1 Best APIs for Identity Search by Fingerprint in Nigeria

The NIMC NIN API refers to the suite of identity verification services provided by the National Identity Management Commission (NIMC) — the Nigerian government agency responsible for establishing, managing, and maintaining the National Identity Database (NIDB). NIMC is the authoritative source for Nigerian identity data, having enrolled over 100 million Nigerians in its National Identity Management System (NIMS) since its establishment under the NIMC Act of 2007. NIMC provides two primary API products for identity verification: the NIMC Verification Service (NVS) — a SOAP-based enterprise web service for direct database queries — and NINAuth, a newer OAuth 2.0-based digital identity authentication service designed for seamless integration into government and private-sector applications. **NIMC Verification Service (NVS)** NVS is the original NIMC API, exposing Nigeria's National Identity Database as a SOAP (Simple Object Access Protocol) web service. The service provides five levels of data access: - Level 1: Minimum — confirms NIN exists and is valid (name only) - Level 2: Basic demographic data (name, DOB, gender) - Level 3: Extended demographic + contact details - Level 4: Full demographics + enrollment details - Level 5: Maximum — full data including biometric indicators Verification can be performed using three input methods: 1. **NIN-based lookup**: Provide the 11-digit NIN to retrieve identity data 2. **Fingerprint-based verification**: Submit biometric data for fingerprint matching against the NIMC database 3. **Demographic search**: Search by name/DOB combination to locate identity records Access to NVS is secured via dedicated VPN connections, providing an additional layer of security beyond standard HTTPS. This enterprise-grade security posture makes NVS appropriate only for institutional integrators with the technical infrastructure to manage VPN connections. **NINAuth — Modern Digital Identity Authentication** In 2023–2024, NIMC launched NINAuth (ninauth.nimc.gov.ng), a new identity authentication service designed to modernize NIN-based verification. NINAuth uses OAuth 2.0 and is designed for: - Government service portals needing federated Nigerian identity login - Private sector applications wanting NIMC-backed user authentication - Any platform where "Login with NIN" is appropriate NINAuth provides a developer-friendly interface at app.ninauth.nimc.gov.ng/developers and represents NIMC's move toward a more accessible, REST-friendly verification experience. **Tokenization and Virtual NIN (vNIN)** To address data privacy concerns around the raw 11-digit NIN, NIMC introduced vNIN (Virtual NIN) — a tokenized alias generated per-institution that allows verification without exposing or storing the raw NIN. Under NIMC's new policy, no entity in Nigeria is permitted to verify or store the raw 11-digit NIN — they must use vNIN tokens instead. This is a critical compliance requirement for all new NIN verification integrations as of 2024. **Who Can Access NIMC APIs** Direct NIMC NVS access is not self-serve — it requires institutional authorization. The typical path: - CBN-licensed banks, fintechs, insurance companies, and regulated businesses apply to NIMC - Government agencies have institutional data-sharing agreements with NIMC - Most Nigerian startups and SMEs access NIN verification indirectly via licensed aggregators (Prembly, Dojah, Youverify, Smile Identity) who hold NIMC data processor licenses **Pricing** NIMC offers tiered pricing for the NVS: - **SME Service Plans**: Bronze, Silver, Gold — tiered by monthly verification volume - **Enterprise Bulk Purchasing Groups**: Five enterprise tiers for high-volume institutional use Current pricing schedules are available at the NIMC pricing portal (wiki.nimc.gov.ng/en/pricing/enterprises). NINAuth pricing is separate. **NDPR Compliance** All NIMC data access is governed by the Nigeria Data Protection Regulation (NDPR). Organizations accessing NIN data must implement appropriate data protection measures, complete Data Protection Impact Assessments (DPIAs) where required, and must not store raw NINs beyond what is necessary for the immediate verification purpose. **Challenges for Nigerian Developers** The main challenge for Nigerian startup developers is that direct NIMC access requires institutional authorization that most early-stage companies do not have. The SOAP protocol (rather than REST) adds integration complexity for modern web applications. The recommended path for startups is to use a licensed aggregator API (Prembly, Dojah, Youverify) rather than attempting direct NIMC integration — the aggregators have already obtained NIMC licenses and provide modern REST APIs with developer-friendly onboarding. **Frequently Asked Questions** Q: Can a startup developer access NIMC NVS directly? A: Generally no — direct NVS access requires institutional authorization. Use a licensed aggregator like Prembly, Dojah, or Youverify instead. Q: What is vNIN and why does it matter? A: Virtual NIN is a tokenized alias for the raw NIN. NIMC now prohibits storing or sharing the raw 11-digit NIN — all new integrations must use vNIN for compliance. Q: What is NINAuth? A: NINAuth is NIMC's newer OAuth 2.0-based authentication service, providing a more developer-friendly "Login with NIN" capability for government and private-sector portals. Q: Is there a free tier? A: No. NIMC NVS is a paid institutional service. There is no free tier or sandbox environment for NVS. Q: What protocol does NIMC NVS use? A: SOAP (Simple Object Access Protocol), not REST. NINAuth uses REST/OAuth 2.0.