What are the KYC requirements in Turkey?

Turkish KYC requirements are set by Law No. 5549 and MASAK. All obliged entities must verify customer identity, conduct CDD, apply risk-based monitoring and retain records for eight years. KYC Turkey compliance requires documents including TC Kimlik Kartı, Turkish national ID alternatives, passport and foreigner ID card for non-citizens. eKYC Turkey solutions using NFC chip verification accelerate identity verification while meeting BDDK and MASAK standards.

What is MASAK and what does AML compliance Turkey require?

MASAK is Turkey's Financial Intelligence Unit under the Ministry of Treasury and Finance. AML compliance Turkey obligations require financial institutions to conduct CDD, submit suspicious transaction reports via the MASAK Online system, maintain eight-year records and appoint a compliance officer at senior management level. MASAK compliance applies to banks, payment providers, crypto platforms and all obliged entities.

How does KVKK compliance affect KYC data handling in Turkey?

KVKK (Law No. 6698) requires all data controllers to register with VERBIS before processing personal data. KYC data is classified as personal data and must be encrypted, purpose-limited and subject to data subject access rights. KVKK compliance means cross-border transfers require equivalent protection standards. Turkish identity verification Turkey must align with both KVKK data protection and AML compliance requirements.

What documents are accepted for Turkish national ID KYC verification?

Primary documents for Turkish national ID KYC include TC Kimlik Kartı and Turkish Passport. Secondary documents include Sürücü Belgesi, Yabancı Kimlik Kartı and İkamet İzni for foreign nationals. Chip-based national ID cards with NFC receive preference. eKYC Turkey solutions support all 26 Turkish document types including biometric verification.

What are the KYB requirements for verifying Turkish businesses?

Turkish KYB verification requires Ticaret Sicil Gazetesi, Faaliyet Belgesi and Articles of Association for entity identity. Tax identity uses VKN. UBO identification is mandatory under Law No. 5549, requiring Ortaklık Yapısı, Pay Defteri and Gerçek Faydalanıcı Bildirimi documentation. KYB Turkey compliance includes verification of all beneficial owners at 25% ownership thresholds.

How does Shufti support crypto KYC Turkey compliance under CMB regulations?

Crypto KYC Turkey compliance is governed by CMB Law No. 7518, which requires platforms to obtain Capital Markets Board licences by June 2026. Shufti provides full KYC onboarding, jurisdiction verification for Travel Rule compliance, sanctions screening and eight-year record retention. Our crypto KYC Turkey solutions support CMB licence applications and post-licensing MASAK reporting obligations.

What is the data retention requirement for AML records in Turkey?

Law No. 5549 mandates eight-year retention of all AML records from the end of the business relationship. This covers KYC files, transaction records and STR documentation. AML compliance Turkey requires automated retention schedules and maintains audit-ready records for MASAK examinations and regulatory inspections.

How does Turkey's FATF membership affect AML compliance Turkey obligations?

Turkey has been a FATF member since 1991 and was removed from the grey list in June 2024 after addressing compliance gaps. Post-greylisting, MASAK and BDDK enforce heightened AML standards. FATF's 40 Recommendations guide Turkish AML policy and international correspondent banking expectations. AML compliance Turkey now requires demonstrable controls exceeding minimum standards.

What are the penalties for non-compliance with Turkish KYC and AML regulations?

Non-compliance with Turkish KYC and Law No. 5549 AML obligations results in administrative penalties and potential criminal sanctions. MASAK compliance violations attract fines; failure to maintain eight-year records, conduct proper KYC Turkey verification, or submit STRs results in enforcement action. Crypto platforms failing to obtain CMB licences by June 2026 face liquidation. Enhanced penalties apply to repeat violations.

Oman

Identity Verification & KYC For Oman

Shufti supports Oman KYC, KYB, and AML compliance under Royal Decree 30/2016, automating customer due diligence, beneficial owner verification, and terrorism financing controls.

Operational performance for Oman KYC

Our Numbers Speak Volumes

98.14%

Pass Rates

< 5 sec

Verification
Time

100%

Omni-format Document Recognition

Evidence-Ready Checks Across People & Businesses

Individual Documents We Verify

Shufti supports 9 Omani document types.

View All Supported Documents

Omani National ID Card

Mandatory biometric ID for Omani citizens; NFC chip with encrypted biometric data and digital certificates. Bilingual Arabic and English. Issued by ROP.

Omani Passport

Biometric passport issued since 2014; valid ten years. Forty-eight pages, bilingual Arabic and English, with embedded NFC chip and biometric security features.

Omani Driver's License

Integrates with national ID back. Includes e-purse and digital signature features. Digital versions carry equal legal status to physical documents as of 2025.

Resident Identity Card

Identity document for non-citizens in Oman. Bilingual Arabic and English with machine-readable zones. Issued by Royal Oman Police to resident workers.

Digital Omani ID Card

Digital Omani national ID with equal legal status to physical documents as of 2025. Accessible via secure channels with NFC data for authentication workflows.

Smart Omani National ID

Enhanced biometric variant with digital capabilities. NFC chip glare requires capture quality gates. Supports liveness detection and face verification.

Business Entity Identity

Commercial Registration Certificate

Official government record issued by MOCIIP. Mandatory for business; obtained via Invest Easy portal. Processing: 3 to 4 working days. Documents company name, entity type, ownership, and activities.

Memorandum and Articles of Association

Required for company formation and ownership disclosure. Uploaded during commercial registration. Evidences corporate governance structure and shareholder composition.

Business Tax Identity

Tax Identification Number (TIN)

Issued by Oman Tax Authority. For VAT/excise: 12 alphanumeric characters. For entities: up to 7-digit sequence. Serves as VAT registration number for businesses.

VAT Registration Certificate

Issued upon approval by Oman Tax Authority. Includes unique VATIN. Required for businesses with annual turnover above OMR 38,500.

Ownership & Control (UBO)

Ultimate Beneficial Owner Register

Mandated by MOCIIP Decision 424/2023. All commercial companies except public joint-stock must maintain UBO register. Includes individuals owning 25 per cent or more.

Corporate Shareholder Documentation

For corporate shareholders, documentation includes legal name, status, documents, head office address, and representative details. Retained ten years post-dissolution.

Languages We Cover

Arabic (Modern Standard Arabic)

All official identity documents are bilingual in Arabic script. Passports feature inscriptions in both Arabic and English divided by national coat of arms. Commercial documents issued bilingual or available through government portals.

English (Latin Script)

All official identity documents feature bilingual English text. National ID card has English on front and back with bilingual information. Commercial documents follow international standards for transliteration of Arabic names.

Bilingual Document Processing

Omani documents present Arabic-to-English variant handling challenges. Transliteration-aware matching rules help manage common spelling variants in name formatting. Keep extracted values visible for audit and compliance.

GOVERNANCE & CONTROLS

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-Submissions

Reduce rejections using capture guidance and structured extraction. Liveness detection plus face matching eliminate synthetic fraud and mule sign-ups.

Cleaner Audit Trails

Consistent decision outputs and reason codes. Shufti logs screening hits, analyst notes, and timestamps supporting STR and CTR case preparation.

Better Name Matching Outcomes

Handle Arabic and English variants using transliteration-aware matching rules. One workflow manages verification and AML screening in unified view.

One Workflow, One Back Office

Identity verification plus AML screening plus beneficial owner collection managed in unified dashboard. Decisions are evidence-led and repeatable.

Royal Decree 30/2016 Alignment

Ten-year retention for customer due diligence, beneficial owner proofs, and transaction reports. Preserves investigation-grade evidence packs.

Enterprise-grade compliance infrastructure

Oman IDV/KYC Challenges

Document Fraud and Tampering

Document tampering is an active fraud vector in Oman. Detection uses NFC chip validation, photo integrity checks, and source verification.

Synthetic ID & Account Fraud

Criminal actors merge stolen and real data into synthetic identities. Liveness and biometric matching stop account takeover at onboarding.

Remittance & Currency Risk

Oman's position creates ML and TF exposure from neighbouring jurisdictions. New IBAN rules from July 2025 add cross-border monitoring complexity.

UBO Disclosure Enforcement

MOCIIP Decision 424/2023 mandates UBO registers. Updates required within 5 days of ownership changes; fines up to OMR 1,000 apply.

Shufti's IDV/KYC Solutions for Oman

KYC Solutions

Face Verification

Stops national ID and passport impersonation with liveness and face match. Confirms the person matches the document; AI liveness blocks deepfake spoofing.

Age Verification

Estimates age from selfie; falls back to document verification when required. Blocks underage access whilst maintaining onboarding speed for financial services.

Address Verification

Shufti verifies any address-bearing document including Nama, Omantel, and Ooredoo bills; statements from Bank Muscat, Bank Dhofar, and NBO are also accepted.

Document Verification

Detects tampered Omani national IDs, passports, and resident cards. Extracts bilingual Arabic and English fields and validates NFC chip biometric data.

KYB Solutions

Business Verification

Verifies Omani entities using Commercial Registration, MOA, and UBO register evidence. Covers directors and signatories; reduces shell-company onboarding risk.

Enhanced Due Diligence

Screens entities and controllers for PEP and sanctions exposure. Captures beneficial owners at the 25 per cent threshold under Ministerial Decision 424/2023.

AML Screening

Business AML Screening

Screens Omani entities, owners, and directors against OFAC, UN, and local sanctions, PEP lists, and watchlists. Delivers defensible escalation logs and trails.

Transaction Screening

Monitors for mule activity and structuring patterns. Supports STR and CTR submission via goAML to NCFI. Maintains ten-year records per Royal Decree 30/2016.

REGULATORY ALIGNMENT

Built to Fit Oman's Compliance Landscape

Central Bank of Oman (CBO)

The CBO regulates banks, exchanges, and payment providers, overseeing AML/CFT compliance. Shufti evidences CDD steps, screening results, and audit trails. Official Website: https://cbo.gov.om/

Financial Services Authority (FSA)

The FSA regulates capital markets, securities, and insurance in Oman. Shufti structures KYB and UBO evidence with approval trails for FSA-supervised entities. Official Website: https://fsa.gov.om/

Ministry of Commerce, Industry and Investment Promotion (MOCIIP)

MOCIIP oversees commercial registration and business licensing in Oman. Shufti collects Commercial Registration and UBO registers to support KYB evidence. Official Website: https://tejarah.gov.om/en

National Centre for Financial Information (NCFI)

The NCFI is Oman's Financial Intelligence Unit, collecting STRs via goAML. Shufti preserves identity artefacts and screening hits for each NCFI submission. Official Website: https://ncfi.gov.om/

Ministry of Transport, Communications and Information Technology (MTCIT)

MTCIT enforces the PDPL and supervises data protection compliance in Oman. Shufti aligns with PDPL through on-premise deployment and encryption controls. Official Website: https://prod.mtcit.gov.om/

Royal Oman Police (ROP)

The ROP issues passports, national IDs, and driver licences in Oman. Shufti supports these documents with capture guidance, face matching, and extraction. Official Website: https://www.rop.gov.om/

Oman Tax Authority (OTA)

The OTA issues Tax Identification Numbers and oversees VAT and income tax compliance. Shufti collects TIN evidence and screens controllers against sanctions. Official Website: https://tms.taxoman.gov.om/

Consumer Protection Authority (CPA)

The CPA protects consumers and resolves complaints against unfair practices. Shufti verifies identities and preserves age-gated evidence for CPA compliance. Official Website: https://cpa.gov.om/

Deployment Choice

No major cloud providers operate in-country regions in Oman. On-premise or GCC deployment meets data residency rules for regulated financial entities.

Regulatory Alignment

PDPL (Royal Decree 6/2022), enforced 5 February 2026, is primary law. AML retention requires ten years. The CBO oversees AML records; MTCIT oversees PDPL.

Retention Controls

Minimum retention: ten years from transaction date, relationship end, or STR submission. Applies to due diligence, beneficial owner, and transaction documents.

Encryption Posture

PDPL requires encryption and access controls as baseline security. Organisations use AES-256 for data at rest and TLS 1.3 in transit per best practices.

Data and Privacy Controls in Oman

BUILT FOR COMPLIANCE TEAMS

Oman AML Sources That Strengthen Decision

National Assembly of Oman

National Counter Terrorism Committee, Oman - Sanctions Local List

Times of Oman

Oman Observer

Muscat Daily

Frequently Asked Questions

What are the KYC requirements for businesses in Oman under Royal Decree 30/2016?

Businesses must provide: (1) Commercial Registration Certificate from MOCIIP; (2) Authorised signatory identity verification; (3) UBO register for persons owning 25 per cent or more; (4) Memorandum and Articles of Association; (5) Tax ID or VAT certificate. All must comply with Royal Decree 30/2016 and CBO AML guidelines.

What is the difference between customer due diligence (CDD) and enhanced due diligence (EDD) in Oman?

CDD is baseline verification: identity, address, beneficial ownership. EDD applies to higher-risk customers. Triggers include: PEPs, cross-border transactions, high-value transfers, high-risk jurisdictions, or complex structures. EDD requires ongoing monitoring, transaction screening, and enhanced records.

Which identity documents are accepted for KYC verification in Oman?

Accepted documents: Oman National ID Card (NFC chip, biometric, Royal Oman Police); Passport (biometric, 10 years valid, bilingual); Resident Identity Card (non-citizens, bilingual); Driver's Licence (integrated with national ID, digital versions legal as of 2025); Digital Omani ID Card (equal status, secure digital access).

How does biometric verification work for Oman national ID and passport KYC?

Biometric verification uses: (1) NFC chip validation of embedded data; (2) Selfie-to-document photo and fingerprint matching; (3) AI liveness detection preventing spoofing and deepfakes; (4) Security feature validation and machine-readable zone checks; (5) Audit trail with timestamps and decision rationale.

What is beneficial owner verification and why is UBO disclosure required in Oman?

UBO verification identifies natural persons owning or controlling 25 per cent or more of shares. Ministerial Decision 424/2023 mandates UBO registers for all commercial companies except public joint-stock. Requirements: centralised register, 5-day update cycle, passport/ID copies, 10-year retention, OMR 1,000 fines for non-compliance.

What documents do I need for commercial registration and KYB in Oman?

Requirements: Commercial Registration Certificate from MOCIIP (3-4 days); Memorandum and Articles; UBO register with KYC for each 25 per cent-plus owner; TIN or VAT certificate (for entities with turnover above OMR 38,500); Authorised signatory and director ID; Business address proof. Digital versions accepted.

How do I report suspicious transactions to NCFI and comply with AML obligations in Oman?

Use goAML system for STR and CTR submissions. Identify suspicious activity per NCFI indicators, document with evidence packs including KYC and transaction details, submit via goAML within regulatory timeframes, maintain records for 10 years. NCFI coordinates with domestic and international FIUs for ML and TF investigations.

What are the penalties for non-compliance with AML and KYC requirements in Oman?

Penalties: fines OMR 10,000 to OMR 500,000; imprisonment for deliberate non-compliance; registration suspension or cancellation; loss of banking licence; public sanctions; forced compliance remediation. The CBO and supervisors enforce Royal Decree 30/2016 through regular compliance examinations.

Build an Oman-ready KYC, KYB & AML programme with Shufti

Check Pricing Request Demo

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Use Cases for Regulated Growth in Oman

Marketplace

Banking

Crypto

Fintech

Forex

Gaming

Gig Economy

Marketplace

Banking

Crypto

Fintech

Forex

Gaming

Gig Economy

Marketplace

Banking

Crypto

Fintech

Forex

Gaming

Gig Economy

Reduce Fraud Without Blocking Growth

Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes, and risk-led enforcement actions.

Learn More Try Now

Secure Trust at Every Transaction

Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.

Learn More Try Now

Scale Your Exchange with Confidence

Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.

Learn More Try Now

Accelerate Growth, Eliminate Friction

Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.

Learn More Try Now

Onboard Global Traders in Real-Time

Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations while preventing identity theft and high-risk chargebacks.

Learn More Try Now

Power a Fair & Secure Player Experience

Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.

Learn More Try Now