Shufti and AML Certification Centre logosWebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringExplore Now WebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringExplore Now The FRAML Convergence — Unifying Fraud and AML MonitoringExplore Shufti and ICA 25 Years logosWebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now WebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now Financial inclusion and AML/CFT — Managing access and riskRegister Shufti and Finance Magnates logosWebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now WebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now Transaction Monitoring & KYC — Cutting False PositivesRegister WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now Pix Fraud 2026 — Are Your Fraud Controls Ready?Explore Gavel on AMLR rule bookAMLR applies 10 July 2027. See your stack against every obligationBook a Demo AMLR applies 10 July 2027. See your stack against every obligationBook A Demo AMLR applies 10 July 2027 — see your stackBook Demo Globe with pKYC, Onboarding, Screening and Transactions labelsShufti’s Glocal PlatformGlobal Coverage. Local Depth. Full Compliance Lifecycle.Explore More Global Coverage. Local Depth. Full Compliance Lifecycle.Explore More Glocal Platform — Global Coverage. Local Depth.Explore INNOVATION DROPSUMMER
EDITION
20
26
Qualified Electronic Signature
WATCH NOW
INNOVATION DROP - Qualified Electronic SignatureWatch Now Innovation Drop — Qualified Electronic SignatureWatch
INNOVATION DROPSUMMER
EDITION
20
26
Transaction Trust Monitoring
WATCH NOW
INNOVATION DROP - Transaction Trust MonitoringWatch Now Innovation Drop — Transaction Trust MonitoringWatch
INNOVATION DROPSUMMER
EDITION
20
26
Travel Rule Compliance
WATCH NOW
INNOVATION DROP - Travel Rule ComplianceWatch Now Innovation Drop — Travel Rule ComplianceWatch
Datos Insights 2026 Impact Awards badgeDatos Insights 2026 Impact AwardsShufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore Liminal 2026 KYC IndexShufti: A top vendor for product executionRead The PR Shufti: A top vendor for product executionRead The PR Liminal 2026 KYC Index — Shufti: A top vendor for product executionRead PR Gavel on AMLR rule bookAMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027 — Find the GapsConsult Bank card and cashBank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification — Secure PayoutsSee How Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance — Verified Location, Verified IdentityBook Demo Journey Builder dot gridConfigure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Configure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Journey Builder — Configure Verification FlowsSee How Shufti MCP toggle with ChatGPT and ClaudeShufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP — Verification Tools Inside Claude or ChatGPTExplore
4
Book a Demo

Scale Identity Verification and KYC Operations in Uzbekistan

Verify residents and non-residents through MyID, ID card and passport NFC and 10,000+ foreign ID document types, run KYB on registered businesses and their real owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for CBU- and NAPP-supervised firms.

Banner Image for Uzbekistan
Trusted by 2000+ businesses that make identity decisions at scale
cashew gemone HERO Gaming Bitget IronFX PENN National Rakuten Witzeal Noteris banxy

Operational Performance for Uzbekistan KYC

Our Numbers Speak Volumes

99.50%

Pass
Rates

Under 5 secs

IDV
Verification

100%

Omni-format
Document Recognition

THE UZBEKISTAN VERIFICATION GAP

Uzbekistan IDV/KYC Challenges

One Uzbek Name Can Appear in Three Spellings

One Uzbek Name Can Appear in Three Spellings

KYC compliance in Uzbekistan meets customers recorded as Abdullayev on an ID card, Abdullaev in a bank record and Абдуллаев in a Cyrillic file, a legacy of the Latin script switch. Shufti's phonetic matching links every form before a sanctions or PEP check runs.

Remote Onboarding Must Prove a Live Person Since April 2026

Remote Onboarding Must Prove a Live Person Since April 2026

Since 22 April 2026, CBU Regulation No. 3759 has required banks and payment organisations to run real-time liveness detection whenever they identify users remotely by biometrics. Shufti pairs iBeta Level 3 liveness with deepfake and camera injection detection, so every remote check leaves evidence.

Banks Must Trace Corporate Owners Down to 10%

Banks Must Trace Corporate Owners Down to 10%

Paragraph 27 of the CBU's internal control rules for banks requires identifying every individual who ultimately owns 10% or more of a corporate client, while the registration questionnaire sets no threshold. Shufti maps ownership through every layer down to that line.

The National Terrorist List Changes Within the Hour

The National Terrorist List Changes Within the Hour

The Department for Combating Economic Crimes (DCEC) adds UN Security Council designations to the national list within an hour, and every update obliges firms to recheck clients and beneficial owners. Shufti picks up each change at source and rescreens the whole portfolio automatically.

Documents and Languages

Individual Documents Shufti Verifies in Uzbekistan

Shufti verifies 5+ Uzbek identity documents plus passports and ID cards from other countries. The cards below cover the core documents Uzbek onboarding relies on, with the full list on the supported documents page.

View All Supported Documents

MyID and Digital ID Documents

MyID, run by UZINFOCOM, confirms a customer's face against state biometric records, and since 1 July 2025 banks must accept electronic ID cards and passports from the my.gov.uz and Social Card apps. Shufti runs MyID authentication through your firm's MyID partner connection and records each route in the case file.

MyID and Digital ID Documents

Uzbek ID Card

Issued since January 2021 under Presidential Decree No. UP-6065, the ID card shows the holder's 14-digit PINFL and carries a chip with the photo, fingerprints and an e-signature certificate. Shufti reads the chip by NFC, checks the card's security features and matches a live selfie.

Uzbek ID Card

Residence ID Card for Foreigners

Foreigners and stateless persons registered at a place of residence in Uzbekistan receive their own ID card under Annex 2 of Decree No. UP-6065, valid for five years up to age 60. Shufti checks its expiry and security features and matches the holder's face.

Residence ID Card for Foreigners

Uzbek Passport

The passport for travel abroad stores the holder's photo and fingerprints on a chip. Shufti reads it by NFC and checks every passport across nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.

Uzbek Passport

Foreign Passports and National ID Cards

Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Foreign workers, students and non-resident investors rely on them before they hold an Uzbek residence ID card.

Foreign Passports and National ID Cards

Uzbek Driving Licence

The Interior Ministry issues the plastic driving licence under Cabinet of Ministers Resolution No. 116 of 2017, printed in Latin-script Uzbek with the holder's PINFL. Shufti checks authenticity, expiry and the photo against a live selfie, which helps delivery, taxi and car-sharing platforms onboard drivers.

Uzbek Driving Licence

Proof of Address

Residence registration is recorded in the Manzil system under Law No. ZRU-1074 and confirmed by an electronic or paper certificate. Shufti verifies that certificate, utility bills and bank statements in the same step as the ID and matches the address the customer entered at sign-up.

Proof of Address
MyID and Digital ID Documents Uzbek ID Card Residence ID Card for Foreigners Uzbek Passport Foreign Passports and National ID Cards Uzbek Driving Licence Proof of Address MyID and Digital ID Documents
Certificate of State Registration Unified State Register Extract Charter (Ustav) Business Address Proof Certificate of State Registration

Entity Identity

Certificate of State Registration

Under Cabinet of Ministers Resolution No. 66, the certificate is an electronic document with an e-signature and QR code. Shufti reads it and confirms the company's status and legal form against the Unified State Register of Business Entities with a live registry call at every check.

Certificate of State Registration

Unified State Register Extract

Shufti reads register extracts for limited liability companies, joint-stock companies, unitary enterprises and sole traders, and compares the director, address and status with live register data, the same automated registration system the CBU's rules point banks to.

Unified State Register Extract

Charter (Ustav)

AI-OCR reads ownership, capital and signing authority from the company's charter and its registered amendments, and flags GAN-generated or edited pages.

Charter (Ustav)

Business Address Proof

Leases and utility bills are cross-checked against the legal address recorded in the Unified State Register and in the company's tax registration.

Business Address Proof

Tax Identity

Taxpayer Identification Number (TIN)

The Tax Committee assigns every legal entity a TIN at registration. Shufti extracts the number from the certificate and register extract, checks its format and matches the legal name to the company's register record.

Taxpayer Identification Number (TIN)

PINFL for Sole Traders and Individuals

The 14-digit PINFL doubles as the taxpayer number for individuals, sole traders included. Shufti reads it from the ID card and checks it against the registration record, so a sole trader's personal and business identities match.

PINFL for Sole Traders and Individuals

Foreign Tax Registrations and FATCA/CRS Self-Certification

Foreign-owned entities and overseas parents are verified with their home-country tax registrations, and FATCA and CRS self-certifications are captured in the same case file.

Foreign Tax Registrations and FATCA/CRS Self-Certification
Taxpayer Identification Number (TIN) PINFL for Sole Traders and Individuals Foreign Tax Registrations and FATCA/CRS Self-Certification Taxpayer Identification Number (TIN)
Beneficial Owner Questionnaire and Register Shareholder Register and Ownership Chart Directors, Managers and Authorised Signatories Beneficial Owner Questionnaire and Register

Ownership and Control

Beneficial Owner Questionnaire and Register

Since 4 March 2021, companies have filed a beneficial owner questionnaire at state registration under Cabinet of Ministers Resolution No. 66, and the Ministry of Justice builds its register of beneficial owners from that data. Shufti extracts everyone holding 10% or more and screens each person.

Beneficial Owner Questionnaire and Register

Shareholder Register and Ownership Chart

Shufti reads the shareholder register of joint-stock companies and the ownership chart the customer supplies, maps ownership through holding companies and foreign parents, and screens every person and entity in the chain.

Shareholder Register and Ownership Chart

Directors, Managers and Authorised Signatories

Each person is identity-verified and screened, and Shufti alerts the case owner when the company's register record shows a new director or representative.

Directors, Managers and Authorised Signatories

Languages We Cover

Uzbek Latin, Cyrillic and Russian Document Parsing

ID cards are personalised in Latin-script Uzbek, or Karakalpak in Karakalpakstan, while older records and many company files use Cyrillic or Russian. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and averages 93% against Google Vision's 78.4% across its published benchmark. Zero-shot document intelligence reads layouts it has never seen, such as an older Cyrillic record, on first sight and without waiting for a template.

Uzbek Latin, Cyrillic and Russian Document Parsing

Uzbek Name Matching

Native phonetic models for 80+ languages handle Uzbek patronymics in both forms, such as o'g'li and qizi beside -ovich and -ovna, and link Latin, Cyrillic and Russian spellings in sanctions and PEP screening.

Uzbek Name Matching

Cross-Document Consistency Checks

Names, dates of birth and the PINFL are reconciled across the ID card, passport, driving licence, TIN record and beneficial owner questionnaire, so one customer never splits into mismatched records.

Cross-Document Consistency Checks
Uzbek Latin, Cyrillic and Russian Document Parsing Uzbek Name Matching Cross-Document Consistency Checks Uzbek Latin, Cyrillic and Russian Document Parsing

Independent Validation

Shufti's Recognition Across Independent Evaluations

Liminal

Ranked Exceptional in the Liminal Index 2026 for age estimation

View Reportarrow-icon
Gartner

Differentiated by Gartner on document diversity and country coverage

Read morearrow-icon
iBeta

Certified at iBeta Level 3 PAD with 0% APCER

Read Blogarrow-icon
KuppingerCole

Broadest global reach in the 2025 KuppingerCole Extended IDV report

Download Reportarrow-icon
Homeland Security

Ranked Top 5 in the DHS RIVR 2025 for identity validation

Read Blogarrow-icon
Liminal

Top Vendor for Product Execution in the Liminal Index for KYC 2026

View Reportarrow-icon
Liminal

Ranked Exceptional for age verification by Liminal Index 2026

View Reportarrow-icon
G2

Recognised as a Leader in G2 Fall 2026 reports

Read Morearrow-icon

Regulatory Update

Every Verification Route Uzbek Regulators Recognize, in One Platform

Online identity verification in Uzbekistan rests on CBU Regulation No. 3322 on digital identification, which lets banks and payment organisations identify clients through an employee-led video session or an automated real-time comparison of a live photo with state data. Shufti supports both, plus chip, MyID and document routes for non-residents and customers without an Uzbek ID card.

Fraud Prevention Across the Uzbek Customer Journey

Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Uzbek businesses act on risk while keeping legitimate customers moving.

  • 01

    Account Takeover and Recovery Abuse

    Keep out attackers who hijack accounts through SIM swaps, phished credentials or intercepted one-time codes. CBU Regulation No. 3759 ties new-device logins and password recovery to biometric identification, and Shufti scores every session on device, behavioral and identity signals, asking for a fresh selfie when one looks wrong.

  • 02

    Social Engineering and Manipulated Payments

    Fraudsters posing as bank staff, police or relatives talk customers into sending money or reading out codes, often over a live call. Active-call detection and behavioral biometrics spot a customer being coached through a transfer, and transaction monitoring holds authorised push payment scams before money leaves the account.

  • 03

    Device Spoofing and Automated Attacks

    Block bot-driven sign-ups and emulator farms that open wallets and card accounts in bulk for mule networks and bonus abuse. Device fingerprinting ties each session to its hardware, flags emulators, virtual machines and spoofed locations, and links repeat devices across applications before an account goes live.

  • 04

    Connected Fraud Rings and Repeat Offenders

    Stop offboarded fraudsters from returning under new names. Fraud network detection links shared devices, documents, faces, phone numbers and payment details across applications, and cross-company fraud intelligence surfaces identities already flagged elsewhere, so a ring is shut down as a ring rather than one account at a time.

  • 05

    Synthetic Identities and Fabricated Documents

    Reject identities built from a real PINFL, a borrowed address and an invented face. Zero-shot document intelligence tests every ID card and passport for tampering, while email and phone enrichment checks how long each contact detail has existed, exposing profiles assembled days before the application.

  • 06

    Deepfakes and Camera Injection

    Protect selfie onboarding and video identification from face swaps, replayed footage and virtual cameras, the substitution and replay attacks Regulation No. 3322 tells firms to block. Deepfake detection inspects every frame and the capture channel itself, so the face matched to an ID card belongs to a live person.

  • 07

    Money Mules and Rapid Fund Movement

    Loans and card payments obtained through stolen identities rarely stay put, and mule accounts move them on within minutes through P2P transfers and cards. Money mule detection combines onboarding signals, device history and account behavior to spot accounts collecting from many senders before funds disappear.

  • 08

    Fraudulent Businesses and Concealed Ownership

    Keep shell companies and fronts off your merchant and corporate books. Shufti checks Unified State Register records, TINs and director histories, maps beneficial owners through layered structures and screens every party, so a business is approved on who stands behind it rather than what it uploads.

Governance & Controls

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-submissions

Capture guidance for ID cards, passports and Cyrillic documents catches glare, cropping and blur before submission, so customers rarely retake a photo.

Fewer Avoidable Re-submissions

Cleaner Audit Trails

Shufti's case management records sources, results, timestamps, evidence, analyst notes and decisions, packaged as report-ready bundles for suspicious transaction reports to the DCEC.

Cleaner Audit Trails

One Workflow, One Back Office

Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director and transaction changes, managing the full compliance lifecycle.

One Workflow, One Back Office

MyID and ID Card-First Flow Design

Residents verify first through MyID, a state data match or the ID card chip, and non-residents move to passport and selfie checks in one flow.

MyID and ID Card-First Flow Design

Shufti's IDV/KYC Solutions for Uzbekistan

KYC Solutions

eKYC in Uzbekistan serves ID card holders, residents with older passports, foreign residents and non-residents, some with MyID and some without. One Shufti flow routes each by risk, so nobody faces checks they don't need.

Explore More
Face Verification

Face Verification

Regulation No. 3322 compares a customer's live face with both the identity document and the state record. Shufti's face matching delivers a 99.5% first-try pass rate, and DHS RIVR 2025 testing measured a false match rate below 0.001.

.
Age Verification

Age Verification

Lotteries, online games and betting licensed by NAPP are open only to players aged 18 and over. Shufti estimates age from a selfie in under five seconds, blocks 99.8% of underage attempts and falls back to an ID check when the estimate is close.

.
Bank Account Verification

Bank Account Verification

Payouts and loan disbursements fail when an account number or holder name is wrong. Shufti validates Uzbek account numbers and bank codes and matches the holder's name in real time before the first transfer, so funds reach the right customer.

.
Address Verification

Address Verification

Address evidence in Uzbekistan ranges from residence registration certificates to utility bills from regional suppliers. Shufti's layout-aware extraction and fuzzy matching verify them at a 99.3% pass rate, and docless checks confirm an address in under three seconds without an upload.

.
Document Verification

Document Verification

Uzbek onboarding draws on ID cards, passports for travel abroad, 2011-series biometric passports, residence ID cards and driving licences. Shufti verifies each within seconds, reading Latin and Cyrillic fields and testing every document for tampering, screenshots and synthetic edits.

.
Identity Verification

Identity Verification

Separate tools for documents, selfies, chip reads and addresses split one customer across several records. Shufti runs document, biometric, NFC and address checks in one API session and returns one decision with its evidence.

.

KYB Solutions

Business verification in Uzbekistan means reconciling Unified State Register records, the TIN and beneficial owner questionnaires, often through holding companies abroad. Shufti calls the register live and identifies owners at the 10% threshold banks apply under CBU rules.

Explore More
Business Verification

Business Verification

Onboarding an Uzbek company means confirming its registration certificate, TIN, director and everyone who owns or controls 10% or more. Shufti's live registry call pulls that picture together in one check, putting corporate onboarding under two minutes.

.
Enhanced Due Diligence

Enhanced Due Diligence

Paragraph 94 of the CBU's bank rules requires CDD data refreshed yearly for high-risk clients and every two years for the rest. Shufti's branching questionnaires, configurable risk scoring and verification links for beneficial owners collect the evidence and schedule each refresh.

.

AML Screening

A customer who is clean at onboarding can land on a list next week, so screening cannot stop at sign-up. Shufti's perpetual KYC rescreens every customer against 4,000+ watchlists, including the DCEC's national list and UN Security Council lists, refreshed every 15 minutes, with every hit in one case file.

Explore More
Business AML Screening

Business AML Screening

A company's risk sits with its owners and directors, so the national list applies to beneficial owners as well as clients. Shufti screens entities, owners and directors against it, PEP lists and 50,000+ adverse media sources, and perpetual KYB rescreens the whole portfolio.

.
Transaction Monitoring

Transaction Monitoring

Law No. 660-II gives firms until the end of the next working day after detection to report a suspicious transaction or attempt. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity, with 60% fewer false positives and case bundles ready for the DCEC.

.
Travel Rule

Travel Rule

Crypto-asset service providers licensed by NAPP must run CDD on clients and report suspicious operations to the DCEC. Shufti's single integration connects to major Travel Rule networks, exchanges IVMS101 data and verifies ownership of unhosted wallets before funds move.

.
AI Compliance Co-Pilot

AI Compliance Co-Pilot

One common name can return 140+ screening hits. Shufti's AI Compliance Co-Pilot reviews every hit and gives a confidence score with a written reason, so analysts clear obvious false positives quickly while your compliance officer keeps the final call.

.
REGULATORY ALIGNMENT

Built To Fit Uzbekistan's Compliance Landscape

Law No. 660-II sets the AML duties every firm carries, the CBU, NAPP and Ministry of Justice write sector rules with the DCEC, and the Tashkent International Financial Centre now adds its own authority. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each licence your group holds.

Law No. 660-II on Countering Money Laundering, Terrorist and Proliferation Financing

Law No. 660-II on Countering Money Laundering, Terrorist and Proliferation Financing

Adopted in 2004 and overhauled in 2019, the law was last amended in April 2025 to bring crypto-asset service providers into Article 12's list of reporting entities. Article 7 sets CDD and ongoing monitoring, Article 15 regular client data updates plus the reporting and freezing duties, and Article 21 five-year record keeping.

Central Bank of the Republic of Uzbekistan (CBU)

Central Bank of the Republic of Uzbekistan (CBU)

CBU AML regulations for banks sit in Internal Control Rules No. 2886, last amended in May 2026. The CBU also licenses microcredit organisations, pawnshops, payment organisations, currency exchanges and credit bureaus, and its Regulations No. 3322 and No. 3759 govern digital identification and remote-service security.

Department for Combating Economic Crimes (DCEC)

Department for Combating Economic Crimes (DCEC)

The DCEC under the Prosecutor General's Office is the specially authorised state body and financial intelligence unit. It receives suspicious transaction reports, co-signs each sector's internal control rules with the supervisor and keeps the national list of persons linked to terrorism or proliferation.

National Agency of Prospective Projects (NAPP)

National Agency of Prospective Projects (NAPP)

NAPP regulates crypto-asset service providers, the capital market, insurance, e-commerce, lotteries and gambling. With the DCEC it sets internal control rules for crypto-asset service providers, registered as No. 3309, and under Decree No. UP-68 of 2024 it licenses lotteries, online games and betting.

Ministry of Justice

Ministry of Justice

The Ministry sets the form of the Unified State Register of Business Entities and keeps the register of beneficial owners built from registration questionnaires. With the DCEC it issued the internal control rules notaries and lawyers follow, registered as No. 2020 and last updated in 2023.

Tax Committee

Tax Committee

The Tax Committee assigns TINs to legal entities, and Article 127 of the Tax Code has made the PINFL the taxpayer number for individuals since the separate individual TIN was abolished in July 2021. Under Article 126, a company's registration certificate also proves its tax registration.

Ministry of Internal Affairs

Ministry of Internal Affairs

Migration and citizenship units issue ID cards under Presidential Decree No. UP-6065, which sets 1 January 2031 as the date 2011-series biometric passports lose validity, along with passports for travel abroad and residence ID cards. The Ministry also issues driving licences and runs the Manzil registration system.

List of Persons Linked to Terrorism or Proliferation

List of Persons Linked to Terrorism or Proliferation

Prosecutor General's Order No. 53-B of 2021 governs the list, which has national and international sections and takes in UN Security Council designations without a separate decision. Firms must freeze listed persons' assets immediately and review their client base at least every three months.

Interagency Commission and EAG Evaluation

Interagency Commission and EAG Evaluation

The Interagency Commission, set up by Presidential Resolution PP-3947 of 2018 and chaired by the DCEC's head, coordinates AML policy and a national risk assessment every three years. Uzbekistan joined the Eurasian Group in 2005, won three upgraded ratings in 2023 and was not on FATF's June 2026 lists.

Tashkent International Financial Centre

Tashkent International Financial Centre

The Constitutional Law on the Centre took effect on 25 July 2026. Article 28 creates its own Financial Services Authority and Article 8 applies common law and equity inside the Centre, while national AML and sanctions laws continue to apply to firms licensed there.

Uzbekistan Data Residency and Deployment

Since 27 March 2026, Article 27-1 of Law No. ZRU-547 has required biometric data to stay in Uzbekistan, and Regulation No. 3322 puts digital identification systems on servers in the country. Shufti supports on-premises deployment in Uzbekistan, including air-gapped setups, with any other hosting fixed in your agreement.

Law No. ZRU-547 on Personal Data

In force since October 2019, the law allows biometric data used to identify a person to be processed only with that person's consent, unless another law provides otherwise, under Article 26. Shufti protects identity and biometric data with encryption, role-based access and configurable retention.

Cross-Border Transfers of Other Personal Data

Personal data outside the biometric, genetic and telecom categories may leave Uzbekistan when the destination is on the adequacy list the Cabinet of Ministers approved in July 2026, or when approved contractual clauses or corporate rules apply. Shufti fixes every processing location before any transfer.

Retention Controls

Retention is configurable by client and licence, covering the five-year minimum in Article 21 of Law No. 660-II. Article 17 of Law No. ZRU-547 calls for deletion once the purpose is met, and legal holds keep records in place when the DCEC or a court asks.

Encryption and Security

Data is encrypted in transit and at rest, with role-based access and audit logging throughout. ISO 27001:2022 and SOC 2 Type 2 reports support the vendor reviews banks run under Article 7 of the Law on Banking Secrecy, which requires technical measures protecting client data.

Automated Decisions and Biometric Data

Article 24 of Law No. ZRU-547 lets people object to purely automated decisions, and firms must answer in writing within ten days. Shufti returns verification results and supporting reasons through the API and back office, so support teams can explain outcomes and escalate disputed results.

Scope of Our Role

Law No. ZRU-547 separates the owner of a personal database from the operator that processes data in it. Shufti processes data as an operator acting on your firm's instructions, your firm remains the owner, and the privacy notice identifies any activities Shufti carries out independently.

Data Residency and Privacy Controls in Uzbekistan

BUILT FOR COMPLIANCE TEAMS

Uzbekistan AML Sources That Strengthen Decisions

Turn Uzbekistan Verification Requirements into a Smoother Customer Journey

Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Identity Verification Built Around Your Industry in Uzbekistan

Open Accounts Remotely Under CBU Rules

Paragraph 26 of the CBU's bank rules lets banks identify clients from the original ID card, its electronic form or digital identification under Regulation No. 3322. Shufti combines MyID, state data, chip and passport checks with selfie liveness in one flow and keeps each decision ready for CBU examination.

Frequently Asked Questions

Does Shufti support MyID, and what happens when customers cannot use it?

Yes. Shufti runs MyID through your firm's partner connection and, under Regulation No. 3322, compares a live selfie with the state record through your authorised access. Customers without MyID verify through the ID card chip, or with a passport or foreign document and a live selfie, in the same flow.

Is scanning an Uzbek ID card enough, or should verification include its chip?

A scan shows only what is printed, while the ID card's chip holds the holder's data, photo and fingerprints in signed form that is harder to forge. Shufti reads the chip, compares it with the card face, runs forensic checks and matches a live selfie.

Can Shufti verify foreign documents or identity formats it has not encountered before?

Yes. Shufti's zero-shot AI adapts to unfamiliar layouts without a template, so a foreign resident's national ID or a recently redesigned passport is checked for authenticity and tampering like any known format. Uzbek 2011-series biometric passports still in circulation get the same checks.

How does Shufti OCR compare with Google OCR for Uzbek identity documents?

Shufti's OCR, accurate to 99.7% across 150+ languages, reads Latin-script Uzbek with letters such as o' and g' intact, plus Cyrillic fields on older records. In its published benchmark against Google Vision, it averages 93% accuracy to Google's 78.4%, which matters for foreign residents' documents.

How does Shufti verify ownership when an Uzbek company has several corporate layers?

Shufti pulls the Unified State Register record for each company in the chain, maps shareholdings through holding entities and identifies owners at the 10% threshold in the CBU's bank rules. It then compares the result with the beneficial owner questionnaire behind the Ministry of Justice register.

Does Shufti's ongoing monitoring cover more than sanctions screening?

Yes. CDD in Uzbekistan continues after onboarding, since Article 15 of Law No. 660-II requires regular updates to client data and Article 7 adds ongoing monitoring. Shufti monitors transactions against each customer's baseline and flags register, director and ownership changes as they happen.

How does Shufti keep screening current and handle Uzbek name variations?

Watchlists, including the DCEC's national list, update within 15 minutes of a change at source. Phonetic matching links Latin, Cyrillic and Russian spellings and both patronymic forms, such as o'g'li and -ovich, so a transliterated name never hides a match.

Can we choose Uzbek hosting or run verification inside our own infrastructure?

Yes. Run Shufti on-premises in your own data centre in Uzbekistan, air-gapped if required. Biometric data stays in the country as Article 27-1 of Law No. ZRU-547 requires, and your agreement names where any other data is processed.

What controls help us protect identity and biometric data?

Shufti encrypts data in transit and at rest, applies role-based access and logs every access. Biometric data, which Article 26 of Law No. ZRU-547 lets firms process for identification only with consent, is limited to what verification needs and deleted on your schedule.

Can we configure different retention periods for different Uzbek licences?

Yes. Retention is set per client, licence and record type, so identification records run at least five years after the relationship ends under Article 21 of Law No. 660-II. Legal holds pause deletion when the DCEC or a court requests records.

What does Shufti provide when our compliance team needs to prepare a DCEC report?

Shufti's case file holds the customer's verified identity, screening results, transaction history, alerts and analyst notes in one place. Your compliance officer exports a report-ready bundle and files with the DCEC by the end of the next working day, as Law No. 660-II requires.

Can we add verification checks without rebuilding our onboarding journey?

Yes. The AI Journey Builder adds or reorders checks such as NFC, MyID or address verification without code changes. Routing rules send customers to different checks by product, risk tier or residency, so a non-resident moves straight to passport verification.

How does Shufti make verification queries easier for our customer support team?

Every decision is shown in the back office with the reason, the failed check and the captured evidence. Support teams can tell a customer exactly what to fix, such as a glare-covered or expired ID card, and escalate disputed results to compliance.

Let’s Build Trust Into Your Business

1B+Verifications Processed

240+Regions Actively Processed

99.7%Accuracy Rate

Samer Al Tamimi

CEO of Safwa Bank

Samer Al Tamimi

“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”

Trusted. Compliant. Certified

cetificate-logos cetificate-logos cetificate-logos cetificate-logos

Explore Shufti For Your Business

Get a personalised demo from our experts.

    Which products would you like to check out?

    VideoIdent

    Address Verification

    eIDV (Docless)

    KYB

    AML Screening

    Fraud Prevention

    AMLR

    Face and ID Verification

    Age Verification

    Others

    What is your expected yearly verification volume?

    1 to 1,000

    1,001 to 5,000

    5,001 to 20,000

    20,001 to 50,000

    50,001 to 100,000

    100,001 to 1,000,000

    1,000,000+

    Valid Invalid number

    By clicking Submit, you accept our Privacy Policy and consent to marketing communications.

    PROVEN PLAYBOOKS

    Explore Practical KYC & AML Resources

    Read More
    Cover of State of Global AML Compliance 2025 FATF Data Insight

    18 December, 2025

    State of Global AML Compliance 2025 FATF Data Insight

    AML laws read strongly on paper while enforcement lags behind. A data-led analysis of FATF findings, the gap between rules and results, and where RegTech closes it.

    Report

    Read More
    Read More
    Cover of Identity Fraud Report 2026

    21 August, 2026

    Identity Fraud Report 2026

    Identity fraud hit 22.49% of crypto verifications in H1 2026. Shufti's report breaks down AI document fraud and linked fraud networks across 11 named sectors of risk.

    Report

    Read More
    Read More
    Cover of Deepfake Identity Fraud Index Report 2026

    22 June, 2026

    Deepfake Identity Fraud Index Report 2026

    Based on over 1M analysed fraud attempts, Shufti projects a 495% surge in deepfake-powered identity fraud in 2026, driven by four distinct AI attack types.

    Report

    Read More