Shufti and AML Certification Centre logosWebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringExplore Now WebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringExplore Now The FRAML Convergence — Unifying Fraud and AML MonitoringExplore Shufti and ICA 25 Years logosWebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now WebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now Financial inclusion and AML/CFT — Managing access and riskRegister Shufti and Finance Magnates logosWebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now WebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now Transaction Monitoring & KYC — Cutting False PositivesRegister WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now Pix Fraud 2026 — Are Your Fraud Controls Ready?Explore Gavel on AMLR rule bookAMLR applies 10 July 2027. See your stack against every obligationBook a Demo AMLR applies 10 July 2027. See your stack against every obligationBook A Demo AMLR applies 10 July 2027 — see your stackBook Demo Globe with pKYC, Onboarding, Screening and Transactions labelsShufti’s Glocal PlatformGlobal Coverage. Local Depth. Full Compliance Lifecycle.Explore More Global Coverage. Local Depth. Full Compliance Lifecycle.Explore More Glocal Platform — Global Coverage. Local Depth.Explore INNOVATION DROPSUMMER
EDITION
20
26
Qualified Electronic Signature
WATCH NOW
INNOVATION DROP - Qualified Electronic SignatureWatch Now Innovation Drop — Qualified Electronic SignatureWatch
INNOVATION DROPSUMMER
EDITION
20
26
Transaction Trust Monitoring
WATCH NOW
INNOVATION DROP - Transaction Trust MonitoringWatch Now Innovation Drop — Transaction Trust MonitoringWatch
INNOVATION DROPSUMMER
EDITION
20
26
Travel Rule Compliance
WATCH NOW
INNOVATION DROP - Travel Rule ComplianceWatch Now Innovation Drop — Travel Rule ComplianceWatch
Datos Insights 2026 Impact Awards badgeDatos Insights 2026 Impact AwardsShufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore Liminal 2026 KYC IndexShufti: A top vendor for product executionRead The PR Shufti: A top vendor for product executionRead The PR Liminal 2026 KYC Index — Shufti: A top vendor for product executionRead PR Gavel on AMLR rule bookAMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027 — Find the GapsConsult Bank card and cashBank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification — Secure PayoutsSee How Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance — Verified Location, Verified IdentityBook Demo Journey Builder dot gridConfigure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Configure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Journey Builder — Configure Verification FlowsSee How Shufti MCP toggle with ChatGPT and ClaudeShufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP — Verification Tools Inside Claude or ChatGPTExplore
4
Book a Demo

Scale Identity Verification and KYC Operations in The Bahamas

Verify citizens and residents through Bahamian ePassport NFC, driver's licence and NIB card checks and 10,000+ foreign ID document types, run KYB on companies and their owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for CBB-, SCB- and ICB-supervised firms.

Banner Image for The Bahamas
Trusted by 2000+ businesses that make identity decisions at scale
cashew gemone HERO Gaming Bitget IronFX PENN National Rakuten Witzeal Noteris banxy

Operational Performance for Bahamas KYC

Our Numbers Speak Volumes

97.22%

Pass
Rates

Under 5 secs

IDV
Verification

100%

Omni-format
Document Recognition

THE BAHAMAS VERIFICATION GAP

Bahamas IDV/KYC Challenges

Due Diligence Refresh Cycles Are Now Fixed in Law

Due Diligence Refresh Cycles Are Now Fixed in Law

Since 1 December 2025, the amended Financial Transactions Reporting Act (FTRA) sets due diligence cycles of one year for high-risk accounts, three to five years for medium risk and five to ten for low. Shufti's perpetual KYC schedules each refresh and moves it forward when risk changes.

No National ID Card Leaves a Wide Document Mix

No National ID Card Leaves a Wide Document Mix

The Bahamas has no national ID card yet, so Bahamas KYC rests on passports, driver's licences, NIB cards, voter's cards and immigration permits, often two at a time under CBB rules. Shufti verifies each of them in one flow, with one evidence trail.

Beneficial Ownership Records Are Not Public

Beneficial Ownership Records Are Not Public

Registered agents hold beneficial ownership data under the Register of Beneficial Ownership Act, and only designated authorities can search it, yet the FTRA expects firms to verify everyone holding 10% or more. Shufti maps holdings through each corporate layer to that line.

Thin Case Files Weaken caseKonnect Reports

Thin Case Files Weaken caseKonnect Reports

Section 25 of the FTRA requires a suspicious transaction report as soon as practicable, filed with the FIU through caseKonnect since June 2019. A case pieced together from scattered notes slows that filing. Shufti's case management packages evidence, screening hits and decisions into report-ready bundles.

Documents and Languages

Individual Documents Shufti Verifies in The Bahamas

Shufti verifies 7 Bahamian identity document types plus passports and ID cards from other countries. The cards below cover the core documents Bahamian onboarding relies on, with the full list on the supported documents page.

View All Supported Documents

Bahamian ePassport

The Passport Office issues biometric e-passports, and CBB guidance accepts a valid Bahamian passport on its own. Shufti reads the chip and runs nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.

Bahamian ePassport

Bahamian Driver's Licence

The Road Traffic Department issues the driver's licence, and since April 2023 the CBB has accepted it on its own to open an account. Shufti checks its authenticity, expiry and facial match, so it can stand alone or back up a passport check.

Bahamian Driver's Licence

National Insurance Board (NIB) Card

The National Insurance Board issues the NIB smart card bearing a National Insurance Number, a Category A document under CBB guidance that is paired with a second ID. Shufti verifies the card, reads the number and matches it across the customer's other documents.

National Insurance Board (NIB) Card

Voter's Card

The Parliamentary Registration Department issues the voter's card, a Category B document under CBB guidance, and began distributing a new biometric version in March 2026. Shufti checks the card's security features and photo and pairs it with a Category A document in one case.

Voter's Card

Residence and Work Permits

The Department of Immigration issues permanent residence permits, spousal permits and annual work permit cards, all Category A documents under CBB guidance. Shufti verifies each permit, its expiry and the holder's face, and links it to the passport in the same case.

Residence and Work Permits

Foreign Passports and National ID Cards

Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Non-resident clients of banks, trust companies and funds onboard this way, as do expatriate workers holding a work permit.

Foreign Passports and National ID Cards

Proof of Address

Much of The Bahamas has no postcodes, so CBB guidance names sources such as bank or credit union statements and tax assessments, and many customers hold Bahamas Power and Light or water bills. Shufti reads each and matches name and address to the verified identity.

Proof of Address
Bahamian ePassport Bahamian Driver's Licence National Insurance Board (NIB) Card Voter's Card Residence and Work Permits Foreign Passports and National ID Cards Proof of Address Bahamian ePassport
Certificate of Incorporation and RGD Record Memorandum and Articles of Association Business Licence and Sector Licences Registered Office and Business Address Proof Certificate of Incorporation and RGD Record

Entity Identity

Certificate of Incorporation and RGD Record

The Registrar General's Department incorporates domestic companies under the Companies Act 1992 and International Business Companies (IBCs) under the IBC Act 2000. Shufti verifies the certificate and checks name, number, status and registered office against live registry data at every check.

Certificate of Incorporation and RGD Record

Memorandum and Articles of Association

Domestic companies and IBCs both file a memorandum and articles setting out share classes, members' rights and how directors are appointed. AI-OCR reads ownership, capital and signing authority from the filing and flags GAN-generated or edited pages before they reach your reviewers.

Memorandum and Articles of Association

Business Licence and Sector Licences

The Department of Inland Revenue issues business licences under the Business Licence Act 2023, while banks hold CBB licences, digital asset businesses register with the SCB and gaming operators hold Gaming Board licences. Shufti reads each and checks holder, scope and validity.

Business Licence and Sector Licences

Registered Office and Business Address Proof

Domestic companies keep a registered office in The Bahamas, and IBCs are formed and administered through a licensed registered agent. Shufti cross-checks a lease or utility bill against the registered office in the RGD record, so a borrowed or virtual address is caught before onboarding.

Registered Office and Business Address Proof

Tax Identity

Taxpayer Identification Number and VAT Registration Certificate

The Department of Inland Revenue assigns a TIN and issues a VAT Registration Certificate once a business registers, which it must do when taxable supplies pass B$100,000 in 12 months. Shufti extracts the TIN and matches it to the company name, RGD record and business licence.

Taxpayer Identification Number and VAT Registration Certificate

Foreign Tax Registrations and FATCA/CRS Self-Certification

Foreign parents, shareholders and non-resident clients are verified with their home-country tax registrations. The Automatic Exchange of Financial Account Information Act 2016 brings CRS reporting, so Shufti collects FATCA and CRS self-certifications in the same due diligence form before approval.

Foreign Tax Registrations and FATCA/CRS Self-Certification
Taxpayer Identification Number and VAT Registration Certificate Foreign Tax Registrations and FATCA/CRS Self-Certification Taxpayer Identification Number and VAT Registration Certificate
Register of Beneficial Ownership Shareholder Register and Ownership Chart Directors, Officers and Authorised Signatories Register of Beneficial Ownership

Ownership and Control

Register of Beneficial Ownership

The Register of Beneficial Ownership Act 2018, last amended in 2025, requires entities to record everyone holding 10% or more and report changes to their registered agent within 15 days. Shufti collects each declaration, maps the owners it names and screens them before approval.

Register of Beneficial Ownership

Shareholder Register and Ownership Chart

The FTRA defines a controlling interest as 10% or more of voting rights and shares, and many structures run through IBCs, funds and trusts. Shufti maps holdings through intermediate companies and screens each owner against sanctions, PEP and adverse media lists, so no qualifying owner goes unchecked.

Shareholder Register and Ownership Chart

Directors, Officers and Authorised Signatories

Regulated firms identify the directors, officers and signatories named in RGD filings and board resolutions, just as they identify individual customers. Shufti verifies each person, screens them against sanctions and PEP lists and alerts the case owner when the registry shows a change in directors.

Directors, Officers and Authorised Signatories

Languages We Cover

English and Foreign Document Parsing

Bahamian identity documents and company filings are issued in English, while non-resident clients and foreign workers bring documents in many scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and averages 93% accuracy against Google Vision's 78.4% in its published benchmark. Zero-shot document intelligence extracts data from layouts it has never seen, on first sight, without waiting for a template.

English and Foreign Document Parsing

Bahamian Name Matching

Bahamian records often carry dropped middle names, nicknames, spelling variants between documents and French or Creole-derived names. Native phonetic models for 80+ languages match these forms in sanctions and PEP screening, so one customer is not split into several identities.

Bahamian Name Matching

Cross-Document Consistency Checks

Names, dates of birth, National Insurance Numbers and TINs are reconciled across the passport, driver's licence, NIB card, permits, RGD record and beneficial ownership declarations. Shufti flags any mismatch for review before the case is approved.

Cross-Document Consistency Checks
English and Foreign Document Parsing Bahamian Name Matching Cross-Document Consistency Checks English and Foreign Document Parsing

Independent Validation

Shufti's Recognition Across Independent Evaluations

Liminal

Ranked Exceptional in the Liminal Index 2026 for age estimation

View Reportarrow-icon
Gartner

Differentiated by Gartner on document diversity and country coverage

Read morearrow-icon
iBeta

Certified at iBeta Level 3 PAD with 0% APCER

Read Blogarrow-icon
KuppingerCole

Broadest global reach in the 2025 KuppingerCole Extended IDV report

Download Reportarrow-icon
Homeland Security

Ranked Top 5 in the DHS RIVR 2025 for identity validation

Read Blogarrow-icon
Liminal

Top Vendor for Product Execution in the Liminal Index for KYC 2026

View Reportarrow-icon
Liminal

Ranked Exceptional for age verification by Liminal Index 2026

View Reportarrow-icon
G2

Recognised as a Leader in G2 Fall 2026 reports

Read Morearrow-icon

Regulatory Update

Every Verification Route Bahamian Firms Rely On, in One Platform

Digital identity verification in The Bahamas follows regulator standards rather than a national eID. CBB guidance asks for secure, multi-factor checks for internet services (paragraph 36) and extra steps for non-face-to-face customers (paragraph 170), and the DARE AML Rules name video and biometric checks. Shufti supports both, plus chip and document routes for residents and non-residents.

Fraud Prevention Across the Bahamian Customer Journey

Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Bahamian businesses act on risk while keeping legitimate customers moving.

  • 01

    Account Takeover and Recovery Abuse

    Stop attackers who take over bank accounts, Sand Dollar wallets and payment apps through SIM swaps, phished passwords or intercepted one-time codes. Account takeover prevention asks for a liveness-checked selfie at account recovery and before high-risk changes, so the real owner keeps control and every recovery attempt is logged.

  • 02

    Social Engineering and Manipulated Payments

    Protect customers talked into sending money by callers posing as bank staff, government officers or relatives in trouble. Behavioral biometrics spots hesitation and remote access tools, active-call detection flags sessions coached over the phone, and transaction monitoring holds unusual payments before the money leaves the account.

  • 03

    Device Spoofing and Automated Attacks

    Block bot-driven sign-ups and emulator farms that open wallets and trading accounts in bulk for mule networks and bonus abuse. Device fingerprinting links every session to a device profile, detects emulators, rooted phones and location spoofing, and stops one device from opening dozens of accounts under different names.

  • 04

    Connected Fraud Rings and Repeat Offenders

    Keep out fraudsters who return under new identities after being offboarded. Fraud network detection links identities, devices, phone numbers and accounts, and Shufti's cross-company fraud intelligence flags people already tied to confirmed fraud elsewhere, so a whole ring is exposed instead of one account at a time.

  • 05

    Synthetic Identities and Fabricated Documents

    Reject identities stitched together from a real National Insurance Number, a borrowed phone number and an invented address. Email and phone enrichment tests whether contact details have a genuine history, while zero-shot document intelligence catches fabricated licences, utility bills and company certificates even in formats it has never seen.

  • 06

    Deepfakes and Camera Injection

    Protect selfie onboarding and video identification against face swaps, replayed footage and virtual cameras. Deepfake detection inspects the camera feed for injection, and iBeta Level 3 liveness confirms a real person is present, so remote account opening and every later step-up check stay tied to the genuine customer.

  • 07

    Money Mules and Rapid Fund Movement

    Find mule accounts that collect scam proceeds and move them on within minutes, through wallets, money transmission businesses or digital asset exchanges. Money mule detection tracks fast in-and-out flows, many-to-one transfers and sudden changes in account behavior, then sends flagged accounts to your analysts with the evidence attached.

  • 08

    Fraudulent Businesses and Concealed Ownership

    Keep shell companies and fronts off your merchant and corporate books. Shufti checks the RGD record, beneficial ownership declarations and sector licences, maps every owner at 10% or more through each corporate layer, and screens each director and owner against sanctions and PEP lists before the account opens.

Governance & Controls

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-submissions

Capture guidance for passport chips, licence and NIB card photos, selfies and company filings cuts failed attempts before they reach your review queue.

Fewer Avoidable Re-submissions

Cleaner Audit Trails

Shufti's case management records sources, results, timestamps, evidence, analyst notes and decision history, packaged as report-ready bundles for STR filing through caseKonnect.

Cleaner Audit Trails

One Workflow, One Back Office

Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director and transaction changes across the full compliance lifecycle.

One Workflow, One Back Office

Passport and Licence-First Flow Design

Bahamian passport or licence holders verify with one document, while others move to two-document checks and non-residents to passport verification in one flow.

Passport and Licence-First Flow Design

Shufti's IDV/KYC Solutions for The Bahamas

KYC Solutions

KYC for Bahamas banking and beyond has to cover passport and licence holders, residents who rely on NIB cards and permits, and non-resident clients with foreign passports. One Shufti flow routes each by risk, so nobody faces checks they don't need.

Explore More
Face Verification

Face Verification

Paragraph 169 of the CBB Guidelines warns that non-face-to-face business carries an inherent risk of forgery and fraud. Shufti matches a live selfie to the passport, licence or permit photo with iBeta Level 3 liveness, blocking masks, replays and deepfakes.

.
Age Verification

Age Verification

Gaming houses, online gaming licensees and age-restricted sellers need to confirm a customer's age at registration. Shufti estimates age from a selfie in under 5 seconds and blocks 99.8% of underage attempts, falling back to the passport or licence date of birth.

.
Bank Account Verification

Bank Account Verification

Withdrawals, fund redemptions and loan payouts fail when an account number or holder name is wrong. Shufti confirms the account holder's name in real time before money moves, so payouts and first-payment checks reach the verified customer.

.
Address Verification

Address Verification

Bank statements, utility bills, tax assessments and referee letters arrive as photos, scans and PDFs, often with P.O. box addresses. Shufti reads each with layout-aware extraction and fuzzy matching, reaching a 99.3% pass rate, so genuine addresses clear without manual review.

.
Document Verification

Document Verification

Passports, licences, NIB cards, voter's cards, permits and company papers arrive in every format and quality. Shufti authenticates each within seconds and catches screenshots, replayed images, synthetic PVC cards and print-and-scan forgeries before they reach your team.

.
Identity Verification

Identity Verification

Separate tools for selfies, documents, chips and addresses scatter one customer across several records. Shufti runs biometrics, NFC, document and address checks in one API session, giving compliance teams one verified identity per customer.

.

KYB Solutions

Business verification in The Bahamas means reconciling the RGD record, business licence, TIN and beneficial ownership declarations, often across IBCs, funds and foreign parents. Shufti's live registry calls and owner mapping build that picture in one place.

Explore More
Business Verification

Business Verification

Onboarding a Bahamian company means confirming its certificate of incorporation, business licence, TIN, signatories and everyone who owns or controls 10% or more. Shufti's live registry call confirms the RGD record, and declared owners are checked against the ownership declarations and shareholder register the company provides.

.
Enhanced Due Diligence

Enhanced Due Diligence

Section 13 of the FTRA requires enhanced due diligence for higher-risk customers, and section 14 adds senior management approval and source of wealth checks for PEPs. Shufti's due diligence forms branch by risk, score each answer and gather source-of-funds evidence.

.

AML Screening

A customer who is clean at onboarding can land on a list next week, so screening has to keep running after approval. Shufti's perpetual KYC rescreens customers against 4,000+ watchlists, including UN Security Council lists and orders made under the IOEAM Act, refreshing every 15 minutes.

Explore More
Business AML Screening

Business AML Screening

A company's sanctions exposure often sits with its owners and directors. Shufti screens entities, directors and beneficial owners against UN lists and IOEAM Act orders, and perpetual KYB rescreens them whenever the RGD record changes.

.
Transaction Monitoring

Transaction Monitoring

Occasional transactions above the FTR Regulations' thresholds trigger full due diligence, so payments split to stay below them are a red flag. Shufti's library of 500+ pre-built rules covers structuring, smurfing, and mule activity, cuts false positives by 60% and bundles cases for caseKonnect.

.
Travel Rule

Travel Rule

The SCB's Travel Rule Guidance Note of August 2026 expects originator and beneficiary data with digital asset transfers from USD 1,000 or its equivalent and checks on unhosted wallets at any value. Shufti connects to major Travel Rule networks and verifies who owns each self-hosted wallet.

.
AI Compliance Co-Pilot

AI Compliance Co-Pilot

One common name can return 140+ screening hits. Shufti's AI Compliance Co-Pilot reviews every hit, gives a confidence score out of 100 with a written reason, and leaves the final call with your MLRO.

.
REGULATORY ALIGNMENT

Built To Fit The Bahamas' Compliance Landscape

AML across Bahamas financial services starts with the Financial Transactions Reporting Act and the Proceeds of Crime Act, which apply to every regulated business, while the CBB, the SCB, the Insurance Commission, the Compliance Commission and the Gaming Board add rules for the firms they oversee. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each licence your group holds.

Financial Transactions Reporting Act 2018 (FTRA)

Financial Transactions Reporting Act 2018 (FTRA)

In force since 25 May 2018, the FTRA defines a controlling interest as 10% or more and requires ongoing due diligence (section 12), PEP measures (section 14), five-year record retention (section 15) and suspicious transaction reports (section 25). A 2025 amendment added minimum refresh cycles.

Financial Transactions Reporting Regulations 2018

Financial Transactions Reporting Regulations 2018

The Regulations set the identity details firms collect (regulation 4), beneficial owners at 10% (regulation 5) and verification for facilities opened by telephone or internet (regulation 11). Due diligence applies to occasional transactions from B$15,000, or B$3,000 for casino and gaming patrons (regulation 3).

Proceeds of Crime Act 2018 (POCA)

Proceeds of Crime Act 2018 (POCA)

POCA 2018 defines the money laundering offences (sections 9 to 11), underpins the enhanced measures for high-risk countries (section 6(3)) and creates the Identified Risk Framework Steering Committee (section 5). An amendment in force from 1 December 2025 widened the definition of property and added extraterritorial provisions.

Central Bank of The Bahamas (CBB)

Central Bank of The Bahamas (CBB)

The CBB supervises banks, trust companies, money transmission businesses, payment institutions and credit unions. Its AML/CFT/CPF Guidelines, first issued in 2009 and revised on 4 May 2026, cover non-face-to-face customers (paragraphs 168 to 170), streamlined account opening (Appendix B) and five-year verification records (paragraph 218).

Securities Commission of The Bahamas (SCB)

Securities Commission of The Bahamas (SCB)

The SCB supervises securities firms under the Securities Industry Act 2024, investment funds under the Investment Funds Act 2019 and financial and corporate service providers under the FCSP Act 2020. Due diligence duties for these firms sit in the Securities Industry (AML/CFT) Rules 2015 and the FCSP (AML/CFT) Rules 2019.

Digital Assets and Registered Exchanges Act 2024 (DARE Act)

Digital Assets and Registered Exchanges Act 2024 (DARE Act)

Crypto regulation in The Bahamas rests on the DARE Act 2024, in force since 29 July 2024, which repealed the 2020 Act (section 85). The DARE AML Rules 2022 set remote KYC, wallet risk and record duties, and SCB guidance applies the Travel Rule from USD 1,000 or its equivalent.

Insurance Commission of The Bahamas (ICB)

Insurance Commission of The Bahamas (ICB)

The Insurance Commission supervises domestic insurers under the Insurance Act 2005 and external insurers under the External Insurance Act 2009. General insurers report suspicious transactions under sections 25 to 30 of the FTRA, and its Guidelines for the Compliance Function, updated in September 2026, cover AML/CFT/CPF duties.

Compliance Commission of The Bahamas

Compliance Commission of The Bahamas

Continued under section 31 of the FTRA, the Compliance Commission supervises designated non-financial businesses and professions, including real estate brokers and land developers, dealers in precious metals and stones, lawyers and accountants. It registers these businesses (section 33) and issues Codes of Practice (section 37).

Financial Intelligence Unit (FIU)

Financial Intelligence Unit (FIU)

The FIU operates under the Financial Intelligence Unit Act 2023 and has received suspicious transaction reports electronically through caseKonnect since 1 June 2019, filed by registered MLROs. It also receives quarterly Terrorist Property Reports under the Anti-Terrorism Act 2018 and is an Egmont Group member.

Register of Beneficial Ownership Act 2018

Register of Beneficial Ownership Act 2018

With the Attorney General as competent authority, the Act sets the 10% beneficial ownership threshold (section 5) and a Secure Search System that is not open to the public (section 4). Registered agents keep the databases (section 9), and records outlast dissolution by five years (section 10).

Registrar General's Department (RGD)

Registrar General's Department (RGD)

The RGD registers domestic companies under the Companies Act 1992 and IBCs under the IBC Act 2000, issues certificates of incorporation and good standing, and accepts IBC incorporations only through licensed financial and corporate service providers. Filings and searches run through its online CARS system.

Gaming Board for The Bahamas

Gaming Board for The Bahamas

The Gaming Board regulates gaming houses, casinos and online gaming under the Gaming Act 2014 and its regulations. Gaming licence holders, mobile and interactive licences included, count as financial institutions under section 3(1)(d) of the FTRA and carry its due diligence and reporting duties.

International Obligations (Economic and Ancillary Measures) Act (IOEAM Act)

International Obligations (Economic and Ancillary Measures) Act (IOEAM Act)

Section 3A, added in 2019, gives UN Security Council sanctions resolutions the force of law in The Bahamas from the date of adoption, so assets must be frozen without delay and reported to the FIU and the Attorney General. Orders under section 3B can also implement unilateral sanctions.

National Risk Assessment and FATF Status

National Risk Assessment and FATF Status

The Bahamas published key findings of its 2022 money laundering risk assessment in December 2024, followed by terrorist and proliferation financing assessments and a National CFT-CPF Strategy for 2026 to 2029. FATF removed it from increased monitoring in December 2020, and CFATF is its regional assessor.

Bahamas Data Residency and Deployment

Bahamian firms have to show the CBB, the SCB and the Data Protection Commissioner exactly where customer data sits. Shufti offers on-premises deployment inside your own infrastructure, including air-gapped setups, with any other hosting location and transfer arrangements defined in the agreement.

Data Protection (Privacy of Personal Information) Act 2003

The 2003 Act, enforced by the Office of the Data Protection Commissioner, remains in force and lets the Commissioner block transfers to countries without equivalent protection (section 17). Shufti protects identity and biometric data with encryption, role-based access controls and configurable retention.

Data Protection Act 2025

Passed in December 2025 and awaiting commencement, the new Act treats biometric data as sensitive personal data and requires breach notice to the Commissioner within 72 hours (section 48). Shufti's access controls, audit logs and incident procedures are built for that standard.

CBB Outsourcing and Technology Risk Standards

The CBB's Minimum Standards for the Outsourcing of Material Functions, revised in November 2020, and its Technology Risk Management Guidelines expect due diligence, written contracts and an exit strategy for IT outsourcing. Shufti supplies security documentation, contract terms and regulator access rights for those reviews.

Retention Controls

FTRA customer records have to outlive the relationship by at least five years, and beneficial ownership records outlive the entity. Shufti sets retention by client and licence, treats statutory minimums as floors rather than deletion dates and supports legal holds.

Encryption and Security

Shufti encrypts personal and financial data in transit and at rest, applies role-based access and logs every action. ISO 27001:2022 certification and SOC 2 Type 2 reports support the vendor assessments CBB- and SCB-supervised firms run before onboarding a provider.

Automated Decisions and Biometric Data

Once in force, section 50 of the 2025 Act bars decisions based solely on automated processing that produce legal effects, unless an exception applies. Shufti exposes verification results and supporting details through the API and back office, so teams can explain each outcome and escalate disputes.

Scope of Our Role

Shufti acts as a data processor and handles personal data only on your instructions, while your firm remains the data controller answerable to the Data Protection Commissioner. Any activity where Shufti acts as an independent controller is identified in its privacy notice.

Data Residency and Privacy Controls in The Bahamas

BUILT FOR COMPLIANCE TEAMS

Bahamas AML Sources That Strengthen Decisions

Turn Bahamas Verification Requirements into a Smoother Customer Journey

Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Identity Verification Built Around Your Industry in The Bahamas

Open Accounts Remotely On A Verified Identity

Banks and trust companies licensed under the Banks and Trust Companies Regulation Act 2020 follow the CBB's 2026 Guidelines for remote customers and the FTRA's refresh cycles. Shufti combines passport chip reads, licence checks and liveness-⁠checked selfies, then runs AML screening and perpetual KYC on every account.

Frequently Asked Questions

Does Shufti verify Bahamian customers who have no national ID card?

Yes. The Bahamas has no national ID card yet, so Shufti verifies the passport or driver's licence first, since CBB guidance accepts either alone. Other customers move to two-document checks using NIB cards, voter's cards or permits, and non-residents to passport chip checks.

Is scanning a Bahamian passport enough, or should verification include its chip?

A scan shows the data page, while the chip carries a digital signature an altered passport cannot copy. Shufti reads the e-passport chip, compares it with the printed page and matches a liveness-checked selfie, which matters because CBB guidance flags forgery risk in remote onboarding.

Can Shufti verify foreign documents or identity formats it has not encountered before?

Yes. Shufti's zero-shot AI reads unfamiliar layouts without waiting for a template, so a new permit design, a foreign passport or a non-resident director's national ID is extracted and checked for tampering the first time it appears, then added to its document library.

How does Shufti OCR compare with Google OCR for the documents Bahamian firms receive?

Bahamian documents are issued in English, which Shufti reads at 99.7% accuracy. Across the languages in Shufti's published benchmark against Google Vision, it averages 93% accuracy to Google's 78.4%, so documents from non-resident clients, investors and directors extract cleanly too.

How does Shufti verify beneficial ownership when a Bahamian company has several corporate layers?

Shufti pulls RGD and foreign registry records for each company in the chain, maps holdings through every layer and identifies everyone holding 10% or more, as the FTRA requires. Each owner is compared with the declarations the company provides and screened before approval.

Does Shufti's ongoing monitoring cover more than sanctions screening?

Yes. Section 12 of the FTRA requires ongoing due diligence, and the 2025 amendment sets refresh cycles from yearly to once a decade by risk. Shufti monitors transactions against each customer's profile, rescreens customers and owners, and flags changes in directors, ownership or registry data.

How does Shufti keep screening current and handle Bahamian name variations?

UN sanctions apply in The Bahamas from adoption, so lists change overnight. Shufti refreshes UN lists and IOEAM Act orders every 15 minutes, and native phonetic models match dropped middle names, nicknames and spelling variants, so one person is not missed or split.

Can we choose where our data is hosted or run verification inside our own infrastructure?

Yes. Run Shufti on-premises inside your own infrastructure, air-gapped if required, with any other hosting location agreed in the contract. The agreement documents every transfer, so you can answer the 2003 Act's transfer controls and the 2025 Act's adequacy test.

What controls help us protect identity and biometric data?

Encryption in transit and at rest, role-based access, full action logs and configurable retention protect each record. Biometric data sits behind stricter roles, in line with the sensitive data status the 2025 Act gives it, and ISO 27001:2022 certification backs these controls.

Can we configure different retention periods for different Bahamian licences?

Yes. Retention is set per client, licence and record type, so FTRA records stay at least five years after a relationship ends, beneficial ownership records follow their own statute, and other data follows its own schedule. Legal holds pause deletion during investigations.

What does Shufti provide when our compliance team needs to prepare a caseKonnect report?

Shufti's case file holds the verified identity, screening hits, transaction history, analyst notes and decision trail, exported as a report-ready bundle for your MLRO to file through caseKonnect. That supports the FTRA duty to report a suspicion as soon as practicable.

Can we add verification checks without rebuilding our onboarding journey?

Yes. The AI Journey Builder adds or reorders checks such as passport NFC, address verification, video identification and AML screening by product, customer type and risk tier, and the changes go live without new code or a new app release.

How does Shufti make verification queries easier for our customer support team?

Every decision appears in the back office with the reason, the failed check and the evidence captured. Support staff can tell a customer whether a selfie failed liveness or a document did not match, then route disputed results to a reviewer.

Let’s Build Trust Into Your Business

1B+Verifications Processed

240+Regions Actively Processed

99.7%Accuracy Rate

Samer Al Tamimi

CEO of Safwa Bank

Samer Al Tamimi

“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”

Trusted. Compliant. Certified

cetificate-logos cetificate-logos cetificate-logos cetificate-logos

Explore Shufti For Your Business

Get a personalised demo from our experts.

    Which products would you like to check out?

    VideoIdent

    Address Verification

    eIDV (Docless)

    KYB

    AML Screening

    Fraud Prevention

    AMLR

    Face and ID Verification

    Age Verification

    Others

    What is your expected yearly verification volume?

    1 to 1,000

    1,001 to 5,000

    5,001 to 20,000

    20,001 to 50,000

    50,001 to 100,000

    100,001 to 1,000,000

    1,000,000+

    Valid Invalid number

    By clicking Submit, you accept our Privacy Policy and consent to marketing communications.

    PROVEN PLAYBOOKS

    Explore Practical KYC & AML Resources

    Read More
    Cover of ACU: The Caribbean's First Fully Digital Onboarding

    10 September, 2026

    ACU: The Caribbean's First Fully Digital Onboarding

    How Curaçao's ACU Credit Union became the first financial institution in the Caribbean to offer fully digital member onboarding, with an 86.9% approval rate.

    Case Study

    Read More
    Read More
    Cover of ID Verification Guide for Crypto Exchanges

    17 November, 2025

    ID Verification Guide for Crypto Exchanges

    As crypto rules tighten, exchanges must raise assurance without slowing sign-ups. A buyer's guide to risk-based KYC, AML and fraud controls for crypto platforms.

    Product Guide

    Read More
    Read More
    Cover of State of Global AML Compliance 2025 FATF Data Insight

    18 December, 2025

    State of Global AML Compliance 2025 FATF Data Insight

    AML laws read strongly on paper while enforcement lags behind. A data-led analysis of FATF findings, the gap between rules and results, and where RegTech closes it.

    Report

    Read More