Brazil

Identity Verification & KYC For Brazil

Q: What is the primary identity document used in Brazil?

RG, CNH and CPF are the most commonly used domestic identifiers. Shufti supports verification across all major Brazilian ID types.

Q: Is CPF mandatory for financial services onboarding?

Yes. CPF is required for most regulated financial activities. Shufti validates CPF-linked identity evidence during onboarding.

Q: What is Brazil’s AML reporting system?

Suspicious activity reporting is conducted via COAF using the Siscoaf system. Shufti supports audit-ready AML workflows and escalation logs.

Q: Does Brazil have a beneficial ownership register?

Ownership data is linked to CNPJ and QSA records, but layered structures often require Shufti’s Enhanced Due Diligence and UBO capture.

Q: How does Shufti handle Portuguese name variations?

Shufti’s OCR and fuzzy matching normalise diacritics and compound surnames common in Brazilian identity records.

Q: What business documents are standard for KYB?

CNPJ extract, contrato social, QSA listing and Junta Comercial records are typical. Shufti’s Business Verification supports these workflows.

Q: Is LGPD compliance supported?

Yes. Shufti provides consent-driven processing, configurable retention controls and access governance aligned to LGPD requirements.

Q: What happens if a user fails document capture?

Shufti’s retry logic and assisted verification flows reduce drop-off while preserving full decision evidence for audit review.

Unify KYC, KYB and AML screening in one platform aligned to Brazil’s regulatory ecosystem. Built to support COAF reporting obligations, Central Bank supervision, and LGPD-compliant identity processing

Operational Performance For Brasil KYC

Our Numbers Speak Volumes

100%

eIDV Coverage

98.62%

Pass Rate

<10

Verification Time

Evidence-Ready Checks Across People & Businesses

Individual Documents We Verify

Shufti verifies 35+ official Brazilian ID document types

Ver todos os documentos suportados

Carteira de Identidade (RG – Registro Geral)

Primary state-issued identity document widely used for domestic KYC across Brazil.

CIN (Carteira de Identidade Nacional – new national ID)

New unified national ID format linked to CPF; gradually replacing legacy RG formats.

CPF (Cadastro de Pessoas Físicas)

Mandatory taxpayer number used as the core identity reference in financial onboarding.

CNH (Carteira Nacional de Habilitação – Driver’s Licence)

Federally standardised photo ID is widely accepted as primary proof of identity.

Brazilian Passport (e-Passport)

ICAO-compliant biometric passport used for cross-border and higher-risk onboarding.

Título de Eleitor / e-Título (Acceptable only as “supporting evidence”)

Digital voter ID is sometimes used as supporting evidence of identity.

Business Entity Identity

Junta Comercial Registration Extract

Confirms state-level registration and corporate status.

Ownership & Control (UBO)

Quadro de Sócios e Administradores (QSA)

Official list of partners and administrators linked to CNPJ registration.

Corporate Shareholder Register / Societary Amendments

Used to validate ownership changes and beneficial control.

Languages We Cover

Portuguese document support

Brazilian identity and registry documents are issued in Portuguese using Latin script; Shufti’s OCR extracts and verifies structured fields accurately.

Name matching across compound surnames

Handles multi-surname structures and diacritics (e.g., João da Silva, Luís Antônio) to reduce mismatches.

Consistency across CPF-linked records

Aligns document, selfie and registry evidence where abbreviations or surname order variations create exceptions.

GOVERNANCE & CONTROLS

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-submissions

Shufti’s OCR and validation logic reduces retries caused by legacy RG variations and CPF formatting inconsistencies.

Cleaner audit trails

Shufti generates structured evidence logs aligned to COAF reporting and Central Bank supervision requirements.

Better Name Matching Outcomes

Shufti normalises compound surnames and the diacritical marks common in Brazilian identity records.

One Workflow, One Back Office

Shufti unifies KYC, KYB and AML screening into one compliance interface.

CPF-first flow design

Shufti prioritises CPF-link ed verification and primary domestic IDs used across Brazil’s financial ecosystem.

Brazil IDV/KYC Challenges

Legacy RG Variations

Multiple state-issued RG formats remain in circulation, increasing document parsing errors and exception queues.

CPF-Centric Verification

CPF is mandatory for financial services, but formatting inconsistencies and fraud patterns create onboarding friction.

Beneficial Ownership Gaps

QSA records may not reflect layered control structures, increasing manual KYB review workload.

Remote Onboarding Risk

Rapid fintech growth and digital onboarding increase impersonation and mule account risks under COAF reporting rules.

Shufti’s IDV/KYC Solutions for Brazil

KYC Solutions

Face Verification

Detects impersonation and presentation attacks in Brazil’s high-volume remote onboarding environment.

Age Verification

Combines selfie-based age estimation with document verification when regulatory or sectoral rules require formal proof.

Address Verification

Verifies any address-bearing document including utility bills (Sabesp, Eletrobras distributors) and bank statements (Banco do Brasil, Caixa, Itaú).

Document Verification

Supports RG, CIN, CNH, passport and CRNM formats, including legacy state designs and CPF-linked data validation.

KYB Solutions

Business Verification

Validates CNPJ registration, QSA ownership records, state registry extracts and tax identifiers.

Enhanced Due Diligence (EDD)

Captures structured UBO data, risk triggers and decision logs aligned to COAF and Central Bank expectations.

AML Screening

Business AML Screening

Screens entities, directors and beneficial owners against Brazilian domestic lists and global sanctions, PEP and adverse media sources.

Transaction Screening

Supports ongoing monitoring aligned to suspicious activity reporting via Siscoaf and sectoral compliance obligations.

Structured for the Brazilian Regulatory Ecosystem

Banco Central do Brasil (BCB)

Supervises financial institutions, fintechs, and payment institutions.
Shufti supports structured KYC controls and audit trails aligned with supervisory requirements.

COAF (Conselho de Controle de Atividades Financeiras)

Financial Intelligence Unit under Law 9.613/1998.
Shufti supports customer identification, beneficial ownership capture, and reporting support via Siscoaf.

CVM (Brazilian Securities and Exchange Commission)

Regulates the capital market.
Shufti supports investor onboarding and PEP/sanctions monitoring.

Receita Federal do Brasil (RFB)

Administers CPF, CNPJ, and tax obligations.
Shufti validates tax identifiers essential to KYC/KYB.

ANPD (National Data Protection Authority)

Oversees compliance with the LGPD (Law 13.709/2018).
Shufti supports flows with consent, configurable retention, and access controls.

Juntas Comerciais

Maintains state-level business registries.
Shufti validates official corporate data and QSA records.

SUSEP (Superintendence of Private Insurance)

Supervisiona o setor de seguros.
A Shufti apoia controles de onboarding baseados em risco.

Regulatory Alignment

Compliant with LGPD data protection principles and with record retention obligations under Law No. 9.613/1998 and COAF regulations.

Deployment Options

Available in cloud regions in Brazil (Sao Paulo) or in on-premise environments to meet local governance requirements and sector-specific regulatory obligations.

Encryption Posture

Applies strong encryption to personal, biometric, and financial data, both in transit and at rest, in line with LGPD security requirements.

Retention Controls

Configurable data retention and deletion policies aligned with AML recordkeeping obligations and LGPD data minimization principles.

Data and Privacy Controls in Brazil

Brazil AML Sources That Strengthen Decision-Making

Brazilian Federal Police

Supreme Federal Court (STF)

Superior Court of Justice (STJ)

Federal Court of Accounts (TCU)

Securities and Exchange Commission of Brazil (CVM)

Transparency Portal – Disreputable and Suspended Companies (CEIS)

Transparency Portal – National Registry of Punished Companies (CNEP)

British Virgin Islands Financial Services Commission (FSC)

Brazilian Federal Police

Supreme Federal Court (STF)

Superior Court of Justice (STJ)

Federal Court of Accounts (TCU)

Securities and Exchange Commission of Brazil (CVM)

Transparency Portal – Disreputable and Suspended Companies (CEIS)

Transparency Portal – National Registry of Punished Companies (CNEP)

British Virgin Islands Financial Services Commission (FSC)

Brazilian Federal Police

Supreme Federal Court (STF)

Superior Court of Justice (STJ)

Federal Court of Accounts (TCU)

Securities and Exchange Commission of Brazil (CVM)

Transparency Portal – Disreputable and Suspended Companies (CEIS)

Transparency Portal – National Registry of Punished Companies (CNEP)

British Virgin Islands Financial Services Commission (FSC)

Frequently Asked Questions

What is the primary identity document used in Brazil?

RG, CNH and CPF are the most commonly used domestic identifiers. Shufti supports verification across all major Brazilian ID types.

Is CPF mandatory for financial services onboarding?

Yes. CPF is required for most regulated financial activities. Shufti validates CPF-linked identity evidence during onboarding.

What is Brazil’s AML reporting system?

Suspicious activity reporting is conducted via COAF using the Siscoaf system. Shufti supports audit-ready AML workflows and escalation logs.

Does Brazil have a beneficial ownership register?

Ownership data is linked to CNPJ and QSA records, but layered structures often require Shufti’s Enhanced Due Diligence and UBO capture.

How does Shufti handle Portuguese name variations?

Shufti’s OCR and fuzzy matching normalise diacritics and compound surnames common in Brazilian identity records.

What business documents are standard for KYB?

CNPJ extract, contrato social, QSA listing and Junta Comercial records are typical. Shufti’s Business Verification supports these workflows.

Is LGPD compliance supported?

Yes. Shufti provides consent-driven processing, configurable retention controls and access governance aligned to LGPD requirements.

What happens if a user fails document capture?

Shufti’s retry logic and assisted verification flows reduce drop-off while preserving full decision evidence for audit review.

Build a Brazil-ready KYC, KYB, and AML program with Shufti

Check Pricing Request Demo

Independently audited. Globally certified.

Certified to Global Standards

PROVEN WORKFLOWS

Use Cases for Regulated Growth in Brazil

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Accelerate Growth, Eliminate Friction

Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.

Learn More Try Now

Onboard Global Traders in Real-Time

Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations while preventing identity theft and high-risk chargebacks.

Learn More Try Now

Secure Trust at Every Transaction

Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.

Learn More Try Now

Power a Fair & Secure Player Experience

Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.

Learn More Try Now

Build a Trusted, Verified Workforce

Screen freelancers and drivers at scale. Verify residency and reduce onboarding friction while maintaining trust between users.

Learn More Try Now

Scale Your Exchange with Confidence

Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.

Learn More Try Now

Reduce fraud without blocking growth

Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes and risk-led enforcement actions.

Learn More Try Now