AMLR Solutions 
AMLR Consultation
EUDI Wallet
Onboarding
Ongoing Monitoring
FRAML
KYC
KYB
KYI
Age Assurance
Workforce IAM
Candidate Verification
Account Takeover
Bonus/ Promotion Abuse
Chargeback Fraud
Deepfake
Document Fraud
Fraud Networks
Impersonation Fraud
Money Mule Activity
Multi-Accounting
Party Fraud
Regulatory & Compliance Risks
Synthetic Identity Fraud
Adult Content
Banking
Crypto
Fintech
Forex
Compliance
Fraud prevention
Trust & safety
Global expansion
Compliance Officers
Developers
Fraud Analysts
Product Managers
Journey Builder 
Global Trust Platform
Customer Profiles
Vendor Comparison
IDV Case Management
AML Case Management
Regulatory Reporting
Agentic Rule Builder 
AI Compliance Co-Pilot 
Fraud Analytics
Fraud Hub 
OCR
Shufti AI
Bank Account Verification 
Biometric Duplication
Database Checks
Document Intelligence
Government ID
Mobile Driver's License
NFC
Selfie Liveness
Brand Personalisation
Deployment Options
Identity Methods
IDV Modes
Multi-tenancy
On-Premise IDV
Secure Capture
Shufti MCP
- Australia
- Austria
- Bangladesh
- Belgium
- Brazil
- Bulgaria
- Cambodia
- Canada
- China
- Croatia
- Cyprus
- Czech Republic
- Denmark
- Egypt
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Germany
- Greece
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- UAE
- Uganda
- Ukraine
- UK
- USA
- Vietnam
Scale Identity Verification and KYC Operations in Cambodia
Verify Cambodians and expats through CamDigiKey, Khmer National ID checks, and 10,000+ foreign ID document types, run KYB on businesses and real owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for NBC-, NBFSA-, and CAFIU-supervised firms.
Operational Performance for Cambodia KYC
Our Numbers Speak Volumes
99.25%
Pass
Rates
Under 5 secs
IDV
Verification
80%
eIDV
Coverage
Cambodia IDV/KYC Challenges
Khmer-Script Documents Break Generic OCR
Cambodian national IDs and driving licenses are printed largely in Khmer script, which runs words together without spaces and has no single romanization standard. Shufti reads Khmer and English fields together and reconciles each name across documents and screening lists.
Remote Onboarding Counts as Higher Risk Under Cambodian Law
Cambodia's AML/CFT Law treats customers onboarded without face-to-face contact as higher risk, so digital banks and wallets need stronger evidence than an ID photo. Shufti pairs CamDigiKey or document checks with certified liveness and records every result in the case file.
Beneficial Ownership Has No Central Register
Cambodia's Second National Risk Assessment flags limited public access to beneficial ownership data, while CAFIU treats a 20% stake as control. Shufti pulls Ministry of Commerce records, maps ownership through every corporate layer and screens each person at or above that line.
Thin Case Files Weaken CAFIU Reports
Reporting entities must file suspicious transaction reports with CAFIU within 24 hours, and the Second National Risk Assessment flags uneven report quality. Shufti's case management keeps sources, screening hits, analyst notes and decisions together, so each report rests on complete evidence.
Documents and Languages
Individual Documents Shufti Verifies in Cambodia
Shufti verifies 16 Cambodian identity documents plus passports and ID cards from other countries. The cards below cover the core documents Cambodian onboarding relies on, with the full list on the supported documents page.
View All Supported DocumentsCamDigiKey
CamDigiKey is Cambodia's government eKYC system, set up under Sub-Decree 207 of 2023 and linked to Ministry of Interior identity records through CamDX. Shufti runs CamDigiKey authentication through your institution's membership and stores the confirmed identity, liveness result and record match in the case file.
Khmer National Identity Card
Issued by the Ministry of Interior, the card carries its core fields in Khmer script with Buddhist Era dates. Shufti extracts name, date of birth, document number and address, checks the card for tampering, matches the holder's face and confirms the record through CamDigiKey.
Cambodian Passport
Cambodians who bank or invest abroad often onboard with their passport. Shufti validates the MRZ and applies nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.
Foreign Passports and National ID Cards
Foreign investors, expatriate staff and visitors open accounts with documents from home. Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes, so a rare passport never stalls onboarding.
Cambodian Driving License
Issued by the Ministry of Public Works and Transport, the license gained a digital version in May 2026. Shufti checks the card's authenticity, expiry and facial match, giving ride-hailing, delivery and vehicle rental platforms a fast second identity document for drivers and customers.
Proof of Address
Cambodian customers usually prove address with an EDC electricity bill, a PPWSA water bill in Phnom Penh, a bank statement or the household Residence Book. Shufti verifies each in the same step as the ID and matches name and address across both documents.
Entity Identity
Certificate of Incorporation
The Ministry of Commerce issues an electronic certificate with digital stamps and a QR code once online registration is approved. Shufti checks the certificate for tampering and confirms company name, number and status against live Ministry of Commerce registry data at every check.
Annual Declaration and Registration Status
Every registered company must file an annual declaration with the Ministry of Commerce, and three missed years lead to repeal of registration. Shufti flags lapsed or repealed companies before onboarding and alerts you when a client's registration details change.
Memorandum and Articles of Association
Filed with the Ministry of Commerce at registration, the articles set out ownership, capital and signing authority. Shufti's AI-OCR reads those terms, compares them with the registry record and flags GAN-generated or edited pages before they reach a reviewer.
Business Address Proof
Shufti cross-checks the registered office on the Ministry of Commerce record against utility bills and lease agreements, so a virtual office or a mismatched trading address surfaces at onboarding instead of during a CAFIU examination.
Tax Identity
Tax Registration Certificate and TIN
The General Department of Taxation issues a tax identification number and registration certificate to registered businesses. Shufti extracts the TIN and cross-checks the legal name and address against the company's Ministry of Commerce record, catching borrowed or mismatched tax identities.
Patent Tax Certificate
The General Department of Taxation issues a patent tax certificate for each year a business operates. Shufti reads the certificate's validity period and business activity, so an expired certificate or an activity that does not match the application is flagged for review.
VAT Registration and Foreign Tax IDs
Shufti confirms that a VAT registration matches the company's TIN and legal name. For cross-border groups it also reads foreign tax registrations and FATCA and CRS self-certifications, keeping every tax identity for the group in one case file.
Ownership and Control
Beneficial Ownership Information
Cambodia has no central beneficial ownership register, and CAFIU's CDD Directive treats 20% or more of shares or voting rights as control. Shufti extracts owners from company filings, traces them through intermediate companies to that threshold and screens each one.
Shareholder Register and Ownership Chart
Shufti maps the shareholder register and ownership chart through every corporate layer, including foreign holding companies and nominee arrangements, and screens each shareholder against sanctions, PEP and adverse media lists before the account opens.
Directors and Authorized Signatories
Shufti verifies the identity of each director and authorized signatory, confirms their signing authority against the articles, screens them against sanctions and PEP lists, and alerts you when the board recorded with the Ministry of Commerce changes.
Languages We Cover
Khmer, English and Expat Document Parsing
Cambodian documents pair Khmer script, which has 74 characters, stacked diacritics and no word spaces, with English fields and Buddhist Era dates. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and averages 93% accuracy against Google Vision's 78.4% in its published benchmark. Zero-shot document intelligence extracts data from layouts it has never seen, on first sight, without waiting for a template.
Khmer Name Matching
Khmer names have no single romanization and place the family name first, so one customer can appear under several spellings and name orders. Shufti's phonetic and transliteration models match these variants in sanctions and PEP screening.
Cross-Document Consistency Checks
Shufti reconciles names, dates and ID numbers across the Khmer National ID, passport, driving license and Ministry of Commerce records, converting Buddhist Era dates so a genuine customer is not rejected over a calendar mismatch.
Independent Validation
Shufti's Recognition Across Independent Evaluations
Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read More
Regulatory Update
Every Verification Route Cambodian Regulators Recognize, in One Platform
Cambodia's AML/CFT Law requires verification against a national ID card, passport or other officially recognized photo ID, and treats onboarding without face-to-face contact as higher risk. Shufti supports CamDigiKey and Ministry of Interior record checks, plus chip, database, document, and video routes for foreigners and customers without a Khmer National ID.
CamDigiKey and Ministry of Interior Record Match
LiveThrough your institution's CamDigiKey membership, Shufti authenticates customers, with CamDigiKey checking liveness and reading the ID before matching it against Ministry of Interior records through CamDX. The government-confirmed result is stored in the case file as evidence.
Docless Database (eIDV)
LiveResidents verify through a CamDigiKey login or permitted Cambodian data sources instead of uploading a document, and Shufti returns a decision in seconds. It suits app-based wallets and lenders that need low-friction onboarding.
NFC Chip Verification
LiveShufti reads the chip in most foreign biometric passports, confirming the data was signed by the issuing state. It is the high-assurance route for foreign customers who cannot use CamDigiKey.
Document and Face Biometric
LiveCustomers photograph their ID and take a selfie, and Shufti matches the two with certified liveness detection. It is the route most foreigners and non-residents take, and it works on any smartphone.
Fraud Prevention Across the Cambodian Customer Journey
Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Cambodian businesses act on risk while keeping legitimate customers moving.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer Avoidable Re-submissions
Capture guidance for Khmer National ID cards and Khmer-script documents cuts glare, cropping and blur failures, so genuine customers pass on the first attempt.
Cleaner Audit Trails
Shufti's case management records sources, results, timestamps, evidence, analyst notes, and decision history, packaged as report-ready bundles for STR and CTR filing with CAFIU.
One Workflow, One Back Office
Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director, and transaction behavior changes across the lifecycle.
CamDigiKey and Khmer National ID-First Flow Design
Residents authenticate through CamDigiKey or their Khmer National ID first, and foreigners move to passport verification in the same flow.
Shufti's IDV/KYC Solutions for Cambodia
KYC Solutions
Cambodian banks, microfinance institutions and wallets onboard first-time account holders, app-first users and foreign residents through CamDigiKey, the Khmer National ID or a passport. One Shufti flow routes each by risk, so nobody faces checks they don't need.
Explore More
Face Verification
Remote onboarding raises impersonation risk under Cambodian law. Shufti matches the selfie to the ID photo with iBeta Level 3 certified liveness and a false match rate below 0.001, so only the real document holder gets through.
.
Age Verification
Age-restricted services, from alcohol delivery to licensed gaming, need proof of age without long forms. Shufti estimates age from a selfie in under five seconds and falls back to a Khmer National ID or passport check when a result is close.
.
Bank Account Verification
Payouts and loan disbursements sent to the wrong account are hard to recover. Shufti confirms the Cambodian bank account exists and that the account-holder name matches the verified customer in real time, before any money moves.
.
Address Verification
Cambodian addresses use village, commune, district and province names with inconsistent spelling. Shufti's layout-aware extraction and fuzzy matching read utility bills and bank statements in Khmer or English and match them to the address on the ID.
.
Document Verification
Generic OCR misreads Khmer script and Buddhist Era dates, which sends genuine customers to manual review. Shufti reads Cambodian IDs, passports and driving licenses within seconds and runs forensic checks for edits, screenshots and printed copies.
.
Identity Verification
Running document, face and address checks through separate vendors leaves gaps in the record. Shufti combines document, biometric, NFC, address and CamDigiKey checks in one API session, giving your compliance team one decision and one audit trail.
.KYB Solutions
Cambodian companies register online with the Ministry of Commerce, but beneficial ownership sits in company filings rather than a central register. Shufti's live registry calls and ownership mapping turn those filings into a verified picture of who controls the business, down to CAFIU's control threshold.
Explore More
Business Verification
Onboarding a Cambodian company means confirming its registration, TIN, directors and everyone with a controlling stake. Shufti's live registry call confirms the Ministry of Commerce record, and owners are traced through the shareholder register and filings the company provides.
.
Enhanced Due Diligence
PEPs, casino operators, real estate developers and cash-heavy businesses need deeper checks under Cambodia's risk-based rules. Shufti's branching due diligence forms collect source of funds and ownership evidence, score the answers and send UBO verification links.
.AML Screening
A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC rescreens customers against 4,000+ watchlists, including UN designations published through Cambodia's Ministry of Justice, refreshes data every 15 minutes and keeps every hit in one case file.
Explore More
Business AML Screening
Sanctioned owners and politically exposed directors can sit behind layered Cambodian holdings. Shufti screens the company, its directors and owners against UN and Cambodian designations, PEP lists and 50,000+ adverse media sources, and perpetual KYB rescreens the whole portfolio when a list changes.
.
Transaction Monitoring
Bakong and KHQR payments let mules move funds in minutes. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity, cuts false positives by up to 60% and builds case bundles ready for CAFIU reporting.
.
Travel Rule
As the NBC and SERC bring crypto businesses under licensing, transfers need originator and beneficiary data. Shufti connects to major Travel Rule networks through one integration, exchanges IVMS101 data with 2,000+ VASPs and verifies ownership of unhosted wallets.
.
AI Compliance Co-Pilot
A common Khmer name can return dozens of screening hits. Shufti's AI Compliance Co-Pilot reviews each one, gives a 0 to 100 confidence score with a written reason and logs every override, while your compliance officer keeps the final call.
.Built To Fit Cambodia's Compliance Landscape
Cambodia's AML/CFT Law and CAFIU's directives apply to every reporting entity, while the NBC, the Non-Bank Financial Services Authority and sector bodies add their own rules. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each license your group holds.
Law on Anti-Money Laundering and Combating the Financing of Terrorism (2020)
Royal Kram NS/RKM/0620/021 replaced the 2007 law and its 2013 amendment. Article 8 requires customer and beneficial owner verification with ongoing due diligence, Article 10 sets enhanced measures for higher-risk cases, Article 11 requires records for at least five years after a relationship ends, and Article 35 requires freezing without delay.
Cambodia Financial Intelligence Unit (CAFIU)
CAFIU operates under the National Bank of Cambodia, receives suspicious and cash transaction reports and supervises reporting entities' compliance. Article 12 requires suspicious transactions to be reported within 24 hours. Its directives set the beneficial ownership test and require verified originator and beneficiary data on cross-border wires from KHR 4 million.
National Bank of Cambodia (NBC)
The NBC licenses and supervises banks, microfinance institutions, payment service institutions and money changers, and operates the Bakong payment system. Its December 2024 Prakas lets banks and payment institutions offer cryptoasset services with approval, and its 2026 Technology and Cyber Risk Management Guidelines require a primary data center in Cambodia.
Non-Bank Financial Services Authority (NBFSA)
The NBFSA supervises insurance, securities, real estate, pawnshops, trusts, social security and accounting and auditing through sub-regulators including SERC, the Insurance Regulator of Cambodia and the Real Estate Business and Pawnshop Regulator. Non-bank reporting entities follow the 2010 AML/CFT Prakas issued for institutions outside NBC supervision.
Securities and Exchange Regulator of Cambodia (SERC)
SERC licenses securities firms and market participants, issues investor IDs and runs a FinTech regulatory sandbox, which granted its first license in January 2024. It is developing the licensing framework for digital asset businesses, alongside the NBC's rules for banks and payment institutions offering cryptoasset services.
Ministry of Commerce Online Business Registration
Companies form under the Law on Commercial Enterprises and register online with the Ministry of Commerce, which issues electronic certificates through CamDX-linked registration. Every company must file an annual declaration, and three missed years lead to repeal. The Ministry is drafting a sub-decree on filing nominee shareholder information and contracts.
CamDigiKey
Sub-Decree 207 of 2023 establishes CamDigiKey as the eKYC system run by the CamDX operator, with the Ministry of Economy and Finance as executive body. Registered commercial enterprises can become members and use its authentication, which checks Khmer National ID data against Ministry of Interior records with the Ministry's consent.
Targeted Financial Sanctions Notices (CAFIU)
Under the 2014 Sub-Decree on Freezing of Property of Designated Terrorists, the Ministry of Justice publishes UN Security Council designations and court-ordered domestic listings, and CAFIU circulates them to reporting entities. The 2020 Law on Combating the Financing of Proliferation of Weapons of Mass Destruction extends freezing duties to proliferation designations.
Commercial Gambling Management Commission of Cambodia
The Commission licenses and supervises casinos under the 2020 Law on the Management of Commercial Gaming, and casinos are reporting entities under the AML/CFT Law. CAFIU's casino directive requires customer due diligence on transactions from KHR 12 million, and Cambodian citizens remain barred from gambling in casinos.
National Coordination Committee on AML/CFT and Proliferation Financing
The committee sets Cambodia's AML/CFT and counter-proliferation policy, with CAFIU as its secretariat. It adopted the Second National Risk Assessment in December 2025, which rates virtual assets as medium-high risk and flags beneficial ownership gaps. Cambodia left the FATF list of jurisdictions under increased monitoring in February 2023.
Cambodia Data Residency and Deployment
The NBC's 2026 technology guidelines require banks and financial institutions to keep their primary data center in Cambodia and seek approval for any offshore site. Shufti runs on-premise inside your Cambodian infrastructure or in the nearest APAC cloud regions, with locations and transfers defined in the agreement.
Cambodia's Draft Personal Data Protection Law
Cambodia has no enacted personal data protection law yet, and the Ministry of Post and Telecommunications validated its draft in August 2026. Until it takes effect, Shufti protects identity and biometric data with encryption, role-based access controls and configurable retention, ready to adjust when the law is promulgated.
Technology Outsourcing Under NBC Guidelines
The NBC's guidelines expect board approval, risk assessment and due diligence before a bank outsources technology services. Shufti supplies its security documentation, data processing agreement, audit logs and exit support so your outsourcing review has the evidence it needs.
Retention Controls
Cambodian law requires records to be kept for five years after a relationship ends, and CAFIU can require longer storage during an investigation. Shufti configures retention by client and license, treats statutory minimums as floors rather than deletion dates and applies legal holds.
Encryption and Security
The NBC expects confidential data to be encrypted in transit and at rest, with role-based access and least privilege. Shufti encrypts data at both stages, logs every access and holds ISO 27001:2022 certification and a SOC 2 Type 2 report for vendor assessments.
Automated Decisions and Biometric Data
Customers declined by an automated check deserve a clear answer. Shufti returns verification results and supporting details through the API and back office, so support teams can explain outcomes, request a fresh attempt and escalate disputed results for human review.
Scope of Our Role
Shufti processes personal data on your instructions as a service provider, and your firm keeps responsibility for its compliance obligations. Shufti's privacy notice identifies the limited activities it performs as an independent controller, such as securing and improving its own services.
Data Residency and Privacy Controls in Cambodia
Cambodia AML Sources That Strengthen Decisions
Cambodia Financial Intelligence Unit (CAFIU)
National Bank of Cambodia (NBC)
Non-Bank Financial Services Authority (NBFSA)
Securities and Exchange Regulator of Cambodia (SERC)
Insurance Regulator of Cambodia (IRC)
Trust Regulator
Real Estate Business and Pawnshop Regulator (RPR)
Accounting and Auditing Regulator (ACAR)
Anti-Corruption Unit (ACU)
General Department of Customs and Excise of Cambodia (GDCE)
Financial Action Task Force (FATF)
Asia/Pacific Group on Money Laundering (APG)
Egmont Group of Financial Intelligence Units
World Bank Group
International Monetary Fund (IMF)
Turn Cambodia Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.
Certified to Global Standards
PROVEN WORKFLOWS
Identity Verification Built Around Your Industry in Cambodia
Faster Account Opening Without Weaker Controls
Cambodia's Second National Risk Assessment names retail deposits and electronic banking as the most exposed banking products. Shufti verifies customers of banks and microfinance institutions through CamDigiKey or the Khmer National ID, screens them continuously and monitors their transactions, keeping NBC and CAFIU evidence in one case file.
Frequently Asked Questions
Does Shufti support CamDigiKey, and what happens when customers cannot use it?
Yes. Shufti runs CamDigiKey authentication through your institution's membership, matching each Khmer National ID against Ministry of Interior records. Customers without the app verify with their ID or passport plus a selfie and liveness check, or through chip and video routes, inside the same flow.
Is scanning a Khmer National ID enough, or should verification include more checks?
A scan alone does not prove the card is genuine or that its holder is present. Shufti adds forensic document checks, a face match with liveness and a CamDigiKey record match, which matters because Cambodian law treats remote onboarding as higher risk.
Can Shufti verify foreign documents or identity formats it has not encountered before?
Yes. Shufti's coverage spans passports and ID cards worldwide, and its zero-shot document AI handles unfamiliar layouts without waiting for a new template. Foreign investors, expatriate staff and visitors can onboard without waiting in a manual review queue.
How accurately does Shufti read Khmer-script identity documents?
Shufti's OCR is built for Khmer script's large character set, stacked diacritics and unspaced words, and it converts Buddhist Era dates and reads English fields on the same document. It then reconciles the extracted name with romanized versions on passports and watchlists to avoid false mismatches.
How does Shufti verify ownership when a Cambodian company has several corporate layers?
Shufti pulls the company's Ministry of Commerce record, reads shareholder registers and articles, and traces ownership through each intermediate company, including foreign holding companies. Everyone at or above CAFIU's control threshold is identified, verified and screened before onboarding completes.
Does Shufti's ongoing monitoring cover more than sanctions screening?
Yes. Article 8 of Cambodia's AML/CFT Law requires ongoing due diligence, including scrutiny of transactions and up-to-date CDD data. Shufti monitors transactions against each customer's profile, rescreens customers and owners, and alerts you to registry and director changes.
How does Shufti keep screening current and handle Khmer name variations?
Watchlists refresh several times an hour, including UN designations circulated through the Ministry of Justice and CAFIU. Shufti's phonetic and transliteration models match Khmer names across spelling and name-order variants, and the AI Compliance Co-Pilot explains each potential match.
Can we choose Cambodia hosting or run verification inside our own infrastructure?
Yes. Banks bound by the NBC's 2026 technology guidelines can run Shufti on-premise in their own Cambodian data center, including air-gapped deployments. Other firms can use cloud hosting in the nearest APAC regions, with locations defined in the agreement.
What controls help us protect identity and biometric data?
Shufti encrypts data in transit and at rest, applies role-based access and least privilege, logs every access and is independently certified for information security. Retention and deletion stay configurable while Cambodia's personal data protection law remains in draft.
Can we configure different retention periods for different Cambodian licenses?
Yes. Retention is configurable by client, license and jurisdiction, so each entity in your group can keep records for at least the statutory period. Where CAFIU requires longer storage during an investigation, legal holds override scheduled deletion.
What does Shufti provide when our compliance team needs to prepare a CAFIU report?
Shufti assembles each case with identity results, screening hits, transaction history, analyst notes and decision history, packaged as a report-ready bundle for CAFIU filing. Your team can file suspicious transaction reports within the statutory deadline, backed by complete supporting evidence.
Can we add verification checks without rebuilding our onboarding journey?
Yes. Shufti's AI Journey Builder lets you add CamDigiKey, NFC, video, address or KYB steps and route customers by geography, product and risk tier through configuration, without changing your core integration or rebuilding existing screens.
How does Shufti make verification queries easier for our customer support team?
Every result comes with the reason behind it through the API and back office, including document, face and screening details. Support teams can explain declines in plain terms, request a fresh attempt or escalate a disputed result without involving engineering.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
4 February, 2025
Identity Verification Merchant's Guide Book: Cambodia
Cambodian identity documents are issued in Khmer script. Covers the country's document set and the OCR and verification approach used to read and check each one.
Merchant Guide Book
