KYC Verification API India — eKYC, Aadhaar, PAN | NxtBanking

KYC Verification API India — Aadhaar eKYC, PAN, Bank & Video KYC

NxtBanking’s KYC Verification API lets Indian fintechs, NBFCs, banks, lending platforms, wallets, and enterprise SaaS products onboard customers digitally in under 60 seconds. Our unified API covers Aadhaar eKYC, PAN verification, bank account verification, UPI ID validation, voter ID, driving licence, vehicle RC, and video KYC — all behind a single REST endpoint, a single contract, and a single dashboard. Built for RBI, SEBI, and UIDAI compliance from day one.

Whether you need a one-time OTP-based Aadhaar check for an account opening, a full video KYC flow for an NBFC loan, or an instant penny-drop bank-account verification before payout, the NxtBanking KYC API is the fastest path from sandbox to production in India.

Verification Types Supported

• Aadhaar eKYC (OTP-based) — UIDAI-aligned OTP verification, name + DoB + address match, photograph retrieval.
• Aadhaar Offline XML / ZIP — consented offline KYC without OTP for low-frequency use-cases.
• PAN Verification — instant NSDL lookup, name match, PAN–Aadhaar link status.
• Bank Account Verification (Penny-drop) — IFSC + account-holder-name match before first payout.
• UPI ID Verification — validate VPA and recipient name in real time.
• Voter ID, Driving Licence, Vehicle RC, Passport — government document lookups for address or identity proof.
• Video KYC (V-CIP) — RBI-compliant live video call, location capture, random-question flow, agent or AI-assisted.
• Face Match / Liveness — selfie vs Aadhaar photo, passive + active liveness detection.

OTP eKYC vs Video KYC vs Offline KYC

The three main digital KYC modes in India differ in onboarding time, allowed use-cases under RBI rules, and unit cost. Pick the right one for your product’s risk profile:

Integration Flow

1. Request sandbox credentials — book a demo to receive your client_id and client_secret.
2. Authenticate with OAuth 2.0 and receive a short-lived access_token.
3. Call the verification endpoint you need (Aadhaar OTP, PAN, bank, UPI, video KYC).
4. Handle the synchronous response for instant checks, or subscribe to a webhook for video KYC completion.
5. Store the signed verification receipt in your audit trail for RBI / SEBI inspections.

Sample request — PAN Verification (cURL)

curl -X POST https://api.nxtbanking.com/v1/kyc/pan/verify 
  -H "Authorization: Bearer $ACCESS_TOKEN" 
  -H "Content-Type: application/json" 
  -d '{
    "pan": "ABCDE1234F",
    "name": "Anvesh Tiwari",
    "reference_id": "kyc_2026_04_22_0001"
  }'

Sample response

{
  "status": "success",
  "verification_id": "ver_9x2m7k8f",
  "pan_status": "VALID",
  "name_match": "EXACT",
  "aadhaar_seeded": true,
  "last_updated_at": "2026-04-22T11:14:22Z"
}

Sample request — Bank Penny-drop (Node.js)

import axios from "axios";

const res = await axios.post(
  "https://api.nxtbanking.com/v1/kyc/bank/verify",
  { ifsc: "HDFC0000123", account_number: "50100123456789", name_to_match: "Anvesh Tiwari" },
  { headers: { Authorization: `Bearer ${process.env.NXTB_TOKEN}` } }
);

console.log(res.data.name_match, res.data.bank_name);

RBI, SEBI & UIDAI Compliance

The NxtBanking KYC API is built to keep your KYC stack inside the regulatory perimeter:

• RBI Master Direction on KYC (2016, as amended 2023-24) — Video KYC (V-CIP) flow supports random-question prompts, live geotag capture, and auditor review queues.
• UIDAI Aadhaar Authentication Regulations — Aadhaar numbers are masked at rest, consent artefacts are signed and versioned, and offline XML parsing uses the UIDAI public key.
• SEBI KYC Registration Agency (KRA) rules — PAN + name + DoB verification with KRA sync for broker-dealer onboarding.
• IT Act, 2000 & DPDP Act, 2023 — Purpose-limited data collection, configurable retention windows, data-subject rights APIs.
• ISO/IEC 27001 & SOC 2 Type II — NxtBanking infra is audited annually. Reports available under NDA.
• Data residency — All KYC data stays in India-only AWS + on-prem data centres.

Who Uses the NxtBanking KYC API

• Banks & NBFCs — full Video KYC for savings and loan account opening.
• Lending & BNPL platforms — PAN + bank + liveness for loan underwriting.
• Wallets & prepaid cards — OTP Aadhaar eKYC for min-KYC and full-KYC upgrade.
• Stockbrokers & AMCs — PAN + KRA fetch for SEBI-compliant onboarding.
• Gaming & fantasy sports — Aadhaar + bank for age-gating and withdrawals.
• Insurance & health-tech — PAN + voter ID + address verification.
• Business-banking / corporate cards — GST + PAN + director KYC.

Pricing Model

Pay-as-you-go per successful verification with volume tiers. Sandbox access is free. Production pricing depends on the verification type, monthly volume, SLA, and whether you need on-prem or India-only cloud. Contact sales for a custom quote or review our API Marketplace to see the full catalog.

CKYC, DigiLocker, and API-first KYC stacks

Many regulated entities still maintain a Central KYC (CKYC) record with CVL while running day-to-day onboarding through APIs. NxtBanking is designed as the transactional verification layer: you call our REST endpoints at checkout, account opening, or disbursement time, receive structured pass/fail signals, and map them into your CKYC / AML workflow. Where DigiLocker-issued documents are acceptable under your internal policy, you can combine Aadhaar-derived attributes with issuer-signed PDFs so compliance teams see a clear chain of custody from UIDAI or the issuing authority through to your audit log.

Before moving from sandbox to production, most teams run a short go-live checklist: freeze webhook endpoints and TLS versions, pin IP allow-lists if required by your infosec policy, agree on retention windows for masked Aadhaar versus full video artefacts, and rehearse incident playbooks for upstream UIDAI or bank outages. Our solutions engineers sign off on this checklist with your CTO and compliance officer so you are not surprised during RBI thematic inspections or annual ISO surveillance audits.

Frequently Asked Questions

Is the NxtBanking KYC Verification API RBI-compliant?

Yes. Our Video KYC flow is aligned with the RBI Master Direction on KYC (2016, amended 2023-24), including random-question prompts, geo-fencing, auditor review queues, and encrypted recording storage in India-only data centres.

How long does it take to go live from sandbox to production?

Most teams complete sandbox integration in 2–4 days, followed by UAT sign-off and production keys in under two weeks. We publish OpenAPI specs, Postman collections, and Node, PHP, and Python SDKs to accelerate the work.

Which KYC documents can I verify with a single API contract?

Aadhaar (OTP and offline XML), PAN, bank account (penny-drop), UPI VPA, voter ID (EPIC), driving licence, vehicle RC, passport, and GST. All are accessible from the same OAuth token and billing account.

Do you support Video KYC (V-CIP) for NBFC account opening?

Yes. Our V-CIP flow includes live agent and AI-assisted modes, random-question prompts, location capture, full-session encrypted recording, signed audit logs, and a reviewer dashboard so your compliance team can approve or reject every session.

How is customer data protected?

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Aadhaar numbers are masked, consent artefacts are signed, and PII is stored only in India. Our infrastructure is ISO/IEC 27001 and SOC 2 Type II audited annually.

What happens if a verification fails or returns a mismatch?

Each verification returns a structured status (VALID, INVALID, NAME_MISMATCH, NOT_FOUND, RATE_LIMIT) with a reason code. You can programmatically retry, escalate to manual review, or fall back to another KYC mode such as Video KYC.

Does the KYC API work with my existing payout or BBPS integration?

Yes. The KYC API shares the same credentials and dashboard as our Payout API, BBPS Bill Connect, UPI Collection, and the broader API Marketplace. One contract, one token, one invoice.

Do you charge per API call or per successful verification?

You only pay for successful verifications. Sandbox calls are free, and failures (network errors, upstream timeouts, document not found) are not billed. Volume tiers kick in automatically once you cross monthly thresholds.

Ready to start? Request a live demo or contact sales for pricing. See the full API catalog on the NxtBanking API Marketplace.