Shufti and AML Certification Centre logosWebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringExplore Now WebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringExplore Now The FRAML Convergence — Unifying Fraud and AML MonitoringExplore Shufti and ICA 25 Years logosWebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now WebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now Financial inclusion and AML/CFT — Managing access and riskRegister Shufti and Finance Magnates logosWebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now WebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now Transaction Monitoring & KYC — Cutting False PositivesRegister WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now Pix Fraud 2026 — Are Your Fraud Controls Ready?Explore Gavel on AMLR rule bookAMLR applies 10 July 2027. See your stack against every obligationBook a Demo AMLR applies 10 July 2027. See your stack against every obligationBook A Demo AMLR applies 10 July 2027 — see your stackBook Demo Globe with pKYC, Onboarding, Screening and Transactions labelsShufti’s Glocal PlatformGlobal Coverage. Local Depth. Full Compliance Lifecycle.Explore More Global Coverage. Local Depth. Full Compliance Lifecycle.Explore More Glocal Platform — Global Coverage. Local Depth.Explore INNOVATION DROPSUMMER
EDITION
20
26
Qualified Electronic Signature
WATCH NOW
INNOVATION DROP - Qualified Electronic SignatureWatch Now Innovation Drop — Qualified Electronic SignatureWatch
INNOVATION DROPSUMMER
EDITION
20
26
Transaction Trust Monitoring
WATCH NOW
INNOVATION DROP - Transaction Trust MonitoringWatch Now Innovation Drop — Transaction Trust MonitoringWatch
INNOVATION DROPSUMMER
EDITION
20
26
Travel Rule Compliance
WATCH NOW
INNOVATION DROP - Travel Rule ComplianceWatch Now Innovation Drop — Travel Rule ComplianceWatch
Datos Insights 2026 Impact Awards badgeDatos Insights 2026 Impact AwardsShufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore Liminal 2026 KYC IndexShufti: A top vendor for product executionRead The PR Shufti: A top vendor for product executionRead The PR Liminal 2026 KYC Index — Shufti: A top vendor for product executionRead PR Gavel on AMLR rule bookAMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027 — Find the GapsConsult Bank card and cashBank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification — Secure PayoutsSee How Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance — Verified Location, Verified IdentityBook Demo Journey Builder dot gridConfigure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Configure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Journey Builder — Configure Verification FlowsSee How Shufti MCP toggle with ChatGPT and ClaudeShufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP — Verification Tools Inside Claude or ChatGPTExplore
4
Book a Demo

Scale Identity Verification and KYC Operations in Guatemala

Verify Guatemalans and resident foreigners through DPI checks against RENAP records and non-residents through 10,000+ foreign ID document types, run KYB on Registro Mercantil companies and their beneficial owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for SIB-supervised firms.

Banner Image for Guatemala
Trusted by 2000+ businesses that make identity decisions at scale
cashew gemone HERO Gaming Bitget IronFX PENN National Rakuten Witzeal Noteris banxy

Operational Performance for Guatemala KYC

Our Numbers Speak Volumes

99.35%

Pass
Rates

Under 5 secs

IDV
Verification

90%

eIDV
Coverage

THE GUATEMALA VERIFICATION GAP

Guatemala IDV/KYC Challenges

Decreto 15-2026 Rewrote Guatemala's AML Rules in September 2026

Decreto 15-2026 Rewrote Guatemala's AML Rules in September 2026

Any KYC solution for Guatemala now answers to Decreto 15-2026, which replaced the 2001 AML law on 17 September 2026 and gives the SIB six months to draft its regulation. Shufti's AI Journey Builder updates checks by product and risk tier without rebuilding onboarding.

Beneficial Owners Sit Behind a Confidential Share Register

Beneficial Owners Sit Behind a Confidential Share Register

The new law sets the beneficial owner threshold at 15%, but only the SIB and the Ministerio Público can query the Registro Mercantil's shareholder database. Firms rely on what companies hand over, and Shufti maps ownership from those documents and screens every 15% holder.

Lenders, Dealers and Crypto Firms Now Carry AML Duties

Lenders, Dealers and Crypto Firms Now Carry AML Duties

Lenders, e-money issuers, cooperatives, pawn shops, real estate brokers, vehicle dealers, virtual asset providers and lottery operators are obligated persons under Article 3, and each must register with the IVE. Shufti gives them KYC, KYB, screening and monitoring in one platform from day one.

Thin Case Files Weaken Reports to the IVE

Thin Case Files Weaken Reports to the IVE

Article 30 requires prompt suspicious transaction reports, and Article 34 requires records detailed enough to rebuild every transaction. When evidence sits in separate tools, both take longer. Shufti's case management keeps identity, screening and transaction data together in report-ready bundles for IVE filing.

Documents and Languages

Individual Documents Shufti Verifies in Guatemala

Shufti verifies 8 Guatemalan identity document types plus passports and ID cards from other countries. The cards below cover the core documents Guatemalan onboarding relies on, with the full list on the supported documents page.

View All Supported Documents

Documento Personal de Identificación (DPI)

Every Guatemalan adult carries the DPI, built around a 13-digit Código Único de Identificación (CUI) that never changes. Shufti checks the card's laser image, holograms and MRZ, matches the holder's live face and confirms the CUI against RENAP's records.

Documento Personal de Identificación (DPI)

DPI for Domiciled Foreigners

Foreigners granted permanent residence by the Instituto Guatemalteco de Migración (IGM) receive a DPI in a different color, with their own CUI. Shufti verifies it through the same RENAP route as a citizen's card and records the holder's resident status in the case file.

DPI for Domiciled Foreigners

DPIME for Minors

RENAP began issuing the DPIME in October 2026 to identify Guatemalan and domiciled foreign children aged 0 to 17. Shufti reads the card's CUI and date of birth, so family accounts and age-gated services can confirm exactly who a minor is.

DPIME for Minors

Guatemalan Passport

The IGM issues passports under the Código de Migración, Decreto 44-2016. Shufti runs nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.

Guatemalan Passport

Foreign Passports and National ID Cards

Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Non-resident investors, visiting workers and foreign directors of Guatemalan companies onboard with these documents in the same flow.

Foreign Passports and National ID Cards

Guatemalan Driving License

The Departamento de Tránsito of the Policía Nacional Civil issues licenses under Decreto 132-96, and cards issued since October 2018 carry a QR verification code. Shufti checks authenticity, expiry and the face match, a fit for vehicle dealers, lenders and delivery platforms.

Guatemalan Driving License

Proof of Address

Electricity, water, landline or home internet bills and IUSI property tax receipts no older than three months, the same evidence SAT accepts for registration, are read and matched to the customer's name in one step with the DPI.

Proof of Address
Documento Personal de Identificación (DPI) DPI for Domiciled Foreigners DPIME for Minors Guatemalan Passport Foreign Passports and National ID Cards Guatemalan Driving License Proof of Address Documento Personal de Identificación (DPI)
Patente de Comercio de Sociedad and de Empresa Escritura Constitutiva (Deed of Incorporation) Administrator Appointments Business Address Proof Patente de Comercio de Sociedad and de Empresa

Entity Identity

Patente de Comercio de Sociedad and de Empresa

The Registro Mercantil issues both patents when a company and its business are registered. Shufti checks each patent for tampering and matches the company name, registration number and address against live registry data at every check.

Patente de Comercio de Sociedad and de Empresa

Escritura Constitutiva (Deed of Incorporation)

A notary drafts the public deed that founds every Guatemalan company. AI-OCR reads ownership, capital and signing authority from the testimonio and its amendments, and flags GAN-generated or edited pages before they reach an analyst.

Escritura Constitutiva (Deed of Incorporation)

Administrator Appointments

Appointments and removals of administrators are now registered by notarial acta, and companies formed before Decreto 15-2026 must register all administrators by March 2027 or lose access to registry procedures. Shufti matches the registered administrators to the people onboarding.

Administrator Appointments

Business Address Proof

The address on the patente and the SAT tax record is cross-checked against recent utility bills or IUSI receipts, so a borrowed or mail-drop address surfaces before the company is approved.

Business Address Proof

Tax Identity

NIT and RTU Registration

SAT records every taxpayer in the Registro Tributario Unificado (RTU) and issues the Número de Identificación Tributaria (NIT). Shufti extracts the NIT, legal name and tax address from the RTU record and patente and checks that they agree.

NIT and RTU Registration

CUI as NIT for Individual Merchants

SAT's harmonization lets individual taxpayers use their CUI as their tax identifier, and the Constitutional Court upheld it in September 2026 for tax matters. Shufti links a sole trader's NIT and CUI so tax and identity records reconcile.

CUI as NIT for Individual Merchants

Foreign Tax Registrations

Foreign parent companies and non-resident founders are verified against their home tax registrations, and Shufti flags any mismatch between those records, the share register and the ownership chart before onboarding completes.

Foreign Tax Registrations
NIT and RTU Registration CUI as NIT for Individual Merchants Foreign Tax Registrations NIT and RTU Registration
Share Register (Registro de Acciones) Beneficial Owners and Ownership Chart Directors, Legal Representatives and Signatories Share Register (Registro de Acciones)

Ownership and Control

Share Register (Registro de Acciones)

Article 125 of the Código de Comercio, as reformed by Decreto 15-2026, requires a share register with each holder's name, nationality and ID data, with changes notified to the Registro Mercantil within 10 business days. Shufti extracts every holder from certified extracts and screens them.

Share Register (Registro de Acciones)

Beneficial Owners and Ownership Chart

Decreto 15-2026 defines a beneficial owner as anyone holding 15% or more, directly or through a chain of companies, trusts or foundations, or exercising control by other means. Shufti maps each layer to the people at the top and screens them.

Beneficial Owners and Ownership Chart

Directors, Legal Representatives and Signatories

Each director, legal representative and authorized signatory is identity-verified and screened against sanctions and PEP lists, and Shufti alerts the team when a new administrator registration changes who controls the company.

Directors, Legal Representatives and Signatories

Languages We Cover

Spanish, English and Expat Document Parsing

Guatemalan DPIs carry Spanish and English field labels, and non-residents bring documents in many other scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy, including accented characters and the CUI on every DPI design. It averages 93% against Google Vision's 78.4% in its published benchmark, and zero-shot document intelligence reads unseen layouts on first sight, without a template.

Spanish, English and Expat Document Parsing

Guatemalan Name Matching

Guatemalans carry two surnames, married women may add a surname with "de", and names in Mayan languages use apostrophes. Phonetic and spelling-variant rules keep these forms from splitting one person into several identities in sanctions and PEP screening.

Guatemalan Name Matching

Cross-Document Consistency Checks

Names and the CUI are reconciled across the DPI, passport, driving license, SAT tax records and company share registers, so a mismatch between any two records surfaces before approval.

Cross-Document Consistency Checks
Spanish, English and Expat Document Parsing Guatemalan Name Matching Cross-Document Consistency Checks Spanish, English and Expat Document Parsing

Independent Validation

Shufti's Recognition Across Independent Evaluations

Liminal

Ranked Exceptional in the Liminal Index 2026 for age estimation

View Reportarrow-icon
Gartner

Differentiated by Gartner on document diversity and country coverage

Read morearrow-icon
iBeta

Certified at iBeta Level 3 PAD with 0% APCER

Read Blogarrow-icon
KuppingerCole

Broadest global reach in the 2025 KuppingerCole Extended IDV report

Download Reportarrow-icon
Homeland Security

Ranked Top 5 in the DHS RIVR 2025 for identity validation

Read Blogarrow-icon
Liminal

Top Vendor for Product Execution in the Liminal Index for KYC 2026

View Reportarrow-icon
Liminal

Ranked Exceptional for age verification by Liminal Index 2026

View Reportarrow-icon
G2

Recognised as a Leader in G2 Fall 2026 reports

Read Morearrow-icon

Regulatory Update

Every Verification Route Guatemalan Firms Rely On, in One Platform

Decreto 15-2026 asks firms to verify customers with documents, data and information from reliable, independent sources (Article 21) and to apply extra measures when customers are not physically present (Article 25). Shufti supports RENAP's identity verification service and the DPI, plus chip, database, document and video routes for non-residents and customers without a DPI.

RENAP Identity Verification

Live

RENAP's electronic service confirms whether a CUI and name exist in the national register. Shufti validates against it directly as the customer onboards and stores the positive or negative response in the case file as verification evidence.

RENAP Facial Comparison

Live

The same RENAP service compares a submitted photograph one-to-one with the face on record. Where your institution contracts this service, Shufti sends the live selfie, after liveness, through your access, so the person onboarding is tied to the identity behind the CUI.

Fraud Prevention Across the Guatemalan Customer Journey

Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Guatemalan businesses act on risk while keeping legitimate customers moving.

  • 01

    Account Takeover and Recovery Abuse

    Stop criminals who take over banking and wallet accounts after stealing passwords or swapping SIM cards. Shufti's account takeover prevention checks device, behavior and location at every login, password reset and payee change, and steps up to a face match against the onboarding selfie when a session looks wrong.

  • 02

    Social Engineering and Manipulated Payments

    Catch customers being coached by a caller while they send money to a stranger. Behavioral biometrics spots hesitation, unusual typing and active-call signals during the payment, and transaction monitoring holds transfers that break the customer's normal pattern, so authorized push payment scams stop before funds leave.

  • 03

    Device Spoofing and Automated Attacks

    Block emulators, bots and scripted sign-ups that open accounts in bulk, abuse welcome offers or test stolen card details. Device fingerprinting identifies the hardware behind each session, links devices reused across many applications and flags rooted phones, virtual machines and location spoofing before an account opens.

  • 04

    Connected Fraud Rings and Repeat Offenders

    Keep out fraudsters who return with new phone numbers, borrowed DPIs or freshly registered companies after being rejected once. Fraud network detection links applicants through shared devices, contact details and documents, and cross-company fraud intelligence flags identities already tied to fraud at other businesses.

  • 05

    Synthetic Identities and Fabricated Documents

    Reject identities built from a real CUI, an invented face and a convincing forged card. Email and phone enrichment checks how long contact details have existed, and zero-shot document analysis spots tampered DPIs and templates it has never seen, so synthetic applicants fail at onboarding.

  • 06

    Deepfakes and Camera Injection

    Remote onboarding is only as strong as its selfie step, and face swaps, replayed footage and virtual cameras target it directly. Deepfake detection analyzes the video stream and the capture device, and iBeta Level 3 liveness rejects masks, screens and injected feeds before a face is matched.

  • 07

    Money Mules and Rapid Fund Movement

    Accounts recruited to receive fraud proceeds often pass them on within minutes, through transfers, cash withdrawals or remittance payouts. Money mule detection watches for new accounts that receive and forward funds quickly, many-to-one transfer patterns and devices shared across accounts, and flags them for review.

  • 08

    Fraudulent Businesses and Concealed Ownership

    Keep shell companies, nominee shareholders and dormant firms revived for fraud off your merchant and corporate books. KYB checks the patente and registry data, verifies directors and legal representatives, traces the real owners behind each layer and screens every person behind the company.

Governance & Controls

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-submissions

Capture guidance for DPIs and Spanish-language bills catches glare, blur and cropped edges before submission, so fewer customers are asked to resubmit.

Fewer Avoidable Re-submissions

Cleaner Audit Trails

Shufti's case management records sources, results, timestamps, evidence, analyst notes and decision history, packaged as report-ready bundles for RTS filing with the IVE.

Cleaner Audit Trails

One Workflow, One Back Office

Unify KYC, KYB, AML screening and transaction monitoring in one case file, while perpetual KYC/KYB tracks ownership, director and transaction behavior changes.

One Workflow, One Back Office

DPI and RENAP-First Flow Design

Guatemalans and domiciled foreigners verify through the DPI and RENAP first, while non-residents move to passport verification in the same flow.

DPI and RENAP-First Flow Design

Shufti's IDV/KYC Solutions for Guatemala

KYC Solutions

KYC services in Guatemala now cover citizens and domiciled foreigners holding a DPI, minors with the new DPIME and non-residents using foreign passports. One Shufti flow routes each by risk, so nobody faces checks they don't need.

Explore More
Face Verification

Face Verification

Decreto 15-2026 lists relationships without physical presence as a special situation needing extra measures, which puts weight on the selfie. Shufti pairs iBeta Level 3 liveness with a 99.5% first-try pass rate, so genuine customers clear the step quickly.

.
Age Verification

Age Verification

Lottery and bingo operators now carry AML duties, and age-restricted platforms need to tell adults from minors. Shufti estimates age from a selfie in under 5 seconds and falls back to the DPI or DPIME date of birth when the estimate is close.

.
Bank Account Verification

Bank Account Verification

Payouts, loan disbursements and remittance credits fail when the account belongs to someone else. Shufti validates the account number format and checksum and matches the account holder's name to the verified customer in real time.

.
Address Verification

Address Verification

Guatemalan electricity, water and phone bills all use different layouts. Shufti's layout-aware extraction reads the name, address and issue date, fuzzy-matches them to the DPI and rejects documents older than the accepted window.

.
Document Verification

Document Verification

Several DPI designs circulate, since RENAP introduced its color card in January 2025 and earlier cards stay valid until they expire. Shufti verifies each design, plus passports, licenses and the DPIME, within seconds and flags tampering, screenshots and replayed images.

.
Identity Verification

Identity Verification

Guatemala identity verification often spreads one customer across separate vendors for documents, selfies, RENAP checks and addresses. Shufti runs document, biometric, NFC, address and eIDV checks in one API session, with one decision and one audit record.

.

KYB Solutions

Due diligence on a Guatemalan company starts with the Registro Mercantil patents and deed, follows owners through holding companies and trusts, and identifies the beneficial owners Decreto 15-2026 defines. Shufti's live registry calls keep the company record current, and ownership comes from the certified share register.

Explore More
Business Verification

Business Verification

Onboarding a Guatemalan company means confirming its patente, NIT, legal representative and everyone who owns or controls 15% or more. Shufti's live registry call confirms the patente and company record, and owners are checked against the certified share register and declarations the company provides.

.
Enhanced Due Diligence

Enhanced Due Diligence

Article 24 of Decreto 15-2026 requires stricter due diligence for high-risk customers and links to FATF high-risk jurisdictions, and Article 25 adds PEPs, state contractors, trusts and non-profits. Shufti's branching questionnaires score each answer and request owner verification by link.

.

AML Screening

A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC rescreens every customer against 4,000+ watchlists, including the UN Security Council lists Guatemalan firms must check, refreshed every 15 minutes, with every hit kept in one case file.

Explore More
Business AML Screening

Business AML Screening

A Guatemalan company's risk often sits with its shareholders and legal representatives. Shufti screens the entity and every owner and administrator against sanctions, PEP and adverse media sources, and perpetual KYB rescreens them whenever the share register or board changes.

.
Transaction Monitoring

Transaction Monitoring

Article 28 requires monitoring of every transaction, and Article 31 a daily register of cash received of USD 10,000 or more. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity, cuts false positives by 60% and builds report-ready case bundles for the IVE.

.
Travel Rule

Travel Rule

Decreto 15-2026 names virtual asset service providers as obligated persons. Shufti's Travel Rule solution exchanges IVMS101 originator and beneficiary data across major networks through one integration and verifies ownership of unhosted wallets before funds move.

.
AI Compliance Co-Pilot

AI Compliance Co-Pilot

One common name can return 140+ screening hits, and double surnames add more. Shufti's AI Compliance Co-Pilot reviews every hit, gives a 0 to 100 confidence score and a written reason, and leaves the final call with your compliance officer.

.
REGULATORY ALIGNMENT

Built To Fit Guatemala's Compliance Landscape

AML compliance in Guatemala runs under one national law, Decreto 15-2026, with the Superintendencia de Bancos supervising every obligated person through the IVE, while registries and identity authorities set the records firms verify against. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each license your group holds.

Decreto 15-2026 (Integral AML/CFT Law)

Decreto 15-2026 (Integral AML/CFT Law)

Published on 17 June 2026 and in force since 17 September 2026, the law repealed Decreto 67-2001 and the 2005 terrorist financing law (Article 126). It defines beneficial owners at 15% (Article 2), sets due diligence and continuous follow-up (Article 21) and fines of up to USD 300,000 (Article 66).

Superintendencia de Bancos (SIB)

Superintendencia de Bancos (SIB)

The SIB supervises banks, financial companies, insurers, exchange houses and financial groups under Decreto 18-2002, and Decreto 15-2026 extends its AML supervision to every obligated person (Article 63). It must submit the law's regulation by March 2027 (Article 127) and publish the PEP positions list.

Intendencia de Verificación Especial (IVE)

Intendencia de Verificación Especial (IVE)

The IVE, part of the SIB (Article 51), is Guatemala's financial intelligence unit. Obligated persons register with it (Article 5), file suspicious transaction reports through their compliance officer (Article 30), report cash transactions of USD 10,000 or more (Article 31) and use only the channels it sets (Article 33).

Registro Mercantil General de la República

Registro Mercantil General de la República

The Registro Mercantil registers companies under the Código de Comercio (Decreto 2-70). As reformed by Decreto 15-2026, it keeps a confidential shareholder database open only to the SIB and the Ministerio Público, and companies must update their share registers by September 2027 (Article 120).

Superintendencia de Administración Tributaria (SAT)

Superintendencia de Administración Tributaria (SAT)

SAT administers the Registro Tributario Unificado and issues the NIT to companies and individuals. Its harmonization of the CUI as the individual tax identifier took effect in 2025, and in September 2026 the Constitutional Court upheld it while limiting its use to tax matters.

Registro Nacional de las Personas (RENAP)

Registro Nacional de las Personas (RENAP)

RENAP issues the DPI under Decreto 90-2005, which makes it the only identification document for civil, administrative and legal acts (Article 50) and bars anyone from demanding another ID or retaining the card (Article 54). Its electronic service verifies identity by CUI, name, fingerprint or face.

Instituto Guatemalteco de Migración (IGM)

Instituto Guatemalteco de Migración (IGM)

The IGM took over from the Dirección General de Migración when the Código de Migración (Decreto 44-2016) entered into force in May 2017. It issues passports and grants residence, and foreigners with permanent residence then receive a DPI from RENAP under Article 55 of the RENAP law.

Registro del Mercado de Valores y Mercancías

Registro del Mercado de Valores y Mercancías

A dependency of the Ministerio de Economía, the Registro controls the legality and registration of acts in the stock exchange and over-the-counter markets under Decreto 34-96. Securities brokers and intermediaries outside SIB supervision are obligated persons under Article 3 of Decreto 15-2026.

UN Security Council Sanctions Lists

UN Security Council Sanctions Lists

Article 43 of Decreto 15-2026 requires every obligated person to check customers permanently against UN terrorism and proliferation lists under Resolutions 1267, 1718, 2231 and successors. A match triggers a preventive freeze and written notice to the Ministerio Público within 24 hours.

CONCLAFT

CONCLAFT

Created by Article 45 of Decreto 15-2026, the national council chaired by the Vice President coordinates state agencies against money laundering, terrorist financing and proliferation financing. Its members include the ministers of foreign affairs, interior, defense and economy, and the Superintendent of Banks (Article 47).

GAFILAT

GAFILAT

Guatemala is a member of GAFILAT, whose last full mutual evaluation of the country dates from 2016 and rated its technical compliance and effectiveness. Guatemala was not on the FATF grey list as of June 2026, and Article 24 requires enhanced due diligence for FATF high-risk jurisdictions.

Guatemala Data Residency and Deployment

No major public cloud provider runs a region in Guatemala, so Shufti can be deployed on-premises in your own infrastructure, air-gapped if required, keeping identity data inside the country. Cloud hosting locations and transfer arrangements are defined in your agreement.

Constitutional and Public Information Protections

Guatemala has no comprehensive personal data protection law yet, with several bills still before Congress. Article 24 of the Constitution protects private documents, and Decreto 57-2008 punishes selling personal data without written consent (Article 64). Shufti uses biometric data only for verification.

DPI and CUI Handling

Article 54 of the RENAP law bars anyone from demanding an ID other than the DPI or retaining the card, and CUI use as a tax number is limited to tax matters. Shufti works from a capture of the card, never the card itself, and masks the CUI by role.

Bank Technology Risk and Outsourcing (JM-98-2025)

Junta Monetaria Resolution JM-98-2025 keeps daily backups of critical data inside Guatemala (Article 20), allows offshore processing with encryption keys under the bank's control (Article 39) and requires prior SIB authorization for critical outsourced services (Article 45). Shufti supplies the certifications and audit reports banks file.

Retention Controls

Decreto 15-2026 sets a five-year minimum after a relationship ends, and banks and other financial obligated persons keep records digitally for a further 10 years (Article 34). Shufti configures retention by client and license, applies legal holds and treats statutory minimums as floors, not deletion dates.

Encryption and Security

Data is encrypted in transit and at rest, with role-based access and audit logging throughout. ISO 27001:2022 certification and a SOC 2 Type 2 report support the vendor due diligence banks, insurers and payment firms run before they sign.

Automated Decisions and Biometric Data

Guatemala's public information law classes physical characteristics as sensitive data (Decreto 57-2008, Article 9), and customers expect to know why a check failed. Verification results, reasons and evidence are available through the API and back office, so support teams can explain outcomes and escalate disputed results.

Scope of Our Role

Shufti processes identity data only on the firm's written instructions as a service provider, and the firm keeps responsibility for its own AML obligations under Decreto 15-2026. Shufti's privacy notice identifies any activities where it acts independently.

Data Residency and Privacy Controls in Guatemala

BUILT FOR COMPLIANCE TEAMS

Guatemala AML Sources That Strengthen Decisions

Turn Guatemala Verification Requirements into a Smoother Customer Journey

Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Identity Verification Built Around Your Industry in Guatemala

Onboard Remote Customers Under The New Due Diligence Rules

Guatemalan banks apply Decreto 15-⁠2026 due diligence under SIB supervision, with extra measures for customers who never visit a branch (Article 25). Shufti verifies the DPI against RENAP, matches a live face, screens every customer and rescreens the book, while on-⁠premises deployment fits Junta Monetaria technology rules.

Frequently Asked Questions

Does Shufti support RENAP verification, and what happens when customers cannot use it?

Yes. Shufti validates the CUI against government identity records and, through your institution's RENAP access, compares the live selfie with the RENAP record. Customers whose details cannot be confirmed, or who hold no DPI, move to passport NFC, document and face biometrics or video identification in the same flow.

Is a DPI image enough to verify a Guatemalan customer?

No. An image can be edited, replayed or printed from a template. Shufti checks the DPI's security features, matches a live face with iBeta Level 3 liveness and confirms the CUI with RENAP, because only RENAP can open the card's chip.

Can Shufti verify foreign documents or identity formats it has not encountered before?

Yes. Shufti's zero-shot AI adapts to unfamiliar layouts without a template, so a non-resident's national ID or a newly issued card, such as RENAP's DPIME for minors, can be verified on first sight with forensic checks and face matching.

How accurately does Shufti read Guatemalan identity documents?

Shufti's OCR reads the Spanish and English fields on the DPI, passport and driving license, extracting names, dates of birth and the 13-digit CUI. It handles accents, two surnames and married names, and validates the CUI's check digit before the record reaches RENAP.

How does Shufti verify ownership when a Guatemalan company has several corporate layers?

Shufti reads the Registro Mercantil record, deed and certified share register for each Guatemalan company in the chain, maps holdings through foreign parents and trusts, and identifies each beneficial owner as Decreto 15-2026 defines them. Each is identity-verified and screened.

Does Shufti's ongoing monitoring cover more than sanctions screening?

Yes. Article 21 of Decreto 15-2026 requires continuous follow-up during the relationship, checking transactions against the customer's profile, risk level and source of funds. Shufti monitors transactions against behavioral baselines, rescreens customers and flags registry, director and ownership changes as they happen.

How does Shufti keep screening current and handle Guatemalan name variations?

Sanctions, PEP and adverse media data refresh every 15 minutes, including the UN lists named in Article 43 and the PEP positions the SIB defines. Native phonetic models for 80+ languages match double surnames, married names and spelling variants, so one person stays one record.

Can we choose where data is hosted or run verification inside our own infrastructure?

Yes. Deploy Shufti on-premises, air-gapped if required, so identity data stays in Guatemala on your own network, or use Shufti's cloud with hosting locations and transfer terms set in your agreement, including the encryption-key control banks need under JM-98-2025.

What controls help us protect identity and biometric data?

Shufti encrypts data in transit and at rest, applies role-based access and logs every access. Biometric data is used only for verification, CUIs can be masked by role, and ISO 27001:2022 and SOC 2 Type 2 reports support your vendor due diligence.

Can we configure different retention periods for different Guatemalan licenses?

Yes. Retention is set per client, license and record type, so a bank keeps records for the five-year minimum plus the further 10 years Article 34 requires of financial firms, while a real estate broker keeps the five-year schedule. Legal holds pause deletion.

What does Shufti provide when our compliance team needs to prepare an RTS for the IVE?

Shufti's case file holds the verified identity, screening results, transaction history, alerts and analyst notes in one place. Your compliance officer exports a report-ready bundle for filing through the IVE's channels, and the records stay complete enough to rebuild each transaction.

Can we add verification checks without rebuilding our onboarding journey?

Yes. The AI Journey Builder adds or reorders checks such as RENAP validation, NFC chip reads, video identification and address proof by product and risk tier, so changes for the SIB's coming regulation go live without code changes to your app.

How does Shufti make verification queries easier for our customer support team?

Each decision shows in the back office with its reason, the check that failed and the evidence captured. Support agents can explain a rejection, request a clearer DPI image or escalate a disputed result for human review without contacting the compliance team.

Let’s Build Trust Into Your Business

1B+Verifications Processed

240+Regions Actively Processed

99.7%Accuracy Rate

Samer Al Tamimi

CEO of Safwa Bank

Samer Al Tamimi

“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”

Trusted. Compliant. Certified

cetificate-logos cetificate-logos cetificate-logos cetificate-logos

Explore Shufti For Your Business

Get a personalised demo from our experts.

    Which products would you like to check out?

    VideoIdent

    Address Verification

    eIDV (Docless)

    KYB

    AML Screening

    Fraud Prevention

    AMLR

    Face and ID Verification

    Age Verification

    Others

    What is your expected yearly verification volume?

    1 to 1,000

    1,001 to 5,000

    5,001 to 20,000

    20,001 to 50,000

    50,001 to 100,000

    100,001 to 1,000,000

    1,000,000+

    Valid Invalid number

    By clicking Submit, you accept our Privacy Policy and consent to marketing communications.

    PROVEN PLAYBOOKS

    Explore Practical KYC & AML Resources

    Read More
    Cover of Enterprise Guide to Docless Identity Verification in Latin America

    11 September, 2026

    Enterprise Guide to Docless Identity Verification in Latin America

    A practitioner's guide to docless onboarding across Brazil, Mexico, Argentina, Chile, Colombia and Peru, covering the registry and the remote onboarding rule in each.

    Product Guide

    Read More
    Read More
    Cover of eIDV Global Capability Matrix

    5 January, 2026

    eIDV Global Capability Matrix

    Shufti's eIDV coverage across 87 jurisdictions, showing which passive, active and biometric database checks, plus address and age checks, are available in each.

    Coverage Sheet

    Read More
    Read More
    Cover of AML Screening: Latin America (LATAM)

    23 September, 2025

    AML Screening: Latin America (LATAM)

    Fragmented domestic watchlists, dual surnames and shrinking STR deadlines make LATAM screening hard. How Shufti screens names accurately across the region.

    Regional Brief

    Read More