# Customer Identity Verification

> A mandatory compliance step on certain Ozow payment methods, which require a customer's identity to be verified before they can complete a payment.

Source: https://hub.ozow.com/integration-methods/apis/payin/identity-verification/

Customer Identity Verification is a mandatory compliance requirement for merchants using specific
Ozow payment methods. It requires that a customer's identity is verified before they can complete a
payment.

## Which payment methods require it?

Customer Identity Verification is mandatory for the following payment methods:

- Pay by Bank (all banks)
- Absa Pay
- Capitec Pay
- Nedbank Direct EFT
- FNB Payment Requests
- PayShap Request

Ozow reserves the right to disable these payment methods if Customer Identity Verification is not
correctly implemented.

## Does this apply to me?

Customer Identity Verification applies to merchants whose business Ozow has classified as operating
in a high-risk industry. [Bank API onboarding and compliance](https://hub.ozow.com/integration-methods/apis/payin/bank-api-compliance.md) lists those
industries and the documents each one needs.

Ozow will notify you of your risk classification during onboarding. If you are unsure whether this
applies to you, contact [support@ozow.com](mailto:support@ozow.com) or your account manager.

## When must verification happen?

The standard requirement is that a customer's identity is verified at the point of signup or account
creation on the merchant's platform, before any payment is made. Any deviation from this standard
must be discussed with and approved by Ozow before implementation. Contact
[support@ozow.com](mailto:support@ozow.com) or your account manager to discuss your specific
requirements.

## How verification works

Your platform is responsible for verifying the customer's identity. You may use a third-party KYC
provider of your choice to complete the verification. Once verified, the customer's South African ID
number or foreign passport number must be:

- Saved securely on your platform
- Passed to Ozow as part of every payment request
- Treated as non-editable, the customer must not be able to change their verified ID number on your
  platform. Any change to the ID number must trigger a full re-KYC process before payments can
  resume.

> ℹ️ **South African ID numbers**: A South African National ID number is a 13-digit code assigned to
> every citizen and permanent resident. It appears on the front of a South African Smart ID card or
> at the top of the first page of a South African ID Book above the barcode.

> ℹ️ **Foreign passport numbers**: A foreign passport number is the unique identifier printed on the
> data page of a passport issued by a country other than South Africa. It is required for customers
> who are not South African citizens or permanent residents and do not hold a South African ID
> number.

## How Ozow enforces this automatically

When a verified ID number is passed in the payment request, Ozow uses it to determine which payment
methods and bank accounts are available to that customer. Payment methods are shown or hidden
automatically based on whether the customer's ID is linked to an account at the relevant bank.

If the ID number is not passed correctly, any payment method where Customer Identity Verification is
mandatory will be hidden from the customer automatically; they will not be able to select it at
checkout.

### Example

A customer signs up on your platform and you verify their South African ID number with your KYC
provider. From then on you pass that verified ID to Ozow with every payment request.

At the Ozow payment page, Ozow checks which bank accounts are linked to the ID and shows the
payment methods accordingly.

| Payment method | Linked to the verified ID? | Shown at checkout? |
|---|---|---|
| Pay by Bank, FNB | Yes | Shown |
| Pay by Bank, Standard Bank | Yes | Shown |
| Capitec Pay | No | Hidden |
| Absa Pay | No | Hidden |

### What the check does not cover

**The check decides which methods a customer is offered. It does not decide which account they
pay from.**

FNB, Standard Bank, Nedbank and Bidvest are reached by the customer signing in to their own
internet banking, and the account a payment leaves is chosen there rather than at Ozow. On those
four a customer can still pay from an account that is not theirs, and third-party blocking closes
that. It is off unless you ask for it and can be enabled per payment method, so contact
[support@ozow.com](mailto:support@ozow.com) or your account manager for the methods you need it on.

## When is it mandatory for go live?

Customer Identity Verification must be in place and correctly implemented before you can go live
with any of the payment methods listed above. Ozow will verify that your implementation is correct
as part of the go-live process.

## How to implement it

Customer Identity Verification is implemented differently depending on which API you are using.
Follow the implementation guide for your chosen API:

- **Payments API**: see [Redirect to Ozow](https://hub.ozow.com/integration-methods/apis/deprecated-integrations/redirect-to-ozow.md)
- **One API**: see [Redirect: One API](https://hub.ozow.com/integration-methods/apis/payin/redirect-to-ozow.md)

## Ongoing obligations

Once Customer Identity Verification is in place, it must remain active for the duration of your use
of these payment methods. If your business activities change and you move into a high-risk category,
you must notify Ozow immediately and implement Customer Identity Verification before continuing to
use the affected payment methods.