Age Verification APIBrazilFELCA CompliantAPI Online

Age Verification API for Brazil — CPF Check, Face Liveness & FELCA Compliance

FlagCheck is Brazil's native age verification API. Verify whether a Brazilian user is 18+ by CPF in under 2 seconds. Add face liveness for high-risk platforms. Fully compliant with the FELCA Law (Digital ECA) and LGPD. No CPF stored.

Age Verification API Brazil — FlagCheck CPF age check FELCA compliance
⚡ Response in < 2s🇧🇷 Brazilian-native🔒 CPF not stored✅ FELCA compliant📋 LGPD-safe🌐 REST API

What FlagCheck Offers

🎂

Age Check via CPF

Core compliance endpoint

Submit a CPF and get back is_adult: true/false plus CPF registration status. Under 2 seconds. The foundation for FELCA Law compliance.

  • ✓ Returns is_adult boolean
  • ✓ CPF status (regular / suspended / cancelled)
  • ✓ Compliance timestamp
  • ✓ CPF never stored
🤳

Face Liveness (Biometrics)

For high-risk platforms

Captures a live selfie and compares it against official biometric databases linked to the CPF. Prevents minors from using an adult's document. Recommended for betting and adult content.

  • ✓ Liveness detection (anti-spoofing)
  • ✓ Face match with CPF holder
  • ✓ Match confidence score
  • ✓ Works on mobile and desktop
🔍

Background Check

Criminal & judicial records

Full background check on any CPF: criminal records, ongoing judicial processes, police databases, and civil lawsuits. Used by HR teams, marketplaces, and dating apps.

  • ✓ Criminal record check
  • ✓ Ongoing lawsuits
  • ✓ Police databases
  • ✓ Civil processes
🏢

CPF & CNPJ Lookup

Identity & company data

Validate CPF registration status, retrieve name and registration data, or query CNPJ for company details, partners, status and registration date.

  • ✓ CPF status & name
  • ✓ CNPJ company data
  • ✓ Partners list
  • ✓ Registration date

Integration Examples

The FlagCheck API is a standard REST API. Here are quick-start examples in the most common languages:

cURLFELCA Age Check via CPF
# FELCA Age Check
curl -X POST \
https://api.flagcheck.com.br/api/felca/age-check \
-H "X-API-Key: YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"cpf": "123.456.789-00"}'
# ✅ Response — adult
{
"success": true,
"data": {
"is_adult": true,
"age": 32,
"date_of_birth": "1993-05-14",
"document": { "type": "CPF", "valid": true }
}
"meta": { "request_id": "felca_a1b2c3...", "timestamp": "2026-03-13T14:32:00Z" }
}
JavaScriptNode.js / server-side fetch
// Always call server-side — never expose API key client-side
const res = await fetch(
"https://api.flagcheck.com.br/api/felca/age-check",
{
method: "POST",
headers: {
"X-API-Key": process.env.FLAGCHECK_API_KEY,
"Content-Type": "application/json"
},
body: JSON.stringify({ cpf: "123.456.789-00" })
}
)
const { success, data } = await res.json()
if (!success || !data.is_adult) {
// Block — user is a minor
return res.status(403).json({ error: "Access restricted to adults" })
}
Pythonrequests library
import requests
response = requests.post(
"https://api.flagcheck.com.br/api/felca/age-check",
headers={
"X-API-Key": "YOUR_API_KEY",
"Content-Type": "application/json"
},
json={"cpf": "123.456.789-00"}
)
result = response.json()
if not result["success"] or not result["data"]["is_adult"]:
raise PermissionError("Access restricted to adults")
# Log for ANPD compliance audit
print(result["meta"]["timestamp"])

Who Uses Age Verification in Brazil

🎮

Online Games

Age gate at registration for 16+/18+ games. Block loot boxes for minors.

🎲

Sports Betting

Mandatory for all licensed betting platforms. Double compliance with Law 14.790/2023.

🎬

Streaming

Restrict 18+ content. Parental controls with verified guardian linkage.

🔞

Adult Content

Most legally exposed. CPF + face liveness is the gold standard.

📱

Social Media

Accounts under 16 must be linked to a verified guardian account.

🛒

Alcohol & Tobacco

E-commerce and delivery apps selling age-restricted products.

Why FlagCheck vs. Global Providers

FeatureFlagCheckGlobal providers
CPF-based age check (Receita Federal)✅ Native❌ Not available
Brazil-specific data sources✅ Full access⚠️ Partial
Response time✅ < 2 seconds⚠️ 3–10 seconds
LGPD compliance (Brazil GDPR)✅ Full⚠️ Varies
Face liveness (biometrics)✅ Included✅ Included
Criminal background check Brazil✅ Full⚠️ Limited
Pricing for Brazilian market✅ BRL · local❌ USD · expensive

FELCA Law in effect — March 17, 2026

Start Verifying Brazilian Users Today

FlagCheck provides the FELCA Age Check API and FELCA Selfie API — Brazilian-native, production-ready, LGPD-compliant. Integrate in hours.

FELCA Age Check

CPF → is_adult in < 2s

FELCA Selfie

Face liveness + biometrics

LGPD Compliant

No CPF stored · Auditable logs

Talk to a Specialist →View API Docs →Login / Create Account →

Frequently Asked Questions

What is the FlagCheck Age Verification API?▼
The FlagCheck API is a Brazilian-native age verification service. You send a CPF number and receive a JSON response confirming whether the holder is 18+ (is_adult: true/false), the CPF registration status, and a timestamp for compliance logging. The entire process takes under 2 seconds.
Does the API store CPF numbers?▼
No. FlagCheck does not store CPF numbers. Each query is processed in real time and immediately discarded. For ANPD compliance audits, we recommend storing only a SHA-256 hash of the CPF alongside the verification result and timestamp in your own system — this proves compliance without exposing personal data.
Is CPF-based verification sufficient for FELCA Law compliance?▼
For most platforms (games, social media, streaming, e-commerce), CPF-based age verification fully satisfies the Digital ECA requirements. For high-risk platforms (sports betting, adult content), combining CPF check with face liveness detection provides the strongest compliance posture and prevents minors from using an adult's CPF.
What happens when a CPF belongs to a minor?▼
The API returns is_adult: false. The age and date_of_birth fields are omitted to protect minor's data under LGPD. Your platform should block access and display an appropriate message. The verification event is timestamped for your audit log.
What is face liveness detection and when do I need it?▼
Face liveness (facial biometrics) verifies that the person using the platform is actually the CPF holder — preventing a minor from using an adult's document. It captures a live selfie and compares it against the biometric data linked to the CPF in official databases. Recommended for betting, adult content, and financial platforms.
How long does integration take?▼
The basic age check (CPF → is_adult) can be integrated in under 1 hour by a developer. It's a single POST endpoint with a CPF in the body and a JSON response. Full liveness integration typically takes 1–2 days. We provide documentation, code samples in JavaScript, Python, PHP and curl.
What other data does FlagCheck provide beyond age?▼
Beyond age verification, the FlagCheck API provides: criminal background checks (judicial records, police databases), CPF status validation (regular, suspended, cancelled), name and registration data associated with the CPF, and facial match scores when liveness is used. All endpoints are LGPD-compliant.
Does FlagCheck work for CNPJ (company verification)?▼
Yes. FlagCheck also provides CNPJ queries, returning company registration data, status, partners, and registration date. This is useful for B2B platforms needing to verify business identity and compliance status in Brazil.

Age Verification API Brazil

CPF age check API Brazil. Verify minor majority Brazil API. FELCA compliance age gate Brazil. is_adult CPF Brazil REST API. Digital ECA age verification developer. Brazil online minor protection API. Face liveness biometric Brazil. Background check CPF Brazil API. LGPD compliant age verification.