Italy

Identity Verification & KYC For Italy

Q: What are the main IDs used for KYC in Italy?

For most resident journeys, the CIE is the primary ID. Passport, driving licence and electronic residence permit are common alternatives depending on user type, channel and risk.

Q: Can a passport be used if the customer does not have a CIE?

Yes. That is common for cross-border users, some AIRE users and cases where the CIE is not immediately available. Italy’s own digital identity guidance also accepts passport or driving licence in SPID issuance.

Q: Do we still need to support paper identity cards?

In legacy books, yes, for a limited period. Official notices say paper identity cards stop being valid from 3 August 2026, even if the printed expiry date is later.

Q: What is the core KYB evidence set in Italy?

Usually a visura or certificate from the Registro delle Imprese, Partita IVA, Codice Fiscale, director or legal representative data, and ownership evidence. Because the dedicated beneficial ownership register remains suspended, firms often still request signed UBO declarations and supporting shareholder evidence.

Q: Does Italy use goAML for suspicious transaction reports?

No. Suspicious transaction reports are sent to UIF through INFOSTAT-UIF, with registered referents and structured submission rules. For operations, that means case reasons, supporting documents and escalation history should be exportable in a clean format.

Q: Which domestic list expectations matter for AML screening in Italy?

At minimum, firms need coverage for EU and UN restrictive measures as applied in Italy through the Comitato di Sicurezza Finanziaria, plus UIF anomaly indicators and sector rules from the relevant regulator. Screening the business alone is rarely enough; directors and beneficial owners matter too.

Q: How should Italian name variants and tax-code mismatches be handled?

Keep the exact extracted value, a normalised match value and the reason for any override. That matters for diacritics, apostrophes, spacing and omocodia cases that can otherwise create false mismatches.

Q: Can data stay in Italy?

Yes. Italian cloud-region options exist across major providers, and on-prem or private deployment remains possible where governance is stricter. The control model still needs to align with the GDPR and Italy’s Privacy Code.

Q: How do we reduce drop-off without weakening control?

Use a CIE-first flow, add capture guidance and quality checks before submission, then allow controlled retries and policy-based fallback to passport, permit or driving licence only where needed.

Verify CIE, passports, residence permits and Italian company records with KYC, KYB and AML workflows aligned with Banca d’Italia, UIF, CONSOB, IVASS, the Ministry of the Interior, Agenzia delle Entrate, the Garante per la protezione dei dati personali and the Registro delle Imprese.

Operational performance for Italy KYC

Our Numbers Speak Volumes

99.08%

Pass rates

< 5 sec

Verification
Time

90%

EIDV
Verification

Evidence-Ready Checks Across People & Businesses

Individual Documents We Verify

Carta D’Identità Elettronica (CIE)

Primary resident ID for most citizens onboarding in Italy. The card carries OCR-readable fields, a contactless chip, residence address and fiscal code, which makes it strong for identity and consistency checks.

Carta D’Identità Cartacea

Legacy paper ID may still appear in older customer books. It remains a practical fallback only during the transition period, and will cease to be valid from 3 August 2026.

Passaporto Elettronico Italiano

Primary fallback for cross-border users, AIRE users and cases where no CIE is available. Italy issues biometric e-passports with a chip containing biographic data, photo and fingerprints.

Permesso Di Soggiorno Elettronico

Core identity and residency evidence for many non-EU nationals. The electronic permit is card-based and stores biographic and biometric data for identity checks and immigration status handling.

Patente Di Guida Italiana

Common secondary ID in remote journeys and accepted in SPID enrolment. Useful as supporting evidence when paired with stronger primary identity data.

Business Entity Identity

Visura Camerale / Certificato Camerale

Official registry extract used to confirm company name, legal form, registered office, status and registration details from the Registro delle Imprese.

Statuto, Bilanci And Fascicolo D’Impresa

Used to evidence legal constitution, governance, filed accounts and corporate history where a fuller KYB packet is needed.

INI-PEC / Registry Profile

Useful for confirming the registered digital domicile and cross-checking official company identity data held in the chamber system.

Business Tax Identity

Partita IVA

Used to confirm VAT registration status, holder name and activity dates, including active, suspended or ceased status.

Codice Fiscale

Used to confirm the validity and exact correspondence between the tax code and the legal denomination of a non-natural person.

VIES Status

Useful for cross-border EU onboarding where intra-Community VAT authorisation needs to be confirmed.

Ownership & Control (UBO)

Director And Legal Representative Evidence

Pulled from visure, certificates and Telemaco records to identify who can bind the company and who currently manages it.

Shareholder Evidence

Used where capital ownership needs to be evidenced through registry records, shareholder lists, deeds or supporting corporate documents.

Signed UBO Declaration And Ownership Chart

Access to beneficial ownership data remains suspended for consultation and accreditation purposes, so firms still rely on direct ownership evidence, declarations and supporting corporate records.

Languages We Cover

Document Text Handling

Italian onboarding is mainly Latin-script, but CIE, tax and identity records must still handle long names, OCR fields, chip-era layouts and machine-readable elements cleanly.

Name Matching Controls

Shufti can handle apostrophes, particles and spacing shifts such as D'Angelo, D Angelo and De Luca, plus foreign passport transliterations, while keeping the original extracted value visible for review..

Evidence Consistency

Italian journeys should reconcile user identity across document, selfie and supporting-evidence steps while handling codice fiscale omocodia and related tax-code edge cases without forcing false mismatches.

GOVERNANCE & CONTROLS

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-submissions

Reduce repeat capture on CIE, passports, residence permits and still-circulating paper IDs by checking image quality, field visibility and document type early.

Cleaner Audit Trails

Keep extracted fields, screening hits, review notes and decision reasons together for Banca d’Italia, UIF, CONSOB or IVASS-facing controls.

Better Name Matching Outcomes

Handle accents, apostrophes, spacing and tax-code edge cases without hiding the original extracted value that reviewers may need to inspect.

One Workflow, One Back Office

Run KYC, KYB and AML in one operational view, with the same evidence model across individuals, companies, directors and beneficial owners.

National ID-First Flow Design

Run KYC, KYB and AML in one operational view, with the same evidence model across individuals, companies, directors and beneficial owners.

Enterprise-grade compliance infrastructure

Italy IDV/KYC Challenges

Stolen ID Reuse

Document-copy theft and digital payment fraud keep remote onboarding exposed to impersonation, especially where only static images are reviewed.

Name Matching Exceptions

Accents, apostrophes, spacing, transliteration and tax-code omocodia create avoidable mismatches unless matching rules are tuned for Italian records.

UBO Evidence Gaps

Italy’s dedicated beneficial ownership register remains under suspension, so firms still need signed declarations and registry-backed ownership evidence.

Sanctions And STR Pressure

High STR volumes and frequent sanctions communications increase triage pressure, so clearer reasons, alerts and escalation logs matter more.

Shufti’s IDV/KYC Solutions for Italy

KYC Solutions

Face Verification

Stops impersonation in remote Italian onboarding by linking selfie liveness to the document portrait, which matters where stolen ID copies and online fraud remain live risks.

Age Verification

Uses selfie-based age estimation for low-friction checks, then adds document verification when stronger proof is required, stepping up to CIE, passport or driving licence in Italian flows.

Address Verification

Shufti can verify any address-bearing document, including Enel Energia bills and statements or bank letters from Intesa Sanpaolo or UniCredit, useful where residence data must match onboarding records.

Document Verification

Supports CIE, legacy paper identity cards still valid until 3 August 2026, passports, residence permits and driving licences, handling OCR fields, chip-era layouts and capture quality issues.

KYB Solutions

Business Verification

Pulls together Registro delle Imprese evidence, Partita IVA and Codice Fiscale checks, plus director and owner data, to shorten Italian KYB reviews and reduce manual rework.

Enhanced Due Diligence (EDD)

Builds stronger review packs when ownership is opaque, sanctions exposure is higher or sector risk increases, with signed UBO evidence, screening results and decision history ready for audit.

AML Screening

Business AML Screening

Screen the entity and its controllers against EU and UN measures implemented in Italy, plus domestic risk indicators and sector expectations, with reviewable matches and escalation notes.

Transaction Screening

Monitor transactions against Italian risk patterns such as manipulation-led transfer fraud and rising digital payment abuse, then route alerts into documented investigation and reporting workflows.

REGULATORY ALIGNMENT

Built to Fit Italy's Compliance Landscape

Banca D’Italia

Oversees AML controls for supervised financial firms. Shufti helps structure CDD evidence, decision reasons and retained records for supervisory review.

UIF

Receives and analyses suspicious transaction reports in Italy. Shufti helps teams keep escalation notes, screening results and case evidence ready for reporting and follow-up.

CONSOB

Regulates securities and investment-market participants. Shufti helps retain reviewable onboarding, screening and decision evidence for investment-sector controls.

IVASS

Regulates insurers and insurance intermediaries. Shufti supports customer due diligence, enhanced review paths and retained audit history for higher-risk cases.

MEF / Comitato Di Sicurezza Finanziaria

Coordinates Italy’s financial sanctions framework. Shufti helps screen customers, businesses and controllers, with time-stamped match and escalation records.

Ministero dell’Interno

Relevant to the Italian document ecosystem, including the CIE, passports and residence permits. Shufti supports document checks, selfie verification and fallback logic across the main official identity routes.

AgID / SPID Ecosystem

Oversees Italy’s digital identity framework. Shufti supports document checks, selfie verification and step-up controls where stronger assurance is needed.

Agenzia delle Entrate

Operationally important for Partita IVA and Codice Fiscale validation in Italian KYB and tax-identity controls.

Registro Delle Imprese / Camere Di Commercio

Holds Italy’s official company registry. Shufti helps build KYB workflows around registry data, director details and ownership evidence.

Garante Per La Protezione Dei Dati Personali

Enforces Italy’s privacy regime alongside the GDPR. Shufti supports controlled access, retention and review processes for identity and compliance data.

Deployment Choice

Available via Italian cloud locations including AWS Europe (Milan), Azure Italy North, Google Cloud Milan and Turin, Oracle Milan and Turin, plus Italian providers such as Aruba and Seeweb, or on-prem for stricter governance.

Regulatory Alignment

Aligned to the GDPR and Italy’s Privacy Code, with controls that support AML due diligence, evidence retention and reporting processes under D.lgs. 231/2007 and sector rules.

Retention controls

Configurable retention and purge policies can be mapped to enterprise policy and Italy’s AML conservation requirements, so teams keep identity, KYB and screening evidence for the required control period.

Encryption posture

Strong encryption applied to personal, biometric and financial data in transit and at rest, with access controls and reviewable logs for regulated operations.

Data Controls & Privacy for Italy

BUILT FOR COMPLIANCE TEAMS

Italy AML Sources That Strengthen Decision

House of Representatives of Italy

CONSOB

CONSOB Warnings

Italian Data Protection Authority

Agenzia Giornalistica Italia (AGI)

Corriere della Sera

La Repubblica

Il Sole 24 Ore

House of Representatives of Italy

CONSOB

CONSOB Warnings

Italian Data Protection Authority

Agenzia Giornalistica Italia (AGI)

Corriere della Sera

La Repubblica

Il Sole 24 Ore

House of Representatives of Italy

CONSOB

CONSOB Warnings

Italian Data Protection Authority

Agenzia Giornalistica Italia (AGI)

Corriere della Sera

La Repubblica

Il Sole 24 Ore

Frequently Asked Questions

What are the main IDs used for KYC in Italy?

For most resident journeys, the CIE is the primary ID. Passport, driving licence and electronic residence permit are common alternatives depending on user type, channel and risk.

Can a passport be used if the customer does not have a CIE?

Yes. That is common for cross-border users, some AIRE users and cases where the CIE is not immediately available. Italy’s own digital identity guidance also accepts passport or driving licence in SPID issuance.

Do we still need to support paper identity cards?

In legacy books, yes, for a limited period. Official notices say paper identity cards stop being valid from 3 August 2026, even if the printed expiry date is later.

What is the core KYB evidence set in Italy?

Usually a visura or certificate from the Registro delle Imprese, Partita IVA, Codice Fiscale, director or legal representative data, and ownership evidence. Because the dedicated beneficial ownership register remains suspended, firms often still request signed UBO declarations and supporting shareholder evidence.

Does Italy use goAML for suspicious transaction reports?

No. Suspicious transaction reports are sent to UIF through INFOSTAT-UIF, with registered referents and structured submission rules. For operations, that means case reasons, supporting documents and escalation history should be exportable in a clean format.

Which domestic list expectations matter for AML screening in Italy?

At minimum, firms need coverage for EU and UN restrictive measures as applied in Italy through the Comitato di Sicurezza Finanziaria, plus UIF anomaly indicators and sector rules from the relevant regulator. Screening the business alone is rarely enough; directors and beneficial owners matter too.

How should Italian name variants and tax-code mismatches be handled?

Keep the exact extracted value, a normalised match value and the reason for any override. That matters for diacritics, apostrophes, spacing and omocodia cases that can otherwise create false mismatches.

Can data stay in Italy?

Yes. Italian cloud-region options exist across major providers, and on-prem or private deployment remains possible where governance is stricter. The control model still needs to align with the GDPR and Italy’s Privacy Code.

How do we reduce drop-off without weakening control?

Use a CIE-first flow, add capture guidance and quality checks before submission, then allow controlled retries and policy-based fallback to passport, permit or driving licence only where needed.

Build a Italy-ready KYC, KYB & AML programme with Shufti

Check Pricing Request Demo

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Use Cases for Regulated Growth in Italy

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Accelerate Growth, Eliminate Friction

Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.

Learn More Try Now

Onboard Global Traders in Real-Time

Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations while preventing identity theft and high-risk chargebacks.

Learn More Try Now

Secure Trust at Every Transaction

Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.

Learn More Try Now

Power a Fair & Secure Player Experience

Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.

Learn More Try Now

Build a Trusted, Verified Workforce

Screen freelancers and drivers at scale. Verify residency and reduce onboarding friction while maintaining trust between users.

Learn More Try Now

Scale Your Exchange with Confidence

Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.

Learn More Try Now

Reduce fraud without blocking growth

Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes and risk-led enforcement actions.

Learn More Try Now