New Zealand

Identity Verification & KYC For New Zealand

Q: What is the primary identity document for KYC in New Zealand?

The New Zealand Driver Licence, issued by NZ Transport Agency, is the primary identity document for KYC. Passport (Department of Internal Affairs) and birth certificate are accepted fallback documents for non-drivers.

Q: How are Māori names with macrons handled in identity verification?

Macrons are mandatory on official New Zealand documents (Geographic Board Act 2008). Shufti's UTF-8 encoding support preserves macron characters (e.g. Māori, Ōtautahi) for accurate name matching and prevents false rejection of valid identities.

Q: What AML/CFT lists apply in New Zealand?

New Zealand applies UN Security Council sanctions lists, NZ Designated Terrorist Entities list, Russia Sanctions Register, RBNZ Enforcement Register, and Immigration New Zealand watchlists. Shufti screens against all applicable NZ and global lists aligned to FATF recommendations.

Q: What is the goAML reporting system?

goAML is the online portal administered by Financial Intelligence Unit (FIU), New Zealand Police; reporting entities submit Suspicious Activity Reports (SARs), Prescribed Transaction Reports (PTRs) and Border Cash Reports (BCRs). Shufti's screening and audit trail support goAML compliance workflows.

Q: What data residency options are available for New Zealand?

AWS Asia Pacific (New Zealand) region (ap-southeast-6, launched 2025) and Microsoft Azure New Zealand North (Auckland, launched December 2024) both offer in-country data residency. On-premise options available for regulated financial entities requiring sovereign processing.

Q: How long must customer verification records be retained?

AML/CFT Act 2009, Section 36 requires minimum 5-year retention from transaction completion or relationship end. Records include KYC documents, identity verification evidence, transaction records and correspondence; Shufti's retention controls align to statutory obligations.

Q: Are Pacific Island names and documents supported?

Yes. Approximately 7–8% of New Zealand population holds dual citizenship (Cook Islands, Samoa, Tonga, Niue, Tokelau). Shufti supports cross-border document verification and fuzzy name matching for Pacific Island identity documents and citizenship variants.

Q: What compliance framework governs data privacy in New Zealand?

Privacy Act 2020 (administered by Office of the Privacy Commissioner) and AML/CFT Act 2009 (enforced by RBNZ, FMA and DIA) are cornerstones. Shufti aligns to Privacy Act 2020 Principle 5 security safeguards and AML/CFT recordkeeping requirements.

Shufti delivers identity verification, KYC and KYB solutions purpose-built for New Zealand's regulatory framework, including the AML/CFT Act 2009, Privacy Act 2020, and enforcement by RBNZ, FMA and DIA.

Operational performance for New Zealand KYC

Our Numbers Speak Volumes

99.32%

Pass rates

< 5 sec

Verification
Time

90%

EIDV
Verification

Evidence-Ready Checks Across People & Businesses

Individual Documents We Verify

Shufti supports 9 document types in New Zealand.

View All Supported Documents

New Zealand Passport

Government-issued travel document issued by the Department of Internal Affairs; current RA series introduced 3 May 2021; globally accepted for KYC and primary identity verification.

New Zealand Driver Licence

Photo identity issued by NZ Transport Agency; primary document for KYC verification in New Zealand; accepted for age and address confirmation; British spelling standard.

New Zealand Birth Certificate

Vital records document issued by Department of Internal Affairs; documents from 1 January 2003 onwards accepted; citizenship documents from 1 January 2006 onwards explicitly state citizenship status.

New Zealand Citizenship Certificate

Issued by Department of Internal Affairs for citizenship by descent or grant; proof of citizenship status for KYB entities and controlled individuals.

18+ Card (Kiwi Access Card)

Managed by Hospitality New Zealand; informal age and identity verification card; may be used as supporting document for age confirmation.

Foreign Passport

Passports from home country accepted for non-citizens; must be accompanied by valid New Zealand visa or residence permit documentation.

Business Entity Identity

Certificate of Incorporation

Issued by New Zealand Companies Office; confirms incorporation date, company name and NZ Company Number; essential KYB primary document.

Company Extract/Profile from NZ Companies Register

Current registered details from companies-register.companiesoffice.govt.nz; includes directors, shareholders and registered address; critical for ongoing KYB verification.

Business Tax Identity

IRD Number

Inland Revenue Department identifier; unique 8- or 9-digit number assigned to all businesses and entities; core tax identifier for KYB verification.

GST Registration Certificate

Issued by Inland Revenue when business registers for Goods and Services Tax; threshold is NZD 60,000 taxable turnover in 12 months; linked to IRD number.

Ownership & Control (UBO)

Shareholder Register

Maintained by company and available via Companies Office; documents beneficial ownership and shareholding percentages; required for UBO identification.

Director Register

Filed with Companies Office; contains names, addresses and dates of birth of company directors; essential for understanding control structure.

Annual Return

Filed with Companies Office annually; confirms current directors and shareholders; demonstrates ongoing control and ownership structure for KYB.

Languages We Cover

English Language Support

Primary language on all official New Zealand identity and business documents; Shufti handles English text extraction, OCR and verification without special handling requirements.

Te Reo Māori and Macron Support

Te reo Māori is an official language as of 1987 (Official Languages Act 1987); macrons (tohutō) indicate long vowels and are mandatory on official documents; Shufti supports UTF-8 encoding to preserve Māori names (e.g. Māori, Ōtautahi, Ākarana) for accurate name matching and verification.

Variant Name Matching

Migrant communities comprise 28.8% of New Zealand population; systems must support fuzzy matching for Māori name variants, Pacific Island multi-jurisdictional names (Cook Islands, Samoa, Tonga, Niue) and transliteration from home country scripts; cross-border document verification required.

GOVERNANCE & CONTROLS

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-Submissions

Macron and variant name matching reduce rejection of valid Māori and Pacific Island identities; minimises applicant re-submission friction; cleaner first-pass approval rates across KYC workflows.

Cleaner Audit
Trails

Audit decision logs, evidence documentation and decision timestamps align to RBNZ, FMA and DIA audit expectations; goAML integration supports suspicious activity reporting and recordkeeping compliance.

Better Name Matching Outcomes

UTF-8 support and fuzzy matching algorithms handle Māori macrons, Pacific Island transliteration and migrant community name variants; reduces false-positive rejections and improves user onboarding completion.

One workflow, one
back office

KYC, KYB and AML screening integrated into single verification workflow; reduces operational silos and manual handoff steps; simplifies compliance officer workload and audit preparation.

Driver Licence-First Flow Design

New Zealand's primary identity document (NZ Transport Agency driver licence) prioritised in IDV flows; eIDV coverage enables rapid, passive verification; fallback to passport and birth certificate for non-drivers.

Enterprise-grade compliance infrastructure

New Zealand IDV/KYC Challenges

Māori Name Macron Support

Identity verification systems default to ASCII encoding, rejecting valid Māori names with macrons as "invalid"; UTF-8 database migration required to preserve official spelling.

Overseas-Born Resident Document Verification

28.8% of New Zealand population born overseas; KYC teams must verify foreign passports, visas and residence permits with inconsistent standards, language barriers and limited access to foreign registries.

Pacific Island Multi-Jurisdictional Residence

Approximately 7–8% of population holds dual or multiple citizenship (Cook Islands, Samoa, Tonga, Niue, Tokelau); cross-referencing identity documents across multiple government registries adds verification complexity.

Phase 2 AML Reporting Entity Readiness

Lawyers, accountants, real estate agents and trust service providers brought into AML/CFT scope; many report limited compliance infrastructure; DIA supervision transition from July 2026 creates implementation risk for operational readiness.

Shufti’s IDV/KYC Solutions for New Zealand

KYC Solutions

Fast track customer onboarding and authentication with real-time identity verification solutions.

Face Verification

Selfie-based liveness detection and biometric matching against document photographs; detects presentation attacks and deepfakes common to identity fraud patterns; supports age estimation and address confirmation steps.

Age Verification

Selfie-based age estimation combined with document verification; establishes age of majority for regulated sectors (financial services, hospitality, consumer credit); fallback to birth certificate or passport for precision verification.

Address Verification

Address confirmation through utility bills and bank statements from Genesis Energy, Mercury Energy, Contact Energy, Meridian Energy, Vector, Spark NZ, One NZ; matched against ANZ, ASB, BNZ, Westpac, Kiwibank and TSB Bank account statements.

Document Verification

Automated extraction and verification of New Zealand passports, driver licences, birth certificates, citizenship certificates and business documents; eIDV for driver licences via NZ Transport Agency; integrated with Companies Register for KYB.

KYB Solutions

Business Verification

Entity verification through New Zealand Companies Register and IRD number matching; confirms incorporation, directors, shareholders and tax identity; aligns to NZCO records and DIA Phase 2 reporting entity standards.

Enhanced Due Diligence (EDD)

Risk-based enhanced verification for high-risk customers and jurisdictions; beneficial ownership verification through Shareholder and Director Registers; supports RBNZ, FMA and DIA audit readiness for complex ownership structures.

AML Screening

Utilise artificial intelligence models and 1700+ sanction and watchlists to identify and prevent money laundering attempts.

Business AML Screening

Real-time screening against UN Security Council sanctions lists, New Zealand Designated Terrorist Entities list (Terrorism Suppression Act 2002), Russia Sanctions Register (Russia Sanctions Act 2022), RBNZ Enforcement Register, and global FATF-aligned watchlists.

Transaction Screening

Ongoing monitoring of transactions against sanctions lists and AML/CFT Act obligations; supports suspicious activity report (SAR) and prescribed transaction report (PTR) submission via goAML; continuous audit trail for enforcement.

REGULATORY ALIGNMENT

Built to Fit New Zealand's Compliance Landscape

Reserve Bank of New Zealand (RBNZ)

Central bank supervising registered banks and prudential regulation; enforces AML/CFT obligations for financial institutions. Shufti's transaction screening and customer due diligence controls align to RBNZ supervision and Enforcement Register monitoring standards.

Financial Markets Authority (FMA)

Regulates financial markets and financial service providers; oversees market conduct and AML/CFT compliance for non-bank financial institutions and capital market participants. Shufti's KYC and enhanced due diligence capabilities support FMA regulatory expectations.

Department of Internal Affairs (DIA)

AML/CFT supervisor for non-financial businesses including lawyers, accountants, real estate agents, money changers and casinos; becomes sole AML/CFT supervisor from July 2026. Shufti's KYB and beneficial ownership verification meet DIA's transition expectations for Phase 2 reporting entities.

Financial Intelligence Unit (FIU), New Zealand Police

Collects, analyses and disseminates financial intelligence under AML/CFT Act 2009; processes suspicious activity reports (SARs), prescribed transaction reports (PTRs) and border cash reports (BCRs) via goAML portal. Shufti's screening and audit trail capabilities support FIU reporting and record-keeping obligations.

Office of the Privacy Commissioner (OPC)

Administers Privacy Act 2020; enforces data protection and security requirements; issues guidance on safeguards and encryption. Shufti's data handling, retention controls and encryption posture align to Privacy Act 2020 Principle 5 security expectations.

New Zealand Companies Office (NZCO)

Manages business registry and company registers; maintains incorporation records and shareholder/director data critical for KYB due diligence. Shufti integrates company register queries and beneficial ownership verification to support NZCO compliance workflows.

Serious Fraud Office (SFO)

Investigates and prosecutes serious fraud, bribery and corruption involving financial crime; enforces financial crime standards. Shufti's KYC/KYB and AML screening capabilities support investigations and regulatory expectations around financial crime detection.

Commerce Commission

Regulates consumer protection, competition and fair trading; supervises fintech and regulated consumer credit. Shufti's KYC solutions for fintech and digital payment providers align to Commerce Commission expectations for consumer finance operators.

Deployment Choice

AWS Asia Pacific (New Zealand) region (ap-southeast-6, launched 2025) and Microsoft Azure New Zealand North (Auckland, launched December 2024) both offer in-country data residency. On-premise and co-location options available for regulated financial entities and government agencies.

Regulatory Alignment

Privacy Act 2020 and AML/CFT Act 2009 Section 36 recordkeeping obligations are enforced by Office of the Privacy Commissioner, RBNZ, FMA and DIA (transitioning to single DIA supervisor from July 2026). Shufti's compliance controls align to all enforcing authority expectations.

Retention controls

Configurable data retention and purge settings aligned to AML/CFT Act 2009 Section 36 five-year minimum recordkeeping obligation. Customer identity verification documents, transaction records, SARs and compliance programme evidence subject to statutory retention windows.

Encryption posture

Encryption standards applied to personal and financial data in transit (TLS 1.3) and at rest (AES-256); aligned to Privacy Act 2020 Principle 5 security safeguard requirements and industry standards (ISO 27001, NIST Cybersecurity Framework, CIS Controls).

Data Controls & Privacy for New Zealand

BUILT FOR COMPLIANCE TEAMS

New Zealand AML Sources That Strengthen Decision

Parliament of New Zealand

New Zealand Police - Designated Terrorists

New Zealand Foreign Affairs & Trade - Russia Sanctions Register

Financial Market Authority New Zealand-Penalties

Reserve Bank of New Zealand-Alert (RBNZ)

Immigration New Zealand

Stuff

The New Zealand Herald

Parliament of New Zealand

New Zealand Police - Designated Terrorists

New Zealand Foreign Affairs & Trade - Russia Sanctions Register

Financial Market Authority New Zealand-Penalties

Reserve Bank of New Zealand-Alert (RBNZ)

Immigration New Zealand

Stuff

The New Zealand Herald

Parliament of New Zealand

New Zealand Police - Designated Terrorists

New Zealand Foreign Affairs & Trade - Russia Sanctions Register

Financial Market Authority New Zealand-Penalties

Reserve Bank of New Zealand-Alert (RBNZ)

Immigration New Zealand

Stuff

The New Zealand Herald

Frequently Asked Questions

What is the primary identity document for KYC in New Zealand?

The New Zealand Driver Licence, issued by NZ Transport Agency, is the primary identity document for KYC. Passport (Department of Internal Affairs) and birth certificate are accepted fallback documents for non-drivers.

How are Māori names with macrons handled in identity verification?

Macrons are mandatory on official New Zealand documents (Geographic Board Act 2008). Shufti's UTF-8 encoding support preserves macron characters (e.g. Māori, Ōtautahi) for accurate name matching and prevents false rejection of valid identities.

What AML/CFT lists apply in New Zealand?

New Zealand applies UN Security Council sanctions lists, NZ Designated Terrorist Entities list, Russia Sanctions Register, RBNZ Enforcement Register, and Immigration New Zealand watchlists. Shufti screens against all applicable NZ and global lists aligned to FATF recommendations.

What is the goAML reporting system?

goAML is the online portal administered by Financial Intelligence Unit (FIU), New Zealand Police; reporting entities submit Suspicious Activity Reports (SARs), Prescribed Transaction Reports (PTRs) and Border Cash Reports (BCRs). Shufti's screening and audit trail support goAML compliance workflows.

What data residency options are available for New Zealand?

AWS Asia Pacific (New Zealand) region (ap-southeast-6, launched 2025) and Microsoft Azure New Zealand North (Auckland, launched December 2024) both offer in-country data residency. On-premise options available for regulated financial entities requiring sovereign processing.

How long must customer verification records be retained?

AML/CFT Act 2009, Section 36 requires minimum 5-year retention from transaction completion or relationship end. Records include KYC documents, identity verification evidence, transaction records and correspondence; Shufti's retention controls align to statutory obligations.

Are Pacific Island names and documents supported?

Yes. Approximately 7–8% of New Zealand population holds dual citizenship (Cook Islands, Samoa, Tonga, Niue, Tokelau). Shufti supports cross-border document verification and fuzzy name matching for Pacific Island identity documents and citizenship variants.

What compliance framework governs data privacy in New Zealand?

Privacy Act 2020 (administered by Office of the Privacy Commissioner) and AML/CFT Act 2009 (enforced by RBNZ, FMA and DIA) are cornerstones. Shufti aligns to Privacy Act 2020 Principle 5 security safeguards and AML/CFT recordkeeping requirements.

Build a New Zealand-ready KYC, KYB & AML programme with Shufti

Check Pricing Request Demo

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Use Cases for Regulated Growth in New Zealand

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Accelerate Growth, Eliminate Friction

Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.

Learn More Try Now

Onboard Global Traders in Real-Time

Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations while preventing identity theft and high-risk chargebacks.

Learn More Try Now

Secure Trust at Every Transaction

Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.

Learn More Try Now

Power a Fair & Secure Player Experience

Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.

Learn More Try Now

Build a Trusted, Verified Workforce

Screen freelancers and drivers at scale. Verify residency and reduce onboarding friction while maintaining trust between users.

Learn More Try Now

Scale Your Exchange with Confidence

Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.

Learn More Try Now

Reduce fraud without blocking growth

Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes and risk-led enforcement actions.

Learn More Try Now