Shufti and AML Certification Centre logosWebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringExplore Now WebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringExplore Now The FRAML Convergence — Unifying Fraud and AML MonitoringExplore Shufti and ICA 25 Years logosWebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now WebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now Financial inclusion and AML/CFT — Managing access and riskRegister Shufti and Finance Magnates logosWebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now WebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now Transaction Monitoring & KYC — Cutting False PositivesRegister WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now Pix Fraud 2026 — Are Your Fraud Controls Ready?Explore Gavel on AMLR rule bookAMLR applies 10 July 2027. See your stack against every obligationBook a Demo AMLR applies 10 July 2027. See your stack against every obligationBook A Demo AMLR applies 10 July 2027 — see your stackBook Demo Globe with pKYC, Onboarding, Screening and Transactions labelsShufti’s Glocal PlatformGlobal Coverage. Local Depth. Full Compliance Lifecycle.Explore More Global Coverage. Local Depth. Full Compliance Lifecycle.Explore More Glocal Platform — Global Coverage. Local Depth.Explore INNOVATION DROPSUMMER
EDITION
20
26
Qualified Electronic Signature
WATCH NOW
INNOVATION DROP - Qualified Electronic SignatureWatch Now Innovation Drop — Qualified Electronic SignatureWatch
INNOVATION DROPSUMMER
EDITION
20
26
Transaction Trust Monitoring
WATCH NOW
INNOVATION DROP - Transaction Trust MonitoringWatch Now Innovation Drop — Transaction Trust MonitoringWatch
INNOVATION DROPSUMMER
EDITION
20
26
Travel Rule Compliance
WATCH NOW
INNOVATION DROP - Travel Rule ComplianceWatch Now Innovation Drop — Travel Rule ComplianceWatch
Datos Insights 2026 Impact Awards badgeDatos Insights 2026 Impact AwardsShufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore Liminal 2026 KYC IndexShufti: A top vendor for product executionRead The PR Shufti: A top vendor for product executionRead The PR Liminal 2026 KYC Index — Shufti: A top vendor for product executionRead PR Gavel on AMLR rule bookAMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027 — Find the GapsConsult Bank card and cashBank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification — Secure PayoutsSee How Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance — Verified Location, Verified IdentityBook Demo Journey Builder dot gridConfigure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Configure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Journey Builder — Configure Verification FlowsSee How Shufti MCP toggle with ChatGPT and ClaudeShufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP — Verification Tools Inside Claude or ChatGPTExplore
4
Book a Demo

Scale Identity Verification and KYC Operations in Uruguay

Verify Uruguayans and resident foreigners through the DNI chip that anchors ID Uruguay, database checks and 10,000+ foreign ID document types, run KYB on companies and real owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for BCU- and SENACLAFT-supervised firms.

Banner Image for Uruguay
Trusted by 2000+ businesses that make identity decisions at scale
cashew gemone HERO Gaming Bitget IronFX PENN National Rakuten Witzeal Noteris banxy

Operational Performance for Uruguay KYC

Our Numbers Speak Volumes

99.10%

Pass
Rates

Under 5 secs

IDV
Verification

95%

eIDV
Coverage

THE URUGUAY VERIFICATION GAP

Uruguay IDV/KYC Challenges

Several DNI Generations and Resident Foreigners' Cards

Several DNI Generations and Resident Foreigners' Cards

KYC in Uruguay meets the chipped DNI issued since 2015, a 2022 version with stronger chip security and the June 2026 redesign, plus DNIs issued to resident foreigners. Shufti's zero-shot document intelligence checks each version's security features, including designs it has never seen.

UN List Matches Must Be Frozen Within Hours

UN List Matches Must Be Frozen Within Hours

Law 19.749 requires obligated subjects to check UN Security Council lists permanently and freeze matching funds without delay, which Decree 136/019 defines as within hours. Shufti rescreens every customer as lists change and flags new matches, registry updates and ownership changes as they appear.

Beneficial Owners Start at 15% of Capital

Beneficial Owners Start at 15% of Capital

Article 15 of Law 19.574 treats anyone holding 15% or more of capital or voting rights as a beneficial owner, well below the 25% many group policies assume. Shufti maps ownership through every layer to that threshold and screens each person found.

Law 20.469 Brings New Firms Into Scope

Law 20.469 Brings New Firms Into Scope

Law 20.469 of March 2026 added non-financial trustees and administration, accounting and data-processing providers as obligated subjects, and extended lawyers' and notaries' duties to deals settled in virtual assets. Shufti gives newly covered firms working KYC, KYB and screening without building them from scratch.

Documents and Languages

Individual Documents Shufti Verifies in Uruguay

Shufti verifies 15 Uruguayan identity and address documents plus passports and ID cards from other countries. The cards below cover the core documents Uruguayan onboarding relies on, with the full list on the supported documents page.

View All Supported Documents

ID Uruguay and the DNI's Digital Credentials

ID Uruguay, the state login AGESIC runs, reaches its advanced level through the chipped DNI, Abitab ID Digital or Antel TuID, and the DNI's certificate signs with handwritten validity under Law 18.600. Shufti reads that same chip over NFC, giving private firms chip-backed assurance.

ID Uruguay and the DNI's Digital Credentials

Documento Nacional de Identidad (Cédula de Identidad)

DNIC, part of the Ministerio del Interior, issues the DNI from 45 days of age with a contact chip for signing and a contactless ICAO chip. Shufti reads the contactless chip, matches a live selfie with liveness and confirms the holder's details against authoritative records.

Documento Nacional de Identidad (Cédula de Identidad)

Residence and Work Permits

The Dirección Nacional de Migración grants residence under Law 18.250, including Mercosur residence, before DNIC issues the resident a DNI. Shufti verifies residence permits, temporary residence cards and work permits, reads each expiry date and matches the holder's face.

Residence and Work Permits

Uruguayan Passport

DNIC has issued ICAO-compliant electronic passports since October 2015. Shufti reads the chip by NFC and checks every passport across nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.

Uruguayan Passport

Foreign Passports and National ID Cards

Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Non-resident investors, regional visitors and new arrivals rely on them before they hold a Uruguayan DNI.

Foreign Passports and National ID Cards

Uruguayan Driving Licence

Each department's traffic authority issues the licence under Article 26 of Law 18.191, with the same exams nationwide and one licence recognised in every department. Shufti checks authenticity, expiry and the photo against a live selfie, which helps delivery and ride-hailing platforms onboard drivers.

Uruguayan Driving Licence

Proof of Address

Bills from UTE, OSE and ANTEL, bank statements and the police-issued constancia de domicilio are verified in the same step as the ID, with the extracted address matched against the one the customer entered at sign-up.

Proof of Address
ID Uruguay and the DNI's Digital Credentials Documento Nacional de Identidad (Cédula de Identidad) Residence and Work Permits Uruguayan Passport Foreign Passports and National ID Cards Uruguayan Driving Licence Proof of Address ID Uruguay and the DNI's Digital Credentials
Registro Nacional de Comercio Certificate Estatutos, Contrato Social and SAS Instruments Business Address Proof Registro Nacional de Comercio Certificate

Entity Identity

Registro Nacional de Comercio Certificate

Shufti reads certificates from the Registro Nacional de Comercio, kept by the Dirección General de Registros, and confirms the company's existence, representatives and registered acts with a live registry call at every check.

Registro Nacional de Comercio Certificate

Estatutos, Contrato Social and SAS Instruments

AI-OCR reads ownership, capital and signing authority from an SA's estatutos, an SRL's contrato social or the instrument that formed a SAS, and flags GAN-generated or edited pages.

Estatutos, Contrato Social and SAS Instruments

Business Address Proof

Utility bills and leases are cross-checked against the address on the company's registry record and its RUT registration.

Business Address Proof

Tax Identity

Registro Único Tributario (RUT)

The Dirección General Impositiva assigns a 12-digit RUT to every taxpayer, and numbers issued since October 2024 begin with 22. Shufti extracts the number, checks its format and matches the legal name to the company's registry record.

Registro Único Tributario (RUT)

Certificado Único de la DGI

Shufti reads the DGI's Certificado Único, which shows a company is up to date with its tax obligations, and checks that it is still within its annual validity.

Certificado Único de la DGI

Foreign Tax Registrations and FATCA/CRS Self-Certification

Foreign-owned entities and overseas parents are verified with their home-country tax registrations, and FATCA and CRS self-certifications are captured in the same case file.

Foreign Tax Registrations and FATCA/CRS Self-Certification
Registro Único Tributario (RUT) Certificado Único de la DGI Foreign Tax Registrations and FATCA/CRS Self-Certification Registro Único Tributario (RUT)
BCU Beneficial Ownership Register Filings Shareholder Register and Ownership Chart Directors, Administrators and Authorised Signatories BCU Beneficial Ownership Register Filings

Ownership and Control

BCU Beneficial Ownership Register Filings

Law 19.484 requires companies, trusts and funds to declare their beneficial owners to the BCU by sworn statement and to report changes within 45 days, or 90 where non-residents are involved. Shufti extracts everyone holding 15% or more and screens each person.

BCU Beneficial Ownership Register Filings

Shareholder Register and Ownership Chart

Shufti reads the share register and the ownership chart the customer supplies, maps ownership through holding companies, trusts and foreign parents, and screens every person and entity in the chain.

Shareholder Register and Ownership Chart

Directors, Administrators and Authorised Signatories

Each person is identity-verified and screened, and Shufti alerts the case owner when the company's registry record shows a new director or representative.

Directors, Administrators and Authorised Signatories

Languages We Cover

Spanish, English and Foreign Document Parsing

Uruguayan DNIs, passports and company records are in Spanish, while investors and new residents bring documents in other scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and averages 93% against Google Vision's 78.4% across its published benchmark. Zero-shot document intelligence reads foreign document layouts it has never seen on first sight, without waiting for a template.

Spanish, English and Foreign Document Parsing

Uruguayan Name Matching

Native phonetic models for 80+ languages match given names with paternal and maternal surnames, accented and unaccented spellings such as Rodríguez and Rodriguez, and compound surnames such as de León in sanctions and PEP screening.

Uruguayan Name Matching

Cross-Document Consistency Checks

Names, dates of birth and DNI numbers are reconciled across the DNI, passport, licence, RUT and beneficial ownership filings, so one customer never splits into mismatched records.

Cross-Document Consistency Checks
Spanish, English and Foreign Document Parsing Uruguayan Name Matching Cross-Document Consistency Checks Spanish, English and Foreign Document Parsing

Independent Validation

Shufti's Recognition Across Independent Evaluations

Liminal

Ranked Exceptional in the Liminal Index 2026 for age estimation

View Reportarrow-icon
Gartner

Differentiated by Gartner on document diversity and country coverage

Read morearrow-icon
iBeta

Certified at iBeta Level 3 PAD with 0% APCER

Read Blogarrow-icon
KuppingerCole

Broadest global reach in the 2025 KuppingerCole Extended IDV report

Download Reportarrow-icon
Homeland Security

Ranked Top 5 in the DHS RIVR 2025 for identity validation

Read Blogarrow-icon
Liminal

Top Vendor for Product Execution in the Liminal Index for KYC 2026

View Reportarrow-icon
Liminal

Ranked Exceptional for age verification by Liminal Index 2026

View Reportarrow-icon
G2

Recognised as a Leader in G2 Fall 2026 reports

Read Morearrow-icon

Regulatory Update

Every Verification Route Uruguayan Firms Rely On, in One Platform

Digital identity verification in Uruguay rests on Article 15 of Law 19.574, which requires identity to be verified with reliable data from independent sources, while Article 19 treats operations without the parties' physical presence as higher risk. Shufti supports the DNI chip and database checks Uruguayan firms rely on, plus document and video routes for non-residents and customers without a DNI.

Fraud Prevention Across the Uruguayan Customer Journey

Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Uruguayan businesses act on risk while keeping legitimate customers moving.

  • 01

    Account Takeover and Recovery Abuse

    Keep out attackers who hijack accounts through SIM swaps, phished credentials or intercepted one-time codes. Shufti scores every login and recovery request on device, behavioral and identity signals and asks for a fresh selfie matched to the DNI when a session looks wrong, so genuine customers keep their access.

  • 02

    Social Engineering and Manipulated Payments

    Law 20.327 of 2024 made computer fraud, including tricking people into handing over their data, a crime under Article 347-BIS of the Penal Code. Active-call detection and behavioral biometrics spot customers coached through a transfer by a fake bank agent, and transaction monitoring holds authorised push payment scams.

  • 03

    Device Spoofing and Automated Attacks

    Block bot-driven sign-ups and emulator farms that open accounts in bulk for mule networks and promotion abuse. Device fingerprinting ties each session to its hardware, flags emulators, virtual machines and spoofed locations, and links repeat devices across applications, so one fraudster cannot pose as hundreds of customers.

  • 04

    Connected Fraud Rings and Repeat Offenders

    Stop offboarded fraudsters from returning under new names. Fraud network detection links shared devices, documents, faces, phone numbers and payment details across applications, and cross-company fraud intelligence surfaces identities already flagged elsewhere, so a ring is shut down as a ring rather than one account at a time.

  • 05

    Synthetic Identities and Fabricated Documents

    Reject identities assembled from a real DNI number, a borrowed address and an invented face. Zero-shot document intelligence tests every DNI and passport for tampering, while email and phone enrichment checks how long each contact detail has existed, exposing profiles built days before the application.

  • 06

    Deepfakes and Camera Injection

    Protect selfie onboarding and video identification from face swaps, replayed footage and virtual cameras. Deepfake detection inspects every frame and the capture channel itself, and presentation attack detection rejects masks and screen replays, so the face matched to a DNI belongs to a live person.

  • 07

    Money Mules and Rapid Fund Movement

    Find mule accounts that receive scam proceeds and pass them on within minutes through instant transfers and wallet top-ups. Money mule detection combines onboarding signals, device history and account behavior to spot new accounts collecting from many senders, flagging them before the money disappears.

  • 08

    Fraudulent Businesses and Concealed Ownership

    Keep shell companies and fronts off your merchant and corporate books. Shufti checks Registro Nacional de Comercio records, RUT details and director histories, maps beneficial owners through layered structures and screens every party, so a business is approved on who stands behind it rather than what it uploads.

Governance & Controls

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-submissions

Capture guidance for every DNI generation, residence permits and Spanish-language documents catches glare, cropping and blur before submission, so customers rarely retake a photo.

Fewer Avoidable Re-submissions

Cleaner Audit Trails

Shufti's case management records sources, results, timestamps, evidence, analyst notes and decisions, packaged as report-ready bundles for unusual transaction reports to the UIAF.

Cleaner Audit Trails

One Workflow, One Back Office

Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director and transaction changes, managing the full compliance lifecycle.

One Workflow, One Back Office

ID Uruguay and DNI-First Flow Design

Residents verify first through the DNI chip behind ID Uruguay or a database check, and non-residents move to passport and selfie checks in one flow.

ID Uruguay and DNI-First Flow Design

Shufti's IDV/KYC Solutions for Uruguay

KYC Solutions

Online KYC in Uruguay serves DNI holders, resident foreigners and non-residents, some with an NFC phone and a chipped card and some without. One Shufti flow routes each by risk, so nobody faces checks they don't need.

Explore More
Face Verification

Face Verification

Remote onboarding depends on proving that the person holding a DNI is its owner, the risk Article 19 flags for operations without physical presence. Shufti's face matching delivers a 99.5% first-try pass rate, and DHS RIVR 2025 testing measured a false match rate below 0.001.

.
Age Verification

Age Verification

Licensed gaming, alcohol sales and many online services must keep minors out. Shufti estimates age from a selfie in under five seconds, blocks 99.8% of underage attempts and falls back to a DNI check when the estimate is close.

.
Bank Account Verification

Bank Account Verification

Payouts and direct debits fail when an account number or holder name is wrong. Shufti validates Uruguayan bank account details and matches the holder's name in real time before the first transfer, so funds reach the right customer.

.
Address Verification

Address Verification

Address documents vary by issuer across Uruguay's 19 departments. Shufti's layout-aware extraction and fuzzy matching verify them at a 99.3% pass rate, and docless checks confirm an address in under three seconds without an upload.

.
Document Verification

Document Verification

Uruguayan onboarding draws on several DNI generations, passports, residence permits and work permits. Shufti verifies each within seconds, reading Spanish fields and testing every document for tampering, screenshots and synthetic edits.

.
Identity Verification

Identity Verification

Separate tools for documents, selfies, database checks and addresses split one customer across several records. Shufti runs document, biometric, NFC, address and docless checks in one API session and returns one decision with its evidence.

.

KYB Solutions

Business verification in Uruguay means reconciling Registro Nacional de Comercio records, the DGI's RUT and the beneficial owners declared to the BCU, often through holding companies and trusts. Shufti calls the registries live and identifies beneficial owners at the 15% threshold set by Law 19.574.

Explore More
Business Verification

Business Verification

Corporate onboarding in Uruguay means confirming the company's registry record, RUT, representatives and everyone who owns or controls 15% or more. Shufti's live registry call confirms the company record, and owners are checked against the share register and the BCU declaration the company provides.

.
Enhanced Due Diligence

Enhanced Due Diligence

Non-residents, legal persons, trusts, PEPs and remote operations all call for the enhanced due diligence Article 19 of Law 19.574 requires. Shufti's branching questionnaires, configurable risk scoring and verification links for beneficial owners collect the evidence and record every answer.

.

AML Screening

A customer who is clean at onboarding can land on a list next week, so AML screening in Uruguay cannot stop at sign-up. Shufti's perpetual KYC rescreens every customer against 4,000+ watchlists, including the UN Security Council lists Law 19.749 requires firms to check permanently, refreshed every 15 minutes, with every hit in one case file.

Explore More
Business AML Screening

Business AML Screening

A company's risk often sits with its owners and directors. Shufti screens entities, beneficial owners and representatives against UN Security Council lists, SENACLAFT's national PEP list, global sanctions and 50,000+ adverse media sources, and perpetual KYB rescreens the whole portfolio.

.
Transaction Monitoring

Transaction Monitoring

Unusual transactions, including attempted ones, must reach the UIAF as soon as they are classified as such. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity, with 60% fewer false positives and report-ready case bundles for the UIAF.

.
Travel Rule

Travel Rule

Law 20.345 of 2024 placed virtual asset service providers under BCU supervision, bringing them inside Uruguay's AML regime. Shufti's single integration connects to major Travel Rule networks, exchanges IVMS101 data and verifies ownership of unhosted wallets before funds move.

.
AI Compliance Co-Pilot

AI Compliance Co-Pilot

One common name can return 140+ screening hits. Shufti's AI Compliance Co-Pilot reviews every hit and gives a confidence score with a written reason, so analysts clear obvious false positives quickly while your compliance officer keeps the final call.

.
REGULATORY ALIGNMENT

Built To Fit Uruguay's Compliance Landscape

BCU AML regulations apply to every entity the Superintendencia de Servicios Financieros supervises, SENACLAFT oversees the non-financial sector, and Law 19.574 sets the duties both enforce. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each licence your group holds.

Ley Integral contra el Lavado de Activos (Law 19.574)

Ley Integral contra el Lavado de Activos (Law 19.574)

Enacted in December 2017, the law replaced most of Law 17.835. Article 15 sets due diligence including continuous monitoring and the 15% beneficial ownership threshold, Article 19 sets enhanced measures and Article 21 sets five-year record keeping. Law 20.469 of March 2026 rewrote thirty of its articles.

Banco Central del Uruguay (BCU)

Banco Central del Uruguay (BCU)

Through its Superintendencia de Servicios Financieros, the BCU regulates banks, exchange, transfer and payment providers, insurers, securities firms, fund managers and virtual asset service providers under Article 37 of Law 16.696. Every entity it supervises is an obligated subject under Article 12 of Law 19.574.

Unidad de Información y Análisis Financiero (UIAF)

Unidad de Información y Análisis Financiero (UIAF)

The UIAF is Uruguay's financial intelligence unit, set within the Superintendencia de Servicios Financieros by Article 10 of Law 18.401. Obligated subjects report unusual transactions to it immediately, including attempted ones, and Article 24 of Law 19.574 lets it block suspect operations for up to five business days.

Secretaría Nacional para la Lucha contra el Lavado de Activos y el Financiamiento del Terrorismo (SENACLAFT)

Secretaría Nacional para la Lucha contra el Lavado de Activos y el Financiamiento del Terrorismo (SENACLAFT)

SENACLAFT reports to the Presidency and supervises the non-financial obligated subjects in Article 13 of Law 19.574, under Decree 379/018. It registers those firms, publishes the national PEP list and prepared the 2023 national risk assessment behind the 2025-2030 strategy approved by Decree 155/025.

Virtual Assets Law (Law 20.345)

Virtual Assets Law (Law 20.345)

Promulgated in September 2024, Law 20.345 added virtual asset service providers to the entities the BCU regulates through the Superintendencia de Servicios Financieros. Providers that only buy and sell virtual assets are supervised for AML purposes alone, and every provider falls under Article 12 of Law 19.574.

Beneficial Ownership Register (Law 19.484)

Beneficial Ownership Register (Law 19.484)

Article 22 applies the same 15% threshold to the register. Covered entities declare their owners to the BCU by sworn statement, certified by a notary under Decree 166/017, and Article 30 requires changes within 45 days, or 90 days for non-resident owners. The Auditoría Interna de la Nación enforces compliance.

Targeted Financial Sanctions Law (Law 19.749)

Targeted Financial Sanctions Law (Law 19.749)

Article 3 requires obligated subjects to check UN Security Council terrorism and proliferation lists permanently and freeze matches without delay, which Decree 136/019 defines as within hours. Firms notify the UIAF, a criminal court confirms the freeze within 72 hours and updated lists appear on BCU and SENACLAFT websites.

Dirección Nacional de Identificación Civil (DNIC)

Dirección Nacional de Identificación Civil (DNIC)

DNIC, part of the Ministerio del Interior, issues the Documento Nacional de Identidad under Decree-Law 14.762 as well as electronic passports. Its chipped DNI, issued since 2015, carries an advanced electronic signature certificate, and Article 6 of Law 18.600 gives that signature the same validity as a handwritten one.

Unidad de Certificación Electrónica (UCE)

Unidad de Certificación Electrónica (UCE)

The UCE accredits the trust service providers behind Uruguay's digital identity under Law 18.600, currently the national postal service, Abitab, the Ministerio del Interior and Antel. Their credentials reach the advanced level of ID Uruguay, the login AGESIC runs for people using online public services.

GAFILAT Mutual Evaluation of Uruguay

GAFILAT Mutual Evaluation of Uruguay

Uruguay is a member of GAFILAT, the FATF-style regional body for Latin America. Its fourth-round mutual evaluation, published in 2020, rated all eleven of its effectiveness outcomes as moderate, and Uruguay was not on the FATF list of jurisdictions under increased monitoring published in June 2026.

Uruguay Data Residency and Deployment

Article 23 of Law 18.331 bars transfers to countries without adequate protection unless an exception or authorised safeguard applies. Shufti runs on-premises inside your own infrastructure in Uruguay, including air-gapped deployments, or as SaaS or private cloud, with hosting locations and transfer safeguards fixed in your agreement.

Law 18.331 on Personal Data Protection

The URCDP enforces Law 18.331, which requires every private database to be registered, and Article 4 of Decree 64/020 requires breaches to reach the URCDP within 72 hours. Shufti protects identity and biometric data with encryption, role-based access and configurable retention.

Biometric Data Under Article 18-BIS

Law 19.924 added a definition of biometric data to Law 18.331 and Article 18-BIS, which allows its processing with the person's informed consent after a data protection impact assessment. Shufti uses only the facial data each check needs, records consent with the check and supports your assessment.

Retention Controls

Retention is configurable by client and licence, covering the five-year minimum in Article 21 of Law 19.574 and up to ten years where regulation requires. Statutory minimums are not automatic deletion dates, and legal holds keep records in place when the UIAF or a court asks.

Encryption and Security

Data is encrypted in transit and at rest, with role-based access and audit logging throughout. ISO 27001:2022 and SOC 2 Type 2 reports support vendor assessments, including the outsourcing reviews banks and other BCU-supervised firms run before handing a regulated process to a provider.

Automated Decisions and Biometric Data

Article 16 of Law 18.331 lets people challenge decisions based solely on automated assessment and ask for the criteria and program used. Shufti returns verification results and supporting reasons through the API and back office, so support teams can explain outcomes and escalate disputed results.

Scope of Our Role

Law 18.331 defines an encargado del tratamiento as the party that processes personal data on behalf of the responsable. Shufti processes data as that encargado for your firm, which remains the responsable, and its privacy notice identifies any activities where Shufti acts independently.

Data Residency and Privacy Controls in Uruguay

BUILT FOR COMPLIANCE TEAMS

Uruguay AML Sources That Strengthen Decisions

Turn Uruguay Verification Requirements into a Smoother Customer Journey

Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Identity Verification Built Around Your Industry in Uruguay

Open Accounts Remotely Under BCU Rules

Banks are obligated subjects under Article 12 of Law 19.574, and Article 19 requires enhanced measures for non-⁠residents and operations without physical presence. Shufti combines DNI chip, database and passport checks in one flow, adds selfie liveness for remote customers and keeps every decision ready for BCU examination.

Frequently Asked Questions

Does Shufti support ID Uruguay, and what happens when customers cannot use it?

Yes, through the chipped DNI behind ID Uruguay's advanced level, which Shufti reads by NFC. Customers without an NFC phone or chipped card verify in the same flow through a database check on name, DNI number and date of birth, or a document and selfie.

Is scanning a DNI enough, or should verification include its chip?

A scan shows only what is printed, while the DNI's contactless chip holds the holder's data and photo in signed form that is far harder to forge. Shufti reads the chip, compares it with the card, runs forensic checks and matches a live selfie.

Can Shufti verify foreign documents or identity formats it has not encountered before?

Yes. Shufti's zero-shot AI adapts to unfamiliar layouts without a template, so a new resident's national ID or a recently redesigned passport is checked for authenticity and tampering like any known format. The DNI redesign DNIC presented in 2026 is handled the same way.

How does Shufti OCR compare with Google OCR for Spanish-language identity documents?

Shufti's OCR reads Spanish fields at 99.7% accuracy, keeps accents and ñ intact and separates paternal and maternal surnames. Across the languages in its published benchmark, it averages 93% accuracy against Google Vision's 78.4%, which matters for documents foreign investors and new residents bring.

How does Shufti verify ownership when a Uruguayan company has several corporate layers?

Shufti pulls registry records for each company in the chain, maps shareholdings through holding entities and trusts, and identifies owners at the 15% threshold in Article 15 of Law 19.574. It then compares the result with the beneficial owners the customer declared to the BCU.

Does Shufti's ongoing monitoring cover more than sanctions screening?

Yes. Article 15 of Law 19.574 requires continuous monitoring of each business relationship, not only periodic list checks. Shufti monitors transactions against each customer's baseline, rescreens customers and beneficial owners, and alerts you when company, director or ownership records change.

How does Shufti keep screening current and handle Uruguayan name variations?

Watchlists, including the UN Security Council lists Law 19.749 requires firms to check permanently, update within 15 minutes of a change at source. Phonetic matching handles two surnames, accents and compound names such as de los Santos, so spelling differences never hide a match.

Can we choose Uruguayan hosting or run verification inside our own infrastructure?

Yes. Run Shufti on-premises in your own data centre in Uruguay, air-gapped if required, or use SaaS or private cloud. Your agreement names where data is processed and the safeguards Article 23 of Law 18.331 expects for any transfer abroad.

What controls help us protect identity and biometric data?

Shufti encrypts data in transit and at rest, applies role-based access and logs every access. Biometric data is processed with consent, after the impact assessment Article 18-BIS of Law 18.331 requires, limited to what verification needs and deleted on your schedule.

Can we configure different retention periods for different Uruguayan licences?

Yes. Retention is set per client, licence and record type, so AML records run at least five years after the relationship ends under Article 21 of Law 19.574, or longer where regulation requires. Legal holds pause deletion when the UIAF or a court requests records.

What does Shufti provide when our compliance team needs to prepare a UIAF report?

Shufti's case file holds the customer's verified identity, screening results, transaction history, alerts and analyst notes in one place. Your compliance officer exports a report-ready bundle and reports the unusual or suspicious operation to the UIAF immediately, as the law requires.

Can we add verification checks without rebuilding our onboarding journey?

Yes. The AI Journey Builder adds or reorders checks such as NFC, database or address verification without code changes. Routing rules send customers to different checks by product, risk tier or residency, so a non-resident moves straight to passport verification.

How does Shufti make verification queries easier for our customer support team?

Every decision is shown in the back office with the reason, the failed check and the captured evidence. Support teams can tell a customer exactly what to fix, such as a glare-covered DNI or an expired residence permit, and escalate disputed results to compliance.

Let’s Build Trust Into Your Business

1B+Verifications Processed

240+Regions Actively Processed

99.7%Accuracy Rate

Samer Al Tamimi

CEO of Safwa Bank

Samer Al Tamimi

“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”

Trusted. Compliant. Certified

cetificate-logos cetificate-logos cetificate-logos cetificate-logos

Explore Shufti For Your Business

Get a personalised demo from our experts.

    Which products would you like to check out?

    VideoIdent

    Address Verification

    eIDV (Docless)

    KYB

    AML Screening

    Fraud Prevention

    AMLR

    Face and ID Verification

    Age Verification

    Others

    What is your expected yearly verification volume?

    1 to 1,000

    1,001 to 5,000

    5,001 to 20,000

    20,001 to 50,000

    50,001 to 100,000

    100,001 to 1,000,000

    1,000,000+

    Valid Invalid number

    By clicking Submit, you accept our Privacy Policy and consent to marketing communications.

    PROVEN PLAYBOOKS

    Explore Practical KYC & AML Resources

    Read More
    Cover of eIDV Global Capability Matrix

    5 January, 2026

    eIDV Global Capability Matrix

    Shufti's eIDV coverage across 87 jurisdictions, showing which passive, active and biometric database checks, plus address and age checks, are available in each.

    Coverage Sheet

    Read More
    Read More
    Cover of Document Verification: Latin America

    16 April, 2026

    Document Verification: Latin America

    AI-generated RGs, INEs and cédulas now pass basic visual checks. How Shufti's forensic document checks and LATAM-trained OCR verify IDs across the region.

    Regional Brief

    Read More
    Read More
    Cover of AML Screening: Latin America (LATAM)

    23 September, 2025

    AML Screening: Latin America (LATAM)

    Fragmented domestic watchlists, dual surnames and shrinking STR deadlines make LATAM screening hard. How Shufti screens names accurately across the region.

    Regional Brief

    Read More