Bangladesh is the largest country in the world without a fully native, programmable identity layer. We have NID. We have mobile penetration past 75%. We have a regulator that will say yes if you show up with audit-grade controls. What's missing is the connective tissue: APIs that treat identity as infrastructure, not a project.
1. Population-scale eKYC is now table stakes
170M citizens, 53M smartphones, 12 digital banks live or in license. The win condition isn't "verify users faster." It's verify all users, continuously, with a unit cost low enough that EdTech and gig platforms can afford it. By 2028 we expect Bangladesh to process 500M+ verification events per year. Anyone still routing through call centers or photo review queues will be priced out of their own market.
2. SAARC cross-border identity is the next unlock
Bangladeshi diaspora workers move ৳29,000 crore in remittances yearly through siloed KYC reviews in 30+ corridors. The pragmatic path forward is mutual recognition — Bangladesh NID + Aadhaar + Nepal NID + Sri Lanka NIC, federated via signed assertions rather than data sharing. The technology exists. The political will is catching up.
3. AI fraud will outpace human review by 2027
Generative face models are already past the threshold where untrained reviewers can't tell. The defense isn't bigger review teams; it's three concurrent signals — passive liveness, device telemetry, and behavioral biometrics — fused in under 800ms. Anyone still selling document-only verification is selling a 2019 product.
4. Self-sovereign identity is closer than the discourse suggests
W3C Verifiable Credentials and DIDs went from research to standard. The interesting question for Bangladesh isn't whether SSI happens; it's who issues the trust anchors. Government? Banks? Independent infrastructure? Our bet is on a multi-issuer model where users carry a reusable KYC credential they present once, anywhere — issued by trusted parties, verifiable by anyone, revocable by the issuer.
5. Regulator co-design beats regulator avoidance
The fintech-vs-regulator narrative is lazy. Bangladesh Bank, BTRC, and the NID Wing have been more receptive to technical engagement than most operators expect. The companies that win the next decade are the ones building with the regulator — sandbox first, controls documented, audit trails native — not the ones trying to outrun it.
What we're committing to
- Sub-3-second median verification across all flows, at any scale.
- Open standards: verifiable credentials, OIDC, FAPI for high-assurance flows.
- A public roadmap (see /roadmap) so customers can plan against ours.
- A bug bounty and security memory that takes adversarial AI seriously.
- Pricing that lets gig and EdTech platforms verify their users economically.
None of this is romantic. It's plumbing. But the country that gets the plumbing right is the country that gets the next wave of digital products — and Bangladesh is going to get it right.
— The KYC.bd team. Published June 2026. Comments and corrections: hello@msg.bd.