New Omni documentation is now available — policy-driven document verification and API reference. Explore Omni → · Custom Theme for KYC liveform: Learn more →
New Omni documentation is now available — policy-driven document verification and API reference. Explore Omni → · Custom Theme for KYC liveform: Learn more →
Learn how to configure multi-factor authentication and forgery prevention settings for security enhancement including selfie process, liveness, Proxy/VPN detection, etc.
Use this file to discover all available pages before exploring further.
Authentication enhancement and forgery prevention functions allow you to customize the security level and verification methods of identity authentication in ID check projects. You can build optimal identity verification processes that meet customer security requirements through ID forgery prevention, face authentication, additional authentication options, meta-information-based verification, etc.
Function Application by Identity Authentication Method
🪪 ID document: ID photo-based identity authentication
🧠 Knowledge-based: User input information-based identity authentication
Some options have interdependencies, so other options must be activated first to activate specific functions. For example, Selfie Process must be activated to use Face Duplicate Check.
Authentication enhancement and forgery prevention settings consist of three tabs:
ID and Face Based
Additional Authentication & Meta Information
Device Info
ID forgery prevention and face authentication related options
ID forgery prevention: MRZ check, driver’s license barcode (PDF417) check, ID liveness, streaming capture
Face authentication: Selfie process, face duplicate check, selfie liveness, face-based age verification
Third-party data source verification and meta-information-based verification options
3rd party data sources: 1 won account authentication, government data verification, CURP third-party verification, address proof, residency expiration date query
Scans MRZ (Machine Readable Zone) existing on IDs to verify information accuracy. (e.g., bottom of passport)
Setting
Description
Name Threshold
Can proceed only when similarity exceeds the threshold when comparing MRZ with user-entered name.
Generally, when name order is changed, similarity of about 85 points is calculated. If typos are a concern, you can implement a stricter authentication system by setting a higher threshold.
Can specifically detect forgery methods (presentation attacks) that frequently occur in ID-based authentication.
Pipeline
Description
Screen Replay
Detects if ID is displayed on monitor or other displays
Paper Printout
Detects if it is a paper printout form such as color print
Portrait Replacement
Detects if a photo is pasted on an actual ID
Detection Processing Method per pipeline:Each pipeline (Screen Replay / Paper Print / Portrait Replacement) can have its detection processing method configured independently.
Processing
Description
Retry — Request Retry
Blocks subsequent progress and requests retry. (Rejected if retries accumulate. Default: 3 times)
Warning — Proceed After Recording
Leaves a record on the submission and proceeds. Warnings can be reviewed in submission detail.
When Retry and Warning occur simultaneously in settings between pipelines, it proceeds with Retry.
Apply Warning on UploadNew in 2026-04Each pipeline with Retry selected now exposes a sub-checkbox Apply Warning on Upload. When checked, the pipeline’s Retry is converted to Warning only when the user submitted the ID via Upload mode, because Upload-mode users have no way to recapture.
The checkbox can be configured independently per pipeline (e.g., enabled for Screen Replay and Paper Print but not for Portrait Replacement).
The checkbox appears only when Retry is selected. It is hidden when Warning is selected.
Submissions auto-converted to Warning under Upload mode appear in the Custom Policy list with the following values.
Controls how submissions with an expired identification document are handled. Previously expired IDs were always rejected; you can now route them into Retry or Warning to match your policy.
Processing Method for Expired IDs:
Processing
Description
Retry — Request Retry (default)
Asks the user to resubmit their ID.
Warning — Proceed After Recording
Bypasses both the Step 1 and Step 2 Expired ID conditions, records a Warning, and lets the submission continue through approval. The automatic Step 2 expiry-date reject is replaced with Approved + Warning.
Submissions approved in Warning state leave the following Warning data on the dashboard.
User Data
Related Engine
ID Card
Expiry validation
User Input
Expiry validation
A Warning condition has also been added to the Custom Policy Trigger list, so you can use expired-ID warnings as a trigger in your custom rules.
Example: older Korean passports whose expiry_date has already passed may still need to be accepted for hikorea lookups and internal records. Setting Expired ID to Warning lets those submissions through with only a Warning recorded, instead of being blocked at intake. See the April 2026 update for details.
Allows only real-time capture for both ID and selfie and blocks photo uploads to configure a live capture-based submission environment.
Click the allow ID upload button to allow ID uploads.
When streaming capture only option is activated, users cannot upload photo files and must submit ID and selfie through real-time camera capture.
Must be used together when using active liveness.
When the liveform streaming capture only option is ON and Allow ID Upload is turned ON, users can upload an image as an alternative to camera capture to submit their ID document. The Image Quality Check toggle appears alongside this option, allowing you to decide whether to apply the same frontend quality checks as the camera capture.
Image Quality Check
Behavior
ON (default)
Performs FE Image Quality Check on uploaded images. If the image does not meet internal quality standards, an alert message is displayed requesting re-upload.
OFF
Skips FE Image Quality Check on uploaded images and proceeds with subsequent backend processes and existing policies.
The Image Quality Check toggle is only visible when Liveform Streaming is ON and Allow ID Upload is ON. If either condition is OFF, the toggle is not displayed.
If you encounter cases where IQC repeatedly fails due to upload environment conditions, you can switch to OFF to allow users to complete the authentication flow.
You can register user face information through face recognition. When used in ID document pipeline, it compares the portrait on the ID with the user’s Selfie.
Setting
Description
Threshold
Sets the threshold to apply when comparing portrait with Selfie. (Default: 85 points)
Face Occlusion
Authentication fails when face is covered by glasses, mask, etc. during Selfie authentication. If multiple faces exist in the image, it checks based on the face closest to the camera.
Selfie Process UsageWhen selfie process is activated, you can use additional face authentication functions such as face duplicate check, selfie liveness, face-based age verification, etc.
You can choose between Active mode (deepfake detection) and Passive mode (texture-based detection). Requires selfie process to be activated.
Mode
Description
Active Mode
Mode specialized for deepfake detection, performs biometric authentication by requesting specific actions from users.
Passive Mode
Texture-based liveness detection, performs biometric authentication with images only without user actions.
Setting
Description
Threshold
Sets the pass criteria for each mode. 85 points or above is recommended when having high security policies against forgery.
Mode Selection Guide
Active Mode: Can more effectively block deepfakes or presentation attacks, but user experience may become somewhat complex.
Passive Mode: User experience is more convenient, but detection rate may be lower than active mode for some advanced attacks.
Passive Face Auto Capture (2026-04)Passive-mode face capture in the liveform now uses Auto Capture — once the user aligns their face with the guide, capture completes automatically without any button press, and the capture standby time is reduced from 2 seconds to 1 second. See the April 2026 update for details.
When using active liveness, streaming capture only option must be used together.
Also, if user’s screen brightness is low, low scores may result.
A function that analyzes face images to estimate age range and verifies by comparing with set reference age. Provides age range (Low, High) rather than exact age, and verification criteria can be set by applying Buffer.
Setting
Description
Target Image
Selects the image to measure age information. Can choose between ID portrait or selfie photo.
Reference Age Setting
Customers can directly set a fixed age or choose to compare with age on ID (date of birth based).
Verification Success Conditions
Can set up to 3 conditions by combining Low, Median, High. Each condition verifies considering age range and Buffer.
Age Range and BufferFace-based age verification does not provide exact age but provides age range (Low, High) that the person likely belongs to. When verifying, Buffer can be applied to set verification criteria considering age range errors.
Verification Condition SettingsBy combining and setting Low, Median, High conditions, customers can directly set age verification criteria suitable for service characteristics. For example, stricter conditions can be set when minor blocking is needed.
Usage ScenariosWhen using only selfie (proceeding with face authentication only without ID), it is useful for age verification to block minors. You can implement minor blocking policies by setting target image as selfie photo and reference age as fixed value.
Simulation FunctionA simulation button is provided on the face-based age verification settings screen to test if the set conditions work correctly.
2026-04 RedesignedPerforms government data verification for IDs issued in Korea. Starting with the 2026-04 update, the previous single ON/OFF toggle has been split into individual switches per ID type, allowing you to choose which Korean ID types to perform authenticity verification for.
Individual control switches:
Switch
Target ID
Resident ID
Resident registration card
Driver License
Driver’s license
Passport
Passport
Alien Registration
Alien registration card / Domestic residence report for foreign nationals of Korean descent / Permanent residence card (3 types combined)
Scope of the Alien Registration switchThe single Alien Registration switch controls authenticity verification for all three ID types simultaneously: alien registration card, domestic residence report for foreign nationals of Korean descent, and permanent residence card. All foreign-national-related IDs are managed under one switch.
When required values for authenticity verification are missingIf values required for authenticity verification (name, date of birth, resident registration number, etc.) are absent from the submitted data, the switch is always treated as not applied even when it is ON.
Previously, all Korean IDs were controlled by a single toggle. For the background and detailed behavior of this redesign, see the April 2026 update.
Queries and verifies Korean government’s residency expiration date information for passports from other countries.
Residency Expiration Date Query UsageWhen verifying identity for foreign residents or visa holders, you can query residency expiration date information from Korean government database to verify residency qualifications.
Detects IP-based risk and blocks the IP for 48 hours when risk score is 90 or above.
VPN & Proxy Pre-verification List
Learn how to view Proxy & VPN detection results.
Device Verification option moved (2026-04)The former Device Verification option has been moved to the dedicated Device Info tab as of the 2026-04 update. The new tab also includes the Fingerprint option and Device Duplicate Check.
A function that controls access by comparing user’s IP country with ID issuing country. By default, it blocks access when user’s IP country differs from issuing country, and detailed policies can be configured through exception settings and target designation.
When ID issuing country belongs to the country, pre-screening passes even if IP country and issuing country differ.Operation Method:
If the issuing country of the ID submitted by the user is included in the exception country list, access is allowed even if IP country and issuing country do not match.
For example, if “Korea” is added to exception countries, pre-screening passes when using IDs issued in Korea regardless of IP country.
You can designate targets to apply regional pre-screening. It is not an OR condition, but selects one of IP country based or Issuing country based to designate targets.Setting Options:
Criteria
Description
IP Country Based
Performs pre-screening only when accessing from IP addresses of designated countries.
Issuing Country Based
Performs pre-screening only when using IDs issued from designated countries.
Operation Method:
When accessing from IP addresses of countries designated as screening targets or using IDs issued from those countries, always compares IP address and issuing country and blocks access if they do not match.
For countries not designated as screening targets, pre-screening check is not performed.
Regional Pre-screening Usage Examples
Allow only Korean ID + Korean IP: If “Korea” is designated as issuing country based in target designation, when using IDs issued in Korea, access is only allowed from Korean IP.
Specific Country Exception Processing: If “United States” is added to pre-screening exception countries for overseas-residing Koreans, access is allowed even when using Korean IDs from US IP.
Specific Issuing Country Exception: If “Passport” is added to issuing country pre-screening exceptions, access is allowed regardless of IP country when using passports.
Exception settings and target designation cannot be used simultaneouslyRegional pre-screening can only be used by selecting one of exception settings or target designation. The two methods cannot be activated simultaneously, so select and set the method suitable for your service requirements.
2026-04 New TabA dedicated tab for configuring device-based pre-blocking options. Device Info verification is performed first when entering the liveform. If blocked at this stage, the user cannot proceed to subsequent pre-verification steps (Turnstile, Proxy & VPN) or the KYC process itself.
Device Info is the first validation upon liveform entryPre-verification runs in the following order. If the Device Info stage fails, the user is immediately redirected to an error page and no subsequent stages are performed.Device Verification → Fingerprint option → Turnstile → Proxy & VPN Detection → KYC Process
A Static check that analyzes browser, GPU, and touch information to preemptively block access from non-mobile devices (desktops, virtual environments, automated bots, etc.).
Static check — performed on liveform entry
Verification Item
Description
Browser check
Analyzes the browser’s User-Agent value and blocks the request if the accessing device is identified as a desktop PC or bot.
Graphics check
Detects GPU information via WebGL and blocks the request if a desktop-only GPU or virtual environment that cannot be used in mobile devices is detected.
Screen check
Analyzes the number of simultaneous touch points and blocks devices that do not support mobile-level multi-touch.
If even one of the enabled checks fails, the user is redirected to an error page (DE-20000) and cannot proceed with KYC.
Device Verification Pre-verification List
View the Device Verification result list and detail fields.
2026-04 NewAdvanced threat detection options based on device fingerprinting. Detects virtual environments, emulators, malicious bots, and tampered browsers, and controls repeated approvals from the same device through Device Duplicate Check.
Limits the number of times a KYC approval can occur from the same device. Can be toggled ON/OFF independently while the Fingerprint option is enabled.
Setting
Description
Allowed count per device
Maximum number of KYC approvals allowed from the same device. (Default: 3)
Detection period
The time window for counting duplicates. When ON, specify the number of days (default: 30). When OFF, all past approvals accumulate indefinitely.
Policy on duplicate detected
Select how to handle requests that exceed the allowed count.
Policy on duplicate detected:
Policy
Behavior
Fail if duplicate
Blocks requests that exceed the allowed count. The user is redirected to an error page (DE-40000).
Register and Pass
Allows KYC to continue even when the allowed count is exceeded, and records the duplicate occurrence.
Meaning of Detection period OFFWhen the detection period toggle is set to OFF, all past approval history accumulates. Using this setting in long-running projects may unintentionally block legitimate users, so configure carefully together with the allowed count.
For details on the new error codes DE-30000 and DE-40000, see the Error Codes and Pages reference. The background and purpose of this feature are covered in the April 2026 update.
Banks or securities companies can secure the highest level of security by activating multiple authentication options such as government data verification, 1 won account authentication, face duplicate check, etc. Deepfakes or presentation attacks can be effectively blocked through active mode of selfie liveness and ID attack prevention functions.
International Service Multi-country ID Verification
Companies providing global services can accurately authenticate IDs from each region by utilizing country-specific verification options such as MRZ check (passport), PDF417 barcode check (North American driver’s license), CURP third-party verification (Mexico), etc.
Online Platform Fraud Prevention System
E-commerce or sharing economy platforms can preemptively block fake account creation or ID forgery attempts through forgery prevention options such as Proxy & VPN detection, ID validity verification, mandatory real-time camera capture, etc.
Excessive security option activation may hinder user experience, so it is important to set appropriate security policy levels suitable for service characteristics.