Ukraine

Identity Verification And KYC For Ukraine

Q: What are the KYC requirements for financial institutions in Ukraine?

KYC in Ukraine requires customer identification and verification, beneficial owner (UBO) identification, transaction monitoring, and STR reporting to SFMS under Law No. 361-IX. Entities must verify identity with passports, ID cards, or Diia digital IDs and maintain audit evidence.

Q: What documents are required for identity verification in Ukraine?

Accepted documents: Biometric Passport (International), Identity Card (ID-картка), Residence Permit, Driver's Licence, Older-format Passport, Temporary/Permanent Residence Permits, Refugee Travel Document, and Diia app digital IDs. Diia digital documents are legally equivalent to physical documents.

Q: How does eKYC work in Ukraine with the Diia app?

eKYC via the Diia app (74.09% adoption) provides legally valid digital passports with biometric verification, NFC chip reading, and address extraction. Biometric liveness checks prevent synthetic fraud while enabling remote onboarding for Ukraine's population.

Q: What is EDRPOU, and how is it used for business verification in Ukraine?

EDRPOU is the eight-digit State Tax Service code uniquely identifying Ukrainian legal entities. Mandatory for KYB verification. Enables retrieval of company registration details, legal form, address, and beneficial owner declarations (Form 1) from official registers.

Q: What are the AML compliance obligations for businesses in Ukraine?

Obligations include customer due diligence (identity and UBO verification), transaction monitoring at UAH 400,000+ thresholds, STR filing to SFMS via goAML, PEP screening, sanctions monitoring (NSDC, EU, OFAC, UN), and five-year record retention.

Q: How do I screen against Ukraine's PEP and sanctions lists?

Screen against NACP PEP register, pep.org.ua, and multi-jurisdictional lists: NSDC sanctions, EU sanctions, OFAC Ukraine programs, and UN lists. Note: Ukrainian PEPs retain lifetime status if they held office in Parliament, Cabinet, or the President's office.

Q: What AML and KYC regulations apply to crypto and fintech in Ukraine?

Crypto exchanges and fintech platforms fall under SFMS and NBU as VASPs. Compliance requires FATF Travel Rule implementation, customer due diligence, UBO verification, transaction monitoring, STR reporting, and sanctions screening. Bill 10225-d establishes VASP registration.

Q: How long must KYC and AML records be retained in Ukraine?

Five-year minimum retention after the end of the business relationship or transaction date per Law No. 361-IX. Banks maintain local storage for audit and inspection under banking secrecy rules. Retention is calculated from the relationship termination date.

Simplify KYC, eKYC, and AML compliance for Ukraine with Law No. 361-IX alignment. NBU and SFMS compliance built in for financial institutions and fintechs.

Operational performance for Ukraine KYC

Our Numbers Speak Volumes

98.19%

Pass Rates

<5 sec

Verification Time

74.09%

eIDV Coverage

Evidence-Ready Checks Across People & Businesses

Individual Documents We Verify

Shufti supports 8 Ukrainian document types.

View All Supported Documents

Biometric Passport (International)

Dark blue booklet with embedded ICAO-compliant biometric chip. Valid for international travel. Legal for remote eKYC workflows. Machine-readable zone (MRZ) verified for authenticity.

Passport of a Citizen of Ukraine (Internal, Older Format)

Vintage 1994-era booklet passport, still legally valid for identity verification. Limited adoption due to age. Supported with legacy document handling protocols for document capture and OCR.

Identity Card (ID-картка)

Credit-card-sized national ID with integrated microchip. Valid from age 14. Legal since 2016. Primary Ukrainian identity document with biometric data stored securely on a chip.

Residence Permit

Legal documentation for foreign nationals residing in Ukraine. Issued by the State Migration Service. Includes photographic identification, residency address, and validity dates for compliance.

Driver's Licence

Issued by the State Road Authority of Ukraine. Accepted for identity verification and address confirmation in AML/KYC workflows. Modern cards include security features and embedded biometric data.

Permanent Residence Permit for Foreigners

Long-term residency authorisation for non-citizens. Issued by the State Migration Service. Required for KYC in business relationships with foreign-resident parties and address validation.

Temporary Residence Permit

Short-term authorisation for foreign nationals. Issued by the State Migration Service. Valid for identity verification. Includes residency address for address verification and AML monitoring obligations.

Travel Document (Refugee/Stateless)

Issued by the State Migration Service to stateless persons and refugees. Recognised under international protocols. Enables KYC verification for vulnerable populations displaced by conflict or persecution.

Business Entity Identity

Unified State Register of Enterprises and Organisations (USREOU / EDRPOU Extract)

Official registry extract showing company name, EDRPOU code, registration date, legal form, address, and representative details. Mandatory for KYB verification in Ukraine. Updated in real-time by the State Tax Service.

Certificate of Registration

Official State Tax Service document confirming business registration. Includes EDRPOU code and legal entity designation. Primary proof of business existence and legal status for KYB workflows.

Business Tax Identity

EDRPOU Code Certificate

Confirms the 8-digit tax identification number unique to each legal entity. Issued by the State Tax Service of Ukraine. Mandatory reference for beneficial owner identification and UBO declaration verification.

Tax Registration Certificate

Document issued by the State Tax Service for VAT and income tax purposes. Confirms tax registration status. Required for business AML/KYC compliance and regulatory reporting obligations.

Ownership & Control (UBO)

Beneficial Owner Declaration (Form 1)

Official declaration identifying the ultimate beneficial owner (кінцевий бенефіціарний власник) who owns ≥25% or controls operations. Must include full name, patronymic, date of birth, and residence. Mandatory update requirement.

Declaration of Final Beneficial Owner

Legal requirement under Article 64-1 of the Commercial Code. Identifies a natural person with ultimate control. Regularly updated in the official register. Essential for SFMS compliance and transaction monitoring.

Languages We Cover

Ukrainian Cyrillic Script Document Handling

Shufti's optical character recognition (OCR) and natural language processing handle Ukrainian Cyrillic documents natively. Supports distinct Ukrainian letters (Ґґ, Іі, Її, Єє). Accurate extraction of personal and business information from official documents issued in Ukrainian.

Cyrillic-to-Latin Name Transliteration and Variant Matching

Applies the Official Ukrainian Transliteration Standard (HKUTO) for name matching across Latin and Cyrillic forms. Handles variant spellings resulting from historical Russification and regional dialects. Prevents false negatives in sanctions screening and beneficial owner verification.

KYC and KYB Consistency Across Verification Steps

Cross-references identity information across document types, Diia digital records, and business registers. Identifies name mismatches, address inconsistencies, and patronymic variations. Maintains audit-trail evidence of consistency checks required by NBU and SFMS reporting obligations.

GOVERNANCE & CONTROLS

Audit-Ready Decisions, Lower Operational Drag

Fewer avoidable re-submissions

Diia digital IDs and war-displaced exceptions reduce rejections. Legacy formats and damaged documents are handled without redundancy.

Cleaner audit trails

Evidence capture and regulatory reporting support SFMS and NBU audits. Transaction history preserved for STR filing.

Better name matching outcomes

Cyrillic-to-Latin transliteration reduces false positives from spelling variants. Sanctions accuracy improves on NSDC, EU, and OFAC lists.

One workflow, one back office

KYC, KYB, and AML screening in one interface. Unified beneficial owner verification and STR filing reduce overhead.

National ID-first flow design

ID-картка and biometric passport prioritised as primary. Fallback to Diia digital for remote onboarding. Aligned with Ukrainian adoption patterns.

Enterprise-grade compliance infrastructure

Ukraine IDV/KYC Challenges

Occupied Territory Ambiguity

Territory documents create verification and sanctions screening risk. OFAC and EU maintain separate regimes for compliance.

IDP & War-Displaced Identity

Millions of internally displaced Ukrainians lack documents. Address inconsistencies and relocations complicate KYC and residency verification.

Sanctions List Complexity

Ukrainian entities face overlapping sanctions lists (NSDC, EU, OFAC, UN). False positives common in name matching across lists.

Digital-Physical ID Duality

Diia digital IDs (74.09% adoption) coexist with physical documents. Diia enables address verification, not age verification. Dual-track flows create gaps.

Shufti’s IDV/KYC Solutions for Ukraine

KYC Solutions

Face Verification

Deepfake and liveness detection prevent synthetic identity and occupied-territory forgery. Integrates with Diia biometric verification for remote onboarding.

Age Verification

Selfie age estimation with document fallback. Supports passport, ID card, driver's licence. Meets financial services and gambling requirements.

Address Verification

Validates against DTEK, Kyivstar, Ukrtelecom, and banks (PrivatBank, Oschadbank, Raiffeisen). Integrates Diia app address extraction for digital verification.

Document Verification

Cyrillic document support with MRZ, NFC verification, and anti-counterfeiting. Covers passports, ID cards, residence permits, and Diia identity.

KYB Solutions

Business Verification

EDRPOU confirms legal entity status and beneficial owner declarations. Verifies against the State Tax Service. Supports KYB for Ukrainian and foreign entities.

Enhanced Due Diligence (EDD)

Sanctions screening (NSDC, EU, OFAC, UN). PEP verification via NACP. War-risk triggers and adverse media monitoring.

AML Screening

Business Monitoring

Continuous AML Screening Ukraine operations against NSDC, SFMS blacklist, and sanctions. PEP lifetime classification. UBO verification and ownership checks. Adverse media surveillance.

Transaction Screening

AML services in Ukraine include real-time monitoring aligned to Law No. 361-IX (UAH 400,000+ thresholds). STR facilitation for SFMS via goAML. High-risk flagging for financial crime.

REGULATORY ALIGNMENT

Built to Fit Ukraine's Compliance Landscape

National Bank of Ukraine (NBU)

The central bank supervises Ukrainian banks, credit unions, and AML/CFT compliance. Shufti delivers NBU-aligned KYC and CDD audit trails for regulated institution onboarding.

State Financial Monitoring Service (SFMS)

Ukraine's FIU receives and analyses suspicious transaction reports under Law No. 361-IX. Shufti supports SFMS STR filing via goAML with audit-ready evidence logs for each case.

National Securities and Stock Market Commission (NSSMC)

Regulates securities markets, pension funds, and capital market compliance in Ukraine. Shufti provides KYC, KYB, and UBO verification with audit-ready evidence for securities firms.

State Tax Service of Ukraine (STS)

Manages the EDRPOU register and tax identification for Ukrainian business entities. Shufti verifies EDRPOU codes against STS registries to confirm legal status for KYB workflows.

National Agency on Corruption Prevention (NACP)

Maintains Ukraine's PEP declarations register for anti-corruption and AML compliance. Shufti screens against NACP to identify political exposure and lifetime PEP classifications.

Ministry of Digital Transformation

Administers the Diia app, enabling legally valid digital identity verification since 2021. Shufti integrates Diia for remote onboarding and biometric identity verification at scale.

Ministry of Finance of Ukraine

Develops financial policy and oversees Ukraine's AML/CFT framework under Law No. 361-IX. Shufti aligns KYC workflows to Ministry of Finance obligations on STR filing and retention.

Deployment Choice

No hyperscaler data centres (AWS, Azure, GCP) operate in Ukraine. EU hosting in Germany or Poland available for regulated entities requiring in-country governance and banking secrecy compliance.

Regulatory Alignment

Deployment complies with Law on Personal Data Protection No. 2297-VI and Law No. 361-IX AML/CFT recordkeeping. Aligned to GDPR Article 3 (EU resident data) standards.

Retention Controls

Configurable data retention per Law No. 361-IX requirement: five-year minimum from the end of the business relationship or transaction date for AML/CFT compliance.

Encryption Posture

Strong encryption protects personal and financial data in transit and at rest. Aligned to NBU security guidance and GDPR technical standards for EU resident data processing.

Data Controls & Privacy for Ukraine

BUILT FOR COMPLIANCE TEAMS

Ukraine AML Sources That Strengthen Decision

National Security and Defence Council of Ukraine – Personal Sanctions

Ukraine SFMS Blacklist

Parliament of Ukraine – Verkhovna Rada (PEP Level 1)

Office of the President (PEP Level 2)

Cabinet of Ministers (Ukraine) (PEP Level 2)

Ukrinform (Adverse Media)

Kyiv Post (Adverse Media)

Interfax-Ukraine (Adverse Media)

National Security and Defence Council of Ukraine – Personal Sanctions

Ukraine SFMS Blacklist

Parliament of Ukraine – Verkhovna Rada (PEP Level 1)

Office of the President (PEP Level 2)

Cabinet of Ministers (Ukraine) (PEP Level 2)

Ukrinform (Adverse Media)

Kyiv Post (Adverse Media)

Interfax-Ukraine (Adverse Media)

National Security and Defence Council of Ukraine – Personal Sanctions

Ukraine SFMS Blacklist

Parliament of Ukraine – Verkhovna Rada (PEP Level 1)

Office of the President (PEP Level 2)

Cabinet of Ministers (Ukraine) (PEP Level 2)

Ukrinform (Adverse Media)

Kyiv Post (Adverse Media)

Interfax-Ukraine (Adverse Media)

Frequently Asked Questions

What are the KYC requirements for financial institutions in Ukraine?

KYC in Ukraine requires customer identification and verification, beneficial owner (UBO) identification, transaction monitoring, and STR reporting to SFMS under Law No. 361-IX. Entities must verify identity with passports, ID cards, or Diia digital IDs and maintain audit evidence.

What documents are required for identity verification in Ukraine?

Accepted documents: Biometric Passport (International), Identity Card (ID-картка), Residence Permit, Driver's Licence, Older-format Passport, Temporary/Permanent Residence Permits, Refugee Travel Document, and Diia app digital IDs. Diia digital documents are legally equivalent to physical documents.

How does eKYC work in Ukraine with the Diia app?

eKYC via the Diia app (74.09% adoption) provides legally valid digital passports with biometric verification, NFC chip reading, and address extraction. Biometric liveness checks prevent synthetic fraud while enabling remote onboarding for Ukraine's population.

What is EDRPOU, and how is it used for business verification in Ukraine?

EDRPOU is the eight-digit State Tax Service code uniquely identifying Ukrainian legal entities. Mandatory for KYB verification. Enables retrieval of company registration details, legal form, address, and beneficial owner declarations (Form 1) from official registers.

What are the AML compliance obligations for businesses in Ukraine?

Obligations include customer due diligence (identity and UBO verification), transaction monitoring at UAH 400,000+ thresholds, STR filing to SFMS via goAML, PEP screening, sanctions monitoring (NSDC, EU, OFAC, UN), and five-year record retention.

How do I screen against Ukraine's PEP and sanctions lists?

Screen against NACP PEP register, pep.org.ua, and multi-jurisdictional lists: NSDC sanctions, EU sanctions, OFAC Ukraine programs, and UN lists. Note: Ukrainian PEPs retain lifetime status if they held office in Parliament, Cabinet, or the President's office.

What AML and KYC regulations apply to crypto and fintech in Ukraine?

Crypto exchanges and fintech platforms fall under SFMS and NBU as VASPs. Compliance requires FATF Travel Rule implementation, customer due diligence, UBO verification, transaction monitoring, STR reporting, and sanctions screening. Bill 10225-d establishes VASP registration.

How long must KYC and AML records be retained in Ukraine?

Five-year minimum retention after the end of the business relationship or transaction date per Law No. 361-IX. Banks maintain local storage for audit and inspection under banking secrecy rules. Retention is calculated from the relationship termination date.

Build a Ukraine-ready KYC, KYB & AML programme with Shufti

Check Pricing Request Demo

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Use Cases for Regulated Growth in Ukraine

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Fintech

Forex

Banking

Gaming

Gig Economy

Crypto

Marketplace

Accelerate Growth, Eliminate Friction

Onboard users in seconds, not days. Deploy tiered address verification flows that maximise completion rates for genuine users while filtering out synthetic fraud.

Learn More Try Now

Onboard Global Traders in Real-Time

Verify investors across 250+ countries & territories. Ensure compliance with international financial regulations while preventing identity theft and high-risk chargebacks.

Learn More Try Now

Secure Trust at Every Transaction

Automate KYC and AML workflows to reduce manual onboarding costs. Strengthen residency checks while delivering the frictionless digital experience modern customers expect.

Learn More Try Now

Power a Fair & Secure Player Experience

Reduce bonus abuse and multi-accounting rings at the door. Enforce location rules and trigger step-up checks without disrupting the player journey.

Learn More Try Now

Build a Trusted, Verified Workforce

Screen freelancers and drivers at scale. Verify residency and reduce onboarding friction while maintaining trust between users.

Learn More Try Now

Scale Your Exchange with Confidence

Balance anonymity with compliance. Instantly verify user jurisdiction to meet Travel Rule obligations and help stop abuse without slowing down legitimate trading volume.

Learn More Try Now

Reduce fraud without blocking growth

Shufti supports marketplace integrity by verifying seller and buyer identities, enabling age-gated journeys where needed, and preserving evidence to support investigations, disputes and risk-led enforcement actions.

Learn More Try Now