NIN & BVN Verification API Integration in Nigeria
Consent-first identity checks, liveness and tiered KYC built into your app, so fake IDs and borrowed BVNs stop at sign-up.
For lenders, wallets, marketplaces, logistics and gaming operators. Single-provider integrations from ₦500,000; per-check fees are billed by your provider.
How Do You Add NIN and BVN Verification to an App?
You contract an identity verification provider such as Smile ID, Dojah, Prembly, Youverify or QoreID, call its API from your server after capturing consent, match the returned name, date of birth and photo to the customer, and confirm with a live selfie. Musskart builds single-provider integrations from ₦500,000 in two to three weeks.
The problem it solves is old and specific. As one vendor put it on Nairaland in October 2026, every Nigerian startup that handles money, sellers, riders or credit hits the same wall: “fake IDs, borrowed BVNs, people who vanish after taking a loan or stock on credit.” The same post makes the point most cheap builds miss: a number check alone does not prove the person typing it is the owner.
Two things you don’t need, and one you do. You don’t need your own connection to NIMC or NIBSS to start: providers already have access and charge per check. You don’t need every check on day one: verify what each tier of your product requires. What you do need is proof the person owns the ID, which means a live selfie matched to the photo the record returns.
What NIN and BVN Verification Integration Costs (2026)
Typical Musskart prices, in naira, for the software work. A fixed quote follows a free scoping call.
| Scope | What you get | Typical price | Typical timeline |
|---|---|---|---|
| Single-provider NIN/BVN check integration | One provider’s API or SDK, consent screen, NIN and/or BVN lookup, name and date-of-birth matching, results saved against the customer, error handling | ₦500,000–₦1,200,000 | 2–3 weeks |
| Full KYC flow | NIN + BVN + selfie liveness and face match + document capture + tier limits + an admin review queue for borderline cases | ₦1,200,000–₦3,000,000 | 3–6 weeks |
| Multi-provider failover + AML/PEP screening + case management | Two or more providers with automatic failover, sanctions and PEP screening, case management with an audit trail, and a spend dashboard | ₦3,000,000–₦5,000,000 | 6–10 weeks |
| Per-check fees | Charged per lookup under your own contract with the provider | Billed by the provider | — |
What does one NIN or BVN check cost? Providers price per call and by volume, and many quote on contract. Dojah’s public pricing page, for example, quotes rates “as low as $0.06 per API call”, or $0.04 on its higher-volume plan (checked October 2026). A specific NIN, BVN or biometric check costs what your contract says, so budget for retries: people mistype numbers and retake selfies.
What Each Check Proves, and What It Doesn’t
The BVN was launched by the CBN and the Bankers’ Committee on 14 February 2014 as a central biometric identity for bank customers; the NIN is issued by NIMC. Each check answers a different question.
| Check | What it tells you | What it doesn’t |
|---|---|---|
| NIN lookup | The number exists in the national identity database, with the holder’s details and usually a photo | That the person typing it is the holder |
| Virtual NIN (vNIN) | The holder generated a short-lived token through the NIMC app or USSD for your provider | That a live person is present |
| BVN check (basic, premium or yes/no match) | The details match a BVN record held by NIBSS | Ownership, unless combined with consent and a face match |
| BVN with iGree consent | The holder approved the request on NIBSS’s own consent screen | That a live person is present |
| Selfie liveness + face match | A live person is present and matches the record’s photo | Sanctions or PEP status |
| Document check | The ID document looks genuine and its data can be read | That the person presenting it is the owner |
| AML/PEP screening | Whether the person appears on sanctions, PEP or adverse-media lists | Identity |
Providers That Offer NIN and BVN Checks Today
Each of these lists Nigerian NIN and BVN checks in its own documentation (checked October 2026). Musskart is not affiliated with any of them: you contract the provider directly, and we integrate it.
| Provider | Nigerian ID checks listed | Also listed |
|---|---|---|
| Smile ID | NIN, NIN slip, BVN, phone number, voter’s ID number | Selfie liveness, document verification, AML checks |
| Dojah | NIN, BVN, phone number, driver’s licence, voter’s card, passport, TIN | AML/PEP screening, address verification with field-agent photos, document analysis |
| Prembly (Identitypass) | NIN Basic, NIN Advance, NIN with face, BVN Basic, BVN Advance, BVN with face validation | CAC business checks, address verification, credit bureau reports |
| Youverify | BVN, BVN Premium, NIN, driver’s licence, phone number, TIN | PEP+ for Nigerian domestic PEPs, liveness, address verification |
| QoreID (VerifyMe Nigeria) | vNIN, NIN, NIN with phone number, BVN (yes/no match, basic, premium, iGree) | AML/PEP, face match, liveness check |
Before you sign, ask each provider what access it holds to NIMC and NIBSS data, what uptime it commits to, where your customers’ data is stored and for how long, and what each check costs at your volume. Put the answers in the contract and a data processing agreement.
Tiered KYC: Match the Check to the Risk
The CBN has used a three-tiered KYC framework since 2013, built around low-, medium- and high-value accounts, and on 23 June 2023 issued Customer Due Diligence Regulations that build on it, according to law firm Templars. Lower tiers open with lighter checks and carry caps on what can move and be held; higher tiers need more verification.
The rules tightened in December 2023. BusinessDay’s report of the CBN circular says no new Tier 1 accounts or wallets may be opened without a BVN or NIN; Tier 2 and Tier 3 individual accounts and wallets must have both; account opening should start by electronically retrieving BVN or NIN data from NIBSS or NIMC; and institutions must strictly apply Tier 1 limits on transaction values and cumulative balances.
We don’t hard-code tier limits. Caps differ by licence and product, have been revised over the years, and figures published online don’t agree with each other. Limits live in configuration that your compliance officer, or your licensed partner bank, signs off, and they can change without an app release.
Not CBN-regulated? Lenders, marketplaces, logistics firms and gaming operators can still use tiers as a risk tool: small limits after a BVN or NIN check, stronger checks before payouts or credit. See loan app licence requirements.
The KYC Flow We Build
- Consent screen in plain words: what you will check, with which provider, why, and how long you keep it. For BVN, the NIBSS iGree consent step where your provider supports it.
- Capture of NIN or vNIN, BVN and phone number, with format checks before any paid call so typos don’t cost money.
- Server-side lookup. Provider keys never sit in the app; calls go from your backend with timeouts, retries and logging.
- Matching of name and date of birth, with rules for middle names, swapped order and initials, and a confidence score instead of a brittle exact match.
- Liveness and face match against the photo the record returns, plus documents where the tier or product needs them.
- Screening against sanctions and PEP lists for higher tiers and credit products.
- Decision: approve, reject, or send to a review queue where trained staff compare photos and match scores and record a reason.
- Tier and limits applied automatically, with step-up prompts when a customer reaches a cap.
- Audit trail and retention timers: who checked what, when, with what result, and when the data is due for deletion.
Regulated firms face a clock too: BusinessDay reported in March 2026 that the CBN gives fintechs and payment service providers 24 months to deploy automated AML systems. Screening data built now feeds AML transaction monitoring.
Consent, the NDPA and Keeping Identity Data Safe
Identity data is personal data under the Nigeria Data Protection Act 2023, and biometric data used to uniquely identify someone, such as a face image, is sensitive personal data. That shapes the build:
- Lawful basis. Section 25 lists the lawful bases, including consent, performance of a contract and compliance with a legal obligation. Your lawyer or data protection officer decides which applies; the software records it against each check.
- Sensitive data. Section 30 bars processing sensitive personal data unless a listed condition applies, such as the person’s consent. We capture and store that consent.
- Minimisation. Section 24 requires data to be adequate, relevant and limited to the minimum necessary. Store the result, reference and match score; don’t keep every field a provider returns just because it came back.
- Retention. Section 24 also bars keeping data longer than its lawful basis needs. Your compliance officer sets the period; the system enforces it.
- Breaches. Section 40 requires a data controller to notify the NDPC within 72 hours of becoming aware of a breach likely to risk people’s rights and freedoms.
- Penalties. Under section 48, a data controller of major importance can be fined up to the greater of ₦10,000,000 or 2% of its annual gross revenue in the preceding financial year.
For the compliance paperwork itself, see our NDPA compliance audit and CAR filing service.
Provider Failover and Cost Control
Lookups depend on upstream government databases, and when one is slow, onboarding stops. The CBN’s fintech strategy report, summarised by Templars in February 2026, plans to cut barriers to API-based NIN and BVN verification by enforcing minimum service levels and building redundancy. Until then, build for it:
- Primary and backup providers behind one internal interface, switching automatically when errors or response times cross a threshold.
- Queue and retry instead of failing the customer, and tell them their check is pending.
- Never pay twice for the same answer: reuse a valid result for a returning customer.
- Check only what the tier needs, and step up later.
- A spend dashboard by check type and provider, with alerts when pass rates drop.
- Duplicate detection: the same BVN, NIN or face on several accounts is a classic borrowed-identity signal.
Why We Won’t Build a “NIN Verification Business”
Some people looking for NIN verification software want to start a “NIN verification business”. What usually sits behind the idea is reselling lookups of other people’s identity data to whoever pays. We decline those projects.
In June 2024 TechCabal reported that AnyVerify, a site claiming to help businesses verify customers, was selling Nigerians’ NIN, BVN and tax ID details for ₦190 per lookup without a NIMC licence, the second such case in a year after XpressVerify in March 2024. TechCabal noted that NIMC licenses its database to banks, fintechs and other partners for a fee.
A business verifying its own customers, with consent, has a clear purpose. A site that looks up strangers for anyone with a wallet balance is very hard to square with the NDPA’s purpose and lawful-basis rules. Becoming a verification provider is a licensing question for NIMC, NIBSS and your lawyer.
How a KYC Integration Project Runs
1. Free scoping call
Your product, your regulator (CBN, FCCPC, a state gaming regulator or none), the tiers you need and your preferred providers.
2. Provider contract and sandbox
You sign with the provider and share sandbox keys. We test success, mismatch and outage cases in the provider’s sandbox.
3. Build the flow
Consent, capture, lookup, matching, liveness, decision, review queue and audit log, in your app and admin panel.
4. Compliance review
Your data protection officer or lawyer approves consent text, lawful basis and retention; your compliance officer signs off tier limits.
5. Pilot
Go live for a share of sign-ups; watch pass rates, false rejections and cost per verified customer.
6. Handover and care
Documentation, a provider-switch runbook and optional monitoring under our care plans.
Where We Have Built This
On Elite Creed’s vehicle-backed lending platform, BVN, NIN and identity documents are checked against verification providers before any loan application is scored. See also gift-card trading KYC and fraud prevention and loan app development.
Musskart Technology Limited is a Nigerian software company, head office in Asaba, with an office in Abuja. Provider contracts and licences stay in the client’s name.
NIN and BVN Verification FAQs
Related Guides
- Loan app development in Nigeria
- AML transaction monitoring software
- NDPA compliance audit and CAR filing
- Gift card trading app: KYC and fraud prevention
- Loan app licence requirements (FCCPC)
- Paystack and Flutterwave integration services
- How much it costs to build a fintech app in Nigeria
- Case study: Elite Creed lending platform with BVN/NIN KYC
Sources
Provider coverage, prices and CBN rules change. We checked each source in October 2026. General information, not legal or compliance advice; work with your lawyer and compliance officer.
- Smile ID — Nigeria KYC and AML compliance (accessed October 2026)
- Dojah Docs — Individual verification (government lookups)
- Dojah — Pricing
- Prembly Docs — API reference (Nigeria endpoints)
- Prembly on GitHub — Prembly Identitypass API Python library
- Youverify Docs — Coverage
- QoreID Docs — Digital identity (Nigeria)
- QoreID Docs — Virtual NIN (vNIN)
- QoreID Docs — BVN iGree
- VerifyMe Nigeria — products (QoreID)
- Central Bank of Nigeria — Bank Verification Number
- BusinessDay — CBN: no transactions on accounts without BVN, NIN from March 2024 (1 Dec 2023)
- Templars — CBN Customer Due Diligence Regulations 2023 (July 2023)
- Templars — Client alert: CBN Fintech Report (5 February 2026)
- BusinessDay — CBN deadline for automated AML systems (10 Mar 2026)
- NDPC — Nigeria Data Protection Act 2023 (official text)
- TechCabal — AnyVerify sells Nigerian identity data for ₦190 (21 Jun 2024)
- Nairaland — Startups: how are you handling KYC in Nigeria? (18 Oct 2026)
Stop Fake IDs at Sign-Up
Tell us your product, your regulator and the provider you use or are considering. We will map the checks each tier needs and send a fixed quote.
