AMLR Solutions 
AMLR Consultation
EUDI Wallet
Onboarding
Ongoing Monitoring
FRAML
KYC
KYB
KYI
Age Assurance
Workforce IAM
Candidate Verification
Account Takeover
Bonus/ Promotion Abuse
Chargeback Fraud
Deepfake
Document Fraud
Fraud Networks
Impersonation Fraud
Money Mule Activity
Multi-Accounting
Party Fraud
Regulatory & Compliance Risks
Synthetic Identity Fraud
Adult Content
Banking
Crypto
Fintech
Forex
Compliance
Fraud prevention
Trust & safety
Global expansion
Compliance Officers
Developers
Fraud Analysts
Product Managers
Journey Builder 
Global Trust Platform
Customer Profiles
Vendor Comparison
IDV Case Management
AML Case Management
Regulatory Reporting
Agentic Rule Builder 
AI Compliance Co-Pilot 
Fraud Analytics
Fraud Hub 
OCR
Shufti AI
Bank Account Verification 
Biometric Duplication
Database Checks
Document Intelligence
Government ID
Mobile Driver's License
NFC
Selfie Liveness
Brand Personalisation
Deployment Options
Identity Methods
IDV Modes
Multi-tenancy
On-Premise IDV
Secure Capture
Shufti MCP
- Argentina
- Australia
- Austria
- Bangladesh
- Belgium
- Brazil
- Bulgaria
- Cambodia
- Canada
- Chile
- China
- Colombia
- Croatia
- Cyprus
- Czech Republic
- Denmark
- Egypt
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Germany
- Greece
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- UAE
- Uganda
- Ukraine
- UK
- USA
- Vietnam
Scale Identity Verification and KYC Operations in Singapore
Verify residents and non-residents through Singpass and Myinfo, Singapore ePassport NFC and 10,000+ foreign ID document types, run KYB on ACRA-registered businesses and their controllers, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for MAS-supervised firms.
Operational Performance for Singapore KYC
Our Numbers Speak Volumes
98.80%
Pass
Rates
Under 5 secs
IDV
Verification
80%
eIDV
Coverage
Singapore IDV/KYC Challenges
Onboarding Mixes Local Passes and Foreign Documents
Singapore hosts large numbers of work pass holders, students and overseas clients, so one onboarding queue mixes NRICs, digital ICA passes, MOM work passes and passports from across the world. Shufti's zero-shot document intelligence verifies all of them, including formats it has never seen.
NRIC Numbers Can No Longer Authenticate Customers
Organisations must stop using NRIC numbers to authenticate people by 31 December 2026, with PDPC enforcement from 1 January 2027 across finance, healthcare and telecoms. Shufti replaces knowledge-based NRIC checks with Singpass login and biometric face matching against the customer's ID.
Beneficial Ownership Rules Tightened in June 2025
Since 16 June 2025, companies must keep controller registers from incorporation, and ACRA holds central registers of nominee directors and shareholders. FATF's 2026 evaluation still rated ownership transparency moderate. Shufti's live registry calls confirm ACRA records and flag changes, while controllers come from the company's own register.
Banks Now Carry Phishing Losses When Fraud Controls Lapse
Under the Shared Responsibility Framework in force since 16 December 2024, banks must run real-time fraud surveillance and bear phishing losses when they breach those duties. Shufti's device fingerprinting, behavioral biometrics and money mule detection catch takeovers and mule activity before funds leave.
Documents and Languages
Individual Documents Shufti Verifies in Singapore
Shufti verifies Singapore identity documents plus passports and ID cards from other countries. The cards below cover the core documents Singapore onboarding relies on, with the full list on the supported documents page.
View All Supported DocumentsSingpass and Myinfo
Singpass is Singapore's national digital identity, open to citizens, PRs and foreigners holding a FIN. After the customer logs in and consents, Myinfo returns government-sourced name, NRIC or FIN, date of birth, nationality and registered address, which Shufti records against the case.
National Registration Identity Card (NRIC)
ICA issues the NRIC to citizens and PRs aged 15 and above under the National Registration Act 1965. Shufti reads the card, runs forensic tamper checks and matches the holder through certified liveness, or confirms the same details through Singpass instead.
FIN-Linked Work Passes and Long-Term Passes
Foreigners carry a Foreign Identification Number on MOM work passes, still issued as cards alongside the SGWorkPass app, or on ICA long-term passes, issued only in digital form since 27 February 2023. Shufti verifies both, including the M-series FIN introduced in 2022.
Singapore Passport
ICA issues the Singapore biometric passport. Shufti reads its chip over NFC and runs nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.
Foreign Passports and National ID Cards
Work pass holders, students and non-resident clients often onboard with a home-country document. Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes.
Singapore Driving Licence
The Singapore Police Force issues the driving licence as a photocard and, since 2022, as a digital licence in the Singpass app. Shufti checks authenticity, expiry and facial match, which suits ride-hailing, delivery and car-sharing platforms vetting drivers.
Proof of Address
Shufti verifies SP Group utility bills, telco bills and bank statements as proof of address, matching the address to the ID in the same session, or takes the Myinfo registered address when the customer signs in with Singpass.
Entity Identity
ACRA Business Profile
ACRA's Business Profile, available through Bizfile, lists a company's UEN, status, registered address, officers and shareholders. Shufti pulls the same record through a live registry call at every check, so a stale or edited extract never stands in for the register.
Certificate of Incorporation and Myinfo Business
ACRA's certificate confirms a company exists under its UEN. With the director's consent, Myinfo business returns ACRA-sourced corporate data through Singpass, and Shufti matches both against the live registry record and the person signing up.
Company Constitution
Shufti's AI-OCR reads the company constitution for share classes, director powers and signing authority, compares them with the ACRA profile, and flags GAN-generated or edited pages before the document reaches a reviewer.
Business Address Proof
Shufti checks the registered office address on the ACRA profile against utility bills, tenancy agreements or bank statements in the company's name, so a mismatched or borrowed address surfaces at onboarding.
Tax Identity
UEN as Corporate Tax Reference
IRAS uses a company's UEN as its corporate income tax reference number. Shufti extracts the UEN from tax filings and Notices of Assessment and cross-checks it against the ACRA record, flagging any document issued to a different entity.
GST Registration Number
IRAS issues a GST registration number that must appear on tax invoices. Shufti reads it from the registration letter or invoices and confirms it belongs to the entity being onboarded.
Foreign Tax Registrations and FATCA/CRS
For foreign parents and offshore holding companies, Shufti captures overseas tax registrations and FATCA and CRS self-certifications in the same due diligence form, linked to the entity's case file.
Ownership and Control
Register of Registrable Controllers
Under the Companies Act, anyone holding more than 25% of shares or votes, or exercising significant control, is a registrable controller, and companies lodge updates with ACRA's central register within two business days. Shufti extracts every controller and screens each one.
Nominee Director and Shareholder Registers
Since 16 June 2025, ACRA keeps central registers of nominee directors and nominee shareholders, and nominee directors acting by way of business must come through a registered corporate service provider. Shufti captures the nominator behind each nominee and screens them.
Shareholder Register and Ownership Chart
Shufti maps ownership through intermediate companies, including foreign holding entities, until it reaches the natural persons at the top, then screens each one against sanctions, PEP and adverse media lists.
Directors and Authorised Signatories
Shufti verifies the identity of each director and authorised signatory named on the ACRA profile or board resolution, screens each one, and alerts your team when the board changes after onboarding.
Languages We Cover
English, Chinese, Malay and Tamil Document Parsing
Singapore documents are issued in English, while customers also present Chinese, Malay, Tamil and other foreign-script documents. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and scores 87% against Google Vision's 83% on Chinese and Japanese scripts. Zero-shot document intelligence reads foreign-script document layouts it has never seen on first sight, without waiting for a template.
Singapore Name Matching
Screening accounts for Hanyu Pinyin and dialect romanisations such as Hokkien, Cantonese and Teochew spellings of one Chinese surname, Malay bin and binti patronymics, and Tamil s/o and d/o naming, so variant spellings still match.
Cross-Document Consistency Checks
Names, NRIC or FIN numbers and addresses are reconciled across the ID, passport, Myinfo data and the ACRA register, so one customer cannot appear under two identities.
Independent Validation
Shufti's Recognition Across Independent Evaluations
Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read More
Regulatory Update
Every Verification Route Singapore Firms Rely On, in One Platform
MAS does not prescribe a single onboarding channel. Notice 626 paragraph 6.29 requires non-face-to-face CDD to be at least as strong as face-to-face CDD, and Notice PSN02 sets the same bar for digital payment token firms. Shufti supports Singpass and Myinfo, plus chip, document, biometric and video routes for non-residents and customers without Singpass.
Singpass Login with Myinfo
LiveResidents authenticate with Singpass and consent to share Myinfo data, which arrives prefilled and government-sourced. Shufti stores the authentication result and the data source in the case file, so reviewers see where each field came from.
Singpass Face Verification
LiveShufti matches a customer's live selfie against the facial record the government holds for their Singpass identity, adding a biometric step to login for higher-risk products, large transfers and account recovery.
Docless Database (eIDV)
LiveCustomers with Singpass can be verified without uploading a document. Shufti confirms identity from Myinfo data and returns a decision in seconds, the fastest route for citizens, PRs and FIN holders.
NFC Chip Verification
LiveShufti reads the chip in Singapore biometric passports and most foreign ePassports and validates its signature against the issuing authority, the high-assurance route for non-residents and new arrivals without Singpass.
Document and Face Biometric
LiveCustomers scan an NRIC, pass or foreign ID and take a selfie. Shufti runs forensic document checks and iBeta Level 3 certified liveness, the route most overseas clients take.
Fraud Prevention Across the Singapore Customer Journey
Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Singapore businesses act on risk while keeping legitimate customers moving.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer Avoidable Re-submissions
Real-time capture guidance for NRICs, passes and foreign documents cuts blurry, cropped or expired uploads before they reach review.
Cleaner Audit Trails
Shufti's case management records sources, results, timestamps, evidence, analyst notes and decision history, packaged as report-ready bundles for STR filing through SONAR.
One Workflow, One Back Office
Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director and transaction changes across the compliance lifecycle.
Singpass-First Flow Design
Residents verify through Singpass and Myinfo first. Non-residents move to passport NFC or document checks in the same flow, without restarting.
Shufti's IDV/KYC Solutions for Singapore
KYC Solutions
Singapore onboarding mixes citizens and PRs on Singpass, foreign pass holders and overseas clients carrying only a passport. One Shufti flow routes each by risk, so nobody faces checks they don't need.
Explore More
Face Verification
Remote onboarding invites impersonation with borrowed IDs and deepfakes. Shufti matches the selfie to the ID or passport photo and checks liveness against masks, replays and injected video, with a 99.5% first-try pass rate, so genuine customers rarely retry.
.
Age Verification
Age-restricted services need a check that young users cannot talk their way past. Shufti estimates age from a selfie in under five seconds and blocks 99.8% of underage attempts, with document checks when a higher assurance level is needed.
.
Bank Account Verification
Payouts sent to the wrong account are hard to recover. Shufti confirms that a Singapore bank account exists and that the holder's name matches the verified customer in real time, before the first disbursement or withdrawal.
.
Address Verification
Customer files need a current residential address. Shufti verifies utility bills, telco bills and bank statements with layout-aware extraction and fuzzy matching at a 99.3% pass rate, or confirms the Myinfo registered address without a document in under three seconds.
.
Document Verification
Generative tools make edited ID images cheap to produce. Shufti verifies Singapore and foreign IDs within seconds, checking for screenshots, replays, synthetic documents, print-and-scan copies and digital edits before a document is accepted.
.
Identity Verification
Customers rarely fit a single route. Shufti combines document, biometric, NFC, address and Singpass checks in one API session, so each customer finishes in the route that suits them and your team reviews one result.
.KYB Solutions
Corporate onboarding in Singapore runs on ACRA records, registers of controllers and nominee disclosures, often across layered regional holding structures. Shufti's live registry calls read ACRA data at every check, and Myinfo business adds consented corporate data, built around the Companies Act controller rules.
Explore More
Business Verification
Onboarding a Singapore company means confirming its UEN, ACRA status, GST number, signatories and everyone who owns or controls more than 25%. Shufti's live registry call confirms the ACRA record and shareholders, and controllers are checked against the company's own register, since ACRA's central register is not public.
.
Enhanced Due Diligence
Higher-risk clients, from foreign-owned holding companies to trust structures, need more than a registry check. Shufti's branching due diligence forms collect source of funds and ownership evidence, score the answers and send UBO verification links, leaving a documented rationale for inspections.
.AML Screening
A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC rescreens customers against 4,000+ watchlists, including MAS targeted financial sanctions, TSOFA terrorist designations and UN lists, refreshes data every 15 minutes and keeps every hit in one case file.
Explore More
Business AML Screening
A company can pass KYB while a director or controller is sanctioned or politically exposed. Shufti screens the entity, its owners and its directors against MAS targeted financial sanctions, global sanctions, PEP and adverse media sources, and perpetual KYB rescreens the portfolio when lists change.
.
Transaction Monitoring
Scam proceeds and structured cash deposits rarely look suspicious in a single payment. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity, cuts false positives by 60% and builds report-ready case bundles for STR filing on SONAR.
.
Travel Rule
MAS requires DPT service providers to send originator and beneficiary information with transfers above S$1,500 under Notice PSN02. Shufti connects to major Travel Rule networks through one integration, supports IVMS101 and verifies unhosted wallet ownership.
.
AI Compliance Co-Pilot
One common name can return 140+ screening hits, and Singapore's mix of naming conventions multiplies them. Shufti's co-pilot reviews each hit, gives a confidence score and a written reason, and leaves the final call with your MLRO.
.Built To Fit Singapore's Compliance Landscape
Singapore's anti-money laundering statutes apply to every business, while MAS, ACRA, the Ministry of Law, CEA and GRA each add their own sector rules. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each licence your group holds.
Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act 1992 (CDSA)
Section 45 requires anyone who knows or suspects that property is linked to crime to file a suspicious transaction report. Amendments in force since February 2024 added rash and negligent money laundering offences, and the Anti-Money Laundering and Other Matters Act 2024 widened foreign predicate offences from November 2024.
Monetary Authority of Singapore (MAS)
MAS, Pihak Berkuasa Kewangan Singapura in Malay, sets AML/CFT duties through sector notices issued under the Financial Services and Markets Act 2022 and revised from 1 July 2025. Notice 626 covers bank CDD in paragraph 6, remote onboarding in paragraph 6.29 and five-year record keeping in paragraph 12.
MAS Notices PSN01 and PSN02
Payment institutions licensed under the Payment Services Act 2019 follow Notice PSN01, and digital payment token providers follow Notice PSN02, which applies the Travel Rule above S$1,500 in paragraph 13. Since 30 June 2025, token providers serving only overseas customers need a licence under FSMA Part 9.
Suspicious Transaction Reporting Office (STRO)
STRO sits within the Singapore Police Force's Commercial Affairs Department and is Singapore's financial intelligence unit. Reports under CDSA section 45 and TSOFA sections 8 and 10 are filed electronically through SONAR, which also receives cash transaction reports and cross-border cash movement reports.
Accounting and Corporate Regulatory Authority (ACRA)
ACRA registers companies and holds the central register of registrable controllers, covering anyone with more than 25% of shares or votes or with significant control. Since 16 June 2025 it also keeps nominee director and shareholder registers, and since 9 June 2025 it registers corporate service providers.
Anti-Money Laundering/Countering the Financing of Terrorism Division (ACD), Ministry of Law
ACD supervises precious stones and precious metals dealers under the Precious Stones and Precious Metals (Prevention of Money Laundering, Terrorism Financing and Proliferation Financing) Act 2019. Dealers must register, perform CDD and report cash transactions above S$20,000 to STRO within 15 business days.
Council for Estate Agencies (CEA)
CEA supervises estate agents and salespersons under the Estate Agents Act 2010 and the Estate Agents (Prevention of Money Laundering, Proliferation Financing and Terrorism Financing) Regulations 2021. Agents must carry out CDD on their clients, keep records and report suspicious transactions to STRO.
Gambling Regulatory Authority (GRA)
GRA regulates casinos under the Casino Control Act and gambling under the Gambling Control Act 2022. Casinos must perform CDD on cash transactions or deposits of S$4,000 or more and report cash transactions from S$10,000. Singapore Pools is the only licensed remote gambling operator.
Immigration & Checkpoints Authority (ICA)
ICA issues the NRIC to citizens and PRs aged 15 and above under the National Registration Act 1965, along with the Singapore passport. Since 27 February 2023 it issues long-term passes in digital form only, and new FINs have followed the M-series format since 2022.
MAS Targeted Financial Sanctions
Financial institutions apply UN sanctions through regulations made under section 192 of the Financial Services and Markets Act 2022, and breaches carry fines of up to S$1 million. Terrorist designations sit under TSOFA 2002 and are managed by the Inter-Ministry Committee on Terrorist Designation.
Personal Data Protection Commission (PDPC)
PDPC enforces the Personal Data Protection Act 2012, which covers consent, protection, retention, overseas transfers and breach notification. PDPC has set 31 December 2026 as the deadline for organisations to stop using NRIC numbers to authenticate people, with enforcement from 1 January 2027.
Inland Revenue Authority of Singapore (IRAS)
IRAS administers corporate income tax, using each company's UEN as its tax reference, and registers businesses for GST. Since the first provisions of the Anti-Money Laundering and Other Matters Act 2024 took effect in November 2024, IRAS can share tax information with STRO.
AML/CFT Steering Committee
Made up of the Permanent Secretary of MHA, the Second Permanent Secretary of MOF and the Managing Director of MAS, the committee sets national AML/CFT policy. It published the National AML Strategy and Money Laundering National Risk Assessment in 2024. FATF's May 2026 evaluation placed Singapore in regular follow-up.
Singapore Data Residency and Deployment
Shufti runs in Singapore cloud regions on AWS Asia Pacific (Singapore), Microsoft Azure Southeast Asia, Google Cloud asia-southeast1, Oracle Cloud Singapore and Alibaba Cloud Singapore, or on-premises inside your own infrastructure. Your agreement fixes the hosting location and any transfer arrangements.
Personal Data Protection Act 2012 (PDPA)
The PDPA requires reasonable security for personal data and notification to PDPC within three calendar days of assessing a breach as notifiable. Shufti protects identity and biometric data with encryption, role-based access controls and configurable retention, and its audit logs support your breach assessment.
NRIC Number Handling
PDPC guidance limits NRIC collection to cases where law requires it or identity must be established to a high degree, and rules out NRIC numbers as passwords. Shufti keeps NRIC data inside the verification record, masks it in the back office and never uses it to authenticate.
MAS Outsourcing and Third-Party Risk
MAS Notice 658 and the Guidelines on Outsourcing, both effective 11 December 2024, expect banks to assess, monitor and audit providers running outsourced services. Shufti supplies due diligence documentation, audit rights and exit support in its agreements, so your outsourcing register holds what inspectors ask for.
Retention Controls
MAS notices set record keeping of at least five years after a relationship ends, while the PDPA expects data to be deleted once its purpose is served. Shufti configures retention by client and licence, treats statutory minimums as floors rather than deletion dates, and supports legal holds.
Encryption and Security
Data is encrypted in transit and at rest, access is role-based and every action is logged for audit. Shufti holds ISO 27001:2022 certification and a SOC 2 Type 2 report, which support vendor assessments under the MAS Technology Risk Management Guidelines.
Automated Decisions and Biometric Data
PDPC's 2024 advisory guidelines on AI decision systems and its guide on biometric data call for transparency about how outcomes are reached. Shufti returns verification results and their supporting reasons through the API and back office, so support teams can explain outcomes and escalate disputed results.
Scope of Our Role
Shufti processes personal data on your instructions as a data intermediary under the PDPA, and your organisation keeps responsibility for the customer relationship and its compliance decisions. Shufti's privacy notice identifies the limited activities it carries out as an independent organisation.
Data Residency and Privacy Controls in Singapore
Singapore AML Sources That Strengthen Decisions
Monetary Authority of Singapore (MAS)
Suspicious Transaction Reporting Office (STRO)
Commercial Affairs Department (CAD)
Accounting and Corporate Regulatory Authority (ACRA)
Inland Revenue Authority of Singapore (IRAS)
Immigration & Checkpoints Authority (ICA)
Gambling Regulatory Authority (GRA)
Ministry of Finance (MOF)
Ministry of Home Affairs (MHA)
Personal Data Protection Commission (PDPC)
Financial Action Task Force (FATF)
Asia/Pacific Group on Money Laundering (APG)
United Nations Security Council Consolidated List
Egmont Group of Financial Intelligence Units
Basel Committee on Banking Supervision
Turn Singapore Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.
Certified to Global Standards
PROVEN WORKFLOWS
Identity Verification Built Around Your Industry in Singapore
Faster Account Opening Under Notice 626
Banks must meet Notice 626 CDD and run real-time fraud surveillance under the Shared Responsibility Framework. Shufti onboards residents through Singpass and Myinfo, verifies overseas clients by passport NFC, screens every customer continuously and monitors transactions for scam and mule patterns, with every result held in one case file.
Frequently Asked Questions
Does Shufti support Singpass, and what happens when customers cannot use it?
Yes. Shufti authenticates residents through Singpass and pulls consented Myinfo data into the case file. Customers without Singpass, such as overseas clients and new arrivals, move in the same flow to passport NFC, document and selfie checks, or a video call.
Is an NRIC image enough to verify a Singapore customer?
An image alone proves little, because edited NRIC images are easy to produce. Shufti runs forensic checks on the card and matches the holder through certified liveness, or confirms the same details through Singpass and Myinfo, which carry government-sourced data.
Can Shufti verify foreign documents or identity formats it has not encountered before?
Yes. Shufti's zero-shot document intelligence learns new layouts without waiting for templates, so a new pass format or an unfamiliar foreign ID gets the same forensic checks as common documents, and the genuine customer is not turned away in the meantime.
How does Shufti OCR compare with Google OCR for Chinese-script identity documents?
In Shufti's benchmark, its OCR scored 87% against Google Vision's 83% on Chinese and Japanese scripts. That gap matters in Singapore, where many customers present documents with Chinese-character names alongside English fields, and both need to be read correctly before matching.
How does Shufti verify ownership when a Singapore company has several corporate layers?
Shufti pulls the ACRA record, then follows each corporate shareholder through its own registry until it reaches the people at the top. Everyone holding more than 25% or exercising significant control is verified and screened, matching the Companies Act definition of a registrable controller.
Does Shufti's ongoing monitoring cover more than sanctions screening?
Yes. MAS notices require ongoing monitoring of business relations, not only list checks. Shufti compares transactions against each customer's expected profile, flags changes to ACRA directors and controllers, and triggers re-verification when risk rises, alongside continuous sanctions, PEP and adverse media screening.
How does Shufti keep screening current and handle Singapore name variations?
With the 15-minute data refresh, a new MAS sanctions entry or TSOFA designation reaches your screening the same hour. Phonetic and transliteration models match Hanyu Pinyin and dialect spellings of Chinese names, Malay patronymics and Tamil naming, so a variant spelling cannot slip through.
Can we choose Singapore hosting or run verification inside our own infrastructure?
Yes. Shufti runs in Singapore regions of AWS, Microsoft Azure, Google Cloud, Oracle Cloud and Alibaba Cloud, or on-premises in your own environment, including air-gapped deployments. Your agreement records the hosting location and any transfers, which supports MAS outsourcing reviews.
What controls help us protect identity and biometric data?
Shufti encrypts data in transit and at rest, limits access by role, logs every action and applies configurable retention. NRIC numbers stay inside the verification record and are never used for authentication, which matches PDPC's position ahead of the 31 December 2026 deadline.
Can we configure different retention periods for different Singapore licences?
Yes. Retention is set per client and per licence, so a bank, a payment institution and an estate agency can each keep records for their own required period. The MAS five-year minimum acts as a floor, and legal holds pause deletion during investigations.
What does Shufti provide when our compliance team needs to prepare an STR on SONAR?
Shufti assembles the customer's identity results, screening hits, transaction alerts, analyst notes and decision history into one report-ready bundle. Your MLRO reviews it and files the STR through SONAR with the evidence STRO expects, instead of collecting it from several systems.
Can we add verification checks without rebuilding our onboarding journey?
Yes. Shufti's AI Journey Builder adds or removes checks by product, customer type and risk tier through configuration, so you can add Singpass login, NFC or video identification to an existing flow without new development work or a fresh integration.
How does Shufti make verification queries easier for our customer support team?
Every decision comes with its reasons, such as an expired pass, a face mismatch or a document edit, shown in the back office and returned through the API. Support teams can tell customers exactly what to fix and escalate disputed results to compliance.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
16 April, 2026
Face Verification: APAC
Covers APAC's biometric rules, from India's DPDP Act to Korea's AI Framework Act and China's facial recognition provisions, and how Shufti deploys face checks.
Regional Brief
