Didit KYC Verification for WHMCS brings enterprise-grade identity verification to your hosting portal in minutes. Powered by Didit, clients complete government ID checks and selfie biometric verification inside a secure popup — they never leave your WHMCS portal.

Results sync automatically, your team gets notified in real time, and every verification attempt is logged and auditable from your admin panel. The entire flow runs server-side, keeping your Didit API key completely off the browser.

Built for hosting providers, registrars, and managed service businesses that need compliant KYC without building a custom integration from scratch.

Verification Flow

• Secure popup verification — clients complete KYC without leaving your portal
• Broad document support — passport, national ID, and driver's licence
• Automatic result sync — status updates the moment the client completes or closes the popup
• Full status lifecycle — Not Started, In Progress, Under Review, Approved, Declined, Resubmission Required, Expired
• Configurable workflow ID — use any workflow from your Didit dashboard

Client Area

• Dedicated verification page — step-by-step guidance with a clean premium UI
• Status page with history — progress bar, attempt log, and timestamps for every session
• Auto-injected dashboard banner — colour-coded KYC status shown on every client login
• Fully mobile responsive — works across all screen sizes and WHMCS themes

Admin Panel

• KYC dashboard — live stats: total, pending, approved, and declined counts
• Verifications list — searchable, filterable by status, with per-client detail view
• Manual status override — approve or decline any record directly from the admin panel
• Rule engine — require KYC per product, service, or client group
• Activity log viewer — API calls, webhook events, and email sends all logged
• API connection tester — verify your Didit key is valid directly from settings

Notifications

• Automated client emails — submitted, approved, declined, resubmission required, expired
• Admin alert emails — notified on declined or flagged verifications
• Individually toggleable — enable or disable each notification type from settings
• Multiple send fallbacks — WHMCS API → WHMCS mail → PHP mail()

Webhook & API

• Dedicated webhook endpoint — real-time Didit callbacks sync status without client action
• Server-side API calls only — your Didit API key never reaches the browser
• Full webhook event logging — every inbound event logged and viewable in admin

Compatibility

• WHMCS 8.x / 9.x
• PHP 8.1+
• Valid License Required
• Didit account required — didit.me