⚙️ WHMCS Addon ? Powered by Sumsub
KYC · Built for Hosting Providers

Let's put identity verification inside your WHMCS.

We built a WHMCS addon that wires Sumsub's identity checks straight into your order flow. Clients verify in your client area. Orders activate automatically. Your team stays focused on customers — not documents.

The addon is the WHMCS integration layer — nothing more. All document scanning, liveness, and face matching happens inside Sumsub, using the verification level you configure in your own Sumsub account.
Get the Addon → See how it works
From €49 / year · license per WHMCS install · 30-day money-back
★★★★★ 5.0 Trusted Shops
★★★★★ 4.4 Trustpilot
✓30-day money-back
WHMCS Admin → Addons → KYC Dashboard
AM
Anna Müller
anna@example.de
✓ Approved
RP
Radu Popescu
radu@example.ro
⏳ Pending
JD
John Davis
john@example.com
✓ Approved
TM
Test Minor
minor@example.com
✗ Under 18
Identity verification powered by Sumsub
⚙️ WHMCS Addon (by TPC Hosting)
＋ Your Sumsub Account
✓ Automated KYC Flow
No document handling on our side. The addon never touches your clients' IDs, never runs a liveness check, and never makes a verification decision — those all happen inside Sumsub. We just make Sumsub's output usable where you already work: inside WHMCS.
Sumsub operates globally — supports frameworks including
EU AMLD
UK FCA
US FinCEN
Singapore MAS
GDPR
Romanian Law 129/2019
Why WHMCS providers need this

Running hosting without KYC is getting expensive.

Fraudulent signups cost real money. Regulators are tightening up. Manual checks don't scale past a few orders a day. We've seen it in our own business — so we fixed it.

Broken credit card and chargeback receipt

Chargebacks and stolen cards

Every fraudulent signup costs you the chargeback fee plus a service you already provisioned. Verifying identity up-front kills this at the source.

Legal scroll with wax seal and gavel representing compliance

Compliance pressure is real

EU AMLD, NIS2, and national AML laws increasingly require customer due diligence for digital services. Identity verification is the first piece.

Tall stack of paper folders with a clock showing wasted time

Manual review drains support

Support staff reviewing IDs, flagging orders, and chasing documents is a cost you can automate away. We did — and got our weekends back.

Built for WHMCS

Every piece is WHMCS-native.

No proxy dashboards. No second login. No parallel CRM. If you run WHMCS, this is how identity verification should feel — part of the product you already use.

Where it plugs in

At checkoutOrder placed → addon creates Sumsub applicant → status set to "Pending KYC"
In the client areaVerification page + sticky banner inside your theme → embedded Sumsub WebSDK
Via cronPolls Sumsub for results → accepts orders using WHMCS AcceptOrder → sends WHMCS email templates
In the admin panelKYC dashboard in your Addons menu → every status, every applicant, with manual override
  • 1
    Drop-in install Upload the ZIP to /modules/addons/, activate in WHMCS Admin, paste your Sumsub keys. Under 10 minutes on a live WHMCS.
  • 2
    Native WHMCS order flow Uses the real AcceptOrder API, real order statuses, and real WHMCS email templates. No custom workflow the rest of your business has to learn.
  • 3
    Per-product-group control Require KYC only for VPS, dedicated, or domain orders — whatever fits your risk profile. Shared hosting keeps activating in seconds.
  • 4
    Theme-friendly (Lagom2, Twenty-One) Client-facing pages inherit your theme. The verification banner sits inside your WHMCS, not on a separate domain.
  • 5
    Admin, not just client A real admin dashboard inside WHMCS Addons. See every applicant, every status, manual-approve edge cases, keep a trail for auditors.
The Product

WHMCS KYC Addon — built and sold by TPC Hosting.

Here's what you're buying. One license, one price, everything that's on this page. Sumsub is billed separately by Sumsub.

Laptop showing the WHMCS KYC admin dashboard with applicant list and status badges
WHMCS Addon · License

WHMCS KYC Addon · Powered by Sumsub

By TPC Hosting · Category: WHMCS Addons
★★★★★ In active production at TPC Hosting

Automated identity verification for your WHMCS clients. The addon plugs Sumsub's KYC engine straight into your order flow, client area, and admin panel — hold orders as "Pending KYC", auto-activate once verification clears, keep a full audit trail for auditors.

€ 49 / year
Per WHMCS installation · renews yearly · cancel any time · excluding VAT
  • Unlimited client verifications (Sumsub fees billed separately)
  • Free updates for the whole license year
  • Email support from the engineers who wrote the code
  • WHMCS 8.x · PHP 8.2+ · Lagom2 / Twenty-One theme-ready
Add to Cart →
✓ 30-day money-back · ✓ Trusted Shops buyer protection · ✓ License key emailed instantly
What the addon actually does

The WHMCS integration, in detail.

The addon never scans documents, runs liveness, or checks faces — that's all Sumsub's job, configured in your Sumsub account. Here's exactly what our code handles on the WHMCS side.

Order-flow integration

Holds matching orders as "Pending KYC" at checkout, releases them via AcceptOrder once Sumsub approves. Uses native WHMCS statuses throughout.

Sumsub applicant linking

Creates the Sumsub applicant for each client at checkout, stores the applicant ID in WHMCS, keeps the two records in sync through the verification lifecycle.

Client-area embed

Adds a verification page and sticky banner inside your WHMCS client area. Hosts the Sumsub WebSDK so clients never leave your portal. The SDK itself is Sumsub's.

Age gate (under 18)

Reads the date-of-birth Sumsub returns and rejects applicants under 18. Your policy, enforced in WHMCS — after Sumsub has confirmed the document is real.

Name match vs WHMCS account

Compares the name Sumsub extracts from the ID with the name on the WHMCS client record. If they don't match, the addon resets the applicant and emails them to retry.

WHMCS admin dashboard

A page in your Addons menu listing every applicant, every status, and a manual-approve control for edge cases. Audit trail stored in your WHMCS database.

Per-product-group rules

Choose which WHMCS product groups or domain orders require verification. Low-risk shared hosting auto-activates; higher-risk orders wait for KYC.

WHMCS email templates

Every client notification — verification invite, approval, failure, retry — is a WHMCS email template you already control. Edit the copy, translate it, done.

Secured background sync

A secret-protected cron job polls Sumsub and advances WHMCS orders. HMAC signatures on every Sumsub call. CSRF-protected admin endpoints. We wrote it properly.

How it works

Set it up once. Let it run.

The whole verification flow runs in the background. Clients get verified. Your team stays free. Here's the flow from checkout to activation.

1
Shopping cart with a server inside, pause symbol showing order is on hold

Client places an order

Customer checks out as usual. The addon creates a Sumsub applicant and flags the order "Pending KYC" — activation paused.

2
Browser window with passport document and selfie phone, verification checkmark

Identity gets verified

Client gets a WHMCS email with a direct Sumsub link. They scan their ID and take a selfie inside your client area. Typically 2 minutes.

3
Server rack being activated by a lightning bolt with a verified checkmark

Order activates automatically

Sumsub approves. The addon's cron auto-activates the service via WHMCS's own AcceptOrder API, then emails the client.

Global coverage

KYC isn't just an EU thing. Neither is this.

Sumsub operates in 220+ countries and processes documents from every major issuing authority. Whichever markets your WHMCS serves, verification follows.

????????

European Union

  • Germany, Austria, France
  • Spain, Italy, Netherlands
  • Poland, Romania, Portugal
AMLD · NIS2 · GDPR
????????

United Kingdom

  • Post-Brexit FCA rules
  • UK AML regulations
  • Companies House checks
FCA · MLR 2017
????????

United States

  • Driver's licenses, passports
  • State ID verification
  • FinCEN-aligned workflows
FinCEN · BSA · KYC/CIP
????

Asia-Pacific

  • Singapore, Hong Kong, Japan
  • Malaysia, Philippines, Korea
  • Indonesia, Thailand, NZ
MAS · Local AML
????????

Romania & CEE

  • Romanian Law 129/2019
  • Local ID cards
  • EU passport harmonization
Law 129/2019 · ONPCSB
????????

Latin America

  • Brazil, Mexico
  • National ID + CPF/INE
  • Local document types
COAF · CNBV
????????

Middle East & Africa

  • South Africa, UAE, Israel
  • National ID systems
  • FATF-aligned workflows
FATF · Local AML
????

Everywhere else

  • 220+ countries supported
  • 14,000+ document types
  • 40+ SDK languages
Global reach
220+ countries  ·  14,000+ docs  ·  40+ languages

Coverage comes from Sumsub's global verification network. The addon exposes all of it inside WHMCS — no per-country configuration required.

How the pieces fit together

Two systems. Clear responsibilities.

No overlap, no confusion. The WHMCS addon is the integration layer. Every identity decision is made inside Sumsub, using the verification level you configure there.

⚙️ The TPC KYC Addon (inside WHMCS)

  • Holds matching orders in "Pending KYC" status
  • Creates the Sumsub applicant at checkout
  • Embeds the Sumsub WebSDK in the client area
  • Polls Sumsub via cron for verification results
  • Under-18 gate based on the DOB Sumsub returns
  • Name check: Sumsub result vs WHMCS client record
  • Auto-activates orders via WHMCS AcceptOrder
  • Admin dashboard + manual-approve inside WHMCS
  • Sends notifications via WHMCS email templates
  • Per-product-group and per-domain rules

? Sumsub (your own Sumsub account)

  • All document capture and OCR
  • Document authenticity & forgery detection
  • Liveness detection
  • Face match against the ID photo
  • The verification UI (WebSDK / MobileSDK)
  • Country and document-type coverage
  • Verification level configuration (which checks run)
  • Data retention and storage
  • Pricing and per-verification billing
  • Ongoing updates to the verification engine
Compliance frameworks

Helps you meet the rules that apply to you.

Identity verification is a foundational piece of most KYC/AML regimes. The addon delivers that piece end-to-end inside WHMCS. Your legal team owns the strategy — we keep the plumbing honest.

  • ✓
    EU AML Directive (AMLD) Identity verification is the first step in customer due diligence under 5AMLD/6AMLD. Sumsub Basic covers this step.
  • ✓
    NIS2 Directive Helps hosting and digital infrastructure providers document customer identification for essential-entity obligations.
  • ✓
    Romanian Law 129/2019 Covers the client-identification requirement of Romania's AML framework administered by ONPCSB.
  • ✓
    UK FCA / MLR 2017 Standard UK AML identity verification obligations — supported via Sumsub's UK-approved document set.
  • ✓
    GDPR Sumsub is GDPR-compliant. Data encrypted in transit and at rest; EU data residency available at the Sumsub level.
Certificate with wax seal behind a shield, stack of audit documents with a verified stamp

Audit-ready from day one

The addon keeps a full trail: applicant IDs, statuses, timestamps, and outcome per WHMCS order. When an auditor asks, it's one dashboard away.

ISO 27001Sumsub platform
SOC 2 Type IIAudited security
PCI-DSSSumsub infra
GDPREU data rules

FAQ

Questions, answered.

The ones we get asked most. If yours isn't here, talk to an engineer — no sales call, promise.

Is this the KYC service, or the WHMCS connector?

The WHMCS connector. The verification engine is Sumsub — you sign up at sumsub.com, choose your plan (Basic is what most hosting providers need), and paste the API credentials into our addon. The addon handles every WHMCS-side piece: order holds, client emails, the verification page, the admin dashboard, auto-activation.

Ready to automate verification in your WHMCS?

Install the addon, plug in your Sumsub account, activate. Your next checkout is KYC-verified — automatically. If it's not the right fit in 30 days, we refund it.

Get the KYC Addon →
✓ 30-day money-back guarantee  ·  ✓ Free setup support  ·  ✓ Works on any WHMCS 8.x