- Australia
- Austria
- Bangladesh
- Belgium
- Brazil
- Bulgaria
- Canada
- China
- Croatia
- Cyprus
- Czech Republic
- Denmark
- Egypt
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Germany
- Greece
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- Uganda
- Ukraine
- UK
- USA
- Vietnam
NETHERLANDS KYC, KYB AND AML
Scale Identity Verification and KYC Operations in the Netherlands
Verify Dutch customers and businesses through eIDAS-recognised electronic identification, iDIN, NFC, QES, identity documents, biometrics and KYB. Reduce manual review, keep audit evidence consistent and run one connected workflow designed to support the Wwft today and AMLR from 10 July 2027.
Operational Performance for Netherlands KYC
Our Numbers Speak Volumes
99.35%
First-pass
verification rate
< 10 sec
Median
verification time
5+
Dutch ID methods
supported
Netherlands IDV/KYC Challenges
The Notified eID Is Closed to Private Onboarding
DigiD is notified at eIDAS substantial and high, but it only connects organisations carrying a statutory public task. Private onboarding cannot use it, so assurance evidence comes from elsewhere.
Dutch Names Carry a Prefix Field of Their Own
The population register holds van, de and van der as a separate voorvoegsel, and a partner surname can sit before or after the legal one.
Ownership Data Sits Behind a Gate
The UBO register is closed to the general public. From 1 April 2026 KVK issues digitally certified extracts through kvk.nl or its API, authorising sectors in turn, notaries and banks first. The article 10c discrepancy report still lands on you.
Registry Data Is Not Verification
A KVK Handelsregister extract confirms a company exists, its legal form and its officials. It does not confirm control or sanctions exposure, so screening sits on top.
Regulatory Update
What AMLR Changes for Identity Verification in the Netherlands
The EU Anti-Money Laundering Regulation (EU) 2024/1624 applies directly in the Netherlands from 10 July 2027, with no transposition period. It sets the due diligence rules the Wwft framework will operate under, with AMLA, the new EU-level supervisor, established in Frankfurt.
Timeline
- End of 2026 Member State wallet issuance target
- End of 2026 Dutch public and semi-public service providers accept the wallet
- 10 July 2027 AMLR applies, no transposition
- Dec 2027 Private relying parties using strong authentication, bar small firms, accept wallets on request
- 2028 AMLA direct supervision begins
eIDAS Becomes an Explicit Route
Article 22(6) gives two equal means: an identity document with reliable independent sources, or eIDAS eID at substantial or high. The Netherlands notified DigiD and eHerkenning, but both are reserved for public-task organisations, so private onboarding runs on document, biometric, chip and bank-based routes.
The Ownership Test Tightens
AMLR sets beneficial ownership at 25% or more (Article 52) and through control (Article 53), which can arise below any threshold.
Existing Customers Get Re-Checked
AMLR expects existing customer records to be brought up to standard on a risk basis, not just new onboarding. Continuous monitoring keeps back-book files current between reviews.
Accountability Stays With You
Article 18 keeps customer due diligence accountable with the obliged entity even when verification is outsourced, and DNB already expects institutions to assess an eID's assurance level themselves.
FOR DNB-SUPERVISED BUSINESSES
Streamline DNB-Supervised Onboarding in the Netherlands
Connect identity verification, QES, Penny Drop and compliance evidence in one configurable workflow for businesses operating within the supervisory remit of De Nederlandsche Bank. Reduce customer drop-off and manual handovers while giving compliance teams a review-ready record of every decision.
1. Verify the customer
Verify identity using the configured route, such as an eIDAS-recognised electronic identification means, NFC chip reading of the Dutch passport or identity card, or document and biometric checks.
2. Complete qualified signing
Apply and validate the QES within the same journey, keeping the signed document, verification result and supporting evidence together.
3. Confirm the payment account
Use Penny Drop Verification to confirm that the payment account belongs to the verified customer and record the result in the file. Dutch supervisory guidance treats an account name check as a supporting control alongside independent identity verification, not as a check that stands on its own.
Shufti's IDV/KYC Solutions for the Netherlands
KYC Solutions
Clear onboarding for Dutch customers under the Wwft, with age and address checked in the same flow as identity, each check completing in seconds.
Explore MoreIdentity Verification
Shufti confirms every customer is real and present, not a spoofed or synthetic identity. Biometric face matching and liveness detection run against 10,000+ actively processed ID document types.
.Face Verification
Face verification binds the live person to the document with iBeta Level 3 Conformance to ISO/IEC 30107-3 liveness, stopping spoofs, masks and deepfakes.
.Age Verification
Selfie-based age estimation with document verification where required, for Kansspelautoriteit licensees, who must also check CRUKS each session, and age-restricted e-commerce.
.Address Verification
Shufti verifies Dutch address-bearing documents, including utility invoices, telecom bills and bank statements from major Dutch issuers. Proof-of-address checks remain common in regulated onboarding.
.Document Verification
Verification of the Dutch passport, the identiteitskaart, EU-format residence documents and the rijbewijs, including NFC chip reading and Dutch-language extraction. Permitted under AMLR Article 22(6)(a).
.Bank Account Verification
Confirms a Dutch bank account (NL IBAN) belongs to the customer, returning the registered account holder name for matching against the verified identity.
.KYB Solutions
Shufti checks businesses as closely as the people behind them, supporting your risk-based approach under the Wwft. It checks registry records, beneficial ownership and VAT in real time, then screens UBOs against 4,000+ watchlists for sanctions and adverse media.
Explore MoreBusiness Verification
Automated validation of KVK Handelsregister data, the RSIN, the Dutch VAT identification number and appointed directors. Reduces manual registry lookups and onboarding delays.
.Enhanced Due Diligence (EDD)
Structured risk profiling for layered holding structures, cross-border entities and higher-risk sectors, designed to support the risk-based obligations in the Wwft.
.AML Screening
Shufti screens customers and transactions in 240+ countries and territories, flagging sanctions, PEP, and adverse media matches as they happen. Ongoing monitoring surfaces suspicious activity in time to meet local reporting obligations.
Explore More
AI Compliance Copilot
Helps compliance teams review verification and AML data, investigate alerts, and understand the reasoning behind risk signals. It brings relevant case information together to support faster, more consistent compliance decisions.
.
Transaction Monitoring
Ongoing transaction monitoring calibrated to Dutch payment flows flags anomalies against the objective and subjective indicators behind unusual transaction reporting, supporting DNB controls and FIU-Nederland reporting duties.
.Supported Verification Methods for the Netherlands
Every Verification Route the Netherlands Uses, in One Platform
Shufti supports the full range of remote verification routes used in the Netherlands, from the EU Digital Identity Wallet and eIDAS-recognised electronic identification to document and biometric checks. Each method below shows what is live today and what is ready for the 2027 rollout.
EUDI Wallet
Wallet-ready · from 2027AMLR Article 22(6)(b) points to eIDAS electronic identification at substantial or high. The Wallet is not named in AMLR but meets that route. The Dutch government is developing the NL-wallet, and Shufti will accept it as it goes live.
Notified eID (context) and iDIN (supported)
Live · iDIN, not eIDAS-notifiedDigiD is the notified Dutch eID for citizens, eHerkenning the notified scheme for businesses. Because both are reserved for public-task organisations, Shufti supports iDIN, the bank scheme Dutch consumers already hold, through an integration partner. iDIN is not notified.
Docless Database eIDV
LiveDatabase-driven verification against licensed Dutch data sources, including residential, telecom, credit and utility records, confirms identity in seconds for low-risk onboarding. Shufti escalates to stronger checks as risk rises.
NFC Chip Verification
LiveShufti reads the secure chip in the Dutch passport, the identiteitskaart and EU-format residence documents. This is the high-assurance capture route where no electronic identification means is available.
Document and Face Biometric
LiveExpressly permitted under AMLR Article 22(6)(a), and the mainstream route while the notified schemes stay closed to private onboarding. Document checks on the Dutch passport, identity card and residence documents, with iBeta Level 3 ISO/IEC 30107-3 liveness.
Qualified Electronic Signature
LiveDutch law codifies no dedicated route for QES-based remote identification, so a qualified signature carries the legal effect eIDAS Article 25 gives it. Shufti runs eIDAS-qualified signing powered by Evrotrust, an EU qualified trust service provider, producing PAdES-LTV signatures. For the Netherlands the signing identity check runs through NFC and face biometrics.
Independent Validation
Shufti's Recognition Across Independent Evaluations

Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read MoreVerifications with robust evidentiary support
Evidence-Ready Checks Across People & Businesses
Individual Documents We Verify
Shufti verifies 18+ individual Dutch documents.
View All Supported DocumentsDutch Passport (Nederlands Paspoort)
Primary identity document for Dutch nationals under the Paspoortwet. ICAO-compliant with a biometric chip, and the document number always uses the digit 0.
Dutch Identity Card (Nederlandse Identiteitskaart)
Electronic travel document Dutch nationals are entitled to under article 16a of the Paspoortwet. Carries a biometric chip for high-assurance remote checks.
Dutch Residence Permit (Verblijfsdocument)
Issued by the Immigratie- en Naturalisatiedienst to non-EU nationals. The model 2012 and model 2020 both remain valid live formats.
Foreign Nationals Identity Documents (Vreemdelingen Identiteitsbewijs)
Type W and W2 cover asylum and pending-status cases, and type O covers Ukrainian temporary protection. None of them is a residence permit.
EU Or EEA Passport Or National Identity Card
A category of foreign documents rather than one document, common in Dutch cross-border onboarding. Verified against ICAO standards with document, chip and biometric checks.
Dutch Driving Licence (Rijbewijs)
Issued at the municipality and held in the RDW register. Accepted as an identity document, with the burgerservicenummer on the reverse masked on copies.
Entity Identity
KVK Business Register Extract
Handelsregister extract from Kamer van Koophandel. Confirms legal existence, registered address, legal form, establishment date, branch details and registered officials for KYB.
Digitally Certified KVK Extract
The digitally certified uittreksel, used where the file needs registry evidence with stronger evidential value for onboarding, compliance review or audit.
Deed Of Incorporation And Articles Of Association
Required where the legal form calls for them. Confirms the structure, purpose, appointed directors and the signing rules that decide who can bind the entity.
Sector Licence Or Regulatory Authorisation
Applies only where the activity is licensed, such as financial services or gambling. Not a universal Dutch KYB document, so it is requested by risk rule rather than by default.
Tax Identity
RSIN
The Rechtspersonen en Samenwerkingsverbanden Informatienummer issued by KVK to legal entities and partnerships on registration. Sole traders do not receive one, which changes how their tax identity is checked.
VAT Identification Number
The Dutch btw-identificatienummer runs as country code NL, nine digits, the letter B and two digits. For entities other than sole traders those nine digits are the RSIN.
Tax Registration Evidence
Used where the registry extract alone does not confirm the registered tax position, which matters most in higher-risk and cross-border onboarding.
Ownership & Control (UBO)
UBO Information
The UBO register held by KVK is closed to the general public and access is tiered. Evidence may arrive as a certified extract from the client.
Director And Authorised Signatory Details
Confirms who can legally represent the business and who may sign contracts, onboarding forms and account applications. Screened against sanctions, PEP and adverse media lists during KYB.
Shareholder Register Or Ownership Evidence
Used where the legal form supports it and ownership cannot be resolved from registry information alone. Shufti applies the AMLR 25% and control tests.
Languages We Cover
Document Text Handling
Native Dutch-language parsing keeps field labels and diacritics intact across the paspoort, identiteitskaart, KVK extract and residence documents, and handles the foreign passports Dutch onboarding brings in.
Name Matching Controls
Matching treats the voorvoegsel as its own field, so van, de and van der resolve correctly, and it handles a partner surname used before or after the legal surname.
Evidence Consistency
Cross-document checks reconcile names and identifiers across the passport, identity card, KVK extract and ownership evidence, so a mismatch surfaces during review rather than after it.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer avoidable re-submissions
Capture tuned to the Dutch passport, the Nederlandse identiteitskaart and both residence document models cuts avoidable re-submissions and manual review.
Cleaner audit trails
Structured logs aligned to the five-year Wwft retention rule and to unusual transaction reporting keep every onboarding decision review-ready.
Better name matching outcomes
Matching handles the voorvoegsel, partner surnames and combined surnames common in the Netherlands, reducing false positives and manual review.
One workflow, one back office
KYC, KYB and AML screening are consolidated in one operational case view, so one back office team works on every customer file.
National ID-first flow design
Paspoort and identiteitskaart-first onboarding reflects the Dutch identity ecosystem and the way customers actually verify.
Continuous Compliance
Compliance that does not stop at onboarding
AMLR treats customer due diligence as a continuing obligation. Perpetual monitoring keeps the customer picture current between reviews, so risk is caught when it appears, not at the next annual check.
Surface Changes as it happens
DetectPerpetual monitoring flags risk when it appears, not at the next annual review. Behavioural biometrics, background fraud signals, and ongoing sanctions and PEP screening watch every active relationship.
Step up when the signal fires
VerifyWhen a signal fires, re-verification confirms the person or the ownership change using the same live methods above, so a flag turns into a resolved decision.
Keep the file audit-ready
ComplyEvery check and decision is logged to Wwft record-keeping standards, so the file is organised and retrievable for internal audit and supervisory review.
Perpetual KYC
pKYCKeeps individual customer risk current with behavioural biometrics, background fraud signals and ongoing AML screening, so back-book records stay standard-ready.
Perpetual KYB
pKYBMonitors KVK Handelsregister filings and UBO register data for shareholding and control changes, so a shift past the 25% or more threshold is caught between reviews.
Built To Fit the Netherlands' Compliance Landscape
De Nederlandsche Bank (DNB)
Wwft and Sanctiewet supervisor for banks, payment and electronic money institutions, exchange institutions, life insurers and trust offices. Shufti supplies structured identity evidence and monitoring controls.
Autoriteit Financiële Markten (AFM)
Wwft supervisor for investment firms, investment institutions, fund managers and non-bank crypto-asset service providers. Shufti records onboarding decisions, screening results, escalations and review history for audit.
FIU-Nederland
Receives unusual transaction reports under Wwft article 16 through the goAML reporting portal, without delay once the unusual character is known. Decision audit trails, structured indicators and escalation logs support that filing.
Kamer van Koophandel (KVK)
Keeps the Handelsregister and UBO register. KYB workflows verify legal status, officials, shareholding, store the UBO extract and flag gaps for the article 10c report, due since 1 October 2024 unless the FIU is told.
Belastingdienst
Administers Dutch tax identity, including the btw-identificatienummer and the numbers derived from the BSN or RSIN. Wwft supervision of the sectors under the Minister of Finance, such as estate agents, goods dealers and domicile providers, moved to the Dienst Financieel-Economische Integriteit on 1 January 2026.
Autoriteit Persoonsgegevens (AP)
Supervises the GDPR and the Uitvoeringswet Algemene verordening gegevensbescherming. Data minimisation and EU-region hosting keep Dutch personal data handling compliant.
Immigratie- en Naturalisatiedienst (IND)
Issues residence documents and foreign nationals identity documents. Shufti supports the model 2012 and model 2020 residence documents plus the type W, W2 and O document journeys.
Rijksdienst voor Identiteitsgegevens (RvIG)
Responsible for Dutch travel documents, the population register and the burgerservicenummer. Capture and review are fitted to the document system behind the country's primary identity documents.
AMLA (EU Anti-Money Laundering Authority)
The new EU-level supervisor has been established in Frankfurt since July 2025. Begins direct supervision of selected high-risk cross-border entities from 2028 and shapes technical standards under AMLR.
Deployment Option
Cloud in EU regions, including Netherlands-based options, or on-premise hosts Dutch customer data in-region and supports GDPR accountability.
Regulatory Alignment
Aligned with Wwft due diligence, sanctions and record-keeping duties, with GDPR principles, and with AMLR requirements applying from July 2027. Shufti acts as a data processor and provides verification technology, not legal or regulatory advice. Responsibility for customer due diligence and for the choice of verification method remains with the obliged entity, documented in its own risk assessment.
Retention Controls
Wwft article 33 requires customer due diligence records kept accessible for five years, from the end of the business relationship or the transaction. Article 34a requires destruction after that. From 10 July 2027 AMLR Article 77 applies.
Encryption & Security
Encryption in transit and at rest, with access controls and audit logging, supports Article 32 GDPR and UAVG duties under ISO 27001 and SOC 2 Type II certifications.
Data and Privacy Controls in the Netherlands
Netherlands AML Sources That Strengthen Decisions
We screen against 215+ sanction regimes, 4,000+ watchlists, 100,000+ adverse-media sources, and 6M+ PEPs across the Netherlands and globally. A few of them are:
De Nederlandsche Bank (DNB)
Autoriteit Financiële Markten (AFM)
Bureau Financieel Toezicht (BFT)
Kansspelautoriteit (KSA)
FIU-Nederland
Ministerie van Financiën
Kamer van Koophandel (KVK)
Belastingdienst
FIOD
Douane (Dutch Customs)
FATF
EU Consolidated Financial Sanctions List
UN Security Council Consolidated List
European Banking Authority (EBA)
EU AMLA (Anti-Money Laundering Authority)
SEE SHUFTI IN YOUR NETHERLANDS WORKFLOW
Turn Dutch Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB, QES, Penny Drop and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
Frequently Asked Questions
Which identity documents can be used for KYC in the Netherlands?
The Dutch passport and the Nederlandse identiteitskaart are the primary documents for Dutch nationals. Article 4(1) of the Uitvoeringsregeling Wwft also accepts an EU member identity card, a Dutch or EU driving licence, refugee and stateless travel documents, and foreign nationals documents issued under the Vreemdelingenwet 2000. Shufti verifies these through document, chip, database and biometric routes in one workflow.
How does Shufti support DNB-supervised businesses in the Netherlands?
Shufti connects identity verification, KYB, AML screening, QES, account verification and decision evidence in one configurable workflow. This helps businesses within the supervisory remit of De Nederlandsche Bank reduce manual hand-offs, standardise compliance records and prepare clearer evidence for internal audit and applicable supervisory review.
What documents are required for KYB in the Netherlands?
Typically a KVK Handelsregister extract, the deed of incorporation where the legal form requires it, RSIN or VAT number, plus director and ownership evidence. Shufti verifies these and screens the UBOs behind them.
How are Dutch name variants handled in screening?
Matching treats the voorvoegsel as a separate field, so van, de and van der resolve to one person. It also handles partner surnames used before or after the legal one.
How long must Wwft records be retained?
Five years. Wwft article 33 requires customer due diligence records to be kept in an accessible form for five years after the business relationship ends, or five years after the transaction concerned is carried out. Shufti retention settings can be configured to that rule.
Is EU-region data hosting available for Dutch customer data?
Yes. Shufti offers EU-based cloud regions, including Netherlands-based options, so Dutch customer data is hosted in-region under the GDPR. On-premise deployment is available where residency requirements are stricter.
What changes for the Netherlands under AMLR from July 2027?
AMLR applies directly, so no Dutch transposition law is needed. Article 22(6) gives two equal means, eIDAS electronic identification at substantial or high or a document with independent sources, and Articles 52 and 53 set beneficial ownership at 25% or more and through control.
Is remote identification allowed under the Wwft, and does video identification have a Dutch legal basis?
Remote identification is allowed and is regulated by outcome, not by named method. Article 4(1)(h) of the Uitvoeringsregeling Wwft accepts a sufficiently reliable means of identification, and DNB ties that to eIDAS substantial or high. The institution assesses that itself. Dutch law codifies no dedicated video identification route.
How do QES and account verification work together in the Netherlands?
Dutch law codifies no QES-plus-payment-account identification route, so the two run as a configurable workflow rather than a statutory one. DNB states a one-cent account name check cannot verify identity on its own. Shufti connects both.
When will the EU Digital Identity Wallet be usable for onboarding in the Netherlands?
Under eIDAS 2.0, member states target wallet availability from the end of 2026, and regulated private service providers must accept wallet-based verification after that. The Dutch government is developing the NL-wallet and the implementing law is being prepared. Shufti is built to accept wallet verification as the Dutch wallet goes live, so flows need no rebuild.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
10 July, 2026
Identity Verification in Europe: eIDAS 2.0 & EUDI Wallet
A practitioner's guide to verifying identity in Europe, covering eIDAS 2.0, the EUDI Wallet, docless eIDV and how to choose an eID provider for onboarding in the EU.
Product Guide





