Shufti and AML Certification Centre logosWebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringRegister Now WebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringRegister Now The FRAML Convergence — Unifying Fraud and AML MonitoringRegister Shufti and ICA 25 Years logosWebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now WebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now Financial inclusion and AML/CFT — Managing access and riskRegister Shufti and Finance Magnates logosWebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now WebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now Transaction Monitoring & KYC — Cutting False PositivesRegister WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now Pix Fraud 2026 — Are Your Fraud Controls Ready?Explore Gavel on AMLR rule bookAMLR applies 10 July 2027. See your stack against every obligationBook a Demo AMLR applies 10 July 2027. See your stack against every obligationBook A Demo AMLR applies 10 July 2027 — see your stackBook Demo Globe with pKYC, Onboarding, Screening and Transactions labelsShufti’s Glocal PlatformGlobal Coverage. Local Depth. Full Compliance Lifecycle.Explore More Global Coverage. Local Depth. Full Compliance Lifecycle.Explore More Glocal Platform — Global Coverage. Local Depth.Explore INNOVATION DROPSUMMER
EDITION
20
26
Qualified Electronic Signature
WATCH NOW
INNOVATION DROP - Qualified Electronic SignatureWatch Now Innovation Drop — Qualified Electronic SignatureWatch
INNOVATION DROPSUMMER
EDITION
20
26
Transaction Trust Monitoring
WATCH NOW
INNOVATION DROP - Transaction Trust MonitoringWatch Now Innovation Drop — Transaction Trust MonitoringWatch
INNOVATION DROPSUMMER
EDITION
20
26
Travel Rule Compliance
WATCH NOW
INNOVATION DROP - Travel Rule ComplianceWatch Now Innovation Drop — Travel Rule ComplianceWatch
Datos Insights 2026 Impact Awards badgeDatos Insights 2026 Impact AwardsShufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore Liminal 2026 KYC IndexShufti: A top vendor for product executionRead The PR Shufti: A top vendor for product executionRead The PR Liminal 2026 KYC Index — Shufti: A top vendor for product executionRead PR Gavel on AMLR rule bookAMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027 — Find the GapsConsult Bank card and cashBank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification — Secure PayoutsSee How Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance — Verified Location, Verified IdentityBook Demo Journey Builder dot gridConfigure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Configure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Journey Builder — Configure Verification FlowsSee How Shufti MCP toggle with ChatGPT and ClaudeShufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP — Verification Tools Inside Claude or ChatGPTExplore

Scale Identity Verification and KYC Operations in Azerbaijan

Verify citizens and residents through SİMA, Asan İmza, ID card chip reads and 10,000+ foreign ID document types, run KYB on registered companies and their real owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for CBAR-supervised firms.

Banner Image for Azerbaijan
Trusted by 2000+ businesses that make identity decisions at scale
cashew gemone HERO Gaming Bitget IronFX PENN National Rakuten Witzeal Noteris banxy

Operational Performance for Azerbaijan KYC

Our Numbers Speak Volumes

99.79%

Pass
Rates

Under 5 secs

IDV
Verification

100%

Omni-format
Document Recognition

THE AZERBAIJAN VERIFICATION GAP

Azerbaijan IDV/KYC Challenges

Remote Onboarding Requires Four Checks at Once

Remote Onboarding Requires Four Checks at Once

Identity verification in Azerbaijan tightened in 2023, when Financial Monitoring Service (FMS) rules made four separate checks, from an enhanced e-signature to live video, mandatory for every new remote relationship. Shufti brings all four into one flow, using your institution's SİMA, Asan İmza and state data access, so customers finish in a single session.

Bank Rules Now Demand Random Liveness and a State Photo Match

Bank Rules Now Demand Random Liveness and a State Photo Match

Since 30 March 2026, CBAR's Rule on Remote Opening of Accounts requires at least three random liveness actions and a software face match against state records. Shufti's certified liveness and face matching produce that evidence for every remote account.

Ownership Checks Run at 10% While the Register Fills

Ownership Checks Run at 10% While the Register Fills

Article 1.1.20 of the AML Law treats a 10% stake or vote as controlling ownership, yet the new beneficial ownership register will not hold every older company until micro firms file by December 2027. Because the register is not public, Shufti maps each layer from company documents and verifies every owner.

Suspicious Transactions Must Be Held and Reported Before They Execute

Suspicious Transactions Must Be Held and Reported Before They Execute

Under Article 11.5 of the AML Law, a financial institution that suspects a high-risk or large transaction must hold it for two working days and report it to the FMS first. Shufti flags the transaction in real time and assembles the case file for filing.

Documents and Languages

Individual Documents Shufti Verifies in Azerbaijan

Shufti verifies 10 Azerbaijani identity document types plus passports and ID cards from other countries. The cards below cover the core documents Azerbaijani onboarding relies on, with the full list on the supported documents page.

View All Supported Documents

SİMA and Asan İmza Digital Identity

Asan İmza, a SIM-based mobile ID, and SİMA İmza, a face-recognition app from AzInTelecom, both issue the enhanced e-signature that FMS rules require for remote relationships. Shufti accepts either as an identity route through your institution's SİMA or Asan İmza integration and logs the signature result in the case file.

SİMA and Asan İmza Digital Identity

Azerbaijani Identity Card

The Ministry of Internal Affairs issues the card to every citizen from age 15, and cards issued since September 2018 carry an ICAO-standard chip with the photo, fingerprints and FİN code. Shufti reads the chip by NFC, checks for tampering and matches a live selfie.

Azerbaijani Identity Card

Temporary and Permanent Residence Permits

The State Migration Service issues residence permit cards to foreign nationals under the Migration Code, and the temporary permit card doubles as an identity document. Shufti authenticates the card, reads its details and matches the holder by selfie, so foreign residents onboard like citizens.

Temporary and Permanent Residence Permits

Azerbaijani Biometric Passport

Passports issued since September 2013 carry a chip holding the holder's face image and fingerprints. Shufti reads it by NFC and runs nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.

Azerbaijani Biometric Passport

Foreign Passports and National ID Cards

Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Foreign workers, international students and non-resident investors use these documents in the same flow as Azerbaijani citizens.

Foreign Passports and National ID Cards

Azerbaijani Driving License

The Ministry of Internal Affairs issues chip-based card licenses through its Chief State Road Police Department, and a digital license sits in the mygov app. Shufti checks authenticity, expiry and the facial match, making the license age proof for casino and car rental onboarding.

Azerbaijani Driving License

Proof of Address

Newly issued ID cards show the registered address after 2025 amendments, while older cards and foreign residents need utility bills, bank statements or a residence registration record. Shufti verifies the document in the same step as the ID and matches name and address.

Proof of Address
SİMA and Asan İmza Digital Identity Azerbaijani Identity Card Temporary and Permanent Residence Permits Azerbaijani Biometric Passport Foreign Passports and National ID Cards Azerbaijani Driving License Proof of Address SİMA and Asan İmza Digital Identity
State Register Extract Company Charter Business Address Proof State Register Extract

Entity Identity

State Register Extract

The State Tax Service under the Ministry of Economy keeps the state register of legal entities and issues the registration certificate and register extract. Shufti calls the register live at every check, confirming name, VÖEN, status, founders and director, and flags companies whose details have changed.

State Register Extract

Company Charter

AI-OCR reads ownership, capital and signing authority from the charter and its amendments, and flags GAN-generated or edited pages before a reviewer relies on them.

Company Charter

Business Address Proof

The legal address in the register extract is cross-checked against lease agreements and utility bills, so a company's registered and trading addresses match before onboarding.

Business Address Proof

Tax Identity

Taxpayer Identification Number (VÖEN)

The State Tax Service assigns every taxpayer a 10-digit VÖEN and confirms it on a taxpayer registration certificate. Shufti extracts the number from the certificate or taxpayer card and cross-checks it against the live register record and the company's other documents.

Taxpayer Identification Number (VÖEN)

VAT Registration

Registration as a VAT payer under the Tax Code is separate from the VÖEN, so a company's VAT status needs its own check. Shufti reads the VAT status a company declares and reconciles it with its registration documents and register record.

VAT Registration

Foreign Tax Registrations and FATCA/CRS Self-Certification

Foreign parents and non-resident founders are verified with their home tax registrations, and FATCA and CRS self-certification forms are collected and checked inside the same due diligence flow.

Foreign Tax Registrations and FATCA/CRS Self-Certification
Taxpayer Identification Number (VÖEN) VAT Registration Foreign Tax Registrations and FATCA/CRS Self-Certification Taxpayer Identification Number (VÖEN)
Beneficial Ownership Register Shareholder Register and Ownership Chart Directors and Authorized Signatories Beneficial Ownership Register

Ownership and Control

Beneficial Ownership Register

Law 175-VIIQD of April 2025 requires companies to file beneficial owner data in the state register, with older firms filing in stages by company size and fines under Article 403-1 of the Code of Administrative Offences. Shufti extracts each owner from the filing and screens them.

Beneficial Ownership Register

Shareholder Register and Ownership Chart

Share registers and group charts show how holdings run through foreign parents and intermediate companies. Shufti maps ownership through every layer and screens each owner against sanctions, PEP and adverse media lists.

Shareholder Register and Ownership Chart

Directors and Authorized Signatories

Each director and authorized signatory is identity-verified and screened, and Shufti alerts the team when the register records a change of management.

Directors and Authorized Signatories

Languages We Cover

Azerbaijani, English and Cyrillic Document Parsing

Azerbaijani documents print names in Latin script with letters such as ə, ğ and ı beside English fields, and many foreign residents bring Cyrillic documents. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and keeps every diacritic intact. It averages 93% accuracy against Google Vision's 78.4% in its published benchmark, and its zero-shot document intelligence reads unseen layouts on first sight, with no template needed.

Azerbaijani, English and Cyrillic Document Parsing

Azerbaijani Name Matching

Patronymic markers such as oğlu and qızı, and surnames ending in -ov, -ova, -li or -zadə, transliterate inconsistently into Latin and Cyrillic. Native phonetic models for 80+ languages match each variant against sanctions and PEP lists.

Azerbaijani Name Matching

Cross-Document Consistency Checks

Names, dates of birth and FİN codes are reconciled across the ID card, passport, residence permit and register extract, so a mismatch surfaces before approval.

Cross-Document Consistency Checks
Azerbaijani, English and Cyrillic Document Parsing Azerbaijani Name Matching Cross-Document Consistency Checks Azerbaijani, English and Cyrillic Document Parsing

Independent Validation

Shufti's Recognition Across Independent Evaluations

Liminal

Ranked Exceptional in the Liminal Index 2026 for age estimation

View Reportarrow-icon
Gartner

Differentiated by Gartner on document diversity and country coverage

Read morearrow-icon
iBeta

Certified at iBeta Level 3 PAD with 0% APCER

Read Blogarrow-icon
KuppingerCole

Broadest global reach in the 2025 KuppingerCole Extended IDV report

Download Reportarrow-icon
Homeland Security

Ranked Top 5 in the DHS RIVR 2025 for identity validation

Read Blogarrow-icon
Liminal

Top Vendor for Product Execution in the Liminal Index for KYC 2026

View Reportarrow-icon
Liminal

Ranked Exceptional for age verification by Liminal Index 2026

View Reportarrow-icon
G2

Recognised as a Leader in G2 Fall 2026 reports

Read Morearrow-icon

Regulatory Update

Every Verification Route Azerbaijani Regulators Recognize, in One Platform

FMS rules from February 2023 name an enhanced e-signature, database checks, strong authentication and live or recorded video as the measures for remote relationships, and CBAR's 2026 rule adds photo, video recording and video call identification for remote accounts. Shufti supports each of these routes, plus chip, document and video routes for non-residents and customers without an Azerbaijani ID card.

Enhanced E-Signature Through SİMA or Asan İmza

Live

Customers confirm their application with an Asan İmza mobile signature or a SİMA İmza face-recognition signature, the first of the measures FMS rules make mandatory for a new remote relationship. Shufti stores each signature result in the case file.

State Photo Face Match

Live

CBAR's rule has software compare the customer's face with their photo in the state information system. Shufti runs that match through your institution's authorised access to the state photo and records the score beside the liveness result.

Fraud Prevention Across the Azerbaijani Customer Journey

Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Azerbaijani businesses act on risk while keeping legitimate customers moving.

  • 01

    Account Takeover and Recovery Abuse

    Phished one-time codes, SIM swaps and reused passwords let fraudsters take over banking apps and e-wallets, then change the phone number before the owner notices. Shufti scores every login and recovery attempt with device, behavioral and identity signals, and requests a fresh selfie match when an account changes hands.

  • 02

    Social Engineering and Manipulated Payments

    Callers posing as bank staff or officials coach customers into approving transfers themselves, which no password check can stop. Behavioral biometrics and active-call detection flag sessions where a customer is being guided through a payment, and transaction monitoring holds the transfer for review before the money leaves.

  • 03

    Device Spoofing and Automated Attacks

    Stop emulators, bots and scripted sign-ups that open accounts in bulk, farm welcome bonuses or test stolen card details. Device fingerprinting recognizes the same hardware behind different identities, flags virtual machines and tampered apps, and blocks automated traffic before it reaches onboarding or payments.

  • 04

    Connected Fraud Rings and Repeat Offenders

    Keep out fraudsters who come back with borrowed identities, fresh SIM cards or newly registered companies after being offboarded. Fraud network detection links shared devices, documents, addresses and payment details across accounts, and cross-company fraud intelligence surfaces identities already flagged elsewhere in Shufti's network.

  • 05

    Synthetic Identities and Fabricated Documents

    Reject identities assembled from a real FİN code, an invented face and a convincing forged card. Zero-shot document intelligence catches fabricated ID cards and residence permits, chip reads expose data that does not match the print, and email and phone enrichment flags contacts with no history.

  • 06

    Deepfakes and Camera Injection

    Remote account opening in Azerbaijan now rests on the selfie and video step, and face swaps, replayed footage and virtual cameras target it directly. Deepfake detection inspects each frame for synthetic artifacts, injection detection confirms a real device camera, and certified liveness stops masks and screen replays.

  • 07

    Money Mules and Rapid Fund Movement

    Accounts recruited to receive fraud proceeds often pass them on within minutes through cards, e-wallets or virtual asset platforms. Money mule detection combines behavioral baselines, velocity rules and network links to flag pass-through activity, and Shufti holds suspicious outflows before funds leave the institution.

  • 08

    Fraudulent Businesses and Concealed Ownership

    Keep shell companies, nominee founders and dormant firms revived for fraud off your merchant and corporate books. Shufti checks status, founders and director in the State Tax Service register live, compares them with the beneficial ownership filing and screens every owner before an account opens.

Governance & Controls

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-submissions

Capture guidance for ID cards, residence permits and diacritic-heavy Azerbaijani fields catches glare, blur and cropped edges before submission, so customers rarely retry.

Fewer Avoidable Re-submissions

Cleaner Audit Trails

Shufti's case management records sources, results, timestamps, evidence, analyst notes and decision history, packaged as report-ready bundles for filing through the FMS reporting system.

Cleaner Audit Trails

One Workflow, One Back Office

Unify KYC, KYB, AML screening and transaction monitoring in one case file, while perpetual KYC/KYB tracks ownership, director and transaction behavior changes.

One Workflow, One Back Office

SİMA, Asan İmza and ID Card-First Flow Design

Citizens and permit holders confirm identity through SİMA, Asan İmza or the ID card chip first, and non-residents move to passport checks in the same flow.

SİMA, Asan İmza and ID Card-First Flow Design

Shufti's IDV/KYC Solutions for Azerbaijan

KYC Solutions

KYC in Azerbaijan covers citizens using SİMA, Asan İmza or their ID card, foreign residents with permit cards and non-residents with foreign passports. One Shufti flow routes each by risk, so nobody faces checks they don't need.

Explore More
Face Verification

Face Verification

Remote account opening in Azerbaijan stands or falls on the selfie step, and fraudsters know it. Shufti's face verification passes 99.5% of genuine users on the first try while stopping deepfakes, masks and injected video at the same step.

.
Age Verification

Age Verification

Casino games, legal since July 2025 only on artificial land plots, are closed to anyone under 21, and sports betting excludes minors. Shufti reads date of birth from the verified document, or estimates age from a selfie in under 5 seconds, and applies the right limit.

.
Bank Account Verification

Bank Account Verification

Azerbaijani accounts use the 28-character IBAN beginning with AZ, and payouts fail when a digit or the holder's name is wrong. Shufti validates the IBAN checksum and confirms the account holder's name in real time before money moves.

.
Address Verification

Address Verification

Older ID cards carry no street address, so firms rely on utility bills and registration records whose layouts differ by issuer. Shufti extracts the address with layout-aware OCR and fuzzy-matches it to the application, passing 99.3% of genuine documents.

.
Document Verification

Document Verification

Azerbaijani onboarding spans chip ID cards, biometric passports, residence permit cards, card driving licenses and VÖEN certificates. Shufti authenticates each format, reads Azerbaijani and English fields within seconds and rejects altered or screen-captured copies.

.
Identity Verification

Identity Verification

Separate vendors for e-signature results, document checks, selfies and addresses leave one customer spread across several systems. Shufti runs document, biometric, NFC, address and database checks in one API session, giving compliance teams a single decision and record.

.

KYB Solutions

Due diligence on an Azerbaijani company starts with the State Tax Service register extract and beneficial ownership filing, then follows founders through holding companies to every owner the AML Law captures. Shufti's live registry calls keep each company record current.

Explore More
Business Verification

Business Verification

Onboarding an Azerbaijani company means confirming its register entry, VÖEN, director and everyone who owns or controls 10% or more. Shufti's live registry call confirms the company record, and declared owners are checked against the beneficial ownership filing and share register the company provides.

.
Enhanced Due Diligence

Enhanced Due Diligence

Layered holdings, PEP links, foreign founders and cash-heavy sectors call for a closer look. Shufti's branching questionnaires, configurable risk scoring and UBO verification links collect source of funds and ownership evidence, and send high-risk files for senior approval.

.

AML Screening

A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC rescreens every customer against 4,000+ watchlists, including UN Security Council lists and the domestic list the State Security Service publishes, refreshes sanctions and PEP data every 15 minutes and keeps every alert in one case file.

Explore More
Business AML Screening

Business AML Screening

An Azerbaijani company's exposure often sits with its founders and director. Shufti screens the entity and every owner and director against sanctions lists, including Azerbaijan's domestic designations, PEP data and adverse media, and perpetual KYB rescreens the portfolio as records change.

.
Transaction Monitoring

Transaction Monitoring

Article 11 of the AML Law requires threshold cash and wire transfers and foreign PEP transactions to be reported to the FMS within three working days. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity with 60% fewer false positives.

.
Travel Rule

Travel Rule

Virtual asset service providers are financial institutions under Article 1.1.8 of the AML Law, and CBAR's 2023 rule requires authorized providers to send originator and beneficiary data with each transfer. Shufti exchanges that data across major Travel Rule networks and verifies unhosted wallet ownership.

.
AI Compliance Co-Pilot

AI Compliance Co-Pilot

One common name can return 140+ screening hits. Shufti's AI Compliance Co-Pilot reviews each one, gives a 0 to 100 confidence score and a written reason, and leaves the final call with your compliance officer, logging every override.

.
REGULATORY ALIGNMENT

Built To Fit Azerbaijan's Compliance Landscape

AML compliance in Azerbaijan rests on one AML Law, one financial regulator and a financial intelligence unit that sets the identification rules. CBAR supervises the financial sector, while the State Tax Service, Ministry of Justice, Bar Association and Chamber of Auditors oversee non-financial businesses and professions. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each license your group holds.

Law on Combating the Legalization of Criminally Obtained Property and the Financing of Terrorism

Law on Combating the Legalization of Criminally Obtained Property and the Financing of Terrorism

Law 781-VIQ took effect on 1 February 2023 and repealed the 2009 AML law. Article 1.1.20 treats a stake or vote of 10% or more as controlling ownership, Article 4.5 requires ongoing due diligence and Article 6 requires records to be kept for at least five years.

Central Bank of the Republic of Azerbaijan (CBAR)

Central Bank of the Republic of Azerbaijan (CBAR)

CBAR has supervised banks, non-bank credit organizations, insurers, investment firms and payment and e-money institutions since the Financial Markets Supervisory Authority was abolished in 2019. Its Rule on Remote Opening of Accounts, in force since 30 March 2026, sets photo, video and video call identification standards.

Financial Monitoring Service (FMS)

Financial Monitoring Service (FMS)

The FMS, an independent public legal entity since 2018, is Azerbaijan's financial intelligence unit. Its February 2023 verification rules set four mandatory measures for remote relationships, and reporting entities file through its Suspicious Transaction Monitoring information system, regulated by a July 2025 presidential decree.

CBAR Rule on Operations With Virtual Assets

CBAR Rule on Operations With Virtual Assets

Adopted in February 2023, the rule requires providers authorized by law to send originator and beneficiary data with every virtual asset transfer and to manage unhosted wallet risk. Virtual asset service providers are already AML obliged entities, while a law licensing them has yet to be adopted.

State Tax Service under the Ministry of Economy

State Tax Service under the Ministry of Economy

The State Tax Service registers commercial legal entities, issues VÖEN numbers and keeps the beneficial ownership register created by Law 175-VIIQD in April 2025. Under a January 2023 presidential decree, it also supervises real estate agents, casinos and legal, accounting and tax advisers for AML compliance.

Ministry of Justice

Ministry of Justice

The Ministry of Justice supervises notaries and non-governmental organizations for AML compliance, while Article 16 of the AML Law assigns lawyers to the Bar Association and auditors to the Chamber of Auditors. Notaries and lawyers carry due diligence and reporting duties when they handle property or company deals.

Ministry of Internal Affairs

Ministry of Internal Affairs

The Ministry issues ID cards, biometric passports and driving licenses and holds the photo and fingerprint data behind them. The Law on Identity Card of a Citizen makes the card compulsory, and the mygov digital ID card has carried equal legal force since July 2024.

State Migration Service

State Migration Service

The Service issues temporary and permanent residence permits and work permits to foreign nationals under the Migration Code of 2013. Temporary permits run for up to a year at first, and a July 2026 law allows permits to be issued as electronic documents through the e-government system.

Innovation and Digital Development Agency (IDDA)

Innovation and Digital Development Agency (IDDA)

IDDA, under the Ministry of Digital Development and Transport, runs the mygov platform and the digital.bridge data exchange. An August 2025 presidential decree set rules for the Electronic Government Information System, whose subsystems cover digital data exchange, digital consent and single sign-on for public and private services.

State Security Service Targeted Financial Sanctions

State Security Service Targeted Financial Sanctions

Under Law 782-VIQ on Targeted Financial Sanctions, in force since February 2023, the State Security Service publishes Azerbaijan's domestic list alongside UN Security Council lists. Assets of listed persons must be frozen without delay and without prior notice, and the FMS republishes the list for reporting entities.

AML/CFT Coordination Council

AML/CFT Coordination Council

The Coordination Council, chaired by a Deputy Prime Minister with the FMS as secretariat, coordinates AML policy under a 2020 Cabinet resolution. Article 21 of the AML Law requires a national risk assessment at least every three years, and a 2023 to 2025 action plan set recent priorities.

MONEYVAL Evaluation of Azerbaijan

MONEYVAL Evaluation of Azerbaijan

MONEYVAL adopted Azerbaijan's fifth-round mutual evaluation in December 2023 and placed the country in enhanced follow-up. Its 2025 follow-up report upgraded seven recommendations but left virtual assets partly compliant, and Azerbaijan was not on the FATF list of jurisdictions under increased monitoring in June 2026.

Azerbaijan Data Residency and Deployment

No major public cloud provider runs a region in Azerbaijan, so Shufti runs on-premises in your own infrastructure in the country, air-gapped if required, with any other hosting location fixed in your agreement. CBAR's 2024 information security requirements cover outsourcing and cloud use, and the agreement carries the terms they call for.

Law on Personal Data (No. 998-IIIQ)

The 2010 law applies its processing conditions in full to biometric data, from face images and fingerprints to voice, under Article 9.5, and Article 15 requires personal data information systems to be registered. Shufti adds encryption, role-based access and configurable retention for identity and biometric data.

Cross-Border Transfers

Article 14 bars transfers to countries without protection at the level Azerbaijani law provides, unless the data subject consents or the transfer protects life and health. The law sets no general localization rule, and Shufti's data processing agreement records the transfer basis and safeguards for each flow.

Retention Controls

Retention is configurable by client and license, covering the five-year AML minimum from the end of each relationship or transaction. Statutory minimums are not automatic deletion dates, Article 9.4 of the data law calls for deletion once the purpose is met, and legal holds preserve records.

Encryption and Security

Data is encrypted in transit and at rest, with role-based access and audit logging throughout. ISO 27001:2022 and SOC 2 Type 2 reports support bank vendor reviews, and banks report serious information security incidents to CBAR within five working days under Decision 20/1.

Automated Decisions and Biometric Data

Article 7.3 lets a data subject object to a decision based on automated processing that harms their interests, and the firm then needs consent to process the data another way. Shufti returns verification results and their reasons through the API and back office, so support teams can explain outcomes.

Scope of Our Role

Shufti acts as an operator under the Law on Personal Data, processing data only on the owner's instructions. The firm remains the owner of the information system and responsible for compliance, and Shufti's privacy notice names any activities it runs on its own account.

Data Residency and Privacy Controls in Azerbaijan

BUILT FOR COMPLIANCE TEAMS

Azerbaijan AML Sources That Strengthen Decisions

Turn Azerbaijan Verification Requirements into a Smoother Customer Journey

Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Identity Verification Built Around Your Industry in Azerbaijan

Meet CBAR's Remote Account Opening Rule

Digital onboarding for Azerbaijani banks now follows CBAR's 2026 remote account rule and the FMS's mandatory remote measures. Shufti brings SİMA and Asan İmza signature results, liveness, face matching, chip reads and video calls into one flow, screens customers continuously and keeps each decision ready for inspection.

Frequently Asked Questions

Does Shufti support SİMA and Asan İmza, and what happens when customers cannot use them?

Yes. Through your institution's SİMA or Asan İmza integration, customers confirm their identity with an enhanced e-signature, and Shufti records the result in the case file. Customers without either move to ID card or passport chip checks, document authentication, liveness and video in the same flow.

Is scanning an Azerbaijani ID card enough, or should verification include its chip?

A scan leaves room for edited or replayed images. Shufti reads the card's ICAO-standard chip by NFC, checks it against the printed data, tests security features and matches the holder's live face to the chip photo, evidence an image alone cannot provide.

Can Shufti verify foreign documents or identity formats it has not encountered before?

Yes. Shufti's zero-shot AI adapts to unfamiliar layouts without a template, so a foreign resident's national ID or a newly issued Azerbaijani document is checked for authenticity and tampering like any known format, with no wait for template updates.

How accurately does Shufti read Azerbaijani identity documents?

Shufti's OCR reads Azerbaijani Latin script, including the ə, ğ, ı, ö, ü, ç and ş characters, and the English fields beside it. For documents foreign residents bring, Shufti's published benchmark shows it averaging 93% accuracy against Google Vision's 78.4%.

How does Shufti verify ownership when an Azerbaijani company has several corporate layers?

Shufti pulls the register record for each Azerbaijani company in the chain, reads the beneficial ownership filing the company provides, maps holdings through foreign parents and intermediate companies and identifies everyone at the 10% threshold. Each owner is verified and screened, and a register change triggers a rescreen.

Does Shufti's ongoing monitoring cover more than sanctions screening?

Yes. Article 4.5 of the AML Law requires transactions to be analyzed against the customer's profile and source of funds, and FMS rules set reviews from yearly for high-risk customers to every three years for low risk. Shufti checks transactions against each profile and schedules reviews.

How does Shufti keep screening current and handle Azerbaijani name variations?

Watchlists update continuously, including the State Security Service's domestic list and UN lists, which apply without delay. PEP checks cover each customer and beneficial owner as Article 7 requires, and phonetic matching links Latin and Cyrillic spellings such as Məmmədov, Mammadov and Мамедов.

Can we choose where data is hosted or run verification inside our own infrastructure?

Yes. Deploy Shufti on-premises, air-gapped if required, so identity data stays on your network, with any other hosting location set in the agreement. That record supports the transfer rules in Article 14 of the Law on Personal Data and CBAR's outsourcing requirements.

What controls help us protect identity and biometric data?

Shufti encrypts data in transit and at rest, applies role-based access and logs every access. Biometric data is kept only as long as your configured retention allows, and ISO 27001:2022 and SOC 2 Type 2 reports support vendor reviews and the state registration of your information systems.

Can we configure different retention periods for different Azerbaijani licenses?

Yes. Retention is set per client, license and record type, so a bank, a payment institution and an investment firm in one group can each keep records for at least five years after the relationship ends, or longer when the period is extended under Article 6.3.

What does Shufti provide when our compliance team needs to prepare an FMS report?

Shufti's case file holds the verified identity, screening results, transaction history, alerts and analyst notes in one place, exported as a report-ready bundle. Your team submits it through the FMS Suspicious Transaction Monitoring system, even for a held transaction, without rebuilding evidence.

Can we add verification checks without rebuilding our onboarding journey?

Yes. The AI Journey Builder adds or reorders checks such as SİMA signatures, NFC chip reads, video calls or IBAN checks without code changes, and routes customers by product, nationality and risk tier, so new CBAR or FMS requirements reach production quickly.

How does Shufti make verification queries easier for our customer support team?

Every decision appears in the back office with its reason, the failed check and the captured evidence. Support agents can explain a rejected selfie or ID card in plain language, ask for a specific retake and pass disputed results to compliance.

Let’s Build Trust Into Your Business

1B+Verifications Processed

240+Regions Actively Processed

99.7%Accuracy Rate

Samer Al Tamimi

CEO of Safwa Bank

Samer Al Tamimi

“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”

Trusted. Compliant. Certified

cetificate-logos cetificate-logos cetificate-logos cetificate-logos

Explore Shufti For Your Business

Get a personalised demo from our experts.

    Which products would you like to check out?

    VideoIdent

    Address Verification

    eIDV (Docless)

    KYB

    AML Screening

    Fraud Prevention

    Face and ID Verification

    Age Verification

    Others

    What is your expected yearly verification volume?

    1 to 1,000

    1,001 to 5,000

    5,001 to 20,000

    20,001 to 50,000

    50,001 to 100,000

    100,001 to 1,000,000

    1,000,000+

    Valid Invalid number

    By clicking Submit, you accept our Privacy Policy and consent to marketing communications.

    PROVEN PLAYBOOKS

    Explore Practical KYC & AML Resources

    Read More
    Cover of ID Verification Guide for Crypto Exchanges

    17 November, 2025

    ID Verification Guide for Crypto Exchanges

    As crypto rules tighten, exchanges must raise assurance without slowing sign-ups. A buyer's guide to risk-based KYC, AML and fraud controls for crypto platforms.

    Product Guide

    Read More
    Read More
    Cover of State of Global AML Compliance 2025 FATF Data Insight

    18 December, 2025

    State of Global AML Compliance 2025 FATF Data Insight

    AML laws read strongly on paper while enforcement lags behind. A data-led analysis of FATF findings, the gap between rules and results, and where RegTech closes it.

    Report

    Read More
    Read More
    Cover of Identity Fraud Report 2026

    21 August, 2026

    Identity Fraud Report 2026

    Identity fraud hit 22.49% of crypto verifications in H1 2026. Shufti's report breaks down AI document fraud and linked fraud networks across 11 named sectors of risk.

    Report

    Read More