What are the KYC requirements in Turkey?

Turkish KYC requirements are set by Law No. 5549 and MASAK. All obliged entities must verify customer identity, conduct CDD, apply risk-based monitoring and retain records for eight years. KYC Turkey compliance requires documents including TC Kimlik Kartı, Turkish national ID alternatives, passport and foreigner ID card for non-citizens. eKYC Turkey solutions using NFC chip verification accelerate identity verification while meeting BDDK and MASAK standards.

What is MASAK and what does AML compliance Turkey require?

MASAK is Turkey's Financial Intelligence Unit under the Ministry of Treasury and Finance. AML compliance Turkey obligations require financial institutions to conduct CDD, submit suspicious transaction reports via the MASAK Online system, maintain eight-year records and appoint a compliance officer at senior management level. MASAK compliance applies to banks, payment providers, crypto platforms and all obliged entities.

How does KVKK compliance affect KYC data handling in Turkey?

KVKK (Law No. 6698) requires all data controllers to register with VERBIS before processing personal data. KYC data is classified as personal data and must be encrypted, purpose-limited and subject to data subject access rights. KVKK compliance means cross-border transfers require equivalent protection standards. Turkish identity verification Turkey must align with both KVKK data protection and AML compliance requirements.

What documents are accepted for Turkish national ID KYC verification?

Primary documents for Turkish national ID KYC include TC Kimlik Kartı and Turkish Passport. Secondary documents include Sürücü Belgesi, Yabancı Kimlik Kartı and İkamet İzni for foreign nationals. Chip-based national ID cards with NFC receive preference. eKYC Turkey solutions support all 26 Turkish document types including biometric verification.

What are the KYB requirements for verifying Turkish businesses?

Turkish KYB verification requires Ticaret Sicil Gazetesi, Faaliyet Belgesi and Articles of Association for entity identity. Tax identity uses VKN. UBO identification is mandatory under Law No. 5549, requiring Ortaklık Yapısı, Pay Defteri and Gerçek Faydalanıcı Bildirimi documentation. KYB Turkey compliance includes verification of all beneficial owners at 25% ownership thresholds.

How does Shufti support crypto KYC Turkey compliance under CMB regulations?

Crypto KYC Turkey compliance is governed by CMB Law No. 7518, which requires platforms to obtain Capital Markets Board licences by June 2026. Shufti provides full KYC onboarding, jurisdiction verification for Travel Rule compliance, sanctions screening and eight-year record retention. Our crypto KYC Turkey solutions support CMB licence applications and post-licensing MASAK reporting obligations.

What is the data retention requirement for AML records in Turkey?

Law No. 5549 mandates eight-year retention of all AML records from the end of the business relationship. This covers KYC files, transaction records and STR documentation. AML compliance Turkey requires automated retention schedules and maintains audit-ready records for MASAK examinations and regulatory inspections.

How does Turkey's FATF membership affect AML compliance Turkey obligations?

Turkey has been a FATF member since 1991 and was removed from the grey list in June 2024 after addressing compliance gaps. Post-greylisting, MASAK and BDDK enforce heightened AML standards. FATF's 40 Recommendations guide Turkish AML policy and international correspondent banking expectations. AML compliance Turkey now requires demonstrable controls exceeding minimum standards.

What are the penalties for non-compliance with Turkish KYC and AML regulations?

Non-compliance with Turkish KYC and Law No. 5549 AML obligations results in administrative penalties and potential criminal sanctions. MASAK compliance violations attract fines; failure to maintain eight-year records, conduct proper KYC Turkey verification, or submit STRs results in enforcement action. Crypto platforms failing to obtain CMB licences by June 2026 face liquidation. Enhanced penalties apply to repeat violations.

Rwanda

Identity Verification & KYC For Rwanda

Rwanda identity verification and AML compliance, Rwanda screening for instant KYC verification Rwanda, aligned to Rwanda's Financial Intelligence Centre requirements.

Operational performance for Rwanda KYC

Our Numbers Speak Volumes

98.21%

Pass Rates

<5 sec

Verification
Time

240+

Countries and Territories Covered

Evidence-Ready Checks Across People & Businesses in Rwanda

Individual Documents We Verify

Shufti supports 2 Rwandan document types.

View All Supported Documents

Rwandan National Identity Card (Indangamuntu)

Issued to citizens aged 16+ and registered in the National Population Register. Includes biometric data (fingerprints and photograph) for identity verification during KYC onboarding.

East Africa E-Passport

Electronic passport with biometric security features issued June 2019; used for cross-border identity checks within the East African Community and international travel verification.

Driving Licence (Permis de Conduire)

Official road use document issued by the Rwanda National Police; serves as secondary identification for KYC and address verification when primary documents are unavailable.

Business Entity Identity

Certificate of Incorporation

Issued by the Office of the Registrar General within the Rwanda Development Board upon successful company registration.

Business Registration Certificate

Electronically issued and available from the applicant account in the registry system; displays all company details and official registration status.

Business Tax Identity

Tax Identification Number (TIN) Certificate

Nine-digit numerical identifier issued at company registration with the Rwanda Revenue Authority; appears on the registration certificate itself from February 2015 onwards.

VAT Registration Certificate

Issued by the Rwanda Revenue Authority for value-added tax compliance; supports business tax identity verification alongside TIN documentation.

Ownership & Control (UBO)

Beneficial Owner Declaration

Required documentation identifying individuals holding 25% or more of shareholding, voting rights, or exercising effective control under Law No. 001/2025.

Shareholder Register and Company Structure Chart

Corporate records showing share ownership structure, changes to ownership, and organisational hierarchy for transparent UBO verification.

Languages We Cover

Document Language And Script

Rwandan documents use Kinyarwanda, English, and French with Latin-script characters readable without OCR transliteration.

Name Matching Controls

Multi-language matching handles diacritics and Kinyarwanda name variants common in Rwanda, reducing false mismatches.

Evidence Consistency

Cross-step identity checks confirm the same person across ID, selfie, and business evidence for compliance review.

GOVERNANCE & CONTROLS

Audit-Ready Decisions, Lower Operational Drag

Fewer Re-Submissions

Structured capture guidance and intelligent failure routing reduce document retries and user abandonment friction when processing Rwandan identity cards online.

Cleaner Audit Trails

Consistent decision outputs and evidence retention packages satisfy Financial Intelligence Centre and National Bank of Rwanda compliance reporting requirements.

Better Name Matching

Transliteration-aware matching reduces false identity mismatches from Kinyarwanda diacritics, French variants, and naming convention differences in Rwanda.

One Workflow, One Back Office

Integrated identity verification, business verification, and AML screening in a single dashboard for coordinated Rwanda compliance governance.

National ID-First Flow Design

Structured data extraction and verification checks specifically adapted to Rwandan National Identity Cards ensure evidence-led onboarding decisions.

Enterprise-grade compliance infrastructure

Rwanda IDV/KYC Challenges

Partial SDID Rollout

Single Digital ID rollout remains incomplete; 1.8 million registered as of February 2026. Manual verification stays labour-intensive until nationwide full coverage by mid-2026.

Cross-Border Doc Variance

East African Community movement and diaspora patterns create document validation challenges. Enhanced screening against UN, OFAC, and ESAAMLG lists is essential for compliance.

Tampering And Forgery Risk

Physical document tampering, e-Passport chip manipulation, and synthetic fraud pose significant risks. Detection mechanisms tuned to Rwandan security features are critical.

Multi-Regulator Compliance

BNR, FIC, RRA, and CMA set separate compliance requirements. Unified reporting and evidence retention strategies satisfy all four regulators simultaneously.

Shufti's IDV/KYC Solutions for Rwanda

KYC Solutions

Face Verification

Real-time liveness detection and biometric facial matching prevent impersonation and reduce identity document misuse risk during Rwanda KYC onboarding.

Age Verification

Automated age estimation combined with document verification blocks underage access while maintaining fast, frictionless onboarding for compliant users.

Address Verification

Verify address documents and Rwanda utility providers, including EUCL, WASAC, MTN Rwanda, Airtel Rwanda, and major commercial banks, for address confirmation.

Document Verification

Detect tampering and forgery in National ID, e-Passport, and Driving Licence; extract and verify data fields in Kinyarwanda and English text.

KYB Solutions

Business Verification

Verify business entities and beneficial owners against the Rwanda Development Board registry, TIN records, and Law No. 001/2025 UBO guidance requirements.

Enhanced Due Diligence (EDD)

Collect structured evidence for higher-risk Rwanda customers, FIC escalation triggers, and politically exposed persons with detailed audit trails.

AML Screening

Business AML Screening

The Rwanda AML screening tool screens Rwandan entities and beneficial owners against Financial Intelligence Centre watchlists, PEP databases, and UN and OFAC global sanctions lists.

Transaction Screening

Monitor cross-border payments and mobile money patterns to identify mule behaviour, structuring, and high-risk flows requiring Rwanda compliance review.

REGULATORY ALIGNMENT

Built to Fit Rwanda's Compliance Landscape

National Bank of Rwanda (BNR)

Supervises banks, microfinance, insurance, and pensions. Shufti supports BNR onboarding by evidencing due diligence and producing reviewable audit trails. Official Website: https://www.bnr.rw

Financial Intelligence Centre (FIC)

Conducts financial intelligence and counters money laundering. Shufti preserves evidence packs supporting STR preparation and investigation case handoffs. Official Website: https://www.fic.rw

Rwanda Revenue Authority (RRA)

Enforces tax assessment, collection, and accounting for Rwanda. Shufti structures KYB evidence and screens entities and controllers for sanctions exposure. Official Website: https://www.rra.gov.rw

Capital Market Authority (CMA)

Regulates securities and capital markets under Law No. 11/2011. Shufti supports investor verification by collecting ownership and beneficial owner evidence. Official Website: https://www.cma.rw

National Cyber Security Authority (NCSA)

Supervises data protection under Law No. 058/2021. Shufti implements encryption, residency controls, and retention governance aligned to personal data rules. Official Website: https://cyber.gov.rw

Rwanda Development Board (RDB)

Facilitates business registration and investment. Shufti supports registration verification and beneficial owner collection aligned to RDB UBO guidance. Official Website: https://www.rdb.rw

Deployment Choice

No major cloud providers operate in-country Rwanda data centres. On-premises deployment available for regulated entities to meet local governance requirements and mitigate cross-border data transfer risks.

Regulatory Alignment

Aligned to Law No. 058/2021 (personal data protection and privacy), enforced by NCSA. Supports recordkeeping obligations under Regulations No. 1/2022 for AML/CFT compliance.

Retention Controls

Configured retention aligned to a five-year minimum for AML/CFT records post-relationship per Law No. 001/2025. Ten-year accounting retention requirement met through flexible purge scheduling.

Encryption Posture

AES-256 encryption is applied to data in transit and at rest. Compliance with Law No. 058/2021, data security, and National Bank of Rwanda supervisory expectations.

Data and Privacy Controls in Rwanda

BUILT FOR COMPLIANCE TEAMS

Rwanda AML Sources That Strengthen Decision

House of Representatives of Rwanda

National Electoral Commission

Rwanda National Police

Rwanda Development Board (RDB)

Ministry of Finance and Economic Planning

Rwanda Ministry of Foreign Affairs

Rwanda Office of the Ombudsman

The New Times

Frequently Asked Questions

What are the primary identity documents required for KYC in Rwanda?

The National ID (Carte d'Identité Nationale), issued by NIDA to citizens aged 16 and above, is Rwanda's primary identity document. It includes biometric data and is registered in the National Population Register. Secondary documents include the East Africa e-Passport and Driving Licence.

What is Rwanda's Single Digital ID (SDID) and how does it affect KYC?

Rwanda's SDID is a unified biometric identity system in rollout. As of February 2026, over 1.8 million citizens have submitted biometric data, with full nationwide issuance expected by mid-2026. Until full coverage is achieved, financial institutions must continue using traditional National ID and e-Passport.

What are the FIC reporting requirements and suspicious transaction procedures in Rwanda?

Suspicious Transaction Reports (STRs) must be submitted directly to the Financial Intelligence Centre (FIC) within the timelines set by Law No. 001/2025. Rwanda uses the East African Community goAML software system. Institutions must maintain documented evidence of suspicious activity assessment.

How should businesses identify and verify beneficial owners in Rwanda?

Beneficial owners are individuals holding 25% or more of shares, voting rights, or exercising effective control. Under Law No. 001/2025, institutions must obtain verified identity documents, beneficial owner declarations, and shareholder registries showing a complete ownership structure.

What sanctions lists and PEP databases apply to Rwanda?

Screen customers against UN Security Council designations, OFAC sanctions (particularly DRC-related entities), ESAAMLG regional lists, and domestic Rwanda PEP databases. Enhanced due diligence is mandatory for Great Lakes region ties.

What are the key compliance challenges for KYC in Rwanda?

Rwanda faces six challenges: partial SDID coverage until mid-2026; document tampering and forgery risks; cross-border EAC verification complexity; rapid regulatory changes; inconsistent registry data quality; and capacity constraints in smaller institutions.

How long must KYC and AML records be retained in Rwanda?

AML and customer verification records must be retained for five years after the customer relationship ends, per Law No. 001/2025 and FATF standards. General financial records must be retained for ten years under Rwanda's Tax Procedures Law 2023.

What data residency and privacy rules apply to financial institutions in Rwanda?

Under Law No. 058/2021, financial institutions must store personal data domestically unless authorised by the National Cyber Security Authority (NCSA). AES-256 encryption applies to data in transit and at rest. Cross-border transfers require NCSA approval.

How does Shufti streamline KYC onboarding and reduce drop-off in Rwanda?

Shufti delivers instant digital identity verification with structured capture guidance that reduces retries. Transliteration-aware name matching handles Kinyarwanda variants. Unified KYC, KYB, and AML workflows in one back office reduce friction and maintain audit-ready FIC/BNR compliance evidence.

Build a Rwanda-ready KYC, KYB & AML programme with Shufti

Check Pricing Request Demo

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Use Cases for Regulated Growth in Rwanda

Marketplace

Banking

Crypto

Fintech

Forex

Gaming

Gig Economy

Marketplace

Banking

Crypto

Fintech

Forex

Gaming

Gig Economy

Marketplace

Banking

Crypto

Fintech

Forex

Gaming

Gig Economy

Reduce Fraud Without Blocking Growth

Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes, and risk-led enforcement actions.

Learn More Try Now

Secure Trust at Every Transaction

Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.

Learn More Try Now

Scale Your Exchange with Confidence

Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.

Learn More Try Now

Accelerate Growth, Eliminate Friction

Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.

Learn More Try Now

Onboard Global Traders in Real-Time

Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations while preventing identity theft and high-risk chargebacks.

Learn More Try Now

Power a Fair & Secure Player Experience

Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.

Learn More Try Now