Skip to content
· Afraz Khan

OCR for KYC: building document verification that actually works

Manual KYC onboarding is slow, expensive and error-prone. Automating it with OCR sounds simple until you hit real documents: glare, skew, dozens of ID formats, and a compliance team that will not accept 85% accuracy. Here is what it actually takes to build document verification that holds up in production.

The real problem is not “reading text”

Off-the-shelf OCR reads characters. KYC needs something harder: find the right document, locate the right fields, extract them accurately, and know when it is unsure. That is a pipeline, not a single API call.

A production pipeline we built for a money-transfer platform had four stages:

  1. Document detection and classification. Before extracting anything, you have to know what you are looking at. We trained a lightweight YOLOv8 classifier across multiple identity-document types, optimized for low-compute and edge deployment (70% less compute than standard solutions).
  2. Field and layout extraction. With the document type known, PaddleOCR extracts the specific fields that matter, using layout rather than blind full-page OCR.
  3. Face match. Pairing OCR with facial recognition (DeepFace) verifies the person matches the document.
  4. Confidence scoring. Every field carries a confidence score, so low-confidence extractions route to a human instead of silently passing.

The result: 98% field-detection accuracy across document types, and roughly EUR 40,000 per year in operating cost removed by automating onboarding that used to be manual.

Lessons that matter in production

  • Curate your own dataset. We labeled 5,000+ real documents for the specific types the client processed. Generic models plateau; a targeted dataset is what gets you from 85% to 98%.
  • Design for low compute. A lighter model (YOLOv8n) that runs at the edge often beats a heavier one that needs a GPU cluster, especially when data cannot leave the environment for privacy reasons.
  • Never auto-pass low confidence. The point of confidence scoring is to catch the 2% that need a human, which is exactly the 2% that would otherwise become a compliance incident.

The takeaway

KYC OCR is not a model, it is a pipeline: detect, classify, extract, verify, score. Build it that way, curate real data, and keep a human on the uncertain cases, and you get automation your compliance team will actually sign off on.


EpochC builds OCR and document-AI pipelines that ship to production. Start a project or hire on Upwork.