NIN & BVN API Integration for Nigerian FinTech Products: A Developer Guide (2026)

Why Identity Verification Is Non-Negotiable for Nigerian FinTech

The Central Bank of Nigeria (CBN) and FCCPC require all financial services products to implement Know Your Customer (KYC) processes. For Nigerian FinTech products, this means integrating NIN verification, BVN verification, and in many cases, liveness detection.

In 2025–2026, the regulatory environment has tightened significantly. Any app handling financial transactions, lending, or savings must verify user identity before allowing transactions above certain thresholds.

The Verification Stack

For a Nigerian FinTech product, a typical verification stack looks like:

Level 1 (Basic): Phone number verification (OTP via Termii/Africa's Talking)
Level 2 (Tier 1): BVN verification → Link to bank account
Level 3 (Tier 2): NIN verification → Full ID check
Level 4 (Tier 3): Liveness detection + document scan (for high-value transactions)

Provider Comparison

| Provider | BVN Verification | NIN Verification | Liveness | Price (per check) | |---|---|---|---|---| | Prembly (IdentityPass) | ✅ | ✅ | ✅ | ₦20–50 | | Dojah | ✅ | ✅ | ✅ | ₦25–60 | | Youverify | ✅ | ✅ | ✅ | ₦30–70 | | Mono | ✅ | ❌ | ❌ | ₦15–35 | | NIBSS Direct | ✅ | ✅ | ❌ | Enterprise only |

We recommend Prembly (IdentityPass) for most startups — their API is clean, the documentation is excellent, and they have strong uptime SLAs.

BVN Verification with Prembly (Node.js)

// lib/identity.ts
interface BvnVerificationResult {
  status: boolean;
  data?: {
    firstName: string;
    lastName: string;
    middleName: string;
    dateOfBirth: string;
    phoneNumber: string;
    gender: string;
    enrollmentBank: string;
  };
  message: string;
}

export async function verifyBvn(bvn: string): Promise<BvnVerificationResult> {
  const response = await fetch('https://api.prembly.com/identitypass/verification/bvn', {
    method: 'POST',
    headers: {
      'x-api-key': process.env.PREMBLY_API_KEY!,
      'app-id': process.env.PREMBLY_APP_ID!,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({ number: bvn }),
  });

  if (!response.ok) {
    throw new Error(`BVN verification failed: ${response.status}`);
  }

  return response.json();
}

NIN Verification with Dojah

export async function verifyNin(nin: string) {
  const response = await fetch('https://api.dojah.io/api/v1/kyc/nin', {
    method: 'GET',
    headers: {
      'AppId': process.env.DOJAH_APP_ID!,
      'Authorization': process.env.DOJAH_SECRET_KEY!,
    },
    // Add nin as query param
  });
  
  const data = await response.json();
  return data;
}

Security Considerations

1. Never store raw BVN or NIN — store only the verification status and a hash
2. Encrypt verification results at rest using AES-256
3. Rate limit verification endpoints aggressively (max 3 attempts per user per hour)
4. Audit log all verification attempts with IP addresses for CBN compliance
5. Separate your KYC service into its own microservice if you're processing >10,000 verifications/day

CBN Compliance Notes (2026)

• Tier 1 accounts (max ₦50,000 balance): Phone + BVN required
• Tier 2 accounts (max ₦200,000 balance): BVN + NIN required
• Tier 3 accounts (unlimited): BVN + NIN + Address verification + Liveness

Keep your compliance documentation updated — CBN regulations evolve frequently.

Need help integrating KYC into your Nigerian FinTech product? Our FinTech development services cover identity verification, Paystack/Flutterwave integration, and CBN-compliant architecture. Contact us to get started.