- Australia
- Austria
- Bangladesh
- Belgium
- Brazil
- Bulgaria
- Canada
- China
- Croatia
- Cyprus
- Czech Republic
- Denmark
- Egypt
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Germany
- Greece
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- Uganda
- Ukraine
- UK
- USA
- Vietnam
LITHUANIA KYC, KYB AND AML
Scale Identity Verification and KYC Operations in Lithuania
Verify Lithuanian customers and businesses through Lithuania’s notified eID, NFC, QES, identity documents, biometrics and KYB. Reduce manual review, maintain consistent audit evidence and run one connected workflow designed to support the PPTFPĮ today and AMLR from 10 July 2027.
Operational Performance for Lithuania KYC
Our Numbers Speak Volumes
99.21%
Verification Pass Rate,
2025
< 5 sec
Verification
Time
5+
Lithuanian ID Methods
Supported
Lithuania IDV/KYC Challenges
The Notified eID Gap
Smart-ID and Mobile-ID carry most Lithuanian onboarding. Neither sits inside Lithuania’s eIDAS notification. Only the ID card does, so the lawful route depends on which credential the customer holds.
Lithuanian Names Break Global Matching
One family root produces Kazlauskas, Kazlauskienė and Kazlauskaitė. Surnames change with gender and marriage. International lists also strip the diacritics, so exact matching fires false positives.
Ownership Data Can Stop Onboarding
Lithuanian law goes further than a discrepancy report. Where beneficial ownership data is missing from JADIS or conflicts with your own findings, you cannot open the relationship at all until the record agrees.
Registry Data Is Not Verification
The Juridinių asmenų registras confirms a company exists, not who controls it or whether they are sanctioned. KYB needs screening layered on top of registry lookups.
Regulatory Update
What AMLR Changes for Identity Verification in Lithuania
The EU Anti-Money Laundering Regulation (EU) 2024/1624 applies directly in Lithuania from 10 July 2027, with no transposition period. It sets the due diligence rules the PPTFPĮ framework will operate under, with AMLA, the new EU-level supervisor, operating from Frankfurt.
Timeline
- End of 2026 Member State wallet issuance target, eIDAS 2.0
- 10 July 2027 AMLR applies, no transposition
- Late 2027 Wallet acceptance under eIDAS 2.0 Art 5f
- 2028 AMLA direct supervision begins
AMLR Expressly Recognises eIDAS
Article 22 points remote verification at electronic identification at eIDAS assurance level substantial or high, and at qualified trust services such as QES. Lithuania’s video identification and account-transfer routes under Article 11 PPTFPĮ stay usable. Non-eIDAS methods should be documented and justified.
The Ownership Test Tightens
AMLR sets the beneficial-ownership test at 25% or more, or control at any level. Lower thresholds, floored at 15%, may follow.
Existing Customers Get Re-Checked
AMLR expects existing customer records to be brought up to standard on a risk basis, not just new onboarding. Continuous monitoring keeps back-book files current between reviews.
Accountability Stays With You
Article 18 keeps customer due diligence accountable with the obliged entity even when verification is outsourced, so vendor evidence and clean audit trails matter more under AMLR.
FOR BANK OF LITHUANIA-SUPERVISED BUSINESSES
Streamline Bank of Lithuania-Supervised Onboarding in Lithuania
Connect identity verification, QES, Penny Drop and compliance evidence in one configurable workflow. It is built for businesses inside the Bank of Lithuania’s supervisory remit. Reduce drop-off and manual handovers, and give compliance teams a review-ready record of every decision.
1. Verify the customer
Verify identity using the configured route, such as Lithuania’s notified eID, NFC document reading or document and biometric checks.
2. Complete qualified signing
Apply and validate the QES within the same journey, keeping the signed document, verification result and supporting evidence together.
3. Confirm the payment account
Penny Drop Verification supports the account-transfer route under Article 11 PPTFPĮ, capturing the transfer and the certified identity-document copy it requires.
Shufti’s IDV/KYC Solutions for Lithuania
KYC Solutions
Clear PPTFPĮ-compliant onboarding for Lithuanian customers, with age and address checked in the same flow as identity, each check completing in seconds.
Explore MoreIdentity Verification
Shufti confirms every customer is real and present, not a spoofed or synthetic identity. Biometric face matching and liveness detection run against 10,000+ active ID document types.
.Face Verification
Face verification binds the live person to the document with iBeta Level 3 Conformance to ISO/IEC 30107-3 liveness, stopping spoofs, masks and deepfakes.
.Age Verification
Selfie-based age estimation combined with document verification fallback where required for regulated sectors such as gaming supervised by the Gaming Control Authority.
.Address Verification
Shufti verifies Lithuanian address-bearing documents, including utility invoices, telecom bills and bank statements from major Lithuanian issuers. Proof-of-address checks remain common in regulated onboarding.
.Document Verification
Verification of the asmens tapatybės kortelė, Lithuanian residence permits and Lithuanian ePassports, including NFC chip reading and Lithuanian-language OCR extraction. Expressly permitted under AMLR Article 22(6)(a).
.Bank Account Verification
Confirms a Lithuanian bank account (LT IBAN) belongs to the customer, returning the registered account holder name for matching against the verified identity.
.KYB Solutions
Shufti checks a business as deeply as the people behind it, backing risk-based PPTFPĮ duties. Shufti checks registry records, beneficial ownership and VAT details in real time. It then screens UBOs against 4,000+ global watchlists for sanctions and adverse media exposure.
Explore MoreBusiness Verification
Automated validation of Juridinių asmenų registras data, VAT number (PVM mokėtojo kodas), the nine-digit entity code and managers. Reduces registry lookups and onboarding delays.
.Enhanced Due Diligence (EDD)
Structured risk profiling for complex ownership chains, cross-border entities, and high-risk sectors, designed to support Lithuania’s risk-based PPTFPĮ obligations.
.AML Screening
Shufti screens customers and transactions in 240+ countries and territories, flagging sanctions, PEP, and adverse media matches as they happen. Ongoing monitoring surfaces suspicious activity in time to meet local reporting obligations.
Explore More
AI Compliance Copilot
Helps compliance teams review verification and AML data, investigate alerts, and understand the reasoning behind risk signals. It brings relevant case information together to support faster, more consistent compliance decisions.
.
Transaction Monitoring
Ongoing transaction monitoring calibrated to Lithuanian financial flows flags anomalies against AML rules, supporting the risk-based controls the Bank of Lithuania and FNTT expect.
.Supported Verification Methods for Lithuania
Every Verification Route Lithuania Uses, in One Platform
Article 11 PPTFPĮ sets out Lithuania’s permitted remote identification routes as a closed list. The methods below map onto those routes, showing what is live today and what is ready for the 2027 rollout.
EUDI Wallet
Wallet-ready · from 2027AMLR Article 22 points remote verification at eIDAS-recognised electronic identification. Lithuania is developing its EU Digital Identity Wallet under the eIDAS 2.0 rollout. Shufti is built to accept wallet-based verification as the Lithuanian wallet goes live.
Notified eID
LiveeIDAS HighThe asmens tapatybės kortelė is Lithuania’s only notified eID scheme, notified in August 2020 at level high and used via the mCARD LTU app. Shufti verifies it today and supports Smart-ID, which sits outside the notification, so firms record which Article 11 limb they rely on.
Docless Database (eIDV)
LiveDatabase-driven verification confirms identity in seconds for low-risk onboarding, with no document upload. Shufti confirms which sources are available for Lithuania at scoping and escalates as risk rises.
NFC Chip Verification
LiveShufti reads the secure chip in the asmens tapatybės kortelė, the Lithuanian residence permit and the Lithuanian ePassport. Cards issued from August 2021 carry a contactless interface that works without a card reader.
Document and Face Biometric
LiveExpressly permitted under AMLR Article 22(6)(a). Shufti verifies the asmens tapatybės kortelė, residence permits and ePassport. iBeta Level 3 Conformance to ISO/IEC 30107-3 liveness proves a real, present person.
Video Identification
LiveArticle 11(1) PPTFPĮ permits identification by direct video streaming, and the technical requirements are set by FNTT. A guided real-time session captures the original identification document, and depending on the configured sub-method it also captures the customer’s facial image or closes with an electronic signature confirmation.
Qualified Electronic Signature
LiveArticle 11(1) PPTFPĮ permits identity to be confirmed with a qualified electronic signature backed by a qualified certificate. Shufti runs eIDAS-qualified signing powered by Evrotrust, an EU qualified trust service provider. It produces PAdES-LTV signatures. For Lithuania the signing identity check runs through NFC and face biometrics.
Independent Validation
Shufti's Recognition Across Independent Evaluations

Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read MoreEvidence-Ready Checks Across People & Businesses
Verifications with robust evidentiary support
Individual Documents We Verify
Shufti verifies 8+ individual Lithuanian documents.
View All Supported DocumentsPersonal Identity Card (Asmens tapatybės kortelė)
Core identity document for Lithuanian citizens, issued by the Migration Department. The polycarbonate chip card holds the facial image and fingerprints, and it can also carry a qualified certificate.
Passport (Pasas)
Lithuanian ePassport issued by the Migration Department. Biometric and ICAO-compliant, with a contactless chip that supports chip-based checks for cross-border onboarding.
Driver’s Licence (Vairuotojo pažymėjimas)
EEA driving licence accepted as an identification document under Article 10 PPTFPĮ. It carries no citizenship field, so citizenship data is captured separately during onboarding.
eID Card (Lithuanian Electronic Identity)
The electronic identification function of the ID card, Lithuania’s eIDAS-notified scheme at assurance level high. Used through mCARD LTU for remote, high-assurance identification.
Smart-ID / Mobile-ID
App-based and SIM-based signing means from SK ID Solutions. Lithuania recognises them nationally at the high assurance level, but they sit outside the eIDAS notification, so they support the national QES route rather than the notified eID route.
Temporary Residence Permit (TRP) / Permanent Residence Permit (PRP)
Issued to foreign nationals by the Migration Department. Contactless chip holds personal data, facial image and fingerprints, supporting remote high-assurance verification.
Entity Identity
Juridinių asmenų registro išrašas (Register of Legal Entities Extract)
Extract from the Register of Legal Entities held by Registrų centras. Confirms legal existence, registered office, legal form and appointed managers for KYB.
Įstatai (Articles of Association)
Founding document filed with the Register of Legal Entities. Sets out corporate structure and governance, and supports control mapping during KYB onboarding.
Tax Identity
PVM mokėtojo kodas (VAT Number)
VAT identification number issued by the State Tax Inspectorate, formatted as LT followed by nine or twelve digits. Verified for EU VAT reporting and trading legitimacy.
Mokesčių mokėtojo registracija (Taxpayer Registration)
Registration in the taxpayer register maintained by the State Tax Inspectorate. Confirms a person or business is registered for tax and supports fiscal identity checks.
Ownership & Control (UBO)
JADIS Beneficial Owner Record (JANGIS subsystem)
Statutory beneficial ownership record held by Registrų centras. Shufti checks control data against it, with the AMLR ownership test applied at 25% or more for entities.
UBO Declaration / Ownership Documentation
Beneficial owner data filed by the company, covering name, date of birth, personal number, residence and the percentage of shares or voting rights held.
Managers and Board Listing
Listing of managers and board members as a company’s legal representatives. Screened against sanctions, PEP and adverse media lists during KYB.
Languages We Cover
Lithuanian-language document parsing
Native Lithuanian parsing keeps ą, č, ę, ė, į, š, ų, ū and ž intact across the asmens tapatybės kortelė, residence permits and register extracts, so checks stay accurate against official sources.
Name matching logic
Matching handles Lithuanian surname suffixes that change with gender and marital status, so Kazlauskas, Kazlauskienė and Kazlauskaitė resolve as one family root rather than three mismatches.
Cross-document consistency checks
Cross-document consistency checks reconcile names and identifiers across the ID card, the passport MRZ and register extracts, catching mismatches where diacritics are folded to plain Latin.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer avoidable re-submissions
Optimised capture for Lithuanian ID formats and the NFC-enabled asmens tapatybės kortelė cuts avoidable re-submissions and manual review.
Cleaner audit trails
Structured logs aligned to PPTFPĮ record retention and FNTT reporting obligations keep every onboarding decision audit-ready.
Better name matching outcomes
Matching handles gendered and marital surname suffixes and diacritic folding common in Lithuania, reducing false positives and manual review.
One workflow, one back office
KYC, KYB and AML screening are consolidated in one operational case view, so one back office team works on every customer file.
National ID-first flow design
Asmens tapatybės kortelė and Smart-ID-first onboarding reflects Lithuania’s national identity ecosystem and the way customers actually verify.
Continuous Compliance
Compliance that does not stop at onboarding
AMLR treats customer due diligence as a continuing obligation. Perpetual monitoring keeps the customer picture current between reviews, so risk is caught when it appears, not at the next annual check.
Surface Changes as it happens
DetectPerpetual monitoring flags risk when it appears, not at the next annual review. Behavioural biometrics, background fraud signals, and ongoing sanctions and PEP screening watch every active relationship.
Step up when the signal fires
VerifyWhen a signal fires, re-verification confirms the person or the ownership change using the same live methods above, so a flag turns into a resolved decision.
Keep the file audit-ready
ComplyEvery check and decision is logged to PPTFPĮ record-keeping standards, so the file is organised and retrievable for internal audit and supervisory review.
Perpetual KYC
pKYCKeeps individual customer risk current with behavioural biometrics, background fraud signals and ongoing AML screening, so back-book records stay standard-ready.
Perpetual KYB
pKYBMonitors JADIS and the Juridinių asmenų registras for shareholding and control changes, so a 25% shift or a new control-based UBO is caught between reviews.
Built To Fit Lithuania’s Compliance Landscape
Bank of Lithuania (Lietuvos bankas)
Supervises banks, electronic money and payment institutions, crypto-asset service providers and other market participants. Shufti supports its AML examinations with structured identity evidence, risk logs and ongoing monitoring.
Financial Crime Investigation Service (FNTT)
Lithuania’s FIU under the Ministry of the Interior, and the AML supervisor for financial institutions and other obliged entities. Decision audit trails, structured risk indicators and escalation logs support suspicious transaction reporting.
Gaming Control Authority (LPT)
Supervises gaming and lottery companies for AML/CFT under the Ministry of Finance. Shufti provides identity and age verification for gaming operator KYC and player protection.
State Data Protection Inspectorate (VDAI)
National supervisory authority for GDPR and Lithuanian data protection law. Shufti maintains data minimisation, lawful-basis processing, breach notification and retention practices aligned to VDAI expectations.
Lithuanian Bar Association (Lietuvos advokatūra)
Issues AML/CFT instructions and supervises advocates and advocates’ assistants. Shufti supports KYC workflows for legal practices and the evidence needed for suspicious transaction reporting.
Lithuanian Assay Office (Lietuvos prabavimo rūmai)
Designated AML/CFT supervisor for dealers in precious metals and precious stones. Shufti supports KYC and sanctions screening for precious metals dealers and jewellery compliance.
AMLA (EU Anti-Money Laundering Authority)
The new EU-level supervisor has been operating from Frankfurt since 2025. Begins direct supervision of selected high-risk cross-border entities from 2028 and shapes technical standards under AMLR.
Deployment Option
Cloud in EU regions or on-premise keeps Lithuanian customer data in-region and supports GDPR accountability.
Regulatory Alignment
Aligned with PPTFPĮ due diligence obligations, UBO verification, and recordkeeping duties, as well as GDPR principles and AMLR requirements applying from July 2027.
Retention Controls
The PPTFPĮ keeps identification and transaction records for eight years from relationship or transaction end, extendable by two years. From 10 July 2027, AMLR Article 77 sets a five-year baseline.
Encryption & Security
Encryption in transit and at rest, with access controls and audit logging, supports Article 32 GDPR obligations, under our ISO 27001 certification.
Scope of Our Role
Shufti acts as a data processor and provides verification technology, not legal or regulatory advice. Responsibility for customer due diligence and for the choice of verification method remains with the obliged entity, documented in its own risk assessment.
Biometric Processing
The controller sets the lawful basis for processing. Biometric data used for unique identification engages Article 9 GDPR, and human review is available in the workflow.
Data and Privacy Controls in Lithuania
Lithuania AML Sources That Strengthen Decisions
We screen against 215+ sanction regimes, 4,000+ watchlists, 100,000+ adverse-media sources, and 6M+ PEPs across Lithuania and globally. A few of them are:
Financial Crime Investigation Service (FCIS/FNTT)
Bank of Lithuania
Customs of the Republic of Lithuania
Gaming Control Authority
Lithuanian Bar Association
Lithuanian Chamber of Notaries
Lithuanian Assay Office
Department of Cultural Heritage
Center of Excellence in Anti-Money Laundering
Ministry of Foreign Affairs of Lithuania
Financial Action Task Force (FATF)
EU Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA)
European Commission
Europol European Financial and Economic Crime Centre (EFECC)
European Public Prosecutor’s Office (EPPO)
SEE SHUFTI IN YOUR LITHUANIA WORKFLOW
Turn Lithuania Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB, QES, Penny Drop and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
Frequently Asked Questions
Which identity documents can be used for Lithuanian onboarding?
Customers can use the asmens tapatybės kortelė, including its notified eID and NFC capabilities, along with the Lithuanian passport and Lithuanian residence permits. An EEA driving licence is also accepted as an identification document under Article 10 PPTFPĮ. Shufti supports document, eID, NFC and biometric verification within one configurable workflow.
How does Shufti support Bank of Lithuania-supervised businesses?
Shufti connects identity verification, KYB, AML screening, QES, account verification and decision evidence in one configurable workflow. This helps businesses within the Bank of Lithuania’s supervisory remit reduce manual hand-offs, standardise compliance records and prepare clearer evidence for internal audit and applicable supervisory review.
What documents are required for KYB in Lithuania?
Typically a Register of Legal Entities extract, the VAT number, articles of association and beneficial ownership details from JADIS. Shufti verifies these in real time and screens the UBOs behind them against sanctions and PEP lists.
Is Smart-ID accepted for KYC in Lithuania?
Smart-ID and Mobile-ID are recognised nationally at the high assurance level, but they are not part of Lithuania’s eIDAS notification. Under Article 11 PPTFPĮ they support the qualified electronic signature route rather than the notified eID route. Shufti supports the notified eID route and the QES route, so the flow is configured to the credential the customer holds.
How are Lithuanian name variants handled in screening?
Matching accounts for surname suffixes that change with gender and marital status, so Kazlauskas, Kazlauskienė and Kazlauskaitė resolve to one family root. Diacritic folding between ą, č, ę, ė, į, š, ų, ū, ž and plain Latin is handled too, so false positives on Lithuanian names stay low.
How long must AML records be retained in Lithuania?
Under the PPTFPĮ, identification and transaction records are kept for eight years. The period runs from the end of the business relationship or the execution of the transaction, and a competent authority may extend it by up to two further years on a reasoned instruction.
Is EU-region data hosting available?
Yes. Shufti offers EU-based cloud regions, so Lithuanian customer data stays in-region in line with GDPR. On-premise deployment is available where residency requirements are stricter.
What changes for Lithuania under AMLR from July 2027?
AMLR applies directly, so no Lithuanian transposition law is needed. It points remote verification at electronic identification at eIDAS assurance level substantial or high and at qualified trust services, expressly permits document plus biometric checks, and sets the beneficial ownership test at 25% or more.
How do QES and account verification work together under the PPTFPĮ?
Article 11 PPTFPĮ sets out both a qualified electronic signature route and an account-transfer route for identifying a customer who is not physically present, each with its own conditions. Shufti connects QES, account verification and supporting evidence in one workflow, subject to the applicable account and transaction requirements.
When will the EUDI Wallet be usable for onboarding in Lithuania?
Under eIDAS 2.0, EU member states target wallet availability from the end of 2026, and regulated businesses must accept wallet-based verification in the period after that. Lithuania is developing its wallet under this rollout. Shufti is built to accept wallet-based verification as the Lithuanian wallet goes live, so onboarding flows will not need to be rebuilt.
Can we keep using video identification after July 2027?
Yes. AMLR recognises eIDAS electronic identification and document-based checks as alternative means, and video identification remains usable where national rules permit it, with a documented justification for the method choice. Article 11 PPTFPĮ permits identification by direct video streaming today, and Shufti supports both, so firms can shift the mix over time without changing platforms.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
10 July, 2026
Identity Verification in Europe: eIDAS 2.0 & EUDI Wallet
A practitioner's guide to verifying identity in Europe, covering eIDAS 2.0, the EUDI Wallet, docless eIDV and how to choose an eID provider for onboarding in the EU.
Product Guide





