Skip to content

Screen 4: Confirm Identity

The customer has just returned from DigiLocker (Government of India’s digital document platform). They land on a screen that already knows their name, date of birth, gender, father’s name, address, and photo. All of this was fetched from their Aadhaar XML during the DigiLocker consent. On top of that, the four async API calls from Screen 2 have now completed, so the system also has their KRA (KYC Registration Agency) record (occupation, income range, net worth) and CKYC (Central KYC) data if they exist. The customer sees a pre-filled form and only needs to type one thing: their email address. This is the payoff of the DigiLocker-first architecture.

4 Confirm Identity ~30 seconds

Purpose: Present the pre-filled identity data for user confirmation. Only email needs to be entered.

This screen is where the customer first sees the power of the system working on their behalf. Instead of filling out a long form, they are reviewing data that the system has already gathered from three authoritative sources: DigiLocker, KRA, and CKYC.

These fields come directly from DigiLocker and are displayed as read-only. The customer cannot edit them — they are government-verified.

FieldSource
NameDigiLocker (Aadhaar XML)
Date of BirthDigiLocker (Aadhaar XML)
GenderDigiLocker (Aadhaar XML)
Father’s NameDigiLocker (Aadhaar XML)
Full AddressDigiLocker (Aadhaar XML)
PhotoDigiLocker (Aadhaar XML)
PAN (Permanent Account Number)User input (Screen 2)

If the customer has an existing KYC record with another broker, additional financial fields are also pre-filled. These come from the KRA lookup and CKYC search that fired on Screen 2.

FieldSource
OccupationKRA record
Income RangeKRA / CKYC record
Net WorthKRA / CKYC record
CKYC NumberCKYC Search result

The only field the customer actually types on this screen is their email address.

FieldValidationNotes
EmailValid email formatMobile already verified on Screen 1

Behind the scenes, this screen is also where your system assembles the identity record that will be used for all downstream operations — exchange registration, depository account opening, and regulatory filings. The data sources are stitched together with a clear priority: DigiLocker fields take precedence, followed by CKYC, then KRA.

KRA Integration

VendorAPIsKey FeaturesCost/txn
Digio RecommendedREST/JSONAll 5 KRAs via interoperability. PAN Status Check, Fetch Details, Upload/Update. IP whitelisting. 2-day integration.Rs.3-5
CVL KRA Direct AlternateSOAP/XMLGetPanStatus, InsertUpdateKYCRecord, bulk tilde-delimited files. Legacy but stable.Rs.2-3
TrackWizz NewREST/JSONKRA submission + CKYC upload + AML (Anti-Money Laundering) screening in one platform. Regulatory reporting bundle.Rs.3-5

Full spec: KRA Integration

The CKYC integration serves a dual purpose: it provides pre-fill data now, and later (post-approval) the system will upload the customer’s complete KYC record back to the CKYC registry. This dual upload — to both KRA and CKYC — has been mandatory since August 2024.

CKYC Integration

VendorAPIsKey FeaturesCost/txn
Decentro RecommendedSearch + Download + UploadREST API. Masked CKYC search (Jan 2025). Full download with identity match. Bulk upload.Rs.3-10
Digio AlternateSearch + Download + UploadFI code config, CKYC public key, keystore. Java 17 / Docker. GitHub SDK available.Rs.3-10
TrackWizz NewSearch + UploadCKYC solution for reporting entities. Combined with AML screening.Rs.5-10
Protean Direct AlternateSFTP + APIDirect CERSAI integration. Batch and real-time. Official registry operator.Contact

Full spec: CKYC Integration