Remote identity verification on WhatsApp, engineered with AI-assisted eKYC.
Verify customers over official WhatsApp. A live face challenge runs on the customer’s phone, AI reads the ID document and compares the selfie with the ID photo, and the result lands in your team dashboard as a reviewable record.
Zero-friction verification completed directly on WhatsApp.
No app store downloads or forgotten credentials. The applicant taps a single authenticated link delivered inside their WhatsApp chat and finishes in approximately 30 seconds.
- 01
Send a secure WhatsApp link
Initiated in 1 click from team inbox
Compliance officers trigger an intake request from the WhatsApp dashboard, or the AI assistant sends it automatically upon customer inquiry. The link opens directly in the user’s mobile browser without app downloads.
- 02
Customer scans ID and takes a selfie
Guided edge camera experience
The user selects MyKad, MyPR, Driving Licence, or Passport. Real-time edge assistance corrects perspective, eliminates glare, and guides a 2-second 3D liveness selfie check on their phone camera.
- 03
Review results and export records
Automated dossier with full audit trail
Extracted identity data, document front/back captures, the live selfie, and the face-match result appear in your dashboard. Review the record and export it as a PDF.

How MACSBIT applies AI and machine learning for eKYC.
A hybrid approach: a face-landmark model runs in the customer’s browser to guide a short live challenge, then a cloud AI model reads the document and compares the selfie with the ID photo.
Live Face Challenge in the Browser
A face-landmark model runs inside the customer’s browser and guides a short live challenge before the selfie is captured.
- Tracks facial landmarks in real time on the customer’s own device using a self-hosted MediaPipe model.
- Asks for a short live action (such as a blink and a smile) so a static photo is less likely to pass.
- Guides the customer to frame the face and the document correctly before capture.
- The model files are served from our own site rather than from a third party.
Purpose-built for the operators who review the evidence.
Reviewers manage verification queues, inspect side-by-side photographic evidence, communicate with applicants on WhatsApp, and export audit dossiers from a unified interface.
One unified photographic record per customer
Each verification is saved as a customer record your team can inspect, with the document, selfie and extracted details side by side.
- Side-by-side photographic comparison: high-res ID document scan alongside the live verified selfie
- Full extracted ledger: Name, NRIC/Passport number, address, driving licence class, and validity interval
- Face-match score and liveness result shown with timestamps
A review queue built for compliance officers
Centralized management console to monitor applicant onboarding in real time, filter verification states, and export records.
- Filter by verification state (Verified, Needs Review, Rejected), document type, and date range
- PDF export of each verification record
- Export full CSV audit ledgers or stream live verification callbacks to your core ERP via webhooks
Verification, live chat, and payments in one interface
Turn your official WhatsApp Business number into a collaborative operations console where agents and AI seamlessly co-pilot.
- Instant human takeover: compliance staff can intervene in bot conversations at any moment
- Generate instant eKYC verification and FPX/DuitNow payment links directly in the live chat
- Live customer profile and verification status displayed alongside every active conversation
Complete verification infrastructure out of the box.
Everything required to verify identity, satisfy statutory due diligence records, collect booking payments, and manage high-volume customer chats.
Multi-Document Neural OCR
High-precision reading of Malaysian MyKad, MyPR, Malaysian Driving Licences (classes & validity), and International Passports with the photo page and MRZ read by AI.
Face Match & Liveness
A live challenge runs in the browser using MediaPipe face landmarks, then an AI model compares the selfie with the ID photo and flags likely screen or print spoofs.
PDF Verification Records
Exportable PDF records with the extracted details, document and selfie images, and the face-match result for each verification.
Shared Team Inbox & AI Co-Pilot
Official WhatsApp Business platform integration with multi-seat operator access, automated FAQ assistance, and instant human takeover.
In-Chat FPX & DuitNow Links
Issue instant booking deposit and invoice payment links directly inside the WhatsApp conversation with real-time settlement sync.
Outbound Webhooks & REST API
Automate compliance reminder broadcasts with approved Meta templates, export CSV records, and connect existing CRM systems via REST API.
Physical thumbprint hardware vs. MACSBIT WhatsApp eKYC
Traditional biometric USB dongles require in-person branch travel, expensive driver installations, and cannot verify international passports. MACSBIT operates 100% in the cloud on the customer’s existing smartphone.
| Evaluation Metric | Physical USB Reader | MACSBIT Cloud Engine |
|---|---|---|
| Customer intake location | Mandatory in-person branch or counter visit | 100% remote on customer’s phone via WhatsApp |
| Hardware & setup costs | RM 500 – RM 3,000 per physical USB reader dongle | Zero hardware. Cloud-native & smartphone camera |
| Foreign passport support | Fails. Thumbprint readers only support local MyKad | Passports supported: photo page and MRZ read by AI |
| Driving licence class verification | Manual visual inspection, prone to human error | Automated OCR extraction of classes (D/DA/CDL) & validity |
| Concurrent onboarding capacity | 1 customer per physical scanner at a time | Many sessions in parallel, within your plan limits |
| Audit evidence preserved | Paper photocopies or unverified manual ledger logs | Photographic record of each verification, with PDF export |
Tailored identity verification across high-trust industries.
Used by enterprises and professional firms where verifying legal identity is critical prior to releasing keys, signing statutory documents, or disbursing funds.
Property Developers & Rentals
Verify SPA signatories, tenancy agreements, and foreign buyers remotely before contract signing or key handover.
Company Secretaries & Legal
Collect identity documents from directors, shareholders, and overseas owners remotely to support your due diligence.
Car Rental & Mobility Fleets
Validate driving licence classes (D/DA) and expiry while preventing vehicle theft with 1:1 facial matching.
Fintech, Lending & Remittance
Remote borrower onboarding over WhatsApp with a live selfie check and a photographic record of each verification.
Hotels, Co-Living & Vacation Stays
Contactless guest identity intake for locals (MyKad) and tourists (Passports) with automated smart PIN delivery.
Pawnshops & Precious Metals
Collect and keep identity records before high-value gold buyouts and collateral disbursement.
Gig Workforce & Courier Intake
Verify delivery riders, logistics drivers, and contract staff credentials in seconds before dispatching work orders.
Luxury Retail & Consignment
Protect luxury watch and handbag transactions against chargeback fraud and stolen credit cards with verified identity proof.
Simple monthly pricing. Scale as your verification volume grows.
Transparent plans denominated in Malaysian Ringgit. No hidden hardware leases or per-device setup fees. Modify or cancel from the dashboard at any time.
Starter
SMALL BUSINESSFor boutique secretarial firms, rental operators, and growing agencies.
- 100 eKYC verifications / month
- Up to 5,000 WhatsApp messages / month
- 2 staff seats (1 Admin + 1 Operator)
- MyKad, Passport & Driving Licence OCR
- On-device liveness check & AI face match
- Manual DuitNow QR payment generator
- WhatsApp Live Chat with human takeover
- Real-time verification queue ledger
- Standard email support
Professional
MOST POPULARFor established corporate service providers, mobility fleets, and lenders.
- 350 eKYC verifications / month
- Up to 15,000 WhatsApp messages / month
- 5 staff seats with role permissions
- Automated FPX & DuitNow payment links
- Full photographic audit dossiers (ID + Selfie)
- Custom AI assistant FAQ & system prompt
- Scheduled WhatsApp broadcasts & templates
- Outbound webhooks & CSV audit export
- Priority onboarding & email support
Enterprise
COMMERCIAL SCALEFor high-volume commercial enterprises, property agencies, and fleet operators.
- 1,200 eKYC verifications / month
- Up to 35,000 WhatsApp messages / month
- 10 staff seats with multi-department routing
- Direct HitPay & DuitNow merchant integration
- AI-assisted document tamper checks
- REST API endpoints for ERP & core system sync
- Full photographic dossiers (ID + selfie)
- Dedicated account contact
- Priority technical support
Frequently answered questions
Have custom compliance requirements or need high-volume API throughput? Create a test workspace to evaluate the platform.
Does the customer need to download an application from the app store?
No. The verification link opens immediately in the customer’s existing smartphone web browser (Chrome, Safari, etc.). The liveness check runs in the browser via WebAssembly, so no app installation is needed.
How does the platform prevent presentation attacks, such as photos of photos or video replays?
A short live challenge (such as a blink and a smile) runs in the customer’s browser using face landmarks, and a cloud AI model then assesses the selfie for signs of a screen or printout. These checks reduce spoofing but are not independently certified and can be wrong.
Which identity documents are supported?
MACSBIT supports Malaysian MyKad (Blue IC), MyPR (Red IC), Malaysian Driving Licences (with vehicle class and validity date parsing), and international passports, read from the photo page and machine-readable zone (MRZ) by an AI model.
Do I need my own WhatsApp Business number?
Yes. You connect your official WhatsApp Business number through Meta’s Embedded Sign-Up during onboarding. Messages and verification links are delivered under your official business identity via the Meta Cloud API.
Can our staff intervene in live WhatsApp conversations?
Yes. Every plan includes the unified operator command center. Staff can view active conversations, toggle off automated AI responses for specific chats, chat directly with applicants, or resend verification and payment links.
How does MACSBIT comply with Malaysian PDPA standards?
MACSBIT is engineered in alignment with the Personal Data Protection Act 2010 (PDPA) principles. As a secure technology provider and data processor, MACSBIT provides TLS encryption in transit, AES-256-GCM credential encryption at rest, on-device liveness verification, strict tenant isolation, and automated data retention purging. Deploying businesses use our infrastructure to power digital verification workflows while retaining operational discretion over their customer onboarding and verification decisions.
Start verifying customers on WhatsApp today.
Connect your official WhatsApp Business number, select your tier, and issue your first verification link in minutes.