Hong Kong

Identity Verification & KYC For Hong Kong

Q: What Is The Primary ID For KYC In Hong Kong?

For residents, the Hong Kong Identity Card is the primary onboarding document. It is chip-enabled and uses current smart-ID formats, with old-form cards invalidated in two phases in 2025, Phase I (born 1970+) 12 May, Phase II (born ≤1969) 12 October, which affects capture and validation for legacy-format cards.

Q: What Can We Use If A Customer Cannot Use An HKSAR Passport?

Some residents use the HKSAR Document of Identity for Visa Purposes as their travel document. e-Doc/I is machine-readable and chip-enabled, which supports automated verification. BN(O) passport holders may present their British National (Overseas) passport, and Mainland customers may use the Home Return Permit as supporting evidence.

Q: Do You Support HKID-Led Remote Onboarding Controls?

Yes. Hong Kong's risk assessments highlight identity authentication and identity matching as core controls for remote onboarding. Shufti aligns doc and face checks to support this control intent.

Q: How Do STR Submissions Work In Hong Kong?

Regulated entities submit STRs through STREAMS 2, including XML submission, prescribed PDF upload, or the web form, with narratives that clearly explain the suspicion and relevant customer or transaction details.

Q: What KYB Evidence Set Is Typical For Hong Kong Companies?

A standard pack includes Business Registration Certificate, ICRIS company particulars, BRN as the key identifier, plus annual return (NAR1), shareholder, directors and beneficial ownership evidence including SCR-informed UBO declarations. TCSP-sector entities should also include TCSP licence evidence.

Q: How Do You Handle Chinese And English Name Variants?

Hong Kong runs bilingual records. Shufti supports multi-script capture and configurable matching to handle romanisation differences and spacing variations without inflating false positives. This includes Cantonese-versus-Mandarin romanisation divergence and surname-first versus Western name-order variation.

Q: What About Biometric Privacy Expectations For Face Checks?

Hong Kong's privacy regulator treats biometric data as sensitive and expects necessity and proportionality, transparency, minimisation, accuracy, and strong security. Shufti supports these control themes.

Q: Do You Support Data Residency In Hong Kong?

Yes. Hong Kong has in-country cloud regions across major providers, supporting local deployment. Data residency options vary by provider, and cross-border transfer restriction in PDPO section 33 is not in operation, but PDPO governance still applies.

Q: How Do You Reduce Drop-off From Retries?

Hong Kong onboarding often fails on image quality and address proof mismatches. Shufti supports capture guidance and evidence consistency across steps to reduce re-submissions and manual follow-ups.

Q: What Is Hong Kong's FATF Status?

Hong Kong's FATF Mutual Evaluation Report (2019) placed it in enhanced follow-up, with open recommended actions in technical compliance and effectiveness. Regulators apply risk-based scrutiny aligned to this status. Shufti's audit trail and evidence packaging capabilities support defensible CDD and STR records in this environment.

Shufti delivers KYC, KYB, and AML screening aligned to Hong Kong's AMLO framework, covering HKMA, SFC, IA, and C&ED obligations, with JFIU STREAMS 2-ready STR evidence, bilingual audit logs, and unified onboarding decisioning.

Operational performance for Hong Kong KYC

Our Numbers Speak Volumes

99.65%

Pass rates

< 5 sec

Verification
Time

92%

EIDV
Verification

Evidence-Ready Checks Across People & Businesses

Individual Documents We Verify

Shufti supports 7 Hong Kong resident and travel document types used in onboarding, plus passport variants for non-residents and cross-border flows.

View All Supported Documents

Hong Kong Identity Card (Smart Identity Card)

Primary resident ID for onboarding; supports current smart-ID formats, with old-form cards invalidated in 2025: Phase I (born 1970+) 12 May; Phase II (born ≤1969) 12 Oct, alongside enhanced security features.

Hong Kong Special Administrative Region Passport (Electronic Passport)

Used for cross-border onboarding and secondary ID; ICAO-compliant e-passport with polycarbonate data page and contactless chip storing biometric facial image and personal identity data.

HKSAR Document of Identity for Visa Purposes (Doc/I And e-Doc/I)

Travel document for residents not eligible for HKSAR passport; e-Doc/I is machine-readable and chip-enabled, supporting automated verification in special-case passport eligibility scenarios.

HKSAR Re-entry Permit

Supplementary travel evidence for Mainland and Macao journeys; accepted as supporting ID only, not a standalone KYC document under AMLO CDD requirements. Eligibility varies by HKID status.

Hong Kong Driving Licence

Secondary ID support; official onboarding processes commonly pair the driving licence with HKID and current address proof, reflecting standard document packs used in Hong Kong regulated CDD flows.

Mainland Travel Permit (Home Return Permit / 回鄉證)

Supports cross-border onboarding for Mainland visitors and HK permanent residents; widely used in dual-jurisdiction CDD flows where customers transit between Hong Kong and the Mainland.

One-way Permit (單程證)

Issued by Mainland authorities for settlement in Hong Kong; may appear in immigration-related onboarding packs for newly arrived Mainland residents, but is not a standard standalone KYC primary ID.

Business Entity Identity

Business Registration Certificate

Proves a registered business and confirms expiry validity; a mandatory component of KYB evidence packs for Hong Kong entities, supporting entity identity in CDD and onboarding workflows.

Company Particulars Report (ICRIS) / Current Particulars And Filings

Confirms legal name, current status, and registered particulars via a Companies Registry Search Report (ICRIS); supports entity matching, director validation, and control structure verification.

Certificate Of Incorporation

Foundational proof of Hong Kong incorporation; anchors company identity to Companies Registry evidence and supports ongoing KYB monitoring, director verification, and ownership chain validation.

Articles of Association / Constitutional Documents

Establishes the company's constitutional rules and authorised signatories; used to confirm who can bind the company and support authority and control review in KYB, EDD, and ongoing monitoring workflows.

Business Tax Identity

Business Registration Number (BRN)

Hong Kong's Unique Business Identifier; since December 2023, new incorporations receive only a BRN; CRN is phased out. Compliance teams may encounter both identifiers in legacy KYB records.

Profits Tax Registration / IRD Tax File Reference

Required for higher-risk EDD workflows where Inland Revenue registration serves as an additional identity anchor for entity verification.

Ownership & Control (UBO)

Significant Controllers Register (SCR)

Supports UBO identification; Hong Kong companies maintain a statutory Significant Controllers Register under Cap. 622 for law-enforcement access, distinct from internal CDD-driven UBO declarations.

Director, Shareholder, And Authorised Signatory Evidence

Used to evidence who can act on behalf of the company; supports authorised signatory validation and 'acting on behalf of' controls in KYB journey decisioning, EDD reviews, and filing workflows.

Annual Return (NAR1)

Confirms most recent filed particulars including directors, shareholders, and address; used as a currency check on registry data and a standard component of KYB packs for ongoing monitoring.

Languages We Cover

Document Text Handling

Supports bilingual capture for Traditional Chinese and English, reflecting Hong Kong's official language reality. Handles Simplified Chinese on Mainland-issued docs, preventing script mismatches in cross-border flows.

Name Matching Controls

Handles Chinese characters and romanised English variants with configurable matching to reduce false positives. Covers Cantonese-versus-Mandarin divergence (e.g., 陳: Chan vs Chen) and name-order variation.

Evidence Consistency

Keeps identity evidence aligned across document, selfie, and follow-on checks, producing traceable decision outputs suitable for examiner questions, investigations, and STR evidence packages.

GOVERNANCE & CONTROLS

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-submissions

Supports front-loaded capture rules for smart ID and chip travel documents, reducing rejects caused by photo quality and document version differences.

Cleaner Audit Trails

Captures decision outputs and supporting evidence aligned to five-year retention expectations and audit trail needs under Hong Kong AML/CFT regimes.

Better Name Matching Outcomes

Controls for Traditional Chinese and English name variants reduce false positives and manual remediation in screening and KYB controller matching.

One Workflow, One Back Office

Unifies KYC, KYB, and AML review actions in one operational view, supporting faster escalation and consistent evidence packs for investigations and exams.

HKID-First Flow Design

Optimises for HKID-led onboarding in Hong Kong, with travel-document support for cross-border cases and non-standard passport eligibility scenarios.

Enterprise-grade compliance infrastructure

Hong Kong IDV/KYC Challenges

HKID Remote Onboarding Impersonation Risk

Non-face-to-face onboarding raises impersonation risk; identity authentication controls are essential. HK Police Force records thousands of annual deception cases, reinforcing the need for liveness checks.

Scam-Linked Mule Account Pressure

Mule networks push AML alert loads higher; faster triage and STR-ready evidence are critical. Technology crime and online fraud grow year-on-year per HK Police Force data, making mule detection essential.

Chinese-English Name Variant Matching

Chinese and English records produce multiple name variants, raising false positives in screening and KYB. Cantonese-versus-Mandarin romanisation yields divergent spellings, a cross-border challenge.

Flat Floor Block And Building-Name Address Friction

Flat, floor, and building-name formats in Hong Kong addresses complicate automated normalisation and matching to user input, creating friction and increasing address proof exceptions in onboarding flows.

Shufti’s IDV/KYC Solutions for Hong Kong

KYC Solutions

Fast track customer onboarding and authentication with real-time identity verification solutions.

Face Verification

Confirms the customer is physically present and matches the ID owner, supporting remote onboarding controls in a market where impersonation risk and mule recruitment pressure remain consistently live.

Age Verification

Selfie-based age estimation supports fast access gating, with a document verification fallback when required to evidence age in Hong Kong higher-risk onboarding and controlled-access use-cases.

Address Verification

Verifies address-bearing documents; in Hong Kong this covers bills from CLP Power, HK Electric, Towngas, and Water Supplies Department, plus statements from HSBC, BoCHK, Standard Chartered, and Hang Seng.

Document Verification

Verifies Hong Kong smart ID and chip-enabled travel documents with NFC-supported chip reading, handling HKID formats, BN(O) passports, Home Return Permits, e-passports, and e-Doc/I for cross-border onboarding.

KYB Solutions

Business Verification

Verifies Hong Kong entity identity with BRC evidence and BRN-linked identifiers, supporting current particulars, NAR1, directors and controllers capture, and TCSP licence checks for KYB decisioning.

Enhanced Due Diligence (EDD)

Triggers structured EDD where ownership is layered or cross-border; packages UBO evidence, controller documentation, and record-ready rationale to support regulatory inspections and investigation requests.

AML Screening

Utilise artificial intelligence models and 1700+ sanction and watchlists to identify and prevent money laundering attempts.

Business AML Screening

Screen entities, controllers, and UBOs against UN sanctions and anti-terrorism measures under HK law, including UNATMO; US, EU, and UK unilateral sanctions have no statutory force in HK and are not applied.

Transaction Screening

Supports transaction monitoring patterns consistent with HK mule and scam typologies, enabling earlier escalation and cleaner STREAMS 2-ready evidence trails for STR drafting and regulatory review.

REGULATORY ALIGNMENT

Built to Fit Hong Kong's Compliance Landscape

Hong Kong Monetary Authority

Regulates banks, SVF licensees, and payment systems; expects risk-based CDD, STR readiness, and 5-year records. Oversees stablecoin issuer licensing under the Stablecoins Ordinance, in force 1 August 2025.

Securities and Futures Commission

Regulates Licensed Corporations and SFC-licensed VATP operators; expects five-year retention and reconstructable audit trails. Shufti produces retained evidence, screening outcomes, and review histories.

Insurance Authority

Regulates insurers and business intermediaries; enforces AML/CFT standards and five-year retention. Shufti supports consistent evidence capture, storage, and retrieval for supervised distribution models.

Customs and Excise Department

Licenses and supervises Money Service Operators and, since the June 2023 AMLO amendment, Dealers in Precious Metals and Stones (DPMS) under AMLO; expects risk-based CDD and STR-ready records. Shufti supports identity evidence capture, monitoring triggers, and audit trails for MSO and DPMS oversight.

Companies Registry

Operates company registration; supports AML/CFT guidelines for TCSP licensees and the SCR regime. Shufti supports KYB evidence capture and UBO workflows aligned to SCR beneficial ownership expectations.

Joint Financial Intelligence Unit

Receives STRs via STREAMS 2 for regulated entities. Shufti helps structure escalation notes and keeps evidence linked to suspicious indicators, supporting faster STR drafting and defensible filings.

Financial Services and the Treasury Bureau (FSTB)

Administers UNATMO, Hong Kong's statutory instrument for implementing UN Security Council sanctions. Shufti's AML screening is scoped to UNATMO-listed measures, reflecting HK's UN-only sanctions architecture.

Office of the Privacy Commissioner for Personal Data

Oversees personal data protection and biometric data good practice under PDPO. Shufti supports minimisation, transparency, and security controls appropriate for sensitive identity and biometric data.

Inland Revenue Department

Oversees Business Registration Certificate and BRN/UBI administration. Shufti supports registry and tax-identifier consistency, helping teams align entity records across KYB evidence and reviews.

Immigration Department

Issues and administers HK identity cards and HKSAR travel documents including passport, Doc/I, and re-entry permits. Shufti supports verification across all ImmD-issued document formats used in onboarding.

Financial Reporting Council

Regulates auditors and accounting professionals with AML/CFT obligations under AMLO. Shufti's KYB and EDD capabilities support accounting and audit firms subject to FRC oversight with structured evidence.

Estate Agents Authority

Regulates licensed estate agents as DNFBPs under AMLO; subject to CDD, records, and STR obligations. Shufti supports real estate compliance teams with identity evidence aligned to EAA AML/CFT expectations.

Deployment Choice

Available via Hong Kong cloud regions such as AWS (ap-east-1), Google Cloud (asia-east2), Alibaba Cloud (cn-hongkong), and Microsoft Azure East Asia (Hong Kong region), plus enterprise deployment options for governance.

Regulatory Alignment

Aligned to Hong Kong AML/CFT regimes that require strong CDD evidence and record-keeping capability, and to PDPO expectations for careful handling of sensitive identity and biometric data.

Retention controls

Configurable retention and purge settings aligned to at least five-year retention expectations for CDD and transaction records under Hong Kong AML/CFT guidelines.

Encryption posture

Encryption applied to sensitive identity and biometric data aligned to PDPO DPP4 ('all practicable steps'), PCPD Biometric Data Guidance (2022) on template conversion and secure storage, and HKMA TM-E-1 encryption requirements.

Data Controls & Privacy for Hong Kong

BUILT FOR COMPLIANCE TEAMS

Hong Kong AML Sources That Strengthen Decision

Hong Kong Monetary Authority

Hong Kong Monetary Authority - Register of Securities Staff of AIs

South China Morning Post

The Standard

Hong Kong Free Press

Frequently Asked Questions

What Is The Primary ID For KYC In Hong Kong?

For residents, the Hong Kong Identity Card is the primary onboarding document. It is chip-enabled and uses current smart-ID formats, with old-form cards invalidated in two phases in 2025, Phase I (born 1970+) 12 May, Phase II (born ≤1969) 12 October, which affects capture and validation for legacy-format cards.

What Can We Use If A Customer Cannot Use An HKSAR Passport?

Some residents use the HKSAR Document of Identity for Visa Purposes as their travel document. e-Doc/I is machine-readable and chip-enabled, which supports automated verification. BN(O) passport holders may present their British National (Overseas) passport, and Mainland customers may use the Home Return Permit as supporting evidence.

Do You Support HKID-Led Remote Onboarding Controls?

Yes. Hong Kong's risk assessments highlight identity authentication and identity matching as core controls for remote onboarding. Shufti aligns doc and face checks to support this control intent.

How Do STR Submissions Work In Hong Kong?

Regulated entities submit STRs through STREAMS 2, including XML submission, prescribed PDF upload, or the web form, with narratives that clearly explain the suspicion and relevant customer or transaction details.

What KYB Evidence Set Is Typical For Hong Kong Companies?

A standard pack includes Business Registration Certificate, ICRIS company particulars, BRN as the key identifier, plus annual return (NAR1), shareholder, directors and beneficial ownership evidence including SCR-informed UBO declarations. TCSP-sector entities should also include TCSP licence evidence.

How Do You Handle Chinese And English Name Variants?

Hong Kong runs bilingual records. Shufti supports multi-script capture and configurable matching to handle romanisation differences and spacing variations without inflating false positives. This includes Cantonese-versus-Mandarin romanisation divergence and surname-first versus Western name-order variation.

What About Biometric Privacy Expectations For Face Checks?

Hong Kong's privacy regulator treats biometric data as sensitive and expects necessity and proportionality, transparency, minimisation, accuracy, and strong security. Shufti supports these control themes.

Do You Support Data Residency In Hong Kong?

Yes. Hong Kong has in-country cloud regions across major providers, supporting local deployment. Data residency options vary by provider, and cross-border transfer restriction in PDPO section 33 is not in operation, but PDPO governance still applies.

How Do You Reduce Drop-off From Retries?

Hong Kong onboarding often fails on image quality and address proof mismatches. Shufti supports capture guidance and evidence consistency across steps to reduce re-submissions and manual follow-ups.

What Is Hong Kong's FATF Status?

Hong Kong's FATF Mutual Evaluation Report (2019) placed it in enhanced follow-up, with open recommended actions in technical compliance and effectiveness. Regulators apply risk-based scrutiny aligned to this status. Shufti's audit trail and evidence packaging capabilities support defensible CDD and STR records in this environment.

Build a Hong Kong-ready KYC, KYB & AML programme with Shufti

Check Pricing Request Demo

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Use Cases for Regulated Growth in Hong Kong

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Accelerate Growth, Eliminate Friction

Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.

Learn More Try Now

Onboard Global Traders in Real-Time

Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations while preventing identity theft and high-risk chargebacks.

Learn More Try Now

Secure Trust at Every Transaction

Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.

Learn More Try Now

Power a Fair & Secure Player Experience

Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.

Learn More Try Now

Build a Trusted, Verified Workforce

Screen freelancers and drivers at scale. Verify residency and reduce onboarding friction while maintaining trust between users.

Learn More Try Now

Scale Your Exchange with Confidence

Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.

Learn More Try Now

Reduce fraud without blocking growth

Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes and risk-led enforcement actions.

Learn More Try Now