Timor-Leste

Identity Verification & KYC For Timor-Leste

Q: What is Know Your Customer Timor-Leste, and why is it mandatory?

Know Your Customer Timor-Leste (KYC) is the process of verifying customer identity, beneficial ownership, and risk profile before onboarding. Under Law No. 17/2011, BCTL regulations, and UIF requirements, all financial institutions in Timor-Leste must conduct KYC to prevent money laundering, terrorist financing, and sanctions violations.

Q: What documents are required for identity verification in Timor-Leste?

The Bilhete de Identidade (national identity card) is the primary document for identity verification in Timor-Leste. Secondary documents include the Passaporte (biometric passport issued since June 2017), Carta de Condução (driver's licence valid 5 years), and Certidão de Nascimento (birth certificate). All must be issued by government authorities.

Q: What is AML Screening Timor-Leste, and how does it apply in the country?

AML Screening checks customers against sanctions lists (OFAC, UN, EU), PEP registries, and adverse media databases to detect money laundering and terrorist financing risks. In Timor-Leste, AML Screening is mandated by Law No. 17/2011, supervised by BCTL, and reported through UIF's goAML system, with ongoing transaction monitoring required.

Q: What is beneficial owner verification, and why is it required in Timor-Leste?

Beneficial owner verification identifies the natural persons who ultimately own or control a business entity. Law No. 17/2011 requires all businesses to disclose beneficial ownership; records are maintained in the SERVE corporate registry. KYB cannot be completed without verified beneficial owner identification.

Q: How do financial institutions meet KYC Solutions for Timor-Leste compliance?

Financial institutions implement KYC through: (1) customer identification via Bilhete de Identidade, (2) document verification, (3) beneficial owner identification for corporate customers, and (4) risk-based AML screening. All steps must produce audit-ready evidence aligned to BCTL examination requirements.

Q: What are the main AML compliance challenges in Timor-Leste?

Challenges include a cash-dependent informal economy where 90% of enterprises lack formal banking access, geographic access barriers in rural areas, limited regulatory enforcement capacity, and weak business documentation standards. Institutions must balance compliance rigour with these operational realities.

Q: How should fintech companies implement AML compliance in Timor-Leste?

Fintech companies must meet the same KYC, KYB, and AML screening requirements as traditional banks under BCTL supervision and Law No. 17/2011. Digital onboarding must still produce audit-ready evidence, support beneficial owner identification, and integrate with UIF reporting via goAML.

Shufti delivers KYC, KYB, and AML screening aligned to Law No. 17/2011, BCTL supervision, UIF reporting, and APG anti-money laundering standards for Timor-Leste.

Operational performance for Timor-Leste KYC

Our Numbers Speak Volumes

<5 sec

Verification Time

100%

Omni-format Document Recognition

2000+

Official Data Sources Verified

Evidence-Ready Checks Across People & Businesses

Individual Documents We Verify

Shufti supports 1 Timorese document type.

View All Supported Documents

Bilhete de Identidade (National ID Card)

Mandatory identity card with photograph, fingerprints, digital signature, and unique ID number issued by Direcção Nacional de Registos for Timorese citizens.

Passaporte (Passport)

Biometric passport issued since June 2017; government-backed travel document accepted internationally for KYC and financial institution verification purposes.

Carta de Condução (Driver's Licence)

Issued by the National Police, valid for five years; contains a photograph, driving record, and identification data for address verification and secondary KYC.

Business Entity Identity

Certificado de Constituição de Sociedade (Certificate of Company Formation)

Confirms legal entity establishment via SERVE business registry with incorporation date, company name, and registration number for KYB validation.

Registro Comercial (Commercial Registration Certificate)

Active company status confirmation maintained in SERVE corporate registry, demonstrating ongoing legal compliance and trading authority.

Business Tax Identity

Número de Identificação Fiscal (NIF/Tax Identification Number)

Mandatory tax ID issued by Autoridade Tributária Timor-Leste (ATTL) for all taxable entities; integrated with SERVE business registration confirming tax compliance status.

Ownership & Control (UBO)

Corporate Register Beneficial Ownership Declarations

Beneficial owner transparency documentation required under Law No. 17/2011 and maintained in the SERVE corporate registry for KYB and AML compliance.

Shareholder Register (Acionistas)

Company ownership structure documentation evidencing control percentages, beneficial ownership, and shareholder identification for enhanced due diligence processes.

Languages We Cover

Portuguese-Language Document Handling

Shufti captures Portuguese and Tetum document data with Latin script and diacritical mark support to handle official Timorese identity documents accurately.

Name Matching Across Variants

Controls handle Portuguese and Tetum diacritics, variant spellings, and hyphenated surnames to reduce false positives in sanctions and adverse media screening.

Evidence Consistency Across KYC/KYB/AML

Identity data reconciled across documents, business registration, beneficial owner disclosures, and AML screening outputs in unified audit-ready case files.

GOVERNANCE & CONTROLS

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-Submissions

Limited formal documentation increases resubmission risk; Shufti's flexible acceptance and fallback pathways reduce rejection friction.

Cleaner Audit Trails

BCTL and UIF examinations require reconstructable case histories; Shufti produces structured CDD files and evidence logs for audits.

Better Name Matching Outcomes

Portuguese and Tetum diacritics and variant spellings reduce false positives in PEP and AML East Timor sanctions screening.

One Workflow, One Back Office

KYC, KYB, and AML screening consolidated in one system, reducing manual handoffs and operational overhead across compliance teams.

National ID-First Flow Design

Bilhete de Identidade is Timor-Leste's primary identity document; Shufti's capture-first approach aligns with how identity verification is conducted in-country.

Enterprise-grade compliance infrastructure

Timor-Leste IDV/KYC Challenges

Informal Economy Challenges

Approximately 90% of informal enterprises lack formal banking access; cash-based verification creates compliance friction.

Geographic Access Barriers

Over 50% of the population travels more than 10 km to access a bank; geographic isolation complicates document verification and reduces KYC participation.

Variable Document Quality

Limited regulatory capacity and inconsistent security standards across issuance bodies mean variable document quality and higher manual review risk.

Enforcement Capacity Gaps

Regulatory framework remains in formative stages; inconsistent enforcement and conflicting legal frameworks create compliance uncertainty for institutions.

Shufti’s IDV/KYC Solutions for Timor-Leste

KYC Solutions

Face Verification

Reduces impersonation and account takeover risk in cash-dependent economies where identity theft and synthetic fraud pose material onboarding threats.

Age Verification

Selfie-based age estimation with government document verification (Bilhete de Identidade, Passport) for regulated products and high-risk customer segments.

Address Verification

Shufti verifies any address-bearing document from Timorese utilities and banks, including EDL-TL, Timor Telecom, BNCTL, BNU, ANZ Timor, and Bank Mandiri.

Document Verification

Supports Bilhete de Identidade, Portuguese passports, and driver's licences with MRZ and biometric extraction; handles Portuguese script and diacritical marks.

KYB Solutions

Business Verification

Validates entity status through SERVE registry, confirms NIF tax registration, and corroborates beneficial ownership declarations per Law No. 17/2011.

Enhanced Due Diligence (EDD)

Escalation workflows for cash-economy risk triggers and cross-border exposure; delivers structured, audit-ready evidence for UIF and BCTL examinations.

AML Screening

Business AML Screening

Screens entities and beneficial owners against UN/OFAC/EU sanctions lists, PEP registries, and adverse media from Timor Post, Diario Nacional, and RTTL.

Transaction Screening

Ongoing transaction monitoring for high-value and cash-intensive activity; supports UIF suspicious transaction reporting via goAML with risk-based alerting.

REGULATORY ALIGNMENT

Built to Fit Timor-Leste's Compliance Landscape

Banco Central de Timor-Leste (BCTL)

Primary banking and financial regulator for monetary policy, supervision, and insurance. Shufti's KYC and AML workflows meet BCTL examination requirements.

Unidade de Informação Financeira (UIF)

Financial Intelligence Unit under BCTL was established by Law No. 17/2011 for transaction reports via goAML. Shufti structures CDD case files for UIF reporting.

Autoridade Tributária Timor-Leste (ATTL)

Tax Authority for tax administration, compliance, and collection under the Ministry of Finance. Shufti integrates NIF verification with KYB, supporting compliance.

Serviço de Registo e Verificação Empresarial (SERVE)

Business registration for incorporation and licensing; maintains corporate records. Shufti integrates SERVE data for KYB and beneficial ownership verification.

Direcção Nacional de Registos e do Notariado

National Directorate under the Ministry of Justice for identity cards and civil records. Shufti supports Bilhete de Identidade and civil document verification.

Ministério das Finanças (Ministry of Finance)

Government department for national budgets, public finances, and financial sector regulation. Shufti aligns KYC, KYB, and AML to the Ministry policy and framework.

Ministério dos Negócios Estrangeiros (Ministry for Foreign Affairs)

National ministry for international relations and foreign affairs. Maintains PEP list for sanctions compliance screening and international affairs coordination.

Deployment Choice

No major cloud regions in Timor-Leste; the nearest infrastructure is in Singapore. On-premise or Singapore hubs are available for entities requiring data residency.

Regulatory Alignment

Aligned to BCTL recordkeeping per Law No. 17/2011 and data protection under Constitution Section 38. Decree-Law 12/2024 requires encryption and authentication.

Retention Controls

Configurable retention and purge settings aligned to five-year minimum recordkeeping under Timor-Leste's AML/CFT framework; supports BCTL and UIF obligations.

Encryption Posture

Strong encryption applied to personal and financial data in transit (TLS 1.2+) and at rest (AES-256) per international standards and Decree-Law No. 12/2024.

Data Controls & Privacy for Timor-Leste

BUILT FOR COMPLIANCE TEAMS

Timor-Leste AML Sources That Strengthen Decision

Ministry for Foreign Affairs of East Timor

Timor Post

Diario Nacional

RTTL (Radio-Televisão Timor Timor-Leste)

Frequently Asked Questions

What is Know Your Customer Timor-Leste, and why is it mandatory?

Know Your Customer Timor-Leste (KYC) is the process of verifying customer identity, beneficial ownership, and risk profile before onboarding. Under Law No. 17/2011, BCTL regulations, and UIF requirements, all financial institutions in Timor-Leste must conduct KYC to prevent money laundering, terrorist financing, and sanctions violations.

What documents are required for identity verification in Timor-Leste?

The Bilhete de Identidade (national identity card) is the primary document for identity verification in Timor-Leste. Secondary documents include the Passaporte (biometric passport issued since June 2017), Carta de Condução (driver's licence valid 5 years), and Certidão de Nascimento (birth certificate). All must be issued by government authorities.

What is AML Screening Timor-Leste, and how does it apply in the country?

AML Screening checks customers against sanctions lists (OFAC, UN, EU), PEP registries, and adverse media databases to detect money laundering and terrorist financing risks. In Timor-Leste, AML Screening is mandated by Law No. 17/2011, supervised by BCTL, and reported through UIF's goAML system, with ongoing transaction monitoring required.

What is beneficial owner verification, and why is it required in Timor-Leste?

Beneficial owner verification identifies the natural persons who ultimately own or control a business entity. Law No. 17/2011 requires all businesses to disclose beneficial ownership; records are maintained in the SERVE corporate registry. KYB cannot be completed without verified beneficial owner identification.

How do financial institutions meet KYC Solutions for Timor-Leste compliance?

Financial institutions implement KYC through: (1) customer identification via Bilhete de Identidade, (2) document verification, (3) beneficial owner identification for corporate customers, and (4) risk-based AML screening. All steps must produce audit-ready evidence aligned to BCTL examination requirements.

What are the main AML compliance challenges in Timor-Leste?

Challenges include a cash-dependent informal economy where 90% of enterprises lack formal banking access, geographic access barriers in rural areas, limited regulatory enforcement capacity, and weak business documentation standards. Institutions must balance compliance rigour with these operational realities.

How should fintech companies implement AML compliance in Timor-Leste?

Fintech companies must meet the same KYC, KYB, and AML screening requirements as traditional banks under BCTL supervision and Law No. 17/2011. Digital onboarding must still produce audit-ready evidence, support beneficial owner identification, and integrate with UIF reporting via goAML.

Build a Timor-Leste-ready KYC, KYB & AML programme with Shufti

Check Pricing Request Demo

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Use Cases for Regulated Growth in Timor-Leste

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Accelerate Growth, Eliminate Friction

Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.

Learn More Try Now

Onboard Global Traders in Real-Time

Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations while preventing identity theft and high-risk chargebacks.

Learn More Try Now

Secure Trust at Every Transaction

Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.

Learn More Try Now

Power a Fair & Secure Player Experience

Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.

Learn More Try Now

Build a Trusted, Verified Workforce

Screen freelancers and drivers at scale. Verify residency and reduce onboarding friction while maintaining trust between users.

Learn More Try Now

Scale Your Exchange with Confidence

Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.

Learn More Try Now

Reduce fraud without blocking growth

Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes and risk-led enforcement actions.

Learn More Try Now