Real ID is an online eKYC solution that verifies user identities by comparing ID document photos with live selfie images.

What is Real ID?

Real ID is an online eKYC solution that proves "who you are" through ID document recognition and face comparison.

Real ID collects ID photos and selfie images, then compares them to verify whether they belong to the same person. During this process, Real ID detects forged documents and non-genuine faces to ensure the authenticity of submitted information.

Real ID user interface:

Figure 1: Real ID User Interface

Features

Document capture

Captures the user’s ID photo and checks image quality and document type.

ZOLOZ provides two capture methods:

Automatic capture (recommended): The algorithm detects image clarity and automatically captures and uploads eligible photos without user interaction.
Manual capture: Users tap the capture button and confirm image clarity.

Document anti-spoofing

Analyzes document images to detect fraud risks such as photo prints, screen recaptures, or masks. For specific ID types (e.g. Hong Kong China ID card, Malaysia ID card), ZOLOZ also supports security feature checking to identify high-quality imitations.

Document OCR

Document OCR (Optical Character Recognition) extracts key fields from documents, such as the document number, name, and date of birth. Document types supported and OCR results returned Business document types supported and OCR results returned

Face capture

Captures live selfie images through the front camera. Users face the screen and follow prompts (e.g. blink) while the algorithm verifies face genuineness and image quality.

Liveness detection

Determines whether the captured face is real or a photo/video. ZOLOZ defends against presentation attacks (2D images, screen recaptures, 3D masks) and injection attacks using multi-frame analysis and anti-spoofing algorithms.

Face compare

Compares the collected ID portrait with the selfie image to determine if the two faces belong to the same person.

Risk control system

Real ID includes a risk control engine that evaluates risk in two phases:

Session initialization: Before image capture, Real ID checks whether the same device or user ID has exhibited multiple risk behaviors in a short period (e.g. repeated photo attacks). If retries exceed the limit, the system rejects the request until a cooldown period elapses.
Post-upload processing: After images are uploaded, Real ID checks whether the same ID number or face has shown repeated risk behaviors (e.g. multiple photo attacks or comparison failures). If retries exceed the limit, the system returns Pending or Failure as the final result.

Deepfake detection

Real ID detects deepfakes through a comprehensive end-to-cloud AIGC detection solution that combines multimodal algorithms, terminal security detection, and dynamic risk control strategies to identify AIGC risks from multiple dimensions. This capability is called Deeper. What is Deeper?

Verification flow

The Real ID verification flow:

Real ID verification flow:

Capture an ID picture: The user aligns their ID document with the frame guide and takes a clear photo. ZOLOZ supports automatic and manual capture.

Note: Automatic capture provides a better user experience and collects more image data for stronger anti-spoofing detection. Recommended for users with anti-spoofing needs.
- Automatic capture (recommended): The algorithm detects image clarity in real-time and prompts the user to adjust if needed. Eligible photos are captured and uploaded automatically without user interaction.
- Figure 3: Automatic capture
- Manual capture: Users tap the capture button and confirm photo clarity. If the algorithm determines the photo quality is inadequate, a pop-up prompts the user to re-capture.
  
  Figure 4: Manual capture

Capture a live face: Users face the front camera and follow prompts (e.g. blink) to take a selfie. The algorithm verifies face genuineness and image quality.
- Eligible selfie images are captured and uploaded automatically without user interaction.
- If image quality is inadequate, the algorithm guides the user to adjust (e.g. move closer, improve lighting). To verify a genuine face, the user performs a prompted action such as blinking before the capture completes.

Face comparison: After both images are uploaded, ZOLOZ's server compares the ID portrait with the selfie to determine if they belong to the same person. The result is returned as success, pending, or fail.

Real ID results

Field name	Meaning	Description
ekycResult	eKYC Total Results	Success: The eKYC is successful. ekycResult combines ID, face and risk control results. If all of them are successful, then the results will pass. It means that the ID and face are genuine and the comparison is consistent. The result of each item can be seen in ExtFaceInfo.ekycResultFace, ExtIdInfo.ekycResultDoc, ExtRiskInfo.ekycResultRisk. Failure: The eKYC has failed. There is a Failure result present in the ID, face and/or risk control module, which means a high risk is present in this authentication. Pending: There is a certain risk present in this authentication, and a second manual review is required. There is no Failure result present in the ID, Face, and Risk Control modules, but there is a Pending result. InProcess: The eKYC process is not finished and may still be in progress. VoidCancelled: The eKYC process is not completed, and is interrupted in the middle of the process. For example, the user clicked Exit while the eKYC was still in progress. VoidTimeout: The eKYC process timed out and did not complete.
ExtFaceInfo.ekycResultFace	Face session total results	Success: Face verification has passed. The face quality score and liveness detection have passed, and face comparison is consistent. Failure: Face verification has failed. There is a higher risk present in this authentication e.g. the ID portrait and the selfie image are not of the same person (the matching score is lower than the ZOLOZ’s lower threshold), or the face liveness detection does not pass. Pending: There is a certain risk present in this authentication, and a second manual review is required. The reason for Pending may be that the ID portrait and selfie image’s matching score is not high enough e.g. between the upper and lower thresholds set by ZOLOZ.
ExtFaceInfo.faceScore	Human face comparison score	The similarity score for live face and ID portrait face comparison. When the comparison score ≥ the upper threshold set by ZOLOZ, the face comparison passes. When the comparison score is between the upper and lower threshold values set by ZOLOZ, a second manual review is required and the total result of the face module will be Pending. When the matching score is less than the lower threshold set by ZOLOZ, the face matching does not pass and the total result of the face module will be Failure.
ExtFaceInfo.faceQuality	Face quality score	The quality detection score for face images. When the quality score ≥ the quality score threshold set by ZOLOZ, the face quality passes. When the quality score < the quality score threshold set by ZOLOZ, the face quality fails and the total result of the face module is Failure.
ExtFaceInfo.faceLivenessResult	Liveness test results	Success: The liveness detection test has passed. Failure: The liveness detection test has failed. This authentication has a high risk of a possible spoofing attack.
ExtIdInfo.ekycResultDoc	Document session total results	Success: The document verification has passed. Both the document quality compliance test and anti-spoofing test have passed. Failure: The document verification has failed. There is a high risk present as the document quality compliance test did not pass. For example, the document may be blurred, or the document type is incorrect, etc. Pending: There is a certain risk present in this authentication, and a second manual review is required. The document anti-spoofing test has failed i.e. prints or duplicate documents, etc.
ExtIdInfo.spoofResult	Document anti-spoofing results	Detailed document anti-spoofing results. All the anti-spoofing detection values supported by ZOLOZ are as follows TAMPER_CHECK: Masking tamper detection. Y means pass, N means fail. MATERIAL_CHECK: Material detection; Y means pass, N means fail. SCREEN_RECAPTURE_CHECK: Screen recapture detection; Y means pass, N means fail. INFORMATION_CHECK: Information verification detection. Verifies ID, name and symbols in the China Hong Kong ID card; Y means pass, N means fail. SECURITY_FEATURE_CHECK: Anti-spoofing security feature detection. Detects security features in the Hong Kong ID card and the Malaysian identity card; Y means pass, N means fail.
ExtIdInfo.docErrorDetails	Details of documentation identification failure	NO_REQUIRED_ID: The ID picture does not match the specified ID type. BLUR: The ID picture is blurred. NO_FACE_DETECTED: The face that should have been detected in the specified ID picture is not detected from the uploaded ID picture. NOT_REAL_DOC: The ID security detection has failed. The ID picture is detected as fake. EXPOSURE: The ID picture is overexposed. UNKNOWN: All other recognition errors.
ExtRiskInfo.ekycResultRisk	Risk control results	Success: Risk control verification has passed. All risk control checks have passed. Failure: Risk control verification has failed. There is a high risk present in this authentication, and accumulated attack risk is detected. Pending: There is a certain risk present in this authentication, and a second manual review is required. Possible reasons are IDN, blacklist, age mismatching; please check ExtRiskInfo.strategyPassResult for the specific reasons.
ExtRiskInfo.strategyPassResult	Risk control result details	PASS: Risk control has passed. VELOCITY_HIGH_RISK: Accumulated attack risk is detected. ID_NETWORK_HIGH_RISK: IDN risk has been detected for multiple transactions, e.g. situations where the same face has different IDs, or the same ID with different faces etc. BLACKLIST_HIGH_RISK: Blacklist hit has been detected. AGE_MISMATCH_HIGH_RISK: There is a significant age difference between the live face and the face in the ID.

Product advantages

Regulatory compliance

ZOLOZ Real ID is deployed in Mainland China, Hong Kong, Philippines, Malaysia, Thailand, and Vietnam, meeting local eKYC regulatory requirements at various levels.

Fully automated process

With deep learning and risk control models, the entire process completes automatically with immediate results. Average application time is 3 minutes, and Real ID results are available within 10 seconds — delivering a fast user experience while reducing labor costs.

Cross-platform support

ZOLOZ supports iOS, Android, HarmonyOS, Web, API access, App support, WeChat H5, mobile browsers, and other application types.

Effective fraud protection

ZOLOZ has passed ISO30107-3 (iBeta1/2) certification, validating face liveness detection capabilities to international standards.
ZOLOZ is qualified for "Live Detection (Enhanced Level)" by China's authoritative bank card testing center, meeting compliance requirements for finance and government industries.

Common scenarios

Remote identity authentication

For online account openings in finance, insurance, life services, healthcare, education, transportation, and other industries, Real ID automatically identifies document information, improves processing efficiency, reduces fraud risk, and meets regulatory requirements.
Collects face information through mobile devices. ZOLOZ verifies that the face is genuine and matches the ID document, ensuring transaction and account security while streamlining remote processes.

Automated data entry

In medical, financial, government, legal, and education industries, Real ID enables rapid identification and entry of ID card information, reducing labor costs and improving processing efficiency.

Face capture and detection

For banking and government use cases, mobile devices collect user selfie images for retention. ZOLOZ’s face capture solution combines multiple face and mask detection capabilities to verify that captured images meet security requirements.