Identity documents

Verify a person entirely through the API by sending their identity document photos in the Create Verification request. No hosted session, no follow-up calls: one POST, then poll for the verdict.

Which files to send

Pick the document_type that matches the document being photographed. It decides exactly which keys the documents object must contain — nothing more, nothing less.

`document_type`	Required `documents` keys
`ID_CARD`	`id_card_front`, `id_card_back`, `selfie`
`DRIVERS`	`drivers_front`, `drivers_back`, `selfie`
`RESIDENCE_PERMIT`	`residence_permit_front`, `residence_permit_back`, `selfie`
`PASSPORT`	`passport_front`, `selfie`

Every value is the file’s raw bytes, base64-encoded:

import base64

def b64(path):
    with open(path, "rb") as f:
        return base64.b64encode(f.read()).decode()

File rules

JPEG, PNG, or PDF. The type is detected from the file’s actual bytes, so the extension doesn’t matter.
The selfie must be a JPEG or PNG photo of the person’s face.
5MB maximum per file, measured before encoding.
Send the complete set in one request. A missing, oversized, or unreadable file fails the whole request with an error naming the exact key — fix that file and send the same request again. Nothing partial is ever submitted.

Full example

curl -X POST "https://api.whop.com/api/v1/verifications?account_id=biz_XXXXXXXX" \
  -H "Authorization: Bearer $WHOP_API_KEY" \
  -H "Content-Type: application/json" \
  -d "{
    \"first_name\": \"Jane\",
    \"last_name\": \"Doe\",
    \"date_of_birth\": \"1990-01-01\",
    \"country\": \"US\",
    \"phone\": \"+15551234567\",
    \"tax_identification_number\": \"123456789\",
    \"address\": { \"line1\": \"123 Main St\", \"city\": \"Austin\", \"state\": \"TX\", \"postal_code\": \"73301\" },
    \"business_website\": \"https://example.com\",
    \"document_type\": \"DRIVERS\",
    \"documents\": {
      \"drivers_front\": \"$(base64 -i front.jpg)\",
      \"drivers_back\": \"$(base64 -i back.jpg)\",
      \"selfie\": \"$(base64 -i selfie.jpg)\"
    }
  }"

A 201 means every document was accepted and review has started — the response’s required_documents lists each key as submitted. Poll Retrieve Verification until status becomes approved or rejected.

business_website is optional. When omitted, the account’s whop.com page is used for payout setup. If you send one, it must be an external site or social link; Whop store pages are rejected.

If a document is rejected

When the reviewer can’t accept a photo, status returns to action_required and the rejected keys appear in required_documents as pending_upload with a rejection_reason. Send the same Create Verification request again with a better photo — the review resumes automatically.

Country coverage

ID_CARD, DRIVERS, and PASSPORT are accepted for people in most countries. The exceptions are listed below — for a country in this table, only the listed values work; anything else comes back through the rejection flow above.

Country	Accepted `document_type` values
`AD`	`DRIVERS`, `RESIDENCE_PERMIT`, `PASSPORT`
`AI`	`DRIVERS`, `PASSPORT`
`AQ`	`PASSPORT`
`AS`	`DRIVERS`, `PASSPORT`
`CC`	`ID_CARD`, `PASSPORT`
`CK`	`DRIVERS`, `PASSPORT`
`CX`	`DRIVERS`, `PASSPORT`
`EH`	`PASSPORT`
`ER`	`ID_CARD`, `PASSPORT`
`FK`	`PASSPORT`
`FM`	`DRIVERS`, `RESIDENCE_PERMIT`, `PASSPORT`
`FO`	`DRIVERS`, `PASSPORT`
`GF`	`ID_CARD`, `RESIDENCE_PERMIT`, `PASSPORT`
`GL`	`DRIVERS`, `PASSPORT`
`HM`	`PASSPORT`
`KY`	`DRIVERS`, `PASSPORT`
`MS`	`DRIVERS`, `RESIDENCE_PERMIT`, `PASSPORT`
`NF`	`PASSPORT`
`PM`	`ID_CARD`, `PASSPORT`
`SH`	`PASSPORT`
`SJ`	`PASSPORT`
`TF`	`PASSPORT`
`TK`	`DRIVERS`, `PASSPORT`
`TV`	`DRIVERS`, `PASSPORT`
`VA`	`PASSPORT`
`WF`	`ID_CARD`, `PASSPORT`
`YT`	`ID_CARD`, `PASSPORT`

RESIDENCE_PERMIT is accepted in most countries too, but its coverage is narrower. Beyond the table above, it is not accepted for people in: AG, AW, BB, BF, BI, BL, BZ, CV, CW, DM, GG, GI, GN, GS, GU, GY, IM, IO, JE, KI, KM, LC, LR, MF, ML, MP, MQ, MU, NC, NR, NU, NZ, PF, PG, PN, PR, PS, PW, SB, SC, SM, SR, ST, SX, SY, SZ, TC, TL, TO, VC, VI, WS Identity verification is not available for people in these countries — every document type is declined: AF (Afghanistan), BY (Belarus), CU (Cuba), HT (Haiti), IQ (Iraq), IR (Iran), KP (North Korea), LB (Lebanon), LY (Libya), MM (Myanmar), MZ (Mozambique), RU (Russia), SD (Sudan), SO (Somalia), SS (South Sudan)

This table reflects Whop’s verification provider configuration as of July 2026. Country acceptance is applied during review, so a document type that isn’t valid for the person’s country fails with a rejection_reason rather than an upfront error.

​Which files to send

​File rules

​Full example

​If a document is rejected

​Country coverage

Which files to send

File rules

Full example

If a document is rejected

Country coverage