...

Searching for a person by face in a database (1:N)

Searching for a person by face in a database — is matching one face against all the faces in your own database: past KYC‑sessions, the blacklist and person lists. The platform shows that this person has already been checked under a different passport or is on a stop list, and returns the match with a confidence score. What to do next is up to you. The search covers only the database you have built, with the consent of the people concerned.

Face search in a database: a match with a customer’s past session found

Search across your face database

1:N face search in your database, not on the internet
1 click to add a face from a session to the blacklist
0 lines of code for duplicate search and the blacklist in KYC
from 29 ₽ per KYC session with search across face lists
Only your database, not the internet The decision on a match is yours Cloud or your own server

The price follows the price matrix on the publication date

Face search 1:N: who this is among your people

One person — one customer

Anyone who has passed a check once will be recognised next time — even with a different passport, phone and device.

  • 01

    One face against the whole database

    Face search in a database answers not “is this the same person as in the passport?” but “have we seen this person before — and under what name?”. In 1:1 comparison a face is matched against a single photo; in 1:N search, against all the faces in the selected lists: past customers, employees, the stop list. 1:1 comparison is covered in detail on the page about face recognition.

  • 02

    Only your database

    The search covers the faces you have collected: from your own KYC‑sessions, uploaded files and your cameras. There are no open sources, social networks or other people’s databases in the search.

  • 03

    A match comes with a confidence score

    The platform returns not a name but candidates: a list entry, the session where the face appeared, and the match confidence. How many candidates to show and from what threshold — is up to you.

  • 04

    The decision is yours

    A match with the blacklist or a past session flags the check as suspicious. Whether to block, send for manual review or let through — is decided by your employee or a scenario rule.

  • 1:N a face against all the faces in the selected lists
  • 2 modes the best match or all above the threshold
  • 0 lines of code for duplicate search and the blacklist in KYC

Four tasks of face search in your own database

The mechanics are the same — a face is matched against a list. The tasks differ: which list, where its faces come from and what to do on a match.

Duplicate search: one face in two sessions with different passports

One person — several accounts

On every new check the face is matched against the faces from past sessions. If the same person has already been checked with a different passport or other data, the session gets the “suspicious” status. Typical cases: loans and credit under different passports, bonuses and promo codes for new customers, multiple accounts of sellers and contractors, finding linked accounts.

How face search in a database works: from the list to the match

Searching for a face in a database takes four steps. In a KYC scenario they run on their own in every session; in Face API — on your request. How face recognition works in general is described on the page about face recognition

Step 1

You build the database

Faces enter the database from your KYC sessions automatically, from uploaded photos or via API. The customer gives consent before filming, and Liveness Liveness at the entrance keeps screen photos and masks out of the database — the list stays clean.

The customer gives consent, Liveness filters out screen photos
Step 2

The face becomes a template

A biometric template is built for each face — a numeric vector. The search compares templates, not photos. A face that is too small or turned too far will not enter the database: the minimum size and permitted rotation are set in the settings.

A face turns into a biometric template
Step 3

The new face is searched across the lists

A new photo or frame is matched against all the faces in the selected lists: past customers, the blacklist, the stop list. You can search several lists at once and set a confidence threshold.

A new face is searched across the selected lists
Step 4

The match goes to a rule

The response is the best candidate or all matches above the threshold, with a confidence score and a link to the record. In KYC a match changes the session status; in Face API — it goes to your system or as an alert to an employee.

A match goes to an employee for review

One face — different passports: duplicate search across KYC‑sessions

  • Matching against past sessions

    On every new check the customer’s face is compared with the faces from the past sessions of your account. No separate request is needed — the feature is enabled in scenarios.

  • The face matched — the data did not

    If the same face has already appeared with a different document, name or date of birth, the session gets the “suspicious” status. Such a customer cannot pass the check automatically.

  • All sessions of one person

    In the console the identifier of such a session is highlighted in red. A click opens the list of all sessions where this face appeared — with dates, documents and outcomes.

  • A returning customer is not always a fraudster

    A person may have changed their passport at 20 or 45, got married or simply forgotten that they had already registered. That is why a match is a reason for manual review, not an automatic refusal.

  • New and returning — in the report

    The session export includes a mark of the customer’s first visit to your system. The report can be filtered: new only, returning only or all.

  • Works together with document anti-fraud

    Duplicate search complements authenticity checks: a forged document is caught by anti-fraud, while an impostor with a genuine passport belonging to someone else is caught by matching the selfie with the photo in the document.

A forged or someone else’s passport can pass a document check. A face is harder to fake: someone who comes a second time is recognised by face, not by the form data.
Other signals that help find linked accounts at registration — phone, device, document stop list — are described on the page about registration anti-fraud.

Face blacklist: a blocked person will not return with a new document

A passport stop list can be bypassed with a new passport. A face blacklist cannot: it relies on the face, not on the document data.

  • Add in one click

    In the session card the employee clicks the crossed-out circle icon and confirms the action. The face goes to your account’s blacklist; no development on your side is needed.

    • Console
    • No development needed
  • What happens on a new attempt

    If the face in a new session matches a face from the blacklist, the session is rejected with the code [fraud] black list, and the console shows the note “User is on the blacklist”.

    • Session rejection
    • Error code
  • Enabled in the scenario

    The check works in scenarios where “Face blacklist” is selected. You can keep different scenarios for different products: for example, a strict one for issuing a loan and a lenient one for a subscription.

    • Scenario setup
  • Reason and term — in the record

    Record in the person’s card why the person was added and until when. Review the list: keeping a face on the blacklist longer than your purpose requires is not allowed — this is a personal data processing requirement.

    • 152‑FZ
    • Your company

Match threshold: a candidate, not a verdict

  • You set the confidence threshold

    The database query specifies the minimum match confidence. For the blacklist the threshold is usually set higher, so as not to turn away an honest customer; for duplicate search — lower, with disputed cases sent for manual review.

  • The best candidate or all

    You can get the single most similar face or all matches above the threshold. The second option is needed when one person may have registered several times.

  • Database quality matters

    False matches are more often caused by small, blurred and side-angle photos in the database itself. That is why faces below the set size and with a strongly turned head are not added to the list, and Liveness filters out screen captures.

  • Errors go both ways

    The system may show the wrong person (a false match) or fail to find the right one (a missed match). Photo quality and database size affect this, so a person makes the decision on a match, and accuracy for your database is best checked in a test scenario with your data.

The larger the database, the more the threshold matters. A high one — fewer false matches, but a higher risk of missing the right person. A low one — the opposite. The setting depends on what is at stake.
How algorithm accuracy is compared and where recognition errors come from is covered in the article “Face recognition accuracy in KYC”.

Face search and the law: 152‑FZ, 572‑FZ and your database

A face used to establish who is in front of you is biometric personal data. Strict rules apply to its processing by organisations in Russia, and database search falls directly under them. Below are the provisions your scenario depends on. This is a guideline, not a legal opinion: agree the design with a lawyer.

  • Biometric personal data is information used to establish identity. It may be processed only with the person’s written consent, except in the cases of part 2 of Art. 11 (part 1 of Art. 11 of 152‑FZ) 152-FZ
  • Since 1 September 2025 consent must be given separately from other documents the person signs (part 1 of Art. 9 of 152‑FZ as amended by 156‑FZ of 24.06.2025) 152-FZ
  • A person is not obliged to provide biometrics, and service cannot be refused on that ground unless the law requires them (part 3 of Art. 11 of 152‑FZ). Keep a path without the face step 152-FZYour company

  • Organisations, sole traders and notaries are prohibited from collecting, storing and otherwise processing in their systems biometrics used for identification, except collection for placement in the Unified Biometric System (clause 1 of part 1 of Art. 15 of 572‑FZ) 572-FZ
  • Biometrics for authentication — confirming that a person is who they claim to be — may be processed only for matching against EBS vectors and in accredited systems (clauses 2–3 of part 1 of Art. 15, Art. 16 of 572‑FZ). This scenario is covered on the page about sign-in and confirming operations by face 572-FZ
  • --> Whether your database search falls under “identification” within the meaning of 572‑FZ depends on the purpose and procedure of the check. Your lawyer should qualify the scenario before launch Your company

  • The law does not apply to matching that is carried out not automatically but with the participation of an authorised official (clause 2 of part 2 of Art. 1 of 572‑FZ). That is why a database match is a candidate for an employee, not an automatic decision 572-FZYour company
  • Nor does it apply to the purposes of defence, state security, law enforcement, migration registration and issuing identity documents (clause 1 of part 2 of Art. 1 of 572‑FZ) 572-FZ
  • Without consent, biometrics may be processed only in the cases of part 2 of Art. 11 of 152‑FZ — for example, under legislation on transport security, counter-terrorism and operational search activity 152-FZ

  • Data is processed in the NeuroVision cloud on your behalf or on your servers when installed in the perimeter NeuroVision152-FZ
  • Session data is deleted on request: one session or all of a user’s sessions at once — for example, after consent is withdrawn. The part related to a list of faces may be retained for a reason (for example, a blacklist entry) — this must be reflected in your policy NeuroVision
  • You set the retention period in lists according to the purpose: personal data is not kept longer than the purpose of processing requires (part 7 of Art. 5 of 152‑FZ) 152-FZYour company

What NeuroVision face search does not do

The query “search for a person by face” often means searching by photo on the internet. That is not our scenario — and here is where the boundaries lie.

  • Does not search the internet or social networks

    The search covers only your account’s database. You cannot use NeuroVision to find an unknown person by photo in open sources.

  • Does not take faces from other people’s databases

    The search does not include government databases, databases of other NeuroVision customers or purchased lists. Each account has its own isolated database.

  • Does not name a stranger

    If the face is not in your lists, the result is “no matches”. The platform does not guess who it is.

  • Does not decide for you

    A match is a signal. Whether to refuse, block or let through — is decided by your employee or a rule you have set.

  • Does not replace identification through the EBS

    If the law requires you to identify a customer by biometrics, this is done through the Unified Biometric System. Search in your own database serves anti-fraud.

  • Does not track without your purpose

    You set the list, cameras and retention periods as the data operator. Without a purpose, consent or a legal basis a face is not added to the database.

Who searches for face matches in their own database

Face search is needed wherever one person can come back — for money, a bonus or access that has already been refused.

  • Microfinance organisations and banks

  • Marketplaces and services with bonuses

  • Delivery, taxi and car sharing

    • A removed contractor will not return under a new name
    • One account per driver
    • Stop list after accidents and complaints
    • Solutions for transport
  • Bookmakers and lotteries

  • Sites and manufacturing

    • Lists of employees and contractors
    • Visitor stop list
    • Access to hazardous areas by list
  • Events and venues

    • Lists of attendees and accredited people
    • Organiser’s stop list
    • Entrance check with security staff involved

How much face database search costs

In KYC, duplicate search and the blacklist are included in the session price. Separate search across your lists via Face API and on-premises installation are priced by volume.

  • For onboarding

    In a KYC‑session

    from 29 ₽ per session

    Connect search in KYC

    The “Document + liveness” package: document recognition and anti-fraud, selfie, Liveness, face-to-document matching, search across face lists and blocking by the blacklist.

  • Face API

    on request

    Calculate Face API

    Person lists, search across several lists with a confidence threshold, match alerts, sources — files, cameras, archive. Pay per request.

  • In your perimeter

    on request

    Calculate installation

    Installation on your servers: the face database and search never leave your infrastructure. For banks, state-owned companies and sites without internet access.

At 10 000 KYC‑sessions a year the “Document + liveness” package costs 33 ₽ per session, at 50 000 — 30 ₽, at 100 000 — 27 ₽. You pay only for completed checks; test scenario terms are available from a manager. For an exact calculation, see  the calculator in the price matrix.

Three ways to connect face database search

Face search works in the NeuroVision cloud or in your perimeter. The scenario and lists are configured in the console. Get a test scenario

Duplicates and the blacklist on every check

Enable search across past sessions and the face blacklist in the KYC scenario — and every new session will be matched against the database automatically. The customer goes through the usual check in the Web SDK (in a mobile app — via WebView); the search itself needs no development. KYC‑platform

  • Person lists in the console and via API
  • Confidence threshold
  • Web SDK and REST API
  • Cloud or your own perimeter

Terms of connection

A test scenario on your account, cloud or your own server, payment only for completed checks.

Glossary: 1:N, person list, threshold and blacklist

Terms you will meet in the account, the API response and in conversation with a lawyer.

1:N search
Comparing one face with all the faces in a database or list: has this person been seen before.
face search, 1:N
1:N identification
A technical term for 1:N search. In the law, “identification” is a separate legal concept (Art. 2 of 572‑FZ); the two are not to be confused.
face identification
1:1 comparison
Matching two images: is it the same person. More detail — on the page about face recognition.
face verification
Biometric template
A numeric vector built from a face; the search compares templates, not photos.
face template, embedding
Person list
A set of records about people with faces and fields: a stop list, employees, attendees.
person list
Face blacklist
A list a match with which causes a KYC‑session to be rejected.
face blacklist
Confidence threshold
The minimum confidence at which a match appears in the response.
threshold
False match
The system found a different person in the database.
false match
Missed match
The person is in the database, but the system did not find them.
false non-match
Duplicate
One person in several sessions or accounts under different data.
duplicate
Biometric personal data
Information on a person’s physiological and biological characteristics used to establish their identity (part 1 of Art. 11 of 152‑FZ).
biometric data

We will select a search scenario for your face database

Tell us whom and where you want to recognise — customers at onboarding, blocked users or visitors to a site — and we will advise which list is needed, how to obtain consent and how much it will cost.

Can't put your request into words? Book a call and our team will contact you at a convenient time

Book a call

The company is included in the register of IT companies and the register of personal data operators of the Russian Ministry of Digital Development.

Address: Moscow, Presnenskaya Embankment 12 — Moscow City business centre, Federation Tower. Nearest metro stations: Delovoy Tsentr and Mezhdunarodnaya.

Frequently asked questions about face search in a database

It is matching one face against all the faces in your own database: past KYC‑sessions, the blacklist, lists of employees or visitors. The platform shows matches with a confidence score, and your company makes the decision on them.

1:1 comparison answers the question “is this the same person as in the passport photo?”. 1:N search answers “have we seen this person in our database and under what name?”. In technical literature, 1:N search is called face identification against a database.

No. NeuroVision searches only your account’s database — the faces you collected yourself with the consent of the people concerned. There are no open sources, social networks or other people’s databases in the search.

Enable search across past sessions in the KYC scenario. If the face has already appeared with a different document or data, the session gets the “suspicious” status, and the console opens the list of all this person’s sessions.

An employee adds a face from a session to the blacklist in one click. On the next attempt the session is rejected with the code [fraud] black list, even if the person brings another passport: the check relies on the face, not on the document.

Yes, in the console. It has person lists: photos are uploaded as files or via API, and each record gets its own fields — for example, a reason and a term. You can search several lists at once.

Yes, as with any recognition: the system may show the wrong person or fail to find the right one. Photo quality and database size affect this, so you set the confidence threshold, and disputed matches are checked by an employee. Accuracy for your database is best checked in a test scenario with your data.

A face image used to establish identity is biometric personal data: written consent is required (part 1 of Art. 11 of 152‑FZ), and 572‑FZ restricts the processing of biometrics by organisations outside the EBS. Legality depends on the purpose and procedure of the check — agree the design with a lawyer before launch.

In the NeuroVision cloud or on your servers when installed in the perimeter. The session retention period is set in the scenario. Session data is deleted on request — one session or all of a user’s sessions at once.

In KYC, search across past sessions and the blacklist are included in the “Document + liveness” package — from 29 ₽ per session. Face API and on-premises installation are priced by volume; test scenario terms are confirmed by a manager.