Shufti and AML Certification Centre logosWebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringRegister Now WebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringRegister Now The FRAML Convergence — Unifying Fraud and AML MonitoringRegister Shufti and ICA 25 Years logosWebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now WebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now Financial inclusion and AML/CFT — Managing access and riskRegister Shufti and Finance Magnates logosWebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now WebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now Transaction Monitoring & KYC — Cutting False PositivesRegister WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now Pix Fraud 2026 — Are Your Fraud Controls Ready?Explore Gavel on AMLR rule bookAMLR applies 10 July 2027. See your stack against every obligationBook a Demo AMLR applies 10 July 2027. See your stack against every obligationBook A Demo AMLR applies 10 July 2027 — see your stackBook Demo Globe with pKYC, Onboarding, Screening and Transactions labelsShufti’s Glocal PlatformGlobal Coverage. Local Depth. Full Compliance Lifecycle.Explore More Global Coverage. Local Depth. Full Compliance Lifecycle.Explore More Glocal Platform — Global Coverage. Local Depth.Explore INNOVATION DROPSUMMER
EDITION
20
26
Qualified Electronic Signature
WATCH NOW
INNOVATION DROP - Qualified Electronic SignatureWatch Now Innovation Drop — Qualified Electronic SignatureWatch
INNOVATION DROPSUMMER
EDITION
20
26
Transaction Trust Monitoring
WATCH NOW
INNOVATION DROP - Transaction Trust MonitoringWatch Now Innovation Drop — Transaction Trust MonitoringWatch
INNOVATION DROPSUMMER
EDITION
20
26
Travel Rule Compliance
WATCH NOW
INNOVATION DROP - Travel Rule ComplianceWatch Now Innovation Drop — Travel Rule ComplianceWatch
Datos Insights 2026 Impact Awards badgeDatos Insights 2026 Impact AwardsShufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore Liminal 2026 KYC IndexShufti: A top vendor for product executionRead The PR Shufti: A top vendor for product executionRead The PR Liminal 2026 KYC Index — Shufti: A top vendor for product executionRead PR Gavel on AMLR rule bookAMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027 — Find the GapsConsult Bank card and cashBank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification — Secure PayoutsSee How Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance — Verified Location, Verified IdentityBook Demo Journey Builder dot gridConfigure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Configure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Journey Builder — Configure Verification FlowsSee How Shufti MCP toggle with ChatGPT and ClaudeShufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP — Verification Tools Inside Claude or ChatGPTExplore

Scale Identity Verification and KYC Operations in Angola

Verify citizens and residents through Bilhete de Identidade record checks, ePassport NFC and 10,000+ foreign ID document types, run KYB on GUE-registered companies and their owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for BNA-, CMC-, ARSEG- and ISJ-supervised firms.

Banner Image for Angola
Trusted by 2000+ businesses that make identity decisions at scale
cashew gemone HERO Gaming Bitget IronFX PENN National Rakuten Witzeal Noteris banxy

Operational Performance for Angola KYC

Our Numbers Speak Volumes

98.63%

Pass
Rates

Under 5 secs

IDV
Verification

90%

eIDV
Coverage

THE ANGOLA VERIFICATION GAP

Angola IDV/KYC Challenges

FATF Monitoring Puts Every Customer File Under Review

FATF Monitoring Puts Every Customer File Under Review

Angola has been under FATF increased monitoring since October 2024, and its open actions include risk-based supervision of non-bank institutions and access to ownership data. That puts KYC in Angola under closer inspection. Shufti keeps every check, source and decision in one case file.

Ownership Declarations Are Moving to a New Central Register

Ownership Declarations Are Moving to a New Central Register

Lei 7/26 created a central beneficial ownership register in August 2026, and existing companies have 180 days to declare everyone holding 25% or more. Until those filings land, ownership sits in registry certificates and statutes. Shufti extracts owners from both and flags every mismatch.

Remote Onboarding Needs More Than a Document Photo

Remote Onboarding Needs More Than a Document Photo

BNA Aviso 02/2024 requires certified documents and additional evidence when the customer is not physically present, and remote e-money accounts stay blocked until documents are verified. Shufti checks the Bilhete de Identidade against government records and matches a live selfie in one session.

Thin Case Files Weaken goAML Reports

Thin Case Files Weaken goAML Reports

Lei 5/20 requires suspicious transactions to be reported to the UIF immediately, and the UIF receives most reports through goAML. A report pieced together from scattered notes leaves analysts with gaps. Shufti's case management packages evidence, screening hits and decisions into report-ready bundles.

Documents and Languages

Individual Documents Shufti Verifies in Angola

Shufti verifies Angolan identity documents, from the Bilhete de Identidade to residence cards and work permits, plus passports and ID cards from other countries. The cards below cover the core documents ID verification in Angola relies on, with the full list on the supported documents page.

View All Supported Documents

Bilhete de Identidade (BI) and Government Record Check

The Ministério da Justiça e dos Direitos Humanos issues the BI, and its number also serves as the citizen's tax number. Shufti checks the BI number, name and gender against government records, authenticates the card and matches a liveness-checked selfie to its photo.

Bilhete de Identidade (BI) and Government Record Check

Cartão de Residente and Residence Permits

The Serviço de Migração e Estrangeiros issues residence cards to foreign nationals under Lei 13/19, and BNA account rules accept them in place of the BI. Shufti verifies the card's security features, expiry and residence category, then matches the holder's face.

Cartão de Residente and Residence Permits

Angolan Passport

The Serviço de Migração e Estrangeiros issues Angola's electronic passport with a biometric chip. Shufti reads the chip and runs nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.

Angolan Passport

Foreign Passports and National ID Cards

Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Expatriate workers, foreign investors and visiting directors onboard this way, often alongside a residence card or work permit.

Foreign Passports and National ID Cards

Angolan Driving Licence

The National Police traffic directorate (DTSER) issues the carta de condução, which customers often present as supporting evidence. Shufti checks its authenticity, expiry and facial match and reads the licence number, so it can back up a BI or passport check.

Angolan Driving Licence

Proof of Address

Angolan customers usually prove their address with an ENDE electricity bill, an EPAL water bill in Luanda, a bank statement or a lease. Shufti reads each one and matches the name and address to the customer's verified identity in the same step.

Proof of Address
Bilhete de Identidade (BI) and Government Record Check Cartão de Residente and Residence Permits Angolan Passport Foreign Passports and National ID Cards Angolan Driving Licence Proof of Address Bilhete de Identidade (BI) and Government Record Check
Certidão do Registo Comercial Pacto Social and Published Statutes Alvará Comercial and Sector Licences Business Address Proof Certidão do Registo Comercial

Entity Identity

Certidão do Registo Comercial

Companies register through the Guiché Único da Empresa (GUE), which under Lei 11/15 handles online registration and issues the permanent registry certificate. Shufti verifies the certificate and checks name, number, legal form and registered office against live registry data at every check.

Certidão do Registo Comercial

Pacto Social and Published Statutes

Lei 1/04 on commercial companies requires statutes that set out capital, shareholdings and management powers, published online through the GUE. AI-OCR reads ownership, capital and signing authority from the Portuguese text and flags GAN-generated or edited pages.

Pacto Social and Published Statutes

Alvará Comercial and Sector Licences

Banks and payment providers hold BNA authorisation, securities intermediaries register with the CMC, insurers are licensed by ARSEG and gaming operators by the ISJ. Shufti reads each licence and checks holder, scope and validity against the company's registry record.

Alvará Comercial and Sector Licences

Business Address Proof

Companies prove their premises with a lease or an ENDE or EPAL bill in the company name. Shufti cross-checks each against the registered office on the registry certificate, so a borrowed or virtual address is caught before onboarding.

Business Address Proof

Tax Identity

Número de Identificação Fiscal (NIF)

The Administração Geral Tributária (AGT) assigns companies a ten-digit NIF beginning with 5 under Decreto Executivo 366/17. Shufti extracts the NIF from tax and registry documents and matches it to the company name, registry certificate and directors.

Número de Identificação Fiscal (NIF)

Foreign Tax Registrations and FATCA/CRS Self-Certification

Foreign parents and shareholders are verified with their home-country tax registrations. Shufti collects FATCA and CRS self-certifications in the same due diligence form, so tax residency is settled before the account opens.

Foreign Tax Registrations and FATCA/CRS Self-Certification
Número de Identificação Fiscal (NIF) Foreign Tax Registrations and FATCA/CRS Self-Certification Número de Identificação Fiscal (NIF)
Central de Registo do Beneficiário Efectivo Shareholder Register and Ownership Chart Managers, Directors and Authorised Signatories Central de Registo do Beneficiário Efectivo

Ownership and Control

Central de Registo do Beneficiário Efectivo

Lei 7/26 requires companies to declare their beneficial owners, update the register within 15 days of a change and confirm the entry each year by 31 March. Shufti compares each declaration with registry records and flags discrepancies obliged entities must report.

Central de Registo do Beneficiário Efectivo

Shareholder Register and Ownership Chart

Article 8 of Lei 7/26 treats anyone holding 25% or more of capital or voting rights, directly or through companies they control, as a beneficial owner. Shufti maps holdings through intermediate companies and screens each owner against sanctions, PEP and adverse media lists.

Shareholder Register and Ownership Chart

Managers, Directors and Authorised Signatories

Gerentes, administradores and signatories act for the company and carry the same verification duty. Shufti verifies each person, screens them and alerts the case owner when the registry shows a change in management.

Managers, Directors and Authorised Signatories

Languages We Cover

Portuguese and Foreign Document Parsing

Angolan identity documents and company records are issued in Portuguese, with accented characters such as ã, ç and é, while foreign customers bring documents in many scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and averages 93% accuracy against Google Vision's 78.4% in its published benchmark. Zero-shot document intelligence extracts data from layouts it has never seen, on first sight, without waiting for a template.

Portuguese and Foreign Document Parsing

Angolan Name Matching

Angolan names often carry several surnames, particles such as da, de and dos, and spelling variants between records. Native phonetic models for 80+ languages match these forms in sanctions and PEP screening, so one customer is not split into several identities.

Angolan Name Matching

Cross-Document Consistency Checks

Names, dates of birth and BI and NIF numbers are reconciled across the BI, passport, residence card, registry certificate and beneficial ownership declarations. Shufti flags any mismatch for review before the case is approved.

Cross-Document Consistency Checks
Portuguese and Foreign Document Parsing Angolan Name Matching Cross-Document Consistency Checks Portuguese and Foreign Document Parsing

Independent Validation

Shufti's Recognition Across Independent Evaluations

Liminal

Ranked Exceptional in the Liminal Index 2026 for age estimation

View Reportarrow-icon
Gartner

Differentiated by Gartner on document diversity and country coverage

Read morearrow-icon
iBeta

Certified at iBeta Level 3 PAD with 0% APCER

Read Blogarrow-icon
KuppingerCole

Broadest global reach in the 2025 KuppingerCole Extended IDV report

Download Reportarrow-icon
Homeland Security

Ranked Top 5 in the DHS RIVR 2025 for identity validation

Read Blogarrow-icon
Liminal

Top Vendor for Product Execution in the Liminal Index for KYC 2026

View Reportarrow-icon
Liminal

Ranked Exceptional for age verification by Liminal Index 2026

View Reportarrow-icon
G2

Recognised as a Leader in G2 Fall 2026 reports

Read Morearrow-icon

Regulatory Update

Every Verification Route Angolan Firms Rely On, in One Platform

BNA Aviso 01/2023 lets banks open accounts without the customer present, and Article 25 of Aviso 02/2024 then requires certified documents and additional evidence. Shufti supports government record checks and biometric face matching, plus chip, database, document, and video routes for non-residents and customers without a BI.

Fraud Prevention Across the Angolan Customer Journey

Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Angolan businesses act on risk while keeping legitimate customers moving.

  • 01

    Account Takeover and Recovery Abuse

    Stop attackers who take over bank accounts and e-money wallets through SIM swaps, stolen PINs or intercepted one-time codes. Account takeover prevention asks for a liveness-checked selfie at account recovery and before high-risk changes, so the real owner keeps control of the account and every recovery attempt is logged.

  • 02

    Social Engineering and Manipulated Payments

    Protect customers talked into sending money by callers posing as bank staff, telecom agents or relatives. Behavioral biometrics spots hesitation and remote access tools, active-call detection flags sessions coached over the phone, and transaction monitoring holds unusual payments before the money leaves the customer's account.

  • 03

    Device Spoofing and Automated Attacks

    Block bot-driven sign-ups and emulator farms that open wallets in bulk for mule networks and promotion abuse. Device fingerprinting links every session to a device profile, detects emulators, rooted phones and location spoofing, and stops one device from opening dozens of accounts under different names.

  • 04

    Connected Fraud Rings and Repeat Offenders

    Keep out fraudsters who return under new identities after being offboarded. Fraud network detection links identities, devices, phone numbers and accounts, and Shufti's cross-company fraud intelligence flags people already tied to confirmed fraud elsewhere, so a whole ring is exposed rather than one account at a time.

  • 05

    Synthetic Identities and Fabricated Documents

    Reject identities stitched together from a real BI number, a borrowed SIM and an invented address. Email and phone enrichment tests whether contact details have a genuine history, while zero-shot document intelligence catches fabricated cards, bills and company certificates even in formats it has never seen before.

  • 06

    Deepfakes and Camera Injection

    Protect selfie onboarding and video identification against face swaps, replayed footage and virtual cameras. Deepfake detection inspects the camera feed for injection, and iBeta Level 3 liveness confirms a real person is present, so remote account opening and every later step-up check stay tied to the genuine customer.

  • 07

    Money Mules and Rapid Fund Movement

    Find mule accounts and wallets that collect scam proceeds and pass them on within minutes. Money mule detection tracks fast in-and-out flows, many-to-one transfers and sudden changes in account behavior, then sends flagged accounts to your analysts with the evidence attached for review and reporting.

  • 08

    Fraudulent Businesses and Concealed Ownership

    Keep shell companies and fronts off your merchant and corporate books. Shufti checks the registry certificate, beneficial ownership declarations and sector licences, maps everyone holding 25% or more, and screens every manager and owner against sanctions and PEP lists before the merchant or corporate account opens.

Governance & Controls

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-submissions

Capture guidance for BI photos, selfies, passport chips and Portuguese-language company papers cuts failed attempts before they reach your review queue.

Fewer Avoidable Re-submissions

Cleaner Audit Trails

Shufti's case management records sources, results, timestamps, evidence, analyst notes and decision history, packaged as report-ready bundles for STR filing through goAML.

Cleaner Audit Trails

One Workflow, One Back Office

Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, management and transaction changes across the full compliance lifecycle.

One Workflow, One Back Office

BI-First Flow Design

BI holders verify through government record checks first, while foreign residents and non-residents move to residence card or passport verification in the same flow.

BI-First Flow Design

Shufti's IDV/KYC Solutions for Angola

KYC Solutions

Angola KYC verification services have to cover citizens with a BI, foreign residents with a Cartão de Residente and non-residents with passports. One Shufti flow routes each by risk, so nobody faces checks they don't need.

Explore More
Face Verification

Face Verification

BNA Aviso 01/2023 lets biometric data stand in for a customer's signature at account opening, so the selfie carries real weight. Shufti matches a live selfie to the BI or passport photo with iBeta Level 3 liveness, blocking masks, replays and deepfakes.

.
Age Verification

Age Verification

Licensed casinos and online gaming sites have to keep minors out at registration. Shufti estimates age from a selfie in under 5 seconds and blocks 99.8% of underage attempts, falling back to the BI or passport date of birth when needed.

.
Bank Account Verification

Bank Account Verification

Withdrawals, refunds and loan payouts fail when an Angolan IBAN or holder name is wrong. Shufti validates the IBAN checksum and confirms the account holder's name in real time before money moves, so payouts reach the verified customer.

.
Address Verification

Address Verification

Utility bills, bank statements and leases arrive as photos, scans and PDFs of uneven quality. Shufti reads each with layout-aware extraction and fuzzy matching, reaching a 99.3% pass rate, so genuine addresses clear without manual review.

.
Document Verification

Document Verification

Residence cards, passports, foreign IDs and company papers arrive in every format and quality. Shufti authenticates each within seconds and catches screenshots, replayed images, synthetic PVC cards and print-and-scan forgeries before they reach your team.

.
Identity Verification

Identity Verification

Separate tools for record checks, selfies, documents and addresses scatter one customer across several records. Shufti runs biometrics, NFC, document, address and eIDV checks in one API session, giving compliance teams one verified identity per customer.

.

KYB Solutions

Business verification in Angola means reconciling the GUE registry certificate, the NIF and declarations to the new beneficial ownership register, often across several corporate layers. Shufti's live registry calls and owner mapping build that picture in one place.

Explore More
Business Verification

Business Verification

Onboarding an Angolan company means confirming its registry certificate, NIF, signatories and everyone who owns or controls 25% or more. Shufti's live registry call confirms the GUE company record, and owners are checked against the statutes and beneficial ownership declarations.

.
Enhanced Due Diligence

Enhanced Due Diligence

Article 14 of Lei 5/20 applies enhanced measures to PEPs and remote relationships, and Lei 8/26 now names a PEP's parents, children and their spouses as covered family. Shufti's due diligence forms branch by risk, score each answer and gather source-of-funds evidence before approval.

.

AML Screening

A customer who is clean at onboarding can land on a list next week, so an AML compliance solution in Angola has to keep screening. Shufti's perpetual KYC rescreens customers against 4,000+ watchlists, including UN Security Council lists applied under Lei 1/12, refreshing every 15 minutes.

Explore More
Business AML Screening

Business AML Screening

A company's risk often sits with its owners and managers. Shufti screens entities, managers and beneficial owners against UN lists and the sanctions lists the UIF publishes, and perpetual KYB rescreens them whenever the registry record or ownership declaration changes.

.
Transaction Monitoring

Transaction Monitoring

Article 11 of Aviso 02/2024 requires identification on occasional transactions above the equivalent of USD 15,000 in kwanza or any currency, so payments split below that line are a laundering red flag. Shufti's library of 500+ pre-built rules covers structuring, smurfing, and mule activity and cuts false positives by 60%.

.
AI Compliance Co-Pilot

AI Compliance Co-Pilot

One common name can return 140+ screening hits. Shufti's AI Compliance Co-Pilot reviews every hit, gives a confidence score out of 100 with a written reason, and leaves the final call with your MLRO.

.
REGULATORY ALIGNMENT

Built To Fit Angola's Compliance Landscape

AML compliance in Angola starts with Lei 5/20 and the UIF, which apply to every obliged entity, while the BNA, CMC, ARSEG and ISJ add rules for the firms they supervise. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each license your group holds.

Lei n.º 5/20 on AML/CFT

Lei n.º 5/20 on AML/CFT

Adopted in 2020 to replace Lei 34/11 and amended by Lei 11/24 and Lei 8/26, it sets due diligence and ongoing monitoring (Article 11), enhanced measures (Article 14), ten-year retention (Article 16) and immediate reporting to the UIF (Article 17). Virtual asset providers became obliged entities in 2024.

Lei n.º 7/26 on Beneficial Ownership

Lei n.º 7/26 on Beneficial Ownership

In force since 19 August 2026, the law creates the Central de Registo do Beneficiário Efectivo. Article 8 sets the 25% threshold, Article 24 a 15-day update window and Article 22 an annual confirmation by 31 March, while Article 13 makes obliged entities consult the register.

Banco Nacional de Angola (BNA)

Banco Nacional de Angola (BNA)

The central bank supervises banks, payment service providers and e-money issuers. Aviso 02/2024 replaced Aviso 14/2020 and sets identification (Article 9), beneficial ownership (Articles 12 to 13) and non-face-to-face measures (Article 25). Data on low-risk customers must be refreshed at least every five years under Article 16.

Unidade de Informação Financeira (UIF)

Unidade de Informação Financeira (UIF)

The UIF is Angola's national financial intelligence unit, governed by Decreto Presidencial 2/18 and, since Lei 8/26, a public body with administrative and financial autonomy. It receives suspicious transaction reports mainly through goAML and publishes the UN and other sanctions lists that obliged entities screen against.

Comissão do Mercado de Capitais (CMC)

Comissão do Mercado de Capitais (CMC)

The CMC supervises securities intermediaries, investment funds and other market participants. Its Regulamento 5/2021 requires the NIF among identification data (Article 8), certified documents for non-face-to-face clients (Article 21) and an annual AML report by 31 May (Article 37). It also supervises virtual assets other than crypto-currencies.

Agência Angolana de Regulação e Supervisão de Seguros (ARSEG)

Agência Angolana de Regulação e Supervisão de Seguros (ARSEG)

ARSEG licenses and supervises insurers, reinsurers, insurance intermediaries and pension fund managers under Lei 18/22 on insurance activity. As their AML supervisor under Lei 5/20, it checks that customer identification, beneficiary verification, sanctions screening and suspicious transaction reporting work across life, savings and investment-linked insurance products.

Instituto de Supervisão de Jogos (ISJ)

Instituto de Supervisão de Jogos (ISJ)

The ISJ supervises gaming operators under Lei 17/24, which replaced Lei 5/16 in October 2024 and covers casinos, social games and online games. Lei 5/20 names the ISJ as AML supervisor for casinos, online casinos included, and its Instrutivo 3/25 sets the AML duties operators must follow.

Ministério da Justiça e dos Direitos Humanos (MINJUSDH)

Ministério da Justiça e dos Direitos Humanos (MINJUSDH)

The ministry issues the Bilhete de Identidade and runs the Guiché Único da Empresa, whose registry certificates and online statute publication under Lei 11/15 are the primary evidence for KYB. A bill approved by the Council of Ministers in April 2026 would make the BI the only valid personal ID, from bank accounts to SIM cards.

Administração Geral Tributária (AGT)

Administração Geral Tributária (AGT)

The AGT administers national taxes and assigns every taxpayer a NIF. Under Decreto Executivo 366/17, an individual's NIF is their BI number, or the residence card number for foreign residents, while companies receive a ten-digit number starting with 5. IVA has applied since July 2019 under Lei 7/19.

Lei n.º 1/12 on International Restrictive Measures

Lei n.º 1/12 on International Restrictive Measures

Lei 1/12 governs how Angola designates persons and applies international restrictive measures, including UN Security Council sanctions. Article 17 requires immediate freezing of funds of persons on the UN 1267 list without prior notice, and Lei 5/20 links its targeted financial sanctions duties back to this law.

Comité de Supervisão and the National AML Strategy

Comité de Supervisão and the National AML Strategy

The Comité de Supervisão coordinates national AML/CFT policy under Decreto Presidencial 2/18, supported by an operational task force. The national risk assessment, coordinated by the UIF, rated money laundering risk medium-high, and Decreto Presidencial 73/23 adopted the National AML Strategy and Action Plan for 2023 to 2027.

ESAAMLG Evaluation and FATF Monitoring of Angola

ESAAMLG Evaluation and FATF Monitoring of Angola

ESAAMLG, the FATF-style body for Eastern and Southern Africa, adopted Angola's mutual evaluation in June 2023. FATF placed Angola under increased monitoring in October 2024 and still listed it in June 2026, with open actions on risk-based supervision, beneficial ownership access, prosecutions and targeted financial sanctions.

Angola Data Residency and Deployment

Data protection rules and BNA cloud oversight mean Angolan firms must document exactly where customer data sits. Shufti offers on-premises deployment inside your own infrastructure, or regional hosting in Africa, with exact hosting locations and transfer arrangements defined in the agreement.

Personal Data Protection Law (Lei 22/11)

The Agência de Proteção de Dados (APD) enforces Lei 22/11, and Article 35 requires prior notification to the APD, or its authorisation, before personal data is processed. Shufti protects identity and biometric data with encryption, role-based access controls and configurable retention.

BNA Cloud and Outsourcing Rules (Aviso 08/2020)

Article 10 of Aviso 08/2020 requires financial institutions to notify the BNA at least 60 days before contracting cloud services, naming the provider and the hosting country. Shufti supplies the hosting locations, continuity arrangements and service details your team needs for that notice.

International Data Transfers

Article 33 of Lei 22/11 requires notification to the APD for transfers to countries with adequate protection, and Article 34 requires APD authorisation for all others. On-premises deployment keeps data in Angola, and hosted deployments document every transfer in the agreement.

Retention Controls

Article 16 of Lei 5/20 requires AML records to be kept for ten years after a transaction or the end of a relationship. Shufti sets retention by client and licence, treats statutory minimums as floors rather than deletion dates and supports legal holds.

Encryption and Security

Shufti encrypts personal and financial data in transit and at rest, applies role-based access and logs every action. APD Circular 02/APD/2024 requires breaches to be reported as soon as they are known, and ISO 27001:2022 and SOC 2 Type 2 support vendor assessments.

Automated Decisions and Biometric Data

Customers and the APD both expect a clear explanation when an onboarding check fails. Shufti exposes verification results and supporting details through the API and back office, so support teams can explain each outcome and escalate disputed results to a reviewer.

Scope of Our Role

Shufti acts as a subcontratado, or data processor, under Lei 22/11 and handles personal data only on your instructions, while your firm remains the responsible party. Any activity where Shufti acts as an independent controller is identified in its privacy notice.

Data Residency and Privacy Controls in Angola

BUILT FOR COMPLIANCE TEAMS

Angola AML Sources That Strengthen Decisions

Turn Angola Verification Requirements into a Smoother Customer Journey

Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Identity Verification Built Around Your Industry in Angola

Open Accounts Remotely On A Verified Identity

National Bank of Angola compliance starts with Aviso 02/2024 and Aviso 01/2023, which allow remote account opening but demand certified documents and extra evidence. Shufti combines BI record checks, passport chip reads and liveness-⁠checked selfies, then runs AML screening and perpetual KYC on every account.

Frequently Asked Questions

Does Shufti support BI government record checks, and what happens when customers cannot use them?

Yes. Shufti checks a customer's BI number, name and gender against government records and pairs the result with a liveness-checked selfie. Foreign residents move to residence card verification, and non-residents or Angolans abroad move to passport chip or document checks in the same flow.

Is a Bilhete de Identidade image enough to verify an Angolan customer?

No. Article 25 of Aviso 02/2024 expects certified documents and additional evidence for remote customers. Shufti authenticates the card, confirms its details against government records and matches a live selfie to the photo, so an image alone never decides the outcome.

Can Shufti verify foreign documents or identity formats it has not encountered before?

Yes. Shufti's zero-shot AI reads unfamiliar layouts without waiting for a template, so a new residence card series, a foreign passport or a director's national ID is extracted and checked for tampering the first time it appears, then added to its document library.

How does Shufti OCR compare with Google OCR for Portuguese-language identity documents?

Angolan documents use Portuguese with accented Latin characters, which Shufti reads at 99.7% accuracy. Across the languages in Shufti's published benchmark against Google Vision, it averages 93% accuracy to Google's 78.4%, so expatriate and foreign director documents extract cleanly too.

How does Shufti verify ownership when an Angolan company has several corporate layers?

Shufti pulls registry records for each company in the chain, maps holdings through every layer and identifies everyone holding 25% or more, directly or indirectly. Each owner is compared with the company's declaration to the beneficial ownership register and screened before approval.

Does Shufti's ongoing monitoring cover more than sanctions screening?

Yes. Article 11 of Lei 5/20 requires continuous monitoring of each business relationship. Shufti monitors transactions against each customer's profile, rescreens customers and owners against watchlists and flags changes in management, ownership or registry data, so risk ratings stay current.

How does Shufti keep screening current and handle Angolan name variations?

Watchlists, including the UN Security Council lists applied under Lei 1/12, refresh every 15 minutes. Native phonetic models match multiple surnames, particles such as da and dos, accents and spelling variants, so one person is not missed or split across several records.

Can we control where our data is hosted or run verification inside our own infrastructure?

Yes. Run Shufti on-premises inside your own infrastructure, air-gapped if required, or use regional hosting in Africa with locations agreed in the contract. Both options give you the hosting details the BNA asks for before a financial institution contracts cloud services.

What controls help us protect identity and biometric data?

Shufti encrypts data in transit and at rest, applies role-based access and logs every action, backed by ISO 27001:2022 and SOC 2 Type 2 reports. Processing details are documented for the notification or authorisation the APD requires under Lei 22/11.

Can we configure different retention periods for different Angolan licences?

Yes. Retention is set per client, licence and record type, so AML records stay at least ten years after a transaction or relationship ends, as Lei 5/20 requires, while other records follow their own schedules. Legal holds pause deletion when an investigation is open.

What does Shufti provide when our compliance team needs to prepare a goAML report?

Shufti's case file holds the verified identity, screening hits, transaction history, analyst notes and decision trail, exported as a report-ready bundle for filing with the UIF through goAML. Your compliance officer can report immediately, as Article 17 of Lei 5/20 requires.

Can we add verification checks without rebuilding our onboarding journey?

Yes. The AI Journey Builder adds or reorders checks such as BI record checks, passport NFC, address verification and AML screening by product, customer type and risk tier, and the changes go live without new code or a new app release.

How does Shufti make verification queries easier for our customer support team?

Every decision appears in the back office with the reason, the failed check and the evidence captured. Support staff can tell a customer whether a selfie failed liveness or a record check did not match, then route disputed results to a reviewer.

Let’s Build Trust Into Your Business

1B+Verifications Processed

240+Regions Actively Processed

99.7%Accuracy Rate

Samer Al Tamimi

CEO of Safwa Bank

Samer Al Tamimi

“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”

Trusted. Compliant. Certified

cetificate-logos cetificate-logos cetificate-logos cetificate-logos

Explore Shufti For Your Business

Get a personalised demo from our experts.

    Which products would you like to check out?

    VideoIdent

    Address Verification

    eIDV (Docless)

    KYB

    AML Screening

    Fraud Prevention

    Face and ID Verification

    Age Verification

    Others

    What is your expected yearly verification volume?

    1 to 1,000

    1,001 to 5,000

    5,001 to 20,000

    20,001 to 50,000

    50,001 to 100,000

    100,001 to 1,000,000

    1,000,000+

    Valid Invalid number

    By clicking Submit, you accept our Privacy Policy and consent to marketing communications.

    PROVEN PLAYBOOKS

    Explore Practical KYC & AML Resources

    Read More
    Cover of eIDV Global Capability Matrix

    5 January, 2026

    eIDV Global Capability Matrix

    Shufti's eIDV coverage across 87 jurisdictions, showing which passive, active and biometric database checks, plus address and age checks, are available in each.

    Coverage Sheet

    Read More
    Read More
    Cover of Document Verification: Middle East & Africa

    16 April, 2026

    Document Verification: Middle East & Africa

    From AI-forged Emirates IDs and Iqamas to Arabic OCR failures across 54 African markets, how Shufti verifies identity documents from the Gulf to Sub-Saharan Africa.

    Regional Brief

    Read More
    Read More
    Cover of Face Verification: Middle East & Africa

    16 April, 2026

    Face Verification: Middle East & Africa

    Biometric data is now classed as sensitive under Saudi, UAE and Bahrain law. How Shufti's face verification stops deepfakes and meets data sovereignty rules in MEA.

    Regional Brief

    Read More