian entity. Nigerian businesses needing local payment processing should use CBN-licensed alternatives: Paystack (Stripe subsidiary, Nigeria-optimized), Flutterwave, Monnify, Kora, or other Nigerian-licensed payment processors. However, Stripe remains highly relevant to the Nigerian tech ecosystem in several important capacities. Paystack — Nigeria's leading payment gateway and most developer-loved fintech API — was acquired by Stripe in 2020 and has adopted many of Stripe's API design conventions. Nigerian developers who learn Stripe's patterns (idempotency keys, webhook signature verification, payment intent lifecycle, connect architecture) will find this knowledge directly transferable when building on Paystack or other modern payment APIs. Diaspora and cross-border cases: Nigerian-founded companies incorporated in the United States, United Kingdom, or other Stripe-supported markets can register Stripe accounts under those foreign entities and use Stripe to charge international customers. This is a common path for Nigerian SaaS founders who incorporate in Delaware (for US market access or investor requirements) and use Stripe to charge global subscribers. The Nigerian individual may build and operate the product, but the contracting entity is foreign-incorporated. Stripe Connect is Stripe's marketplace and platform payment architecture, allowing a platform business to facilitate payments between buyers and sellers or service providers with automatic split payment, commission deduction, and payout management. For Nigerian developers building marketplace products intended for international markets — freelance platforms, services marketplaces, SaaS reseller programs — Stripe Connect provides the payment infrastructure to handle multi-party money flows between international participants. Stripe Billing handles subscription management, recurring payment scheduling, proration for mid-cycle plan changes, invoice generation, retry logic for failed payments, and metered billing for usage-based pricing. For SaaS products serving international markets, Stripe Billing reduces subscription payment infrastructure development from months to days while handling edge cases like payment method expiration, card declines, and dunning flows automatically. Stripe Radar is an AI-powered fraud detection system that scores every payment request in real time and can automatically block suspicious transactions based on customizable rules. For platforms handling international transactions that include potentially high-fraud regions or payment patterns, Radar provides machine learning-based fraud prevention without building custom fraud detection infrastructure. Stripe's documentation is widely considered the best in the payments industry — comprehensive, accurate, with full API reference, extensive guides for common integration patterns, and code examples in multiple languages. Nigerian developers studying payment API design use Stripe documentation as a reference model for understanding best practices in API design, error handling, webhook architecture, and payment security that apply across any payment provider.