Face Verification
Address Verification
Document Verification
Age Verification
VideoIdent
Fast ID
eIDV
Consent Verification
NFC Verification
Business Verification
Due Diligence
Investor Verification
E-Signature
QES
AML Screening
Transaction Monitoring
Adverse Media
Business AML Screening
PEP & RCA
Sanctions
Watchlist
Behavioural Biometrics
Device Fingerprinting
1:1 Authentication
MFA
Fraud Hub
Onboarding
Ongoing Monitoring
KYC
KYB
KYI
Age Assurance
Identity Verification
Workforce IAM
Candidate Verification
Compliance
Fraud prevention
Trust & safety
Global expansion
Product Managers
Compliance Officers
Fraud Analysts
Developers
Deepfake
Bonus Abuse / Promotion Abuse
Account Takeover
Synthetic Identity Fraud
Document Fraud
Impersonation Fraud
Multi-Accounting
Fraud Networks
Chargeback Fraud
Money Mule Activity
Party Fraud
Regulatory & Compliance Risks
Fintech
Crypto
iGaming
Forex
Social Network
Marketplace
Banking
Gig Economy
Blind Spot Audit
Deepfake Detector
Liveness Spoofs
Document Originality
Document Deepfake
Global Trust Platform
Journey Builder
Case Management
Shufti AI
Fraud Analytics
Vendor Comparison
Brand Personalisation
IDV Modes
AI Compliance Co-Pilot
OCR
Secure Capture
Deployment Options
Identity Methods
API Documentation
Mobile SDKs
Service Status
Help Center
Contact Us
Technical Support
Supported Documents
Content library
Blogs
News
Reports
Insights
Knowledgebase
ROI calculator
About
Career
Press Release
Certifications
Partnership
Awards
Events & Webinar
Interactive Demo
Podcast Studio
Spotlight Studio
- Australia
- Austria
- Bangladesh
- Brazil
- Bulgaria
- Canada
- China
- Cyprus
- Egypt
- Estonia
- Ethiopia
- France
- Germany
- Greece
- Haiti
- Hong Kong
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Luxembourg
- Malaysia
- Malta
- Mexico
- Morocco
- Nigeria
- Nepal
- Norway
- Netherlands
- New Zealand
- Pakistan
- Philippines
- Portugal
- Portugal
- Romania
- Singapore
- Slovakia
- South Africa
- South Korea
- Sri Lanka
- Sweden
- Switzerland
- Taiwan
- Thailand
- Turkey
- UK
- USA
- Vietnam
Iraq
Identity Verification & KYC For Iraq
Shufti delivers KYC, KYB, and AML compliance solutions for Iraq, supporting Central Bank of Iraq oversight, AMLCFT Office standards, and AML Law No. 39/2015 obligations.
Operational performance for Iraq KYC
Our Numbers Speak Volumes
98.68%
Pass Rates
< 5 seconds
Verification
Time
100%
NFC
Verification
Evidence-Ready Checks Across Iraqi People & Businesses
Individual Documents We Verify
Shufti supports 23 Iraqi document types.
View All Supported DocumentsIraqi National Identity Card (Hawiyya Wataniyya)
Biometric smart card issued since January 2016; primary KYC document for individual identity verification across banking, fintech, and regulated sectors.
Iraqi Passport (Jawaz Al-Safar)
ICAO-compliant document with machine-readable zone; accepted internationally and domestically for travel, residency authorisation, and KYC requirements.
Iraqi Civil Status ID (Bittaqat Al-Ahwal Al-Madaniyya)
Legacy pre-2016 card still legally valid; requires enhanced due diligence protocols due to higher historical fraud risk versus biometric National Card.
Driver's Licence
Issued by Iraqi Automobile and Touring Association; used as secondary identity document and fallback for KYC workflows in sectors without biometric access.
Residence Permit
Issued by Ministry of Interior for foreign nationals; verifies non-Iraqi resident status and cross-border regulatory compliance in Iraqi institutions.
Business Entity Identity
Commercial Registration Certificate
Primary proof of legal entity status issued by Ministry of Trade; mandatory for KYB workflows and corporate account opening across all regulated financial institutions.
Articles of Association
Foundational corporate governance document defining ownership structure, shareholder composition, and corporate objectives; required for UBO identification and beneficial ownership verification.
Business Tax Identity
Tax Registration Certificate
Issued by General Commission for Taxes; confirms assigned tax identification number and entity compliance status with Iraqi tax authority requirements.
Ministry of Finance Tax Clearance
Evidence of tax compliance status; required by regulated entities for licensing renewal and approval of significant transactions under Iraqi financial regulatory framework.
Ownership & Control (UBO)
Shareholder Register
Official record documenting ownership structure and shareholder particulars; essential for identifying ultimate beneficial owners under AML Law No. 39/2015 thresholds.
UBO Declaration
Mandatory under AML Law No. 39/2015 when transactions exceed 10 million IQD; captures beneficial ownership details and control structure for compliance screening purposes.
Board Resolution
Corporate governance document evidencing authorised signatories, controlling persons, and approved transaction authority; supports KYB verification and enhanced due diligence workflows.
Languages We Cover
Iraqi Arabic And Kurdish Scripts
Primary language Arabic with script handling for Iraqi documents; Kurdish in KRG region; essential for document verification and regulatory compliance.
Arabic Transliteration Controls
Name matching across Arabic transliteration variants, diacritics, and Latin-script machine-readable zone data for enhanced identity verification accuracy.
Cross-Step Evidence Consistency
Identity data reconciliation across KYC and CDD steps; confirms consistent identity alignment across documents, biometric checks, and compliance screening.
GOVERNANCE & CONTROLS
Audit-Ready Decisions, Lower Operational Drag
Regulatory Alignment With Iraqi AML Framework
Workflows operate under AML Law No. 39/2015 and AMLCFT Office standards, reducing audit friction and regulatory review cycles.
Multi-Document Verification Against Dual Authorities
Support for 23 Iraqi document types enables verification across federal Baghdad and Kurdistan Regional Government territory without reprocessing.
Sanctions Screening Across Overlapping Lists
Screening against UN, OFAC Iraq-Related, EU, AMLCFT local list, and ISIS-related designations reduces compliance exposure across four distinct regimes.
Pre-2016 Document Handling With Enhanced Due Diligence
Legacy Civil Status ID verification includes secondary controls and fraud risk flagging, reducing manual review cycles whilst meeting regulatory requirements.
Cash-Dominant Economy Optimisation
KYC workflows adapted for unbanked populations with alternative identification and utility verification, enabling financial inclusion securely.
Iraq IDV/KYC Challenges
Dual-Authority Complexity
Baghdad and KRG operate parallel regulatory frameworks; KRG can modify federal law, creating dual jurisdictional compliance requirements.
Cash-Dominant Economy
90% of transactions conducted in cash; only 23% of adults hold bank accounts, requiring alternative identity pathways beyond traditional banking channels.
Legacy Document Coexistence
Pre-2016 Civil Status IDs remain valid with biometric National Cards; older documents carry elevated fraud risk, requiring enhanced due diligence protocols.
Elevated Sanctions Exposure
Overlapping sanctions regimes create screening obligations across four lists; single-point-of-failure risk affects transaction velocity and operational cost.
Shufti's IDV/KYC Solutions for Iraq
KYC Solutions
Face Verification
Biometric verification against Iraqi National Identity Card and passport imagery; supports liveness detection and spoofing prevention for digital onboarding.
.
Age Verification
Selfie-based age estimation with document verification fallback; essential for Iraq's age-restricted financial services, gaming, and cryptocurrency exchange KYC.
.
Address Verification
Shufti can verify any address-bearing document; cross-references Zain Iraq, AsiaCell, Rafidain Bank, and Rasheed Bank statements to validate Iraqi residency.
.
Document Verification
OCR and machine-readable zone validation of Iraqi identity documents; detects forgery and tampering whilst capturing structured data for compliance systems.
.KYB Solutions
Business Verification
Validation of Iraqi Commercial Registration Certificate, tax registration, and Articles of Association against Ministry of Trade and Tax Commission databases.
.
Enhanced Due Diligence (EDD)
Beneficial owner identification against UBO Declaration and Shareholder Register; mandatory for high-risk jurisdictions, sectors, and high-value transactions.
.AML Screening
Business AML Screening
Entity screening against AMLCFT local list, UN, OFAC Iraq-Related, EU sanctions, and ISIS designations; supports transaction approval and ongoing monitoring.
.
Transaction Screening
Transaction monitoring across goAML reporting pathways; detects suspicious patterns, sanctions matches, and reporting obligations under AML Law No. 39/2015.
.Built to Fit Iraq's Compliance Landscape
Central Bank of Iraq (CBI)
Iraq's monetary authority overseeing payment systems, monetary policy, and exchange rate management. Shufti aligns KYC workflows to CBI supervisory standards. Official Website: https://cbi.iq/
Iraq Securities Commission (ISC)
Oversees securities markets and the Iraq Stock Exchange. Shufti supports investor KYC verification for securities trading under ISC licensing standards. Official Website: https://www.isc.gov.iq/en
Anti-Money Laundering and Countering the Financing of Terrorism Office (AMLCFT)
Financial intelligence unit receiving and analysing suspicious transactions. Shufti integrates with goAML reporting infrastructure to meet AMLCFT obligations. Official Website: https://www.aml.iq/
Federal Board of Supreme Audit (FBSA)
Highest financial control body ensuring public fund accountability. Shufti provides audit-ready KYC records and transaction documentation supporting FBSA. Official Website: https://www.fbsa.gov.iq/en
Communications and Media Commission (CMC)
Regulates media and communications. Shufti's verification and data privacy controls comply with CMC electronic communications and data protection requirements. Official Website: https://www.cmc.gov.iq/
General Commission for Taxes (GCT)
Manages tax assessment, collection, and debt follow-up. Shufti validates tax registration and Ministry of Finance tax clearance supporting GCT workflows. Official Website: https://mof.gov.iq/en/General-Tax-Authority.aspx
Ministry of Interior (MOI)
Issues the National Card, passports, and civil status documentation. Shufti integrates with MOI document authentication and biometric validation standards. Official Website: https://www.moi.gov.iq/
Ministry of Finance (IMOF)
Formulates financial policies and oversees public expenditure. Shufti supports regulatory alignment with IMOF reporting and tax clearance verification. Official Website: https://mof.gov.iq/en/
Deployment Choice
AWS Middle East (UAE), Azure UAE North, or GCP Doha; on-premise available for Iraqi entities requiring local data governance and regulatory compliance.
Regulatory Alignment
Data controls align with CBI regulations and AML Law 39/2015 recordkeeping standards. Electronic Signatures Law No. 78 of 2012 governs records and enforcement.
Retention Controls
Retention and purge settings enforce AML Law 39/2015 five-year minimum recordkeeping. Workflows maintain audit trails and evidence for regulatory inquiries.
Encryption Posture
Strong encryption protects personal and financial data in transit and at rest. Data classification separates categories with quarterly security audits.
Data and Privacy Controls in Iraq
Iraq AML Sources That Strengthen Decision
Anti-Money Laundering and Countering Financing of Terrorism Office, Iraq - Local List
House of Representatives of Iraq
Ministry of Finance
Ministry of Defense
Ministry of Oil
Iraqi National Oil Company (INOC)
Alsumaria
Rudaw
Anti-Money Laundering and Countering Financing of Terrorism Office, Iraq - Local List
House of Representatives of Iraq
Ministry of Finance
Ministry of Defense
Ministry of Oil
Iraqi National Oil Company (INOC)
Alsumaria
Rudaw
Rudaw
Anti-Money Laundering and Countering Financing of Terrorism Office, Iraq - Local List
House of Representatives of Iraq
Ministry of Finance
Ministry of Defense
Ministry of Oil
Iraqi National Oil Company (INOC)
Rudaw
Frequently Asked Questions
What is the primary identity document required for KYC in Iraq?
The Iraqi National Identity Card (Hawiyya Wataniyya) is the primary KYC document. This biometric smart card has been issued since January 2016 and is recognised across all Iraqi financial institutions and regulated sectors. Pre-2016 Civil Status ID cards remain legally valid but require enhanced due diligence protocols due to higher fraud risk.
What is Iraq's primary AML law and when did it take effect?
AML Law No. 39 of 2015 is Iraq's primary anti-money laundering legislation. It establishes CDD obligations, beneficial owner reporting thresholds above 10 million IQD, and empowers the AMLCFT Office within the Central Bank of Iraq to analyse suspicious transaction reports.
Does Iraq use the goAML system for reporting suspicious transactions?
Yes, Iraq implemented the goAML system (UNODC platform) for reporting suspicious transactions via the TAFI I Project, completed between 2022 and 2023. All regulated Iraqi financial institutions must submit suspicious activity reports to the AMLCFT Office through goAML infrastructure in compliance with AML Law No. 39/2015.
What is Iraq's current FATF status and AML compliance assessment?
Iraq was removed from the FATF grey list as of January 2025, following its August 2023 Mutual Evaluation Report. This delisting reflects Iraq's progress in implementing AML/CFT reforms, strengthening regulatory frameworks, and improving financial intelligence operations under AMLCFT Office supervision.
What are the KYB document requirements for verifying Iraqi businesses?
KYB verification requires Commercial Registration Certificate (issued by Ministry of Trade), Articles of Association, Tax Registration Certificate (General Commission for Taxes), and tax clearance from Ministry of Finance. For beneficial owner identification, UBO Declaration and Shareholder Register are mandatory under AML Law No. 39/2015.
How do the Kurdistan Regional Government and federal authorities affect KYC compliance in Iraq?
The Kurdistan Regional Government operates a separate regulatory framework and can modify federal legislation, creating dual-authority compliance requirements. KYC workflows must accommodate both Baghdad federal jurisdiction and KRG-administered territory, with distinct document standards, tax authority oversight, and licensing frameworks for each jurisdiction.
What data retention period applies to customer KYC and transaction records in Iraq?
AML Law No. 39/2015 mandates a minimum five-year retention period for customer KYC records and transaction documentation. Shufti's retention controls enforce this obligation with configurable purge settings, automated compliance workflows, and audit trails supporting regulatory inquiry responses.
Which sanctions lists apply to Iraq compliance screening?
Four sanctions regimes apply simultaneously: UN, OFAC Iraq-Related (31 CFR Part 576), EU, and AMLCFT Iraq local list. ISIS designations are maintained separately. Complete screening across all four lists is mandatory for transaction approval under Iraqi AML requirements.
Build a Iraq-ready KYC, KYB & AML programme with Shufti
INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.
Certified to Global Standards
PROVEN WORKFLOWS
Use Cases for Regulated Growth in Iraq
Reduce Fraud Without Blocking Growth
Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes, and risk-led enforcement actions.
Secure Trust at Every Transaction
Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.
Scale Your Exchange with Confidence
Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.
Accelerate Growth, Eliminate Friction
Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.
Onboard Global Traders in Real-Time
Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations while preventing identity theft and high-risk chargebacks.
Power a Fair & Secure Player Experience
Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.
Build a Trusted, Verified Workforce
Screen freelancers and drivers at scale. Verify residency and reduce onboarding friction while maintaining trust between users.
Let’s Tailor your journey
Just a few quick questions to guide your Shufti experience.
Shufti
Market Positioning and Commercial Assessment
Industry stands at 1.7rating
Best ID Verification Innovator
TOP 10 KYC Solution Provider
Best Client Onboarding Solution
Samer Al Tamimi@CEO of Safwa Bank
We take our client's privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer's data free from vulnerabilities and fully safe and protected.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
16 August, 2025
5 minutes read
How Much of What You’ve Verified Is Actually Real?
Shufti’s Deepfake Blindspot Audit now runs fully inside your AWS environment, auditing historic KYC for manipulation signals without moving sensitive data off-prem.
whitepapers
