What are the KYC requirements in Turkey?

Turkish KYC requirements are set by Law No. 5549 and MASAK. All obliged entities must verify customer identity, conduct CDD, apply risk-based monitoring and retain records for eight years. KYC Turkey compliance requires documents including TC Kimlik Kartı, Turkish national ID alternatives, passport and foreigner ID card for non-citizens. eKYC Turkey solutions using NFC chip verification accelerate identity verification while meeting BDDK and MASAK standards.

What is MASAK and what does AML compliance Turkey require?

MASAK is Turkey's Financial Intelligence Unit under the Ministry of Treasury and Finance. AML compliance Turkey obligations require financial institutions to conduct CDD, submit suspicious transaction reports via the MASAK Online system, maintain eight-year records and appoint a compliance officer at senior management level. MASAK compliance applies to banks, payment providers, crypto platforms and all obliged entities.

How does KVKK compliance affect KYC data handling in Turkey?

KVKK (Law No. 6698) requires all data controllers to register with VERBIS before processing personal data. KYC data is classified as personal data and must be encrypted, purpose-limited and subject to data subject access rights. KVKK compliance means cross-border transfers require equivalent protection standards. Turkish identity verification Turkey must align with both KVKK data protection and AML compliance requirements.

What documents are accepted for Turkish national ID KYC verification?

Primary documents for Turkish national ID KYC include TC Kimlik Kartı and Turkish Passport. Secondary documents include Sürücü Belgesi, Yabancı Kimlik Kartı and İkamet İzni for foreign nationals. Chip-based national ID cards with NFC receive preference. eKYC Turkey solutions support all 26 Turkish document types including biometric verification.

What are the KYB requirements for verifying Turkish businesses?

Turkish KYB verification requires Ticaret Sicil Gazetesi, Faaliyet Belgesi and Articles of Association for entity identity. Tax identity uses VKN. UBO identification is mandatory under Law No. 5549, requiring Ortaklık Yapısı, Pay Defteri and Gerçek Faydalanıcı Bildirimi documentation. KYB Turkey compliance includes verification of all beneficial owners at 25% ownership thresholds.

How does Shufti support crypto KYC Turkey compliance under CMB regulations?

Crypto KYC Turkey compliance is governed by CMB Law No. 7518, which requires platforms to obtain Capital Markets Board licences by June 2026. Shufti provides full KYC onboarding, jurisdiction verification for Travel Rule compliance, sanctions screening and eight-year record retention. Our crypto KYC Turkey solutions support CMB licence applications and post-licensing MASAK reporting obligations.

What is the data retention requirement for AML records in Turkey?

Law No. 5549 mandates eight-year retention of all AML records from the end of the business relationship. This covers KYC files, transaction records and STR documentation. AML compliance Turkey requires automated retention schedules and maintains audit-ready records for MASAK examinations and regulatory inspections.

How does Turkey's FATF membership affect AML compliance Turkey obligations?

Turkey has been a FATF member since 1991 and was removed from the grey list in June 2024 after addressing compliance gaps. Post-greylisting, MASAK and BDDK enforce heightened AML standards. FATF's 40 Recommendations guide Turkish AML policy and international correspondent banking expectations. AML compliance Turkey now requires demonstrable controls exceeding minimum standards.

What are the penalties for non-compliance with Turkish KYC and AML regulations?

Non-compliance with Turkish KYC and Law No. 5549 AML obligations results in administrative penalties and potential criminal sanctions. MASAK compliance violations attract fines; failure to maintain eight-year records, conduct proper KYC Turkey verification, or submit STRs results in enforcement action. Crypto platforms failing to obtain CMB licences by June 2026 face liquidation. Enhanced penalties apply to repeat violations.

Puerto Rico

Identity Verification & KYC For Puerto Rico

Shufti delivers KYC, KYB and AML verification built for Puerto Rico's dual federal-territorial framework, Act 60 tax incentive entities, International Financial Entities operating under Act 273, and OCIF-regulated financial institutions.

Operational performance for Puerto Rico KYC

Our Numbers Speak Volumes

96.96%

Pass Rates

< 5 sec

Verification
Time

100%

Omni-format Document Recognition

Evidence-Ready Checks Across People & Businesses in Puerto Rico

Individual Documents We Verify

Shufti supports 5 Puerto Rican document types.

View All Supported Documents

Puerto Rico Driver's Licence

Issued by DTOP; REAL ID-compliant with bilingual format. Displays full name, date of birth, address, photograph, signature and expiration date valid for eight years.

Puerto Rico Non-Driver ID Card

DTOP-issued alternative to driver's licence; REAL ID-compliant, bilingual and valid for eight years. Used when no driving licence exists.

U.S. Passport

Issued by the U.S. Department of State; accepted for identity verification in Puerto Rico and recognised globally.

U.S. Passport Card

Portable U.S. passport alternative; accepted for KYC verification in Puerto Rico contexts requiring travel documents.

Puerto Rico Birth Certificate

Government-registered vital record issued by the Department of Health; used as a supporting document for identity verification alongside photo ID.

Business Entity Identity

Articles of Incorporation

Filed with the Puerto Rico Department of State; establishes legal entity status and corporate structure for KYB verification.

Certificate of Good Standing

Issued by the Puerto Rico Department of State; confirms the entity's legal existence, authority and compliance status with local regulations.

Business Tax Identity

Merchant Registration Certificate

Issued by the Puerto Rico Department of Treasury, mandatory for all businesses operating in Puerto Rico and required for KYB verification.

Federal Employer Identification Number

Issued by the U.S. Internal Revenue Service; assigned to Puerto Rico entities for federal tax and banking purposes.

Ownership & Control (UBO)

Corporate Resolution

Internal document from a company's board authorising business transactions and signatory disclosure; required for KYB evidence.

Beneficial Ownership Information

Share certificates, corporate stock ledgers and partnership agreements are used to evidence beneficial ownership and control structure.

Languages We Cover

Bilingual Document Handling

All Puerto Rico government-issued identity documents are produced in bilingual format (Spanish and English) to comply with REAL ID standards and local regulations for compliant verification.

Name Matching For Spanish Diacritics

Controls handle Spanish accented characters (á, é, í, ó, ú) and diacritical marks in surnames (López, González, Fernández) to reduce false positives in AML screening.

Evidence Consistency Across KYC Steps

Identity data is reconciled across document inputs, address verification, beneficial ownership disclosures and AML screening outputs in one case file for audit readiness.

GOVERNANCE & CONTROLS

Audit-Ready Decisions, Lower Operational Drag

Fewer Re-Submissions

Bilingual and REAL ID-compliant document capture reduces failure rates across Puerto Rico's government-issued identity formats.

Cleaner Audit Trails

Structured KYC and KYB case files are retrievable for OCIF and FinCEN regulatory examinations and compliance audits.

Better Name Matching Outcomes

Handles Spanish diacritics, accented surnames and bilingual name variants to reduce false positives in sanctions screening.

One Workflow, One Back Office

KYC, KYB, AML screening and case management consolidated in one system for Puerto Rico banking compliance and federal and territorial compliance obligations.

National ID-First Flow Design

Puerto Rico Driver's Licence and Non-Driver ID Card flows aligned to DTOP REAL ID-compliant documents as primary identity verification.

Enterprise-grade compliance infrastructure

Puerto Rico IDV/KYC Challenges

Dual Regulatory Complexity

Federal Bank Secrecy Act and OCIF territorial requirements create overlapping compliance obligations for Puerto Rico financial institutions.

Act 273 IBE Onboarding

International Banking Entities face enhanced scrutiny from OCIF and FinCEN, given their specific FATCA exemption status and offshore clientele.

Address Verification Gaps

Informal urbanisation addressing, widespread PO box use, and rural route inconsistencies complicate proof-of-address verification and validation.

Act 60 Beneficiary EDD

Tax incentive decree holders require enhanced due diligence to mitigate misuse risk and ensure compliance with annual audit requirements.

Shufti's IDV/KYC Solutions for Puerto Rico

KYC Solutions

Face Verification

Reduces impersonation and synthetic identity risk. Document liveness detection strengthens verification for REAL ID-compliant Puerto Rico government IDs.

Age Verification

Selfie-based age estimation combined with document verification fallback, where required for regulated products and services.

Address Verification

Shufti can verify any address-bearing document. Accepts utility bills from PREPA, LUMA Energy, PRASA, Liberty Puerto Rico and local banks, including Banco Popular and FirstBank Puerto Rico.

Document Verification

Supports bilingual Puerto Rico driver's licences, non-driver ID cards, U.S. passports and DTOP-issued IDs with machine-readable zone extraction.

KYB Solutions

Business Verification

Validates entity status through the Puerto Rico Department of State registry, corroborates Merchant Registration Certificate evidence and captures beneficial ownership disclosures.

Enhanced Due Diligence (EDD)

Structured escalation workflows for Act 60 beneficiaries, Act 273 International Financial Entities and high-risk entities. Produces audit trails aligned to OCIF expectations.

AML Screening

Business AML Screening

Screens entities and controlling persons against OFAC SDN list, FinCEN watchlists, local sanctions lists and global politically exposed person datasets.

Transaction Screening

Supports ongoing monitoring aligned to Bank Secrecy Act suspicious activity monitoring obligations and Suspicious Activity Report escalation processes.

REGULATORY ALIGNMENT

Built to Fit Puerto Rico's Compliance Landscape

Office of the Commissioner of Financial Institutions (OCIF)

Supervises banks, money transmitters and financial entities in Puerto Rico. Shufti's KYC audit trails and AML screening align with OCIF's recordkeeping rules. Official Website: https://www.ocif.pr.gov

Financial Crimes Enforcement Network (FinCEN)

U.S. Treasury Financial Intelligence Unit for Puerto Rico. Shufti supports BSA E-Filing System alignment and SAR documentation workflows for compliance. Official Website: https://www.fincen.gov

Office of Foreign Assets Control (OFAC)

U.S. Treasury sanctions authority for economic compliance. Shufti screens entities and individuals against the OFAC SDN list and Consolidated Sanctions Lists. Official Website: https://ofac.treas.gov

Puerto Rico Department of Treasury (Hacienda)

Oversees tax administration and business licensing in Puerto Rico. Shufti supports business entity verification aligned to Hacienda registration requirements. Official Website: https://hacienda.pr.gov

Puerto Rico Department of State (Secretaría de Estado)

Maintains corporate registry and issues Certificates of Good Standing. Shufti integrates entity verification against the official Department of State registry. Official Website: https://estado.pr.gov

Department of Transportation and Public Works (DTOP)

Issue REAL ID-compliant driver's licences and ID cards in bilingual format. Shufti verifies DTOP-issued documents with bilingual and REAL ID-compliant support. Official Website: https://dtop.pr.gov

U.S. Securities and Exchange Commission (SEC)

Federal regulator of securities and investment services. Shufti supports securities compliance and investment company verification aligned with SEC requirements. Official Website: https://www.sec.gov

Consumer Financial Protection Bureau (CFPB)

Federal agency protecting consumers in financial services. Shufti maintains audit trails and evidence structures aligned to CFPB examination requirements. Official Website: https://www.consumerfinance.gov

Deployment Choice

AWS us-east-1 (N. Virginia) and us-east-2 (Ohio) regions serve Puerto Rico with the lowest latency. Azure East US and Google Cloud Platform us-east1 are available. On-premise deployment options for OCIF-regulated financial institutions requiring data sovereignty.

Regulatory Alignment

Aligned to Gramm-Leach-Bliley Act (GLBA) safeguards rule for financial institutions and Bank Secrecy Act recordkeeping obligations enforced by OCIF and FinCEN.

Retention Controls

Configurable retention and purge settings aligned to the Bank Secrecy Act five-year minimum recordkeeping obligation for financial transaction records and supporting documentation.

Encryption Posture

FFIEC guidance and NIST standards applied; AES-256 encryption for personal and financial data in transit and at rest aligned to federal financial institution examination standards.

Data and Privacy Controls in Puerto Rico

BUILT FOR COMPLIANCE TEAMS

Puerto Rico AML Sources That Strengthen Decision

Puerto Rico Police (Warnings and Regulatory Enforcement)

Puerto Rico Securities Regulatory Entity

El Nuevo Día (Adverse Media)

Primera Hora (Adverse Media)

Noticel (Adverse Media)

Puerto Rico Department of Treasury

Frequently Asked Questions

What government-issued identity documents does Shufti accept for KYC in Puerto Rico?

Shufti accepts Puerto Rico driver's licences, non-driver ID cards, U.S. passports and U.S. passport cards for KYC verification. All primary Puerto Rico government documents are REAL ID-compliant and issued in bilingual Spanish-English format to facilitate identity verification for residents and international clients.

What are the Act 273 compliance requirements for international financial entities in Puerto Rico?

Act 273 International Financial Entities must comply with the Bank Secrecy Act, USA PATRIOT Act and OFAC sanctions requirements; maintain a minimum of eight full-time Puerto Rico-based employees, including a dedicated Chief Compliance Officer; conduct full KYC and AML procedures; file Suspicious Activity Reports to FinCEN for transactions exceeding USD 5,000 involving suspicious activity; and undergo annual compliance audits.

What suspicious activity and currency reporting thresholds apply in Puerto Rico?

Suspicious Activity Reports (SARs) must be filed with FinCEN for transactions of at least USD 5,000 involving suspicious activity. Currency Transaction Reports (CTRs) must be filed for cash transactions exceeding USD 10,000 in a single business day. Both are filed electronically via the FinCEN BSA E-Filing System, not goAML.

What documents are required to verify beneficial ownership of Puerto Rico business entities?

Required Know Your Business documents include Certificate of Good Standing from Puerto Rico Department of State, Merchant Registration Certificate from Treasury, Corporate Resolution authorising signatory disclosure, share certificates or stock ledgers evidencing ownership percentages, and officer/director listings confirming controlling persons. Puerto Rico entities are currently exempt from FinCEN Beneficial Ownership Information reporting.

How is address verification conducted for Puerto Rico residents and entities?

Address verification uses utility bills from PREPA, LUMA Energy, PRASA, Liberty Puerto Rico or Claro; bank statements from Banco Popular, FirstBank Puerto Rico or Oriental Bank; and official government documents. Puerto Rico's non-standard addressing (urbanisations, barrios, PO boxes) requires localised expertise to reconcile informal addressing with USPS standards.

What role does OCIF play in Puerto Rico's KYC and AML compliance?

OCIF (Office of the Commissioner of Financial Institutions) supervises Puerto Rico's financial institutions and International Financial Entities, enforces the Bank Secrecy Act, USA PATRIOT Act and OFAC compliance, conducts examinations aligned to Federal Financial Institution Examination Council guidance, and maintains a Memorandum of Understanding with OFAC for sanctions compliance monitoring.

How do Act 60 tax incentive beneficiaries maintain KYC and AML compliance?

Act 60 beneficiaries face heightened due diligence from Puerto Rico banks and OCIF; must provide CPA-audited financial statements annually; undergo two-year independent compliance audits conducted by Hacienda; and maintain detailed beneficial ownership documentation. Enhanced scrutiny applies to verify incentive legitimacy and prevent tax evasion or money laundering misuse.

What are Puerto Rico's data retention and privacy requirements for financial institutions?

Financial institutions must comply with Gramm-Leach-Bliley Act (GLBA) privacy safeguards; Bank Secrecy Act five-year minimum retention for transaction records; and FFIEC encryption standards (TLS 1.2 in transit, AES-256 at rest). OCIF enforces NIST and FFIEC cybersecurity framework compliance during examinations.

Build a Puerto Rico-ready KYC, KYB & AML programme with Shufti

Check Pricing Request Demo

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Use Cases for Regulated Growth in Puerto Rico

Marketplace

Banking

Crypto

Fintech

Forex

Gaming

Gig Economy

Marketplace

Banking

Crypto

Fintech

Forex

Gaming

Gig Economy

Marketplace

Banking

Crypto

Fintech

Forex

Gaming

Gig Economy

Reduce Fraud Without Blocking Growth

Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes, and risk-led enforcement actions.

Learn More Try Now

Secure Trust at Every Transaction

Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.

Learn More Try Now

Scale Your Exchange with Confidence

Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.

Learn More Try Now

Accelerate Growth, Eliminate Friction

Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.

Learn More Try Now

Onboard Global Traders in Real-Time

Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations whilst preventing identity theft and high-risk chargebacks.

Learn More Try Now

Power a Fair & Secure Player Experience

Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.

Learn More Try Now