AMLR Solutions 
AMLR Consultation
EUDI Wallet
Onboarding
Ongoing Monitoring
FRAML
KYC
KYB
KYI
Age Assurance
Workforce IAM
Candidate Verification
Account Takeover
Bonus/ Promotion Abuse
Chargeback Fraud
Deepfake
Document Fraud
Fraud Networks
Impersonation Fraud
Money Mule Activity
Multi-Accounting
Party Fraud
Regulatory & Compliance Risks
Synthetic Identity Fraud
Adult Content
Banking
Crypto
Fintech
Forex
Compliance
Fraud prevention
Trust & safety
Global expansion
Compliance Officers
Developers
Fraud Analysts
Product Managers
Journey Builder 
Global Trust Platform
Customer Profiles
Vendor Comparison
IDV Case Management
AML Case Management
Regulatory Reporting
Agentic Rule Builder 
AI Compliance Co-Pilot 
Fraud Analytics
Fraud Hub 
OCR
Shufti AI
Bank Account Verification 
Biometric Duplication
Database Checks
Document Intelligence
Government ID
Mobile Driver's License
NFC
Selfie Liveness
Brand Personalisation
Deployment Options
Identity Methods
IDV Modes
Multi-tenancy
On-Premise IDV
Secure Capture
Shufti MCP
- Australia
- Austria
- Bangladesh
- Belgium
- Brazil
- Bulgaria
- Canada
- China
- Croatia
- Cyprus
- Czech Republic
- Egypt
- Estonia
- Eswatini
- Ethiopia
- France
- Germany
- Greece
- Haiti
- Hong Kong
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Portugal
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- Uganda
- Ukraine
- UK
- Uruguay
- USA
- Uzbekistan
- Vatican City
- Vietnam
- Venezuela
- Vanuatu
CZECH REPUBLIC KYC, KYB AND AML
Scale Identity Verification and KYC Operations in the Czech Republic
Verify Czech customers and businesses through the notified eID card, bank identity, NFC, QES, identity documents, biometrics and KYB. Reduce manual review, maintain consistent audit evidence and run one connected workflow designed to support Act No. 253/2008 Coll. today and AMLR from 10 July 2027.
Operational Performance for Czech Republic KYC
Our Numbers Speak Volumes
99.73%
First-Pass
Verification Rate
< 10 sec
Median
Verification Time
5+
Czech ID Methods
Supported
Czech Republic IDV/KYC Challenges
Remote Onboarding Runs on Three Separate Legal Routes
Czech AML rules set three remote identification routes. Section 8a covers electronic identification, including bank identity. Section 11 allows document copies, proof of an account and first payment, or data bearing a qualified electronic signature verified by a trust service provider.
The Beneficial Ownership Register Went Dark
The Ministry of Justice closed the Evidence skutečných majitelů to the public on 17 December 2025. Obliged entities get automated remote access, and register enforcement has resumed.
Czech Names Break Global Matching
Diacritics such as č, ř, š and ž are stripped from the machine-readable zone and from many international databases, and Czech female surnames carry the -ová suffix. Both push clean customers into false positives.
Registry Data Is Not Verification
The Obchodní rejstřík and ARES confirm a company exists, its IČO and its directors. They do not confirm who controls it or whether that person is sanctioned. KYB needs screening layered on top.
Regulatory Update
What AMLR Changes for Identity Verification in the Czech Republic
The EU Anti-Money Laundering Regulation (EU) 2024/1624 applies directly in the Czech Republic from 10 July 2027, with no transposition period. It sets the due diligence rules that Act No. 253/2008 Coll. and its supervisors will operate under, with AMLA supervising from Frankfurt.
Timeline
- End of 2026 Member State wallet issuance deadline
- 10 July 2027 AMLR applies, no transposition
- Late 2027 eIDAS 2.0 Art. 5f wallet acceptance duty
- 2028 AMLA direct supervision begins
eIDAS Is Expressly Recognised
Article 22(6)(b) recognises eIDAS electronic identification at assurance level substantial or high, plus qualified trust services such as QES. That is how the EU Digital Identity Wallet will qualify. The Czech routes under Sections 8a and 11 stay usable, but non-eIDAS methods carry a justification burden.
The Ownership Test Tightens
AMLR sets the ownership test at 25% or more, assessed with control. Czech law works from more than 25%, so ESM records and KYB checks should confirm holdings at the 25% line.
Existing Customers Get Re-Checked
AMLR expects existing customer records to be brought up to standard on a risk basis, not just new onboarding. Continuous monitoring keeps back-book files current between reviews.
Accountability Stays With You
Article 18 lets you outsource due diligence but keeps you fully liable for what the provider does, and treats them as part of your firm. Vendor evidence matters more under AMLR.
FOR ČNB AND FAÚ-SUPERVISED BUSINESSES
Streamline ČNB and FAÚ-Supervised Onboarding in the Czech Republic
Connect identity verification, QES, Penny Drop and compliance evidence in one configurable workflow for businesses within the ČNB and FAÚ supervisory remit. Reduce drop-off and manual handovers while giving compliance teams a review-ready record of every decision.
Verify the Customer
Verify identity using the configured route, such as the notified Czech eID card, bank identity under Section 8a, NFC reading or document and biometric checks.
Complete Qualified Signing
Apply and validate the QES within the same journey, keeping the signed document, verification result and evidence together. Qualified signing carries the contract, not the identification.
Confirm the Payment Account
Use Penny Drop Verification to confirm the client holds the account and that the first payment came from it, capturing the evidence for the Section 11(7) route.
Section 11(7) is open to credit and financial institutions, and it is an alternative to the Section 11(8) trust service route rather than a step that follows it.
Shufti's IDV/KYC Solutions for the Czech Republic
KYC Solutions
Clear onboarding for Czech customers under Act No. 253/2008 Coll., with age and address checked in the same flow as identity, each check completing in seconds.
Explore More
Face Verification
Face verification binds the live person to the document with iBeta Level 3 Conformance to ISO/IEC 30107-3 liveness, stopping spoofs, masks and deepfakes.
.
Age Verification
Selfie-based age estimation with a Czech document fallback using the Občanský průkaz or Cestovní pas, supporting age checks in gaming and e-commerce.
.
Address Verification
Shufti verifies any Czech address-bearing document including utility invoices, telecom bills and bank statements from major Czech issuers.
.
Document Verification
Verification of the Občanský průkaz, Cestovní pas, Řidičský průkaz and Průkaz o povolení k pobytu, with NFC chip reading and Czech OCR that preserves diacritics.
.
Identity Verification
Shufti confirms every customer is real and present, not a spoofed or synthetic identity. Biometric face matching and liveness run against 10,000+ actively processed document types.
.KYB Solutions
Shufti checks businesses as deeply as the people behind them, under your risk-based approach. Shufti checks registry records, beneficial ownership and VAT details in real time, then screens UBOs against 3,500+ global watchlists.
Explore More
Business Verification
Automated validation of Obchodní rejstřík and ARES data, the IČO company number, the DIČ tax number and statutory directors. Cuts manual registry lookups and onboarding delays.
.
Enhanced Due Diligence (EDD)
Structured risk profiling for complex ownership chains, cross-border entities and high-risk sectors, supporting the risk-based obligations in Act No. 253/2008 Coll.
.AML Screening
Shufti screens customers and transactions in 240+ countries and territories, flagging sanctions, PEP and adverse media matches as they happen. Ongoing monitoring surfaces suspicious activity in time to meet local reporting obligations.
Explore More
AI Compliance Copilot
Helps compliance teams review verification and AML data, investigate alerts, and understand the reasoning behind risk signals. It brings relevant case information together to support faster, more consistent compliance decisions.
.
Transaction Monitoring
Ongoing transaction monitoring calibrated to Czech financial flows flags anomalies against AML rules, supporting the risk-based controls expected by the ČNB and the FAÚ.
.Supported Verification Methods for the Czech Republic
Every Verification Route the Czech Republic Uses, in One Platform
Shufti supports the full range of remote verification routes used in the Czech Republic, from the EUDI Wallet and the notified eID card to bank identity, document and biometric checks. Each method below shows what is live today and what is ready for the 2027 rollout.
EUDI Wallet
Wallet-ready · from 2027AMLR Article 22(6)(b) recognises eIDAS electronic identification at assurance level substantial or high, which is how the EU Digital Identity Wallet will qualify. The Digital and Information Agency is preparing the Czech wallet. Shufti is built to accept wallet-based verification as it goes live.
Notified eID
LiveeIDAS HighThe chipped Občanský průkaz is the notified Czech eID means at the highest eIDAS assurance level, used through Identita občana. Shufti verifies it today, alongside bank identification means such as Bank iD, which Section 8a recognises. eDoklady is built for in-person checks and is not a remote route.
Docless Database (eIDV)
LiveDatabase-driven verification confirms identity in seconds for low-risk onboarding with no document upload, using permitted reference data sources. Shufti escalates as risk rises.
NFC Chip Verification
LiveShufti reads the secure chip in the Občanský průkaz, the Průkaz o povolení k pobytu and the Czech ePassport. This is the high-assurance capture route where eID activation is still low.
Document and Face Biometric
LivePermitted under AMLR Article 22(6)(a). Document authentication of the Občanský průkaz, Cestovní pas, Řidičský průkaz and Průkaz o povolení k pobytu, paired with iBeta Level 3 Conformance to ISO/IEC 30107-3 liveness.
Qualified Electronic Signature
LiveSection 11(8) permits remote identification where the client signs their identification data with a qualified electronic signature and the obliged entity checks it against the qualified trust service provider's certificate records.
Independent Validation
Shufti's Recognition Across Independent Evaluations
Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader across four G2 Summer 2026 reports
View Report
Evidence-Ready Checks Across People & Businesses
Verifications with robust evidentiary support
Individual Documents We Verify
Shufti verifies the four primary Czech identity documents.
View All Supported DocumentsNational Identity Card (Občanský průkaz)
Compulsory for Czech citizens aged 15 and over. The current format carries a contactless biometric carrier and a contact eID chip, and it is the notified Czech eID means at eIDAS assurance level High.
Czech Passport (Cestovní pas)
Biometric, ICAO-compliant travel document issued by the Ministry of the Interior. Carries a contactless chip for NFC checks, accepted alongside the Občanský průkaz.
Driver's Licence (Řidičský průkaz)
EU-harmonised, credit-card format document issued by municipal authorities with extended powers. Machine-readable and accepted as supporting KYC evidence.
Residence Permit Card (Průkaz o povolení k pobytu)
Biometric card for non-EU nationals with long-term or permanent residence, issued by the Ministry of the Interior. Chip-enabled since July 2011 and read through NFC.
Entity Identity
Extract from the Commercial Register (Výpis z obchodního rejstříku)
Primary proof of legal existence. Carries the IČO, legal form, registered office and statutory directors, corroborated against the public register and ARES during KYB.
Certificate of Incorporation (Zakladatelská listina / Společenská smlouva)
The founding deed or articles of association lodged with the Commercial Register. Confirms the company's constitution and shareholder structure.
Trade Licence (Živnostenský list / Výpis ze živnostenského rejstříku)
Required for licensed trade activities. Issued by the Trade Licensing Office and verifiable through the Trade Licensing Register.
Tax Identity
Company Identification Number (IČO)
Unique eight-digit identifier for Czech companies and sole traders. The primary reference across public registers and the key Shufti matches records on.
Tax Identification Number (DIČ)
Tax registration number issued by the Financial Administration. Formatted as CZ plus the IČO for legal entities and required for VAT-registered businesses.
Ownership & Control (UBO)
Register of Beneficial Owners (Evidence skutečných majitelů, ESM)
Beneficial ownership record administered by the Ministry of Justice. Shufti checks control data against it, applying the AMLR test of 25% ownership or control.
Shareholder Register / List of Shareholders (Seznam společníků / Akcionářů)
Company-level record of ownership structure. Shufti uses it to map shareholdings and identify the people behind an s.r.o. or an a.s.
Ultimate Beneficial Owner Declaration
Written declaration by the statutory representative confirming UBO details. The named persons are screened against sanctions, PEP and adverse media lists.
Languages We Cover
Czech Language and Script Handling
Native Czech parsing keeps diacritics such as č, ř, š, ž and ů intact across the Občanský průkaz, the Obchodní rejstřík and the Evidence skutečných majitelů.
Name Matching for Czech Diacritics
Matching reconciles the diacritic-bearing visual inspection zone name with the stripped machine-readable zone form, and handles the -ová suffix.
Cross-Document Consistency Checks
Cross-document checks reconcile names and identifiers across the Občanský průkaz, the Obchodní rejstřík and the Evidence skutečných majitelů.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer Avoidable Re-submissions
Capture tuned to Czech ID formats, plus chip extraction from the Občanský průkaz and the residence permit card, cuts re-submissions and manual review.
Cleaner Audit Trails
Structured logs aligned to the Section 16 retention rule in Act No. 253/2008 Coll. and to FAÚ reporting obligations keep every decision audit-ready.
Better Name Matching Outcomes
Matching handles Czech diacritics, machine-readable zone stripping and the -ová suffix, reducing false positives and manual review.
One Workflow, One Back Office
KYC, KYB and AML screening are consolidated in one operational case view, so one back office team works on every customer file.
National ID-First Flow Design
Občanský průkaz-first onboarding reflects the Czech national identity ecosystem and the way Czech customers actually verify.
Continuous Compliance
Compliance that does not stop at onboarding
AMLR treats customer due diligence as a continuing obligation. Perpetual monitoring keeps the customer picture current between reviews, so risk is caught when it appears, not at the next annual check.
Surface Changes as it happens
DetectPerpetual monitoring flags risk when it appears, not at the next annual review. Behavioural biometrics, background fraud signals, and ongoing sanctions and PEP screening watch every active relationship.
Step up when the signal fires
VerifyWhen a signal fires, re-verification confirms the person or the ownership change using the same live methods above, so a flag turns into a resolved decision.
Keep the file audit-ready
ComplyEvery check and decision is logged to the record-keeping standard in Act No. 253/2008 Coll., so the file is organised and retrievable for internal audit and supervisory review.
Perpetual KYC
pKYCMonitors individual customers between reviews, with behavioural signals, ongoing sanctions and PEP screening, and re-verification triggers when risk changes.
Perpetual KYB
pKYBMonitors the Evidence skutečných majitelů and the Obchodní rejstřík for shareholding and control changes, so a shift past 25% or a control change is caught between reviews.
Built To Fit the Czech Republic's Compliance Landscape
Czech National Bank (ČNB)
The integrated financial supervisor for banks, payment institutions, capital markets and insurance, and the competent authority for crypto-asset service providers under Act No. 31/2025 Coll.
Financial Analytical Office (FAÚ)
The Czech financial intelligence unit and AML supervisor, receiving Suspicious Transaction Reports under Act No. 253/2008 Coll. Decision audit trails and escalation logs support STR documentation.
Czech Trade Inspection Authority (ČOI)
Supervises non-financial obliged entities including traders in high-value goods, with structured identity evidence and retained decision records.
CASP Supervision (FAÚ and ČNB)
The FAÚ supervises crypto-asset service providers for AML and CTF, while the ČNB is the competent authority for MiCA authorisation under Act No. 31/2025 Coll.
AMLA (EU Anti-Money Laundering Authority)
The new EU-level supervisor is based in Frankfurt. It begins direct supervision of selected high-risk cross-border entities from 2028 and shapes technical standards under AMLR.
Deployment Option
Cloud in EU regions such as Frankfurt and Amsterdam, or on-premise, keeps Czech customer data in-region and supports GDPR accountability.
Regulatory Alignment
Aligned with the due diligence, UBO verification and record-keeping duties in Act No. 253/2008 Coll., with GDPR and Act No. 110/2019 Coll. principles, and with AMLR from 10 July 2027.
Retention Controls
Section 16 of Act No. 253/2008 Coll. sets a ten-year retention period, running from the transaction or the end of the business relationship. Under Section 16(5), the period starts on the first day of the calendar month following the month of the last known step, and records are erased once it expires. From 10 July 2027, AMLR Article 77 sets a five-year baseline, with case-by-case extensions of up to five further years.
Encryption & Security
Encryption in transit and at rest, with access controls and audit logging, supports Article 32 GDPR under ISO 27001 certification and SOC 2 Type II attestation. Birth number handling follows the restricted-use rules in Act No. 133/2000 Coll.
Biometric Processing
The controller sets the lawful basis. Biometric identification engages Article 9 GDPR, with human review available in the workflow.
Scope of Our Role
Shufti is a data processor providing verification technology, not legal or regulatory advice. Due diligence and the verification method choice stay with the obliged entity, documented in its risk assessment.
Data and Privacy Controls in the Czech Republic
Czech Republic AML Sources That Strengthen Decisions
We screen against 215+ sanction regimes, 3,500+ watchlists, 100,000+ adverse-media sources, and 6M+ PEPs across the Czech Republic and globally. A few of them are:
Finanční analytický úřad (FAÚ)
Česká národní banka (ČNB)
Národní centrála proti organizovanému zločinu (NCOZ)
Celní správa ČR
FATF
EU Consolidated Financial Sanctions List
UN Security Council Consolidated List
European Banking Authority (EBA)
EU AMLA (Anti-Money Laundering Authority)
SEE SHUFTI IN YOUR CZECH REPUBLIC WORKFLOW
Turn Czech Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB, QES, Penny Drop and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.
Certified to Global Standards
Frequently Asked Questions
Which identity documents can be used for Czech onboarding?
Customers can use the Občanský průkaz, including its chip and notified eID function, the Cestovní pas, the Řidičský průkaz and the Průkaz o povolení k pobytu. Eligible EU and EEA identity cards and passports can also be accepted where Act No. 253/2008 Coll. requirements are met.
How does Shufti support ČNB and FAÚ-supervised businesses in the Czech Republic?
Shufti connects identity verification, KYB, AML screening, QES, account verification and decision evidence in one configurable workflow. This helps firms in the ČNB and FAÚ remit reduce manual hand-offs and standardise compliance records.
What documents are required for KYB in the Czech Republic?
Typically an extract from the Obchodní rejstřík, the IČO and DIČ numbers, a shareholder list and beneficial ownership details from the Evidence skutečných majitelů. Shufti verifies these in real time and screens the UBOs behind them.
Can Bank iD be used to identify a customer under Czech AML rules?
Yes. Section 8a of Act No. 253/2008 Coll. allows client identification through a bank identification means, alongside a high-assurance electronic identification means issued and used within the Czech qualified system. Shufti supports both routes in one workflow. Per FAÚ guidance, Section 8a methods carry no risk restriction. First identification through them avoids the ID-copy duty banks and certain payment institutions face in person from 1 January 2025.
How do UBO checks work now that the Czech beneficial ownership register is closed to the public?
The Ministry of Justice closed the Evidence skutečných majitelů to the public on 17 December 2025, and obliged entities get automated remote access. Shufti pairs register data, where your access allows, with shareholder lists, corporate filings and screening of the named controlling persons.
How long must AML records be retained in the Czech Republic?
Section 16 of Act No. 253/2008 Coll. sets a ten-year period, running from the transaction or the end of the business relationship. Under Section 16(5), the period starts on the first day of the calendar month following the month of the last known step, and records must be erased once it expires. From 10 July 2027, AMLR Article 77 sets a five-year baseline, with case-by-case extensions of up to five further years.
Is EU-region data hosting available?
Yes. Shufti offers EU-based cloud regions, including Frankfurt and Amsterdam, so Czech customer data stays in-region in line with GDPR and Act No. 110/2019 Coll. On-premise deployment is available where residency requirements are stricter.
What changes for the Czech Republic under AMLR from July 2027?
AMLR applies directly, so no Czech transposition law is needed. It recognises eIDAS electronic identification at assurance level substantial or high and qualified trust services, permits document and biometric checks under Article 22(6)(a), and sets the ownership test at 25% or more.
Can eDoklady or a video call be used to verify a customer remotely in the Czech Republic?
No. eDoklady holds a digital duplicate of the Občanský průkaz and is designed for in-person checks, and Czech law sets out no dedicated video identification regime. Remote onboarding runs through Section 8a, or through one of the two Section 11 routes, document copies with an account and first payment, or identity verified with a qualified trust service provider.
When will the EUDI Wallet be usable for onboarding in the Czech Republic?
eIDAS 2.0 requires Member State wallets by end-2026. Article 5f makes relying parties using strong user authentication accept them from late 2027. The Digital and Information Agency is preparing the Czech wallet. Shufti is built to accept it as the wallet goes live.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
10 July, 2026
Identity Verification in Europe: eIDAS 2.0 & EUDI Wallet
A practitioner's guide to verifying identity in Europe, covering eIDAS 2.0, the EUDI Wallet, docless eIDV and how to choose an eID provider for onboarding in the EU.
Product Guide
