Indonesia NIK verification API: 16-digit structure, region codes and Dukcapil checks

Field layout of the 16-digit NIK

Province codes

11 Aceh, 12 North Sumatra, 13 West Sumatra, 14 Riau, 15 Jambi, 16 South Sumatra, 17 Bengkulu, 18 Lampung, 19 Bangka Belitung Islands, 21 Riau Islands, 31 Jakarta, 32 West Java, 33 Central Java, 34 Yogyakarta, 35 East Java, 36 Banten, 51 Bali, 52 West Nusa Tenggara, 53 East Nusa Tenggara, 61 West Kalimantan, 62 Central Kalimantan, 63 South Kalimantan, 64 East Kalimantan, 65 North Kalimantan, 71 North Sulawesi, 72 Central Sulawesi, 73 South Sulawesi, 74 Southeast Sulawesi, 75 Gorontalo, 76 West Sulawesi, 81 Maluku, 82 North Maluku, 91 Papua, 92 West Papua, 93 South Papua, 94 Central Papua, 95 Highland Papua, 96 Southwest Papua.

The four Papua provinces created in 2022 carry their own codes: 93 South Papua, 94 Central Papua, 95 Highland Papua and 96 Southwest Papua.

The code records where the NIK was issued, not where the person lives now.

Response contents of an Indonesia NIK verification API

A parse result tells you whether a number is well formed. A verification response tells you whether the person in front of the camera owns it. deepidv runs one session: document capture with OCR and the AI document fraud check, face liveness with a 1:1 match to the document photo, the Dukcapil record check, PEP and sanctions screening, and an optional 1:N match that flags the same face behind a second account.

• One decision per session, with an outcome for every step, delivered by webhook (session.status.verified, session.status.rejected, session.status.failed).
• A reason for every non-pass outcome, separating malformed input, a record that was not found, a mismatch between document and record, and a registry that did not answer.
• A signed verification receipt with a UTC timestamp per step, anchored on Base L2 with zero personal data on chain, checkable at proof.deepidv.com.

Capturing the e-KTP

The e-KTP carries a chip and prints its fields in Bahasa Indonesia. Many Indonesians have a single name, so name fields must accept one word. deepidv captures the card in a single shot, runs the AI document fraud check, and decodes the NIK to compare the date of birth and gender with the printed fields. Where a holder presents the digital identity (Identitas Kependudukan Digital, or IKD, the digital form of the e-KTP), deepidv reads its QR code in the same flow.

Dukcapil record checks

Access to Dukcapil data runs through a cooperation agreement with the Ministry of Home Affairs, and returns the registered data and photo for face matching. Personal data is processed under Law 27 of 2022 on Personal Data Protection.

Liveness, face match and OJK rules

OJK's AML/CFT regulation for financial services providers, POJK Number 8 of 2023, requires customer due diligence and permits non-face-to-face electronic verification. deepidv runs passive liveness, a face match and PEP and sanctions screening, and Arbiter drafts reports for PPATK.

How deepidv runs Indonesia verification

deepidv is a verification engine and agentic compliance suite built from the ground up, without third-party verification APIs underneath. The engine is SOC 2, ISO 27001 and PCI DSS certified, and deepidv is a member of DIACC and the AVPA. Luna, the verification agent, builds and sends Indonesia verification workflows from the platform or from any LLM through MCP. Arbiter, the compliance agent, maps the workflow to OJK, Bank Indonesia requirements, monitors accounts after onboarding and drafts suspicious transaction reports for PPATK for your team to review.