What are the KYC requirements in Turkey?

Turkish KYC requirements are set by Law No. 5549 and MASAK. All obliged entities must verify customer identity, conduct CDD, apply risk-based monitoring and retain records for eight years. KYC Turkey compliance requires documents including TC Kimlik Kartı, Turkish national ID alternatives, passport and foreigner ID card for non-citizens. eKYC Turkey solutions using NFC chip verification accelerate identity verification while meeting BDDK and MASAK standards.

What is MASAK and what does AML compliance Turkey require?

MASAK is Turkey's Financial Intelligence Unit under the Ministry of Treasury and Finance. AML compliance Turkey obligations require financial institutions to conduct CDD, submit suspicious transaction reports via the MASAK Online system, maintain eight-year records and appoint a compliance officer at senior management level. MASAK compliance applies to banks, payment providers, crypto platforms and all obliged entities.

How does KVKK compliance affect KYC data handling in Turkey?

KVKK (Law No. 6698) requires all data controllers to register with VERBIS before processing personal data. KYC data is classified as personal data and must be encrypted, purpose-limited and subject to data subject access rights. KVKK compliance means cross-border transfers require equivalent protection standards. Turkish identity verification Turkey must align with both KVKK data protection and AML compliance requirements.

What documents are accepted for Turkish national ID KYC verification?

Primary documents for Turkish national ID KYC include TC Kimlik Kartı and Turkish Passport. Secondary documents include Sürücü Belgesi, Yabancı Kimlik Kartı and İkamet İzni for foreign nationals. Chip-based national ID cards with NFC receive preference. eKYC Turkey solutions support all 26 Turkish document types including biometric verification.

What are the KYB requirements for verifying Turkish businesses?

Turkish KYB verification requires Ticaret Sicil Gazetesi, Faaliyet Belgesi and Articles of Association for entity identity. Tax identity uses VKN. UBO identification is mandatory under Law No. 5549, requiring Ortaklık Yapısı, Pay Defteri and Gerçek Faydalanıcı Bildirimi documentation. KYB Turkey compliance includes verification of all beneficial owners at 25% ownership thresholds.

How does Shufti support crypto KYC Turkey compliance under CMB regulations?

Crypto KYC Turkey compliance is governed by CMB Law No. 7518, which requires platforms to obtain Capital Markets Board licences by June 2026. Shufti provides full KYC onboarding, jurisdiction verification for Travel Rule compliance, sanctions screening and eight-year record retention. Our crypto KYC Turkey solutions support CMB licence applications and post-licensing MASAK reporting obligations.

What is the data retention requirement for AML records in Turkey?

Law No. 5549 mandates eight-year retention of all AML records from the end of the business relationship. This covers KYC files, transaction records and STR documentation. AML compliance Turkey requires automated retention schedules and maintains audit-ready records for MASAK examinations and regulatory inspections.

How does Turkey's FATF membership affect AML compliance Turkey obligations?

Turkey has been a FATF member since 1991 and was removed from the grey list in June 2024 after addressing compliance gaps. Post-greylisting, MASAK and BDDK enforce heightened AML standards. FATF's 40 Recommendations guide Turkish AML policy and international correspondent banking expectations. AML compliance Turkey now requires demonstrable controls exceeding minimum standards.

What are the penalties for non-compliance with Turkish KYC and AML regulations?

Non-compliance with Turkish KYC and Law No. 5549 AML obligations results in administrative penalties and potential criminal sanctions. MASAK compliance violations attract fines; failure to maintain eight-year records, conduct proper KYC Turkey verification, or submit STRs results in enforcement action. Crypto platforms failing to obtain CMB licences by June 2026 face liquidation. Enhanced penalties apply to repeat violations.

Paraguay

Identity Verification and KYC For Paraguay

Shufti automates KYC, KYB, and AML screening for Paraguay, supporting SEPRELAD compliance requirements and eKYC identity verification for businesses and financial institutions.

Operational performance for Paraguay KYC

Our Numbers Speak Volumes

98.99%

Pass Rates

<5 sec

Verification
Time

90%

eIDV Coverage

Evidence-Ready Checks Across People & Businesses

Individual Documents We Verify

Shufti supports 6 Paraguayan document types.

View All Supported Documents

Cédula de Identidad Civil

Mandatory national ID card for Paraguayan citizens from age 17 onwards; valid 10 years; includes a biometric chip in newer versions; issued by the National Police.

Pasaporte de la República del Paraguay

Biometric travel document issued by Paraguay's Ministry of Foreign Relations; ICAO-compliant MRZ; accepted for international KYC and cross-border compliance.

Licencia de Conducir

Driver's licence issued by the National Agency of Transit and Road Safety; includes QR code verification in modern versions; security features authenticate identity.

Cédula Provisional

Temporary ID issued during Cédula de Identidad Civil renewal; valid for short periods during identity transitions; recognised by financial institutions.

Carnet de Extranjería

Foreign resident card issued to non-citizens with permanent residency status in Paraguay; confirms lawful residency; required for AML and KYC compliance.

Digital Cédula

Chip-enabled digital identity introduced July 2023 under Law 7177/2023; supports eKYC verification processes and meets SEPRELAD remote onboarding requirements.

Business Entity Identity

Escritura de Constitución

Public incorporation deed drafted by Notary Public and filed in Registro Público de Comercio; confirms company name, objectives, capital, and governing bodies.

Registro Público de Comercio (RPC) Registration

Official registry number confirming the legal existence of the entity in Paraguay; tracks ownership, address, and capital changes.

Certificado de Vigencia

Certificate of good standing from the Registro Público confirming active entity status and compliance with registration obligations.

Business Tax Identity

Registro Único de Contribuyentes (RUC)

8-character tax identifier assigned by DNIT; mandatory for all entities issuing invoices or filing taxes; also serves as the VAT number.

Constancia de RUC

Official printed confirmation of RUC registration from DNIT; used as proof of tax identity and regulatory compliance in KYB processes.

Ownership & Control (UBO)

Padrón de Socios (UBO Register)

Required under Law 6446/2019; must be updated within 15 days of company formation or UBO changes; includes full name, nationality, ID, and ownership percentage.

Declaración Jurada de Beneficiario Final

Sworn declaration of ultimate beneficial owner; required for high-risk entities and cross-border structures under SEPRELAD rules.

Escritura de Poder (Power of Attorney)

Documents authorising representatives to act on behalf of the entity; required to verify signatory authority in KYB workflows.

Languages We Cover

Spanish (Latin Script)

Language of all Paraguayan regulatory filings and corporate documents; mandatory for SEPRELAD, tax filings and communications with banking regulators.

Guaraní

The second official language spoken by over 90% of the population; some identity documents include Guaraní terms; KYC systems must handle bilingual name matching.

Jopara (Guaraní-Spanish Code-Switching)

Code-switched Guaraní-Spanish naming variant common in Paraguay; creates identity mismatch risk in Latin-script KYC systems; requires dual-language matching.

GOVERNANCE & CONTROLS

Audit-Ready Decisions, Lower Operational Drag

Fewer Document Re-Submissions

Guided capture flows reduce Cédula and Digital Cédula rejection rates; Paraguay-specific lighting and chip-read prompts cut avoidable re-submission loops.

Cleaner SEPRELAD Audit Trails

Every KYC decision is timestamped and evidence-linked; audit packages map directly to SEPRELAD's STR and recordkeeping inspection requirements.

Accurate Guaraní-Spanish Name Matching

Dual-language name logic resolves Jopara code-switching and diacritics; reduces false mismatches on Guaraní-inflected names across all document types.

One Workflow for KYC, KYB, and AML

Individual verification, Escritura de Constitución entity checks, RUC validation, and OFAC/SEPRELAD screening run in a single back-office view.

Cédula de Identidad Civil-First Flow

Onboarding flow prioritises the national ID as primary evidence; Digital Cédula chip verification triggers where available, with Pasaporte as fallback.

Enterprise-grade compliance infrastructure

Paraguay IDV/KYC Challenges

Tri-Border Fraud Exposure

Ciudad del Este sits at the Argentina-Brazil-Paraguay tri-border area with sophisticated document forgery networks and elevated false-identity fraud risk.

Guaraní-Spanish Name Matching

More than 90% of Paraguayans speak Guaraní as their primary language; names combining Guaraní and Spanish forms create identity mismatch risk in standard KYC systems.

Informal Economy Volume

Approximately 70% of Paraguay's workforce operates informally; high-volume cash transactions create elevated risk of layering and structuring in onboarding.

Correspondent Bank Risk

Global correspondent banks reduced exposure to Paraguayan institutions due to AML risk; limited alternative banking infrastructure increases compliance burden.

Shufti's IDV/KYC Solutions for Paraguay

KYC Solutions

Face Verification

Full-flow facial biometric matching supporting Digital Cédula eKYC; includes liveness detection and passive biometric validation for individual onboarding.

Age Verification

Automated age verification using selfie-based age estimation and Cédula de Identidad Civil and Digital Cédula document review supporting age-gated compliance.

Address Verification

Address confirmation through ANDE, ESSAP, COPACO utility bills and Banco Continental, Banco Itaú Paraguay statements supporting SEPRELAD residency verification.

Document Verification

Verification of Cédula de Identidad Civil, Pasaporte, Licencia de Conducir, and Digital Cédula; includes security feature authentication and chip validation.

KYB Solutions

Business Verification

Corporate entity verification and Paraguay KYC services covering Escritura de Constitución, RPC registration, RUC tax identifiers, and signatory validation.

Enhanced Due Diligence (EDD)

High-risk entity screening for politically exposed persons, cross-border structures, and complex ownership networks; supports beneficial owner identification.

AML Screening

Business AML Screening

Real-time sanctions screening against OFAC SDN, UN Security Council, and SEPRELAD national designations; detects money laundering and terrorist financing risks.

Transaction Screening

Adverse media monitoring via ADN Paraguayo, ABC Colour, Última Hora, and La Nación; PEP screening and transaction pattern analysis for high-risk customers.

REGULATORY ALIGNMENT

Built to Fit Paraguay's Compliance Landscape

Banco Central del Paraguay (BCP)

The central bank regulates financial institutions and Paraguay's monetary system. Shufti integrates BCP encryption and governance requirements into KYC workflows.

Secretaría para la Prevención del Lavado de Dinero o Bienes (SEPRELAD)

Paraguay's FIU is enforcing AML/CFT compliance and mandatory STR filing requirements. Shufti delivers SEPRELAD-compliant KYC records, STR workflows, and beneficial ownership data.

Superintendencia de Bancos (SIB)

The banking supervision authority under BCP oversees financial institution compliance standards. Shufti provides SIB-aligned KYC audit trails and beneficial ownership verification.

Subsecretaría de Estado de Tributación (SET)

Tax administration managing the RUC taxpayer registry and corporate registration compliance. Shufti supports SET through RUC validation and UBO identification for obliged entities.

Comisión Nacional de Telecomunicaciones (CONATEL)

State regulator managing telecoms spectrum, licensing, and digital service data protection. Shufti's eKYC platform complies with CONATEL digital service licensing for remote onboarding.

Secretaría Nacional Antidrogas (SENAD)

The National Anti-Drug Secretariat is coordinating drug-trafficking prevention and asset tracing. Shufti screens entities against narco watchlists to support SENAD's AML risk intelligence.

Banco Nacional de Fomento (BNF)

State development bank supporting Paraguay's agriculture, industry, and export sectors. Shufti supports BNF KYC and beneficial ownership verification aligned with SEPRELAD rules.

Deployment Choice

AWS South America (São Paulo, sa-east-1) and GCP (southamerica-east1) serve Paraguay. On-premise deployment available for regulated entities requiring in-country data governance.

Regulatory Alignment

Law 1682/2001 (Habeas Data) and Law 7593/2025 govern data processing. SEPRELAD requires KYC records accessible for regulatory examination and compliance demonstrations.

Retention Controls

Minimum 5-year retention period for KYC records under Law 1015/1997 and SEPRELAD sectoral resolutions, measured post-transaction or end of business relationship.

Encryption Posture

BCP Resolution 10 mandates encryption, access controls, and incident response plans. AES-256 protects personal and financial data in transit and at rest.

Data and Privacy Controls in Paraguay

BUILT FOR COMPLIANCE TEAMS

Paraguay AML Sources That Strengthen Decision

National Assembly of Paraguay (Congreso Nacional del Paraguay)

ADN Paraguayo

ABC Color

Última Hora

La Nación

Frequently Asked Questions

What are Paraguay's KYC requirements for individuals?

KYC Paraguay requirements under Law 1015/1997 require financial institutions to verify identity using Cédula de Identidad Civil, Pasaporte, or Licencia de Conducir; confirm address through utilities; and identify beneficial owners. Enhanced due diligence applies to transactions exceeding USD 10,000.

How does SEPRELAD regulate KYC compliance in Paraguay?

SEPRELAD Paraguay requirements enforce AML/CFT compliance through sectoral resolutions and mandatory STR filing via goAML for transactions exceeding USD 10,000. SEPRELAD conducts examinations, issues guidance, and coordinates with GAFILAT monitoring bodies.

What identity documents are accepted for KYC verification in Paraguay?

Shufti accepts six Paraguayan document types: Cédula de Identidad Civil (ID), Pasaporte (passport), Licencia de Conducir (licence), Cédula Provisional (temporary), Carnet de Extranjería (resident card), and Digital Cédula (July 2023). Digital Cédula supports eKYC.

What is AML screening, and why is it required in Paraguay?

Paraguay AML screening compares customers and beneficial owners against OFAC, UN, and SEPRELAD lists to detect money laundering. Law 1015/1997 requires AML screening to comply with FATF standards and prevent illicit financial flows.

What is the Cédula de Identidad Civil, and how is it verified?

The Cédula de Identidad Civil is Paraguay's mandatory national identity card issued to citizens from age 17, valid for 10 years, with a biometric chip in newer versions. Verification uses document scanning, chip authentication, and cross-reference against civil registry databases.

Does Paraguay accept digital (eKYC) identity verification?

Yes, Paraguay eKYC is recognised under Law 7177/2023, supporting Digital Cédula verification from July 2023. SEPRELAD and BCP accept remote Paraguay identity verification using chip-enabled documents and passive biometric matching for low-risk customers.

What are the beneficial ownership disclosure requirements in Paraguay?

Paraguay requires beneficial ownership disclosure under Law 6446/2019, enforced by SET and SEPRELAD. The Padrón de Socios must be updated within 15 days of formation or UBO changes, including full name, nationality, national ID, and ownership percentage.

What is the data retention period for KYC records in Paraguay?

Law 1015/1997 and SEPRELAD sectoral resolutions mandate a minimum 5-year retention period for KYC records and transaction data, measured post-transaction or upon the end of the business relationship. SEPRELAD may request records for regulatory examinations.

Build a Paraguay-ready KYC, KYB & AML programme with Shufti

Check Pricing Request Demo

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Use Cases for Regulated Growth in Paraguay

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Accelerate Growth, Eliminate Friction

Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.

Learn More Try Now

Onboard Global Traders in Real-Time

Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations while preventing identity theft and high-risk chargebacks.

Learn More Try Now

Secure Trust at Every Transaction

Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.

Learn More Try Now

Power a Fair & Secure Player Experience

Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.

Learn More Try Now

Build a Trusted, Verified Workforce

Screen freelancers and drivers at scale. Verify residency and reduce onboarding friction while maintaining trust between users.

Learn More Try Now

Scale Your Exchange with Confidence

Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.

Learn More Try Now

Reduce fraud without blocking growth

Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes, and risk-led enforcement actions.

Learn More Try Now