Face Verification
Address Verification
Document Verification
Age Verification
VideoIdent
Fast ID
eIDV
Consent Verification
NFC Verification
Business Verification
Due Diligence
Investor Verification
E-Signature
QES
AML Screening
Transaction Monitoring
Adverse Media
Business AML Screening
PEP & RCA
Sanctions
Watchlist
Behavioural Biometrics
Device Fingerprinting
1:1 Authentication
MFA
Fraud Hub
Onboarding
Ongoing Monitoring
KYC
KYB
KYI
Age Assurance
Identity Verification
Workforce IAM
Candidate Verification
Compliance
Fraud prevention
Trust & safety
Global expansion
Product Managers
Compliance Officers
Fraud Analysts
Developers
Deepfake
Bonus Abuse / Promotion Abuse
Account Takeover
Synthetic Identity Fraud
Document Fraud
Impersonation Fraud
Multi-Accounting
Fraud Networks
Chargeback Fraud
Money Mule Activity
Party Fraud
Regulatory & Compliance Risks
Fintech
Crypto
iGaming
Forex
Social Network
Marketplace
Banking
Gig Economy
Blind Spot Audit
Deepfake Detector
Liveness Spoofs
Document Originality
Document Deepfake
Global Trust Platform
Journey Builder
Case Management
Shufti AI
Fraud Analytics
Vendor Comparison
Brand Personalisation
IDV Modes
AI Compliance Co-Pilot
OCR
Secure Capture
Deployment Options
Identity Methods
API Documentation
Mobile SDKs
Service Status
Help Center
Contact Us
Technical Support
Supported Documents
Content library
Blogs
News
Reports
Insights
Knowledgebase
ROI calculator
About
Career
Press Release
Certifications
Partnership
Awards
Events & Webinar
Interactive Demo
Podcast Studio
Spotlight Studio
- Australia
- Austria
- Bangladesh
- Brazil
- Bulgaria
- Canada
- China
- Cyprus
- Egypt
- Estonia
- Ethiopia
- France
- Germany
- Greece
- Haiti
- Hong Kong
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Luxembourg
- Malaysia
- Malta
- Mexico
- Morocco
- Nigeria
- Nepal
- Norway
- Netherlands
- New Zealand
- Pakistan
- Philippines
- Portugal
- Portugal
- Romania
- Singapore
- Slovakia
- South Africa
- South Korea
- Sri Lanka
- Sweden
- Switzerland
- Taiwan
- Thailand
- Turkey
- UK
- USA
- Vietnam
Morocco
Identity Verification & KYC For Morocco
Shufti delivers Law 43-05 compliant KYC, KYB, and AML screening. Verify CNIE identities, passports, and beneficial ownership for individual and business onboarding.
Operational performance for Morocco KYC
Our Numbers Speak Volumes
98.05%
Pass Rates
100%
NFC
Verification
< 5 sec
Verification
Time
Evidence-Ready Checks Across People & Businesses in Morocco
Individual Documents We Verify
Shufti supports 11 Moroccan document types.
View All Supported DocumentsCarte Nationale d'Identité Électronique (CNIE)
Biometric identity document mandatory for Moroccan citizens from age 16. Primary KYC document for banks and regulated businesses with NFC chip and fingerprint data.
Passeport Marocain
Official travel and identity document accepted for KYC verification across banking. MRZ structure enables automated field extraction and consistency checks.
Carte de Séjour
Residence permit required for non-Moroccan citizens and foreigners in Morocco. Accepted for KYC identification and beneficial ownership evidence in businesses.
Permis de Conduire
Driver's licence serves as supplemental identity document for citizens and residents. Useful for address verification and identity checks in KYC processes.
Business Entity Identity
Registre de Commerce (RC)
Central business identifier issued by OMPIC via Central Commercial Register. Contains company name, registration number, incorporation date, and legal status.
Certificat Négatif
Certificate from OMPIC confirming no conflicting trade name exists in Morocco. Verifies exclusive business name rights during company registration.
Statuts de la Société
Company bylaws and articles of association serve as founding corporate documents. Evidence of governance structure, management roles, and ownership distribution.
Business Tax Identity
Identifiant Fiscal (IF)
Unique tax ID assigned by Direction Générale des Impôts (DGI) to each business. Validates business tax compliance and financial legitimacy effectively.
Identifiant Commun de l'Entreprise (ICE)
15-digit universal business identifier introduced in Morocco in 2016. Mandatory on all invoices since 2019 for regulatory identification.
Taxe Professionnelle
Business tax certificate documenting professional tax obligation compliance. Confirms active business status and good standing with authorities.
Ownership & Control (UBO)
Registre des Bénéficiaires Effectifs (RBE)
Public beneficial ownership register hosted at rbe.ompic.ma, launched 2022. Mandatory for all legal entities established in Morocco for UBO verification.
Liste des Actionnaires
Shareholder register providing documentary evidence of beneficial ownership and control structure. Required for complete UBO chain identification.
Statuts Actualisés
Updated corporate bylaws reflecting current ownership structure and governance. Essential for verifying beneficial owner changes over time.
Languages We Cover
Arabic and French Bilingual Document Handling
Official documents carry Arabic and French text with potential transliteration ambiguity. Shufti applies dual-language verification across both scripts.
Name Matching Controls for Arabic Transliteration
Arabic names appear under multiple Latin spellings; diacritics and variants complicate matching. Shufti uses transliteration-aware protocols for accuracy.
Evidence Consistency Across Steps
Dual-language documents require verification that extracted data and matched results align correctly. Shufti preserves both for compliance review and audit.
GOVERNANCE & CONTROLS
Audit-Ready Decisions, Lower Operational Drag
CNIE Capture Quality
Reduce re-submissions with CNIE capture guidance and visibility checks. Prevent blurred uploads before extraction begins.
Cleaner Audit Trails
Generate decision outputs with reason codes and timestamps aligned to BAM and ANRF expectations. Maintain reviewable evidence trails.
Better Name Matching
Arabic-to-French transliteration variants create false mismatches in standard systems. Transliteration-aware rules cut manual review.
One Workflow
Consolidate identity verification, KYB, and AML screening into single operational view. Manage all verification types from one system.
CNIE-First Design
Structured CNIE extraction and repeatable checks enable evidence-led decisions. Fallback to passports when needed without user abandonment.
Morocco IDV/KYC Challenges
Dual-Language Ambiguity
CNIE and official documents contain Arabic and French text with different underlying data. Script mismatches require reliable extraction controls.
Informal Sector Risk
Morocco's substantial informal economy with high-volume cash creates AML/CFT vulnerabilities. DNFBPs show low compliance with reporting.
Fragmented Ownership Records
RBE is now mandatory, but legacy structures lack complete beneficial ownership documentation. Shell company risks demand enhanced verification.
Low Reporting Volume
Financial institutions historically file low suspicious transaction volumes relative to activity. DNFBPs underreport despite obligations.
Shufti's IDV/KYC Solutions for Morocco
KYC Solutions
Face Verification
Prevents CNIE impersonation and mule sign-ups using liveness checks and facial matching. Reduces manual exceptions in remote onboarding workflows effectively.
.
Age Verification
Estimates age from selfie biometric analysis; falls back to CNIE/passport document verification when required. Frictionless access control enforcement.
.
Address Verification
Verifies CNIE addresses, utility bills (ONEE, LYDEC, REDAL, AMENDIS), and bank statements. Accepts documents bearing current address information reliably.
.
Document Verification
Detects tampered CNIE, passports, and residence permits with high confidence. Extracts fields across Arabic and French language variations consistently.
.KYB Solutions
Business Verification
Verifies businesses via Registre de Commerce, OMPIC registration certificates, and ICE identifiers. Reduces shell company and fraud risk effectively.
.
Enhanced Due Diligence (EDD)
Addresses informal sector exposure, fragmented beneficial ownership, and DNFBP compliance gaps. Generates audit-ready evidence for high-risk entities.
.AML Screening
Business AML Screening
Screens entities and controlling persons (directors/UBOs) against ANRF, sanctions, and PEP lists. Identifies risk before customer activation reliably.
.
Transaction Screening
Monitors transaction flows for structuring patterns and high-risk counterparty behaviour. Supports continuous AML controls with defensible evidence logs.
.Built to Fit Morocco's Compliance Landscape
Bank Al-Maghrib (BAM)
BAM supervises all 24 licensed banks and sets banking sector KYC standards. Shufti evidences customer due diligence steps with audit-ready evidence trails. Official Website: https://www.bkam.ma/
Autorité Marocaine du Marché des Capitaux (AMMC)
AMMC regulates capital markets and securities trading for investor protection. Shufti structures KYB and UBO evidence aligned to governance expectations. Official Website: https://www.ammc.ma/en
Autorité Nationale du Renseignement Financier (ANRF)
ANRF (restructured from UTRF in 2021) processes suspicious transaction reports and financial intelligence. Shufti preserves investigation-grade evidence packs. Official Website: https://www.cg.gov.ma/en/anrf
Office des Changes (OC)
OC oversees foreign exchange operations, currency conversion and trade statistics. Shufti enables repeatable counterparty screening and compliance controls. Official Website: https://www.oc.gov.ma/en
Commission Nationale de Contrôle de la Protection des Données (CNDP)
CNDP enforces Law 09-08 data protection and personal data processing compliance. Shufti applies encryption and retention controls for regulatory alignment. Official Website: https://www.cndp.ma/en/
Autorité de Contrôle des Assurances et de la Prévoyance Sociale (ACAPS)
ACAPS supervises insurance companies and social welfare organisations for AML/CFT. Shufti supports insurance sector compliance with defensible evidence trails. Official Website: https://www.acaps.ma/en
Office Marocain de la Propriété Industrielle et Commerciale (OMPIC)
OMPIC maintains the Central Commercial Register and beneficial ownership registration. Shufti integrates OMPIC evidence trails into KYB workflows for compliance. Official Website: http://www.ompic.ma/en
Direction Générale des Impôts (DGI)
DGI collects taxes and administers tax identifiers (IF, ICE) for Morocco. Shufti validates tax identity during KYB compliance checks and verification. Official Website: https://www.finances.gov.ma/en
Deployment Choice
No in-country cloud regions exist in Morocco. AWS, Azure, and GCP deploy to European regions. On-premise deployment options available for regulated entities.
Regulatory Alignment
Law 09-08 data protection (enforced by CNDP) requires appropriate technical safeguards. Law 43-05 AML recordkeeping mandates 10-year minimum retention.
Retention Controls
Law 43-05 requires 10-year minimum retention for transaction records, customer identification, and beneficial ownership data throughout customer relationships.
Encryption Posture
Law 09-08 requires appropriate technical and organisational safeguards including encryption. DGSSI sets cryptographic standards for industry compliance.
Data and Privacy Controls in Morocco
Morocco AML Sources That Strengthen Decision
Parliament of Morocco
Justice and Development Party (PJD)
Moroccan Capital Market Authority
Morocco World News
Le Matin
Hespress
Frequently Asked Questions
What is CNIE and how is it used for KYC verification in Morocco?
The CNIE (Carte Nationale d'Identité Électronique) is Morocco's biometric smart card identity document, mandatory from age 16 with 10-year validity. It is the primary KYC document for banks, fintechs, and regulated businesses, containing an NFC chip with fingerprint data.
What are Morocco's main KYC compliance requirements under Law 43-05?
Law 43-05 (amended by Law 12-18 in 2021) requires: customer due diligence with risk-based assessment; identity verification using government-issued documents (CNIE, passport, residence permit); beneficial ownership identification for business entities; and 10-year record retention post-relationship termination.
What documents does Morocco require for business KYC (KYB)?
For business KYC in Morocco, required documents include: Trade Register Certificate (RC) from OMPIC; company bylaws (statuts); beneficial ownership information (now mandated in Registre des Bénéficiaires Effectifs/RBE); tax ID (IF or ICE); and identity documents for signatories and beneficial owners.
Who is responsible for KYC enforcement and AML compliance in Morocco?
Multiple regulators oversee KYC and AML: Bank Al-Maghrib (BAM) supervises banks and payment institutions; the Autorité Nationale du Renseignement Financier (ANRF) processes suspicious transaction reports; AMMC oversees capital markets; ACAPS supervises insurance; and CNDP enforces data protection.
What is Morocco's FATF status and how does it affect KYC requirements?
Morocco was removed from the FATF grey list in February 2023 after implementing full AML/CFT measures. Current status: NOT on FATF grey list or blacklist. Morocco must maintain FATF 40 Recommendations compliance, reinforcing strict KYC requirements for banks, fintechs, and DNFBPs.
How long must KYC records be retained in Morocco?
Under Law 43-05 (as amended by Law 12-18), all KYC records including customer identification documents, transaction details, and suspicious transaction reports must be retained for a minimum of 10 years following the end of the customer business relationship.
How does goAML reporting work for Morocco?
goAML is the UN UNODC system used by Morocco for suspicious transaction reporting to ANRF. Programmes using goAML must maintain traceable decisions, review notes, and consistent evidence packaging to support STR/CTR submissions.
What data residency obligations apply under Law 09-08?
Law 09-08 requires appropriate technical and organisational safeguards for personal data processing. While Morocco lacks in-country cloud regions, standard contractual clauses and encryption controls support compliance when deploying to European infrastructure.
Build a Morocco-ready KYC, KYB & AML programme with Shufti
INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.
Certified to Global Standards
PROVEN WORKFLOWS
Use Cases for Regulated Growth in Morocco
Reduce Fraud Without Blocking Growth
Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes, and risk-led enforcement actions.
Secure Trust at Every Transaction
Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.
Scale Your Exchange with Confidence
Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.
Accelerate Growth, Eliminate Friction
Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.
Onboard Global Traders in Real-Time
Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations while preventing identity theft and high-risk chargebacks.
Power a Fair & Secure Player Experience
Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.
Build a Trusted, Verified Workforce
Screen freelancers and drivers at scale. Verify residency and reduce onboarding friction while maintaining trust between users.
Let’s Tailor your journey
Just a few quick questions to guide your Shufti experience.
Shufti
Market Positioning and Commercial Assessment
Industry stands at 1.7rating
Best ID Verification Innovator
TOP 10 KYC Solution Provider
Best Client Onboarding Solution
Samer Al Tamimi@CEO of Safwa Bank
We take our client's privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer's data free from vulnerabilities and fully safe and protected.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
16 August, 2025
5 minutes read
How Much of What You’ve Verified Is Actually Real?
Shufti’s Deepfake Blindspot Audit now runs fully inside your AWS environment, auditing historic KYC for manipulation signals without moving sensitive data off-prem.
whitepapers
