Philippines national ID verification API: PhilSys Number, PCN and signed QR checks

PhilSys numbers and formats

The signed QR code

The QR on the PhilID and ePhilID holds the card data and a digital signature from the PSA. Verifying the signature proves the data was issued by PhilSys and has not been altered, even when the printed card has been. deepidv verifies it offline and compares the QR data with the printed fields and the face.

The PSA runs its own public QR authentication service, PhilSys Check, at verify.philsys.gov.ph, which uses public-key cryptography to confirm the signature on a PhilID or ePhilID.

Response contents of a Philippines ID verification API

A parse result tells you whether a number is well formed. A verification response tells you whether the person in front of the camera owns it. deepidv runs one session: document capture with OCR and the AI document fraud check, face liveness with a 1:1 match to the document photo, the PhilSys signature check, PEP and sanctions screening, and an optional 1:N match that flags the same face behind a second account.

• One decision per session, with an outcome for every step, delivered by webhook (session.status.verified, session.status.rejected, session.status.failed).
• A reason for every non-pass outcome, separating malformed input, a record that was not found, a mismatch between document and record, and a registry that did not answer.
• A signed verification receipt with a UTC timestamp per step, anchored on Base L2 with zero personal data on chain, checkable at proof.deepidv.com.

Capturing the PhilID, ePhilID and other IDs

deepidv captures the PhilID, ePhilID, UMID, LTO driver's licence and the Philippine passport, with NFC chip reading for the passport. The PhilSys Act requires the PhilID to be accepted as sufficient proof of identity, so a flow that rejects it creates a problem the law does not allow.

PhilSys record checks

Online authentication against the PhilSys registry is available to relying parties under PSA arrangements. Personal data is processed under the Data Privacy Act of 2012.

Liveness, face match and BSP rules

BSP rules allow remote onboarding with technology that verifies the customer's identity and captures a live image, set out in BSP Circular No. 1170, Series of 2023, which added the electronic KYC guidelines to the Manual of Regulations. deepidv runs passive liveness, a face match to the card and PEP and sanctions screening, and Arbiter drafts covered and suspicious transaction reports for the AMLC.

How deepidv runs Philippines verification

deepidv is a verification engine and agentic compliance suite built from the ground up, without third-party verification APIs underneath. The engine is SOC 2, ISO 27001 and PCI DSS certified, and deepidv is a member of DIACC and the AVPA. Luna, the verification agent, builds and sends Philippines verification workflows from the platform or from any LLM through MCP. Arbiter, the compliance agent, maps the workflow to the BSP requirements, monitors accounts after onboarding and drafts suspicious transaction reports for the AMLC for your team to review.