IDMERIT

Company Overview

IDMERIT positions itself as a one‑stop provider for global identity verification, KYC compliance, AML screening, and fraud prevention. The company’s core offering is the IDMkyX platform, which orchestrates a waterfall of checks designed to ensure that the most cost‑effective and comprehensive verification method is used first, falling back to more expensive or invasive steps only when necessary. This modular approach allows customers to subscribe to individual products or to the entire suite.

Key Products

IDMkyc – Global identity verification service that cross‑references personal and business identities against official data sources (credit files, public records, government databases, mobile network operator data, tax and passport registries) in 180+ countries and 440+ data sources. It covers over five billion people and is used for frictionless onboarding and ongoing KYC compliance.

IDMscan – Document authentication and biometric verification solution. Via a white‑label SDK (iOS/Android) and a web app, users scan a government‑issued ID and perform a live face capture with liveness detection (including deep‑fake and forgery detection). Validation completes in less than 30 seconds.

IDMaml – Anti‑money laundering solution that screens individuals and entities against global PEP, sanctions, watchlist, and adverse media databases. It includes ongoing monitoring, transaction monitoring for suspicious behavior, and risk scoring. The company claims access to 13+ million red‑flagged profiles.

Additional capabilities include age verification, address verification, Know Your Business (KYB) checks, criminal record checks, and employee onboarding verification.

Technology and Data

IDMERIT uses machine learning, facial recognition, and liveness biometrics to automate verification without human review. The identity bureau covers challenging markets such as Brazil, India, China, and South Africa. The company emphasises that it does not own or store customer data; instead, it connects to authorised independent data sources on behalf of its clients.

Recent Incident

On 11 November 2025, cybersecurity researchers found an unprotected MongoDB instance containing multiple databases—totalling 3 billion records (≈1 TB) – traced to IDMERIT. About 1 billion entries contained sensitive personal data across at least 26 countries. IDMERIT secured the database on 12 November 2025 after being notified. The company issued a statement saying that its own platform was never compromised and that the exposed data belonged to independent data source partners. No confirmed exfiltration has been reported, but researchers warned that automated crawlers could have copied the data. As of early 2026, IDMERIT had not issued a public notice to affected individuals, and no regulatory investigations or lawsuits had been announced.

Market Position and Pricing

IDMERIT is a privately held company with a team of 51–200 employees. It offers cloud‑based, monthly subscription pricing with API access. Support is available via email and a self‑service knowledge base. The company competes with larger identity verification providers such as Jumio, Onfido, and Mitek, as well as with specialist AML firms. Its differentiator is its breadth of direct data partnerships and its waterfall model that reduces cost by eliminating unnecessary checks.