Shufti and AML Certification Centre logosWebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringExplore Now WebinarThe FRAML Convergence: Unifying Fraud and AML MonitoringExplore Now The FRAML Convergence — Unifying Fraud and AML MonitoringExplore Shufti and ICA 25 Years logosWebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now WebinarFinancial inclusion and AML/CFT: Managing access and risk in practiceRegister Now Financial inclusion and AML/CFT — Managing access and riskRegister Shufti and Finance Magnates logosWebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now WebinarTransaction Monitoring & KYC: Cutting False Positives Without Missing Real FraudRegister Now Transaction Monitoring & KYC — Cutting False PositivesRegister WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now WebinarPix Fraud 2026: Are Your Fraud Controls Ready for the Next Generation of Instant Payment Scams?Explore Now Pix Fraud 2026 — Are Your Fraud Controls Ready?Explore Gavel on AMLR rule bookAMLR applies 10 July 2027. See your stack against every obligationBook a Demo AMLR applies 10 July 2027. See your stack against every obligationBook A Demo AMLR applies 10 July 2027 — see your stackBook Demo Globe with pKYC, Onboarding, Screening and Transactions labelsShufti’s Glocal PlatformGlobal Coverage. Local Depth. Full Compliance Lifecycle.Explore More Global Coverage. Local Depth. Full Compliance Lifecycle.Explore More Glocal Platform — Global Coverage. Local Depth.Explore INNOVATION DROPSUMMER
EDITION
20
26
Qualified Electronic Signature
WATCH NOW
INNOVATION DROP - Qualified Electronic SignatureWatch Now Innovation Drop — Qualified Electronic SignatureWatch
INNOVATION DROPSUMMER
EDITION
20
26
Transaction Trust Monitoring
WATCH NOW
INNOVATION DROP - Transaction Trust MonitoringWatch Now Innovation Drop — Transaction Trust MonitoringWatch
INNOVATION DROPSUMMER
EDITION
20
26
Travel Rule Compliance
WATCH NOW
INNOVATION DROP - Travel Rule ComplianceWatch Now Innovation Drop — Travel Rule ComplianceWatch
Datos Insights 2026 Impact Awards badgeDatos Insights 2026 Impact AwardsShufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore The Win Shufti Named Best KYC/KYB Innovation SolutionExplore Liminal 2026 KYC IndexShufti: A top vendor for product executionRead The PR Shufti: A top vendor for product executionRead The PR Liminal 2026 KYC Index — Shufti: A top vendor for product executionRead PR Gavel on AMLR rule bookAMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027. Don't Wait for the Deadline to Find the GapsBook Consultation AMLR Applies 10 July 2027 — Find the GapsConsult Bank card and cashBank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification: Get Secure Payouts with Confirmed OwnershipSee How It Works Bank Account Verification — Secure PayoutsSee How Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance Ties Verified Location to a Verified IdentityBook A Demo Geo Compliance — Verified Location, Verified IdentityBook Demo Journey Builder dot gridConfigure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Configure Verification Flows as Per Your Needs with Journey BuilderSee How It Works Journey Builder — Configure Verification FlowsSee How Shufti MCP toggle with ChatGPT and ClaudeShufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP: Verification Tools, Ready to Use Inside Claude or ChatGPTExplore Agent Shufti MCP — Verification Tools Inside Claude or ChatGPTExplore

Scale Identity Verification and KYC Operations in Vanuatu

Verify citizens and residents through national ID card checks, ePassport NFC and 10,000+ foreign ID document types, run KYB on VFSC-registered companies and their beneficial owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for RBV-, VFSC- and FIU-supervised firms.

Banner Image for Vanuatu
Trusted by 2000+ businesses that make identity decisions at scale
cashew gemone HERO Gaming Bitget IronFX PENN National Rakuten Witzeal Noteris banxy

Operational Performance for Vanuatu KYC

Our Numbers Speak Volumes

80%

Pass
Rates

Under 5 secs

IDV
Verification

100%

Omni-format
Document Recognition

THE VANUATU VERIFICATION GAP

Vanuatu IDV/KYC Challenges

Many Customers Lack a Passport or Driving Licence

Many Customers Lack a Passport or Driving Licence

Regulation 4(3) asks for one photographic and one non-photographic document, yet the RBV's 2024 survey found only 47% of adults hold a photo ID such as a passport or driving licence. Shufti verifies national ID cards, birth certificates and electoral cards, each tied to a live selfie.

Remote Islands Put Onboarding on Mobile Phones

Remote Islands Put Onboarding on Mobile Phones

KYC verification in Vanuatu reaches the 300,019 people counted in the 2020 census, about 78% of them in rural areas across 83 main islands. Shufti's capture guidance and liveness checks run on the customer's own smartphone, so an outer-island customer can verify without travelling to a branch.

Ongoing Due Diligence Runs on a Six-Month Clock

Ongoing Due Diligence Runs on a Six-Month Clock

Section 17 of the AML/CTF Act requires ongoing due diligence, and Regulation 8(3) generally sets reviews no more than six months apart. Shufti checks transactions against each customer's profile, refreshes sanctions and PEP data every 15 minutes and flags registry, director and ownership changes.

Two-Day STR Deadlines Leave No Room for Thin Case Files

Two-Day STR Deadlines Leave No Room for Thin Case Files

Section 20 gives reporting entities two working days to report a suspicious transaction to the FIU, and the APG on-site evaluation in November 2026 will test how well that reporting works. Shufti's case management turns each alert into a report-ready bundle with the evidence attached.

Documents and Languages

Individual Documents Shufti Verifies in Vanuatu

Shufti verifies 6 Vanuatu identity documents plus passports and ID cards from other countries. The cards below cover the core documents Vanuatu onboarding relies on, with the full list on the supported documents page.

View All Supported Documents

Vanuatu National Identity Card

CRIM has issued national ID cards since 2017, now under the Vanuatu National Identity Act No. 27 of 2021, each carrying a unique ID number and a QR code. Shufti tests the card for tampering, screenshots and print-and-scan copies, then confirms the holder with liveness.

Vanuatu National Identity Card

Residence and Work Permits

Vanuatu Immigration issues visas and permits to foreign residents and workers through its eVisa portal, with work visas granted under the Labour (Work Permit) Act, CAP 187. Shufti verifies the permit, checks its expiry and matches it to the holder's passport and selfie.

Residence and Work Permits

Vanuatu Electoral Registration Card

The FIU's July 2026 Simplified Due Diligence guideline lists the Electoral Registration Card among primary identity documents, alongside the passport and national ID card. Shufti checks the card for tampering, reads its details and cross-checks them against the customer's other documents.

Vanuatu Electoral Registration Card

Vanuatu Passport

Vanuatu Immigration issues passports under the Passport Act No. 20 of 2009 and now issues an electronic passport with a chip. Shufti reads the chip through NFC and applies nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.

Vanuatu Passport

Foreign Passports and National ID Cards

Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Expatriate workers, foreign investors and non-resident directors of international companies use these documents to onboard with Vanuatu firms.

Foreign Passports and National ID Cards

Vanuatu Driving Licence

The Vanuatu Police Force Traffic Unit tests drivers, and the licence is issued for three years under the Road Traffic (Control) Act, CAP 29. Shufti checks authenticity, expiry and the face match, which helps lenders, vehicle hire firms and car dealers onboard drivers quickly.

Vanuatu Driving Licence

Birth Certificates and Proof of Address

The FIU accepts birth certificates as primary ID for minors and rural customers, and CRIM issues them under Act No. 28 of 2021. Shufti verifies birth certificates, UNELCO or VUI electricity bills and bank statements in the same step as the photo ID.

Birth Certificates and Proof of Address
Vanuatu National Identity Card Residence and Work Permits Vanuatu Electoral Registration Card Vanuatu Passport Foreign Passports and National ID Cards Vanuatu Driving Licence Birth Certificates and Proof of Address Vanuatu National Identity Card
Certificate of Incorporation VFSC Registry Record Constitution and Articles Business Licence and Address Proof Certificate of Incorporation

Entity Identity

Certificate of Incorporation

VFSC registers local companies under the Companies Act No. 25 of 2012 and international companies under the International Companies Act, CAP 222, and issues a certificate for each. Shufti checks the certificate for tampering against live VFSC registry data at every check.

Certificate of Incorporation

VFSC Registry Record

The VFSC register shows each company's status, directors and shareholders and records business names under the Business Names Act, CAP 211. Shufti calls the registry live at every check, so a struck-off company or a changed director shows up before onboarding.

VFSC Registry Record

Constitution and Articles

Companies file their constitution with VFSC on registration, setting out ownership, share capital and signing authority. Shufti's AI-OCR reads those terms from the filed document and flags pages that were generated with GANs or edited after filing.

Constitution and Articles

Business Licence and Address Proof

Under the Business Licence Act, CAP 249, the Department of Customs and Inland Revenue licenses businesses in Port Vila, Luganville and Lenakel, and provincial governments license the rest. Shufti cross-checks the licensed address against leases and utility bills in the company's name.

Business Licence and Address Proof

Tax Identity

Tax Identification Number (TIN)

The Department of Customs and Inland Revenue has issued TINs since 1 January 2020 under the Tax Administration Act No. 37 of 2018, and businesses need one for VAT and a business licence. Shufti extracts the TIN and cross-checks it against the licence and VFSC records.

Tax Identification Number (TIN)

VAT Registration

The Value Added Tax Act, CAP 247, makes registration compulsory once taxable supplies exceed or are expected to exceed VT 4 million in 12 months. Shufti reads the VAT certificate and matches its name and TIN to the company record, so a lapsed registration surfaces early.

VAT Registration

Foreign Tax Registrations

International companies and subsidiaries of foreign groups often hold tax numbers issued abroad. Shufti reads those registrations from foreign tax documents and matches the entity name and address to the VFSC record, so a mismatch is flagged during onboarding.

Foreign Tax Registrations
Tax Identification Number (TIN) VAT Registration Foreign Tax Registrations Tax Identification Number (TIN)
Beneficial Ownership Records and the VFSC UBO Form Shareholder Register and Ownership Chart Directors and Authorised Signatories Beneficial Ownership Records and the VFSC UBO Form

Ownership and Control

Beneficial Ownership Records and the VFSC UBO Form

Section 58A of the International Companies Act requires up-to-date beneficial owner records, with an owner defined as anyone entitled to 25% or more, and VFSC's UBO form asks for updates within 25 days of a change. Shufti extracts each owner at that threshold and screens them.

Beneficial Ownership Records and the VFSC UBO Form

Shareholder Register and Ownership Chart

International companies often use nominee shareholders and directors, and section 58A also requires records of the person who nominated each one. Shufti maps ownership through intermediate companies and nominees to the natural persons in control, then screens them against sanctions, PEP and adverse media lists.

Shareholder Register and Ownership Chart

Directors and Authorised Signatories

Directors and signatories named in the VFSC record each pass through ID verification and screening. Shufti alerts your team when the registry shows a board change, so a new director is checked before they sign for the company.

Directors and Authorised Signatories

Languages We Cover

Bislama, English, French and Expat Document Parsing

Bislama is Vanuatu's national language and, with English and French, one of its official languages, while foreign investors and workers bring documents in other scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and averages 93% against Google Vision's 78.4% across its published benchmark. Zero-shot document intelligence reads foreign investors' document layouts it has never seen on first sight, without waiting for a template.

Bislama, English, French and Expat Document Parsing

Ni-Vanuatu Name Matching

Ni-Vanuatu names can appear with different spellings across Bislama, English and French records, and expatriate names arrive transliterated from other scripts. Phonetic and transliteration rules match these variants in sanctions and PEP screening, so a spelling difference does not hide a hit.

Ni-Vanuatu Name Matching

Cross-Document Consistency Checks

Names, dates of birth and identifiers are reconciled across the national ID card, passport, birth certificate, electoral card, VFSC record and TIN, so a mismatch between documents surfaces before the account opens.

Cross-Document Consistency Checks
Bislama, English, French and Expat Document Parsing Ni-Vanuatu Name Matching Cross-Document Consistency Checks Bislama, English, French and Expat Document Parsing

Independent Validation

Shufti's Recognition Across Independent Evaluations

Liminal

Ranked Exceptional in the Liminal Index 2026 for age estimation

View Reportarrow-icon
Gartner

Differentiated by Gartner on document diversity and country coverage

Read morearrow-icon
iBeta

Certified at iBeta Level 3 PAD with 0% APCER

Read Blogarrow-icon
KuppingerCole

Broadest global reach in the 2025 KuppingerCole Extended IDV report

Download Reportarrow-icon
Homeland Security

Ranked Top 5 in the DHS RIVR 2025 for identity validation

Read Blogarrow-icon
Liminal

Top Vendor for Product Execution in the Liminal Index for KYC 2026

View Reportarrow-icon
Liminal

Ranked Exceptional for age verification by Liminal Index 2026

View Reportarrow-icon
G2

Recognised as a Leader in G2 Fall 2026 reports

Read Morearrow-icon

Regulatory Update

Every Verification Route Vanuatu Firms Rely On, in One Platform

Regulation 4 lets reporting entities rely on electronic data judged on its accuracy, security and whether a government body maintains it, and asks them to decide whether to use document authentication services. Shufti supports every route Vanuatu firms use, plus chip, document and video routes for customers without a national ID card.

Fraud Prevention Across the Vanuatu Customer Journey

Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Vanuatu businesses act on risk while keeping legitimate customers moving.

  • 01

    Account Takeover and Recovery Abuse

    A hijacked SIM card or stolen password gives a fraudster control of a bank account or mobile money wallet. Shufti's account takeover prevention re-verifies users with biometric checks at login, recovery and device change, scoring each session's risk so real customers pass and hijacked sessions stop before funds move.

  • 02

    Social Engineering and Manipulated Payments

    Scam callers talk victims into sending money themselves, so the transfer looks authorised. Shufti's behavioral biometrics pick up hesitation and coached typing, active-call detection shows when the customer is on the phone, and transaction monitoring flags APP scams by comparing each payment with the customer's usual amounts and payees.

  • 03

    Device Spoofing and Automated Attacks

    Emulators, rooted phones and scripted sign-ups let one operator open many wallets or gaming accounts and claim the same bonus repeatedly. Shufti's device fingerprinting identifies the hardware and software behind each session, links devices that return across applications and blocks bots and emulators before an account is granted.

  • 04

    Connected Fraud Rings and Repeat Offenders

    Organised groups recycle faces, documents, devices and phone numbers across many accounts and institutions. Shufti's fraud network detection links those shared attributes into one graph, and cross-company fraud intelligence warns you when an identity has already failed elsewhere, so a ring is stopped at its first attempt.

  • 05

    Synthetic Identities and Fabricated Documents

    Synthetic identities mix real and invented details to slip past basic checks. Shufti combines email and phone enrichment, document forensics and zero-shot detection of unfamiliar templates, flagging a forged national ID card, an edited utility bill or an identity with no digital history before an account exists.

  • 06

    Deepfakes and Camera Injection

    Face-swap videos and virtual cameras let attackers pose as real customers during selfie checks at onboarding or recovery. Shufti's deepfake detection inspects the video stream for injection, replay and synthetic faces, and liveness checks confirm a live person is present before any face match counts toward a decision.

  • 07

    Money Mules and Rapid Fund Movement

    Mule accounts take in illicit funds and pass them on within minutes, often through mobile wallets and cash withdrawals. Shufti's money mule detection watches for sudden inbound volume, fast pass-through transfers and shared devices, so you can act and report to the FIU while funds are still traceable.

  • 08

    Fraudulent Businesses and Concealed Ownership

    Shell companies and nominee directors hide who controls an account, and Vanuatu's national risk assessment names transnational money laundering among its main threats. Shufti's KYB verifies the VFSC registration, maps owners through intermediate companies and nominees and screens directors and owners before the first payment.

Governance & Controls

Audit-Ready Decisions, Lower Operational Drag

Fewer Avoidable Re-submissions

Capture guidance for national ID cards, birth certificates and permits cuts blur, glare and cropping, so more customers pass on their first attempt.

Fewer Avoidable Re-submissions

Cleaner Audit Trails

Shufti's case management records sources, results, timestamps, evidence, analyst notes, and decision history, packaged as report-ready bundles for STR filing with the FIU.

Cleaner Audit Trails

One Workflow, One Back Office

Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director, and transaction behavior changes across the compliance lifecycle.

One Workflow, One Back Office

National ID Card-First Flow Design

Ni-Vanuatu customers verify with the national ID card first, while foreign residents and non-residents switch to permit or passport verification in the same flow.

National ID Card-First Flow Design

Shufti's IDV/KYC Solutions for Vanuatu

KYC Solutions

Vanuatu firms onboard citizens with national ID cards and birth certificates, foreign residents with permits and non-residents with passports. One Shufti flow routes each by risk, so nobody faces checks they don't need.

Explore More
Face Verification

Face Verification

Remote onboarding needs proof that a live customer is present. Shufti matches the selfie to the ID card or passport photo with iBeta Level 3 liveness and a 99.5% first-try pass rate, so genuine customers finish quickly and impostors are stopped at the camera.

.
Age Verification

Age Verification

Casinos, interactive gaming operators and age-restricted retailers need age checks that do not hold adults up. Shufti estimates age from a selfie in under five seconds, blocks 99.8% of underage attempts and switches to a document check when an estimate sits close to the limit.

.
Bank Account Verification

Bank Account Verification

Loan disbursements, salary payments and payouts go astray when the account belongs to someone else. Shufti validates Vanuatu bank account details and matches the account-holder name in real time against the verified customer before any money moves.

.
Address Verification

Address Verification

Address documents in Vanuatu come in many layouts, from electricity bills to bank letters. Shufti's layout-aware extraction and fuzzy matching read the address and compare it with the one declared, reaching a 99.3% pass rate on address checks.

.
Document Verification

Document Verification

Vanuatu document checks span national ID cards, birth certificates, permits and foreign passports. Shufti verifies each within seconds with forensic checks that catch screenshots, replays, synthetic cards and print-and-scan copies before a fake reaches your back office.

.
Identity Verification

Identity Verification

Identity verification in Vanuatu asks more of PEPs and other high-risk customers, who face enhanced checks under Regulation 6 and often several proofs at once. Shufti runs document, biometric, NFC and address checks in one API session, so the full evidence set arrives as a single result your analysts can review.

.

KYB Solutions

Vanuatu companies register with VFSC as local or international companies, and many international companies have nominee shareholders or owners abroad. Shufti's live registry calls and ownership mapping give firms the full picture in one check, covering the beneficial owner and control structure details Regulation 3(b) asks for.

Explore More
Business Verification

Business Verification

Onboarding a Vanuatu company means confirming its VFSC registration, TIN, signatories and everyone who owns or controls 25% or more. Shufti's live registry call confirms the VFSC record, directors and shareholders, and owners at 25% or more are checked against the beneficial ownership records the company keeps.

.
Enhanced Due Diligence

Enhanced Due Diligence

Companies with PEP links, nominee structures or owners in high-risk jurisdictions need deeper review. Shufti's branching due diligence questionnaires collect source-of-funds and ownership evidence, score the answers and send UBO verification links to each owner.

.

AML Screening

A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC screens customers against 4,000+ watchlists, including the UN sanctions lists that bind Vanuatu firms, refreshes the data every 15 minutes and keeps every alert in one case file.

Explore More
Business AML Screening

Business AML Screening

Owners and directors can become sanctioned or politically exposed long after a company is onboarded. Shufti screens the company, its owners and its directors against UN sanctions lists, PEP data and 50,000+ adverse media sources in 80+ languages, then rescreens the portfolio under perpetual KYB.

.
Transaction Monitoring

Transaction Monitoring

Regulation 12 sets large cash reporting at VT 1 million, and VT 200,000 for money changers, so launderers split amounts below those lines. Shufti's library of 500+ pre-built rules covering structuring, smurfing, and mule activity cuts false positives by 60% and turns alerts into report-ready case bundles.

.
Travel Rule

Travel Rule

Section 27(2) of the Virtual Assets Services Providers Act No. 3 of 2025 requires beneficiary information on cross-border transfers of USD 1,000 or EUR 1,000 or more. Shufti's Travel Rule integration connects to major networks through IVMS101 and verifies who owns unhosted wallets.

.
AI Compliance Co-Pilot

AI Compliance Co-Pilot

One common name can return 140+ screening hits. Shufti's AI Compliance Co-Pilot works through every hit, attaches a confidence score and a written reason, and logs any override, while the MLRO still decides what gets escalated.

.
REGULATORY ALIGNMENT

Built To Fit Vanuatu's Compliance Landscape

The AML/CTF Act and the FIU's guidelines apply to every reporting entity in Vanuatu, while the RBV and VFSC add licensing and prudential rules for the firms they supervise. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each licence your group holds.

Anti-Money Laundering and Counter-Terrorism Financing Act No. 13 of 2014

Anti-Money Laundering and Counter-Terrorism Financing Act No. 13 of 2014

In force since 24 June 2014 and consolidated in 2025 after five amending Acts, this law applies to every reporting entity listed in section 2. Section 12 requires identification of customers and beneficial owners, section 17 ongoing due diligence and section 19 six-year record retention.

Vanuatu Financial Intelligence Unit (FIU)

Vanuatu Financial Intelligence Unit (FIU)

Established within the Office of the Attorney General under section 4, the FIU receives reports and issues enforceable guidelines, including its July 2026 Simplified Due Diligence guideline. Section 20 requires suspicious transaction reports within two working days, delivered by fax, email or hand under section 26.

Reserve Bank of Vanuatu (RBV)

Reserve Bank of Vanuatu (RBV)

The RBV licenses domestic banks under the Financial Institutions Act, CAP 254, and international banks under the International Banking Act, CAP 280. Its Prudential Guideline No. 9 sets customer due diligence for banks, and its July 2025 Mobile Money Operating Guidelines allow tiered KYC for wallets.

Vanuatu Financial Services Commission (VFSC)

Vanuatu Financial Services Commission (VFSC)

VFSC is the company registrar and licenses financial dealers under the Financial Dealers Licensing Act, CAP 70, and company and trust service providers under Act No. 8 of 2010. Its free online search lets anyone check a local or international company and download its certificate of incorporation.

Virtual Assets Services Providers Act No. 3 of 2025

Virtual Assets Services Providers Act No. 3 of 2025

Section 10 lets only companies holding a VFSC licence provide virtual asset services, and section 11 sets the licence classes. VFSC's January 2026 guidelines, issued under section 59, require VASPs to apply Travel Rule controls, screen for sanctions and file suspicious transaction reports with the FIU.

Department of Customs and Inland Revenue (DCIR)

Department of Customs and Inland Revenue (DCIR)

The DCIR issues TINs under the Tax Administration Act No. 37 of 2018, administers VAT and grants business licences in municipal areas. Its Director also licenses casinos under the Casino (Control) Act, CAP 223, which makes each casino operator a reporting entity under the AML/CTF Act.

Civil Registration and Identity Management Department (CRIM)

Civil Registration and Identity Management Department (CRIM)

CRIM keeps Vanuatu's civil registers and issues national ID cards and birth certificates. The Vanuatu National Identity Act No. 27 of 2021 and the Civil Registration and Identity Management Act No. 28 of 2021 took effect on 11 January 2022 and give each person a unique national ID number.

United Nations Financial Sanctions Act No. 6 of 2017

United Nations Financial Sanctions Act No. 6 of 2017

Under section 3, UN Security Council designations take effect in Vanuatu immediately, and section 4 lets the Prime Minister make domestic designations. Section 16 requires anyone holding a designated person's property to report it within five working days, and the FIU is still preparing a domestic sanctions list.

Asia/Pacific Group on Money Laundering (APG)

Asia/Pacific Group on Money Laundering (APG)

The APG assesses AML compliance in Vanuatu, which left the FATF increased monitoring list in June 2018 and was absent from it in June 2026. Its 2015 mutual evaluation rated effectiveness low across all 11 immediate outcomes, and the next on-site visit is set for November 2026.

Telecommunications, Radiocommunications and Broadcasting Regulator (TRBR)

Telecommunications, Radiocommunications and Broadcasting Regulator (TRBR)

TRBR oversees Vanuatu's telecom operators, and its SIM Card Registration Regulation, Order No. 105 of 2022, requires subscribers to register their SIM cards with personal details and valid ID. Registered SIMs also anchor the mobile money wallets that the operators offer.

Vanuatu Data Residency and Deployment

Section 15 of the Data Protection and Privacy Act bars using personal data collected in Vanuatu elsewhere without the Minister's prior authorisation, unless the destination is prescribed. Shufti runs on-premises inside Vanuatu infrastructure, including air-gapped setups, and any other hosting location is fixed in the agreement.

Vanuatu Data Protection and Privacy Act (No. 13 of 2024)

The Act commenced on 2 January 2025, with the Deputy Commissioner of Data Protection and Privacy under the Digital Safety Authority Act No. 15 of 2024 overseeing it, and section 6 treats biometric data as a special category. Shufti applies encryption, role-based access controls and configurable retention.

Children's Data and Age Checks

Section 7 prohibits processing a child's personal data unless an exception applies, such as parental consent or a legal obligation, and calls for age verification mechanisms where communication is aimed at children. Shufti's selfie age estimation and document fallback give firms that check at sign-up.

Retention Controls

Section 19 of the AML/CTF Act sets six years as the minimum for transaction records, reports and identity evidence, counted from the transaction, report or end of the relationship. Shufti configures retention by client and licence, treats statutory minimums as floors rather than deletion dates and applies legal holds.

Encryption and Security

The Cybercrime Act No. 22 of 2021 makes illegal access, data interference and computer fraud offences in Vanuatu. Shufti encrypts data in transit and at rest, enforces role-based access and audit logging, and holds ISO 27001:2022 certification and SOC 2 Type 2 reports for vendor assessments.

Automated Decisions and Biometric Data

Section 13 lets a customer ask not to be subject to a solely automated decision, and decisions based on contract or consent must allow human intervention. Shufti returns verification results and their reasons through the API and back office, so support teams can explain and escalate disputed outcomes.

Scope of Our Role

Shufti processes data on the firm's instructions as a data processor under a written agreement. The firm remains the data controller under the Data Protection and Privacy Act and keeps its compliance duties, and Shufti's privacy notice identifies any activities it carries out as an independent controller.

Data Residency and Privacy Controls in Vanuatu

BUILT FOR COMPLIANCE TEAMS

Vanuatu AML Sources That Strengthen Decisions

Turn Vanuatu Verification Requirements into a Smoother Customer Journey

Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.

INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.

Certified to Global Standards

PROVEN WORKFLOWS

Identity Verification Built Around Your Industry in Vanuatu

Customer Due Diligence For RBV KYC Compliance

Vanuatu's five commercial banks apply Prudential Guideline No. 9 to citizens, foreign residents and international companies alike. Shufti verifies national ID cards, passports and permits with liveness, maps company owners from VFSC records and keeps every customer under ongoing screening and transaction monitoring.

Frequently Asked Questions

Does Shufti support the Vanuatu National Identity Card, and what happens when customers cannot use it?

Yes. Shufti verifies the card, reads its national ID number and confirms the holder with liveness. Customers without one, such as foreign residents or non-residents, verify with a permit or passport and liveness in the same flow, without starting again.

Is a Vanuatu National Identity Card image enough to verify a customer?

No. A printed, edited or screen-captured copy can pass a quick visual check. Shufti tests the card for tampering, screenshots and print-and-scan copies, then confirms the holder with liveness, giving remote onboarding the reliable and independent evidence Regulation 4 expects.

Can Shufti verify foreign documents or identity formats it has not encountered before?

Yes. Shufti's zero-shot document intelligence learns new layouts in minutes instead of waiting for template updates. Expatriate workers, foreign investors and non-resident directors can onboard with documents from 240+ countries and territories, checked with the same forensic and biometric controls as Vanuatu documents.

How does Shufti OCR compare with Google OCR for documents used in Vanuatu?

Vanuatu documents use the Latin script in Bislama, English and French, while foreign workers and investors bring documents in other scripts. Across the languages in its published benchmark, Shufti's OCR averages 93% accuracy against Google Vision's 78.4%, so those documents need fewer manual corrections.

How does Shufti verify ownership when a Vanuatu company has several corporate layers?

Shufti follows ownership from the VFSC record through the share register, nominee records and each intermediate company, including holdings registered abroad, until it reaches the natural persons in control. Each owner is then verified and screened, as Regulation 3(b) expects for legal persons.

Does Shufti's ongoing monitoring cover more than sanctions screening?

Yes. Section 17 of the AML/CTF Act requires ongoing due diligence for the whole relationship, so Shufti also monitors transactions against each customer's profile, tracks adverse media and flags changes to a company's registration, directors and owners, opening a review whenever risk shifts.

How does Shufti keep screening current and handle Vanuatu name variations?

Watchlist data refreshes every quarter hour, including the UN sanctions lists that apply under the United Nations Financial Sanctions Act. Native phonetic models match Bislama, English and French spellings and transliterated foreign names, so AML screening in Vanuatu does not miss a variant spelling.

Can we choose Vanuatu hosting or run verification inside our own infrastructure?

Yes. Shufti deploys on-premises inside your infrastructure in Vanuatu, including air-gapped setups, which keeps identity data in the country and avoids the ministerial authorisation section 15 of the Data Protection and Privacy Act requires for use elsewhere. Any other hosting location is named in the agreement.

What controls help us protect identity and biometric data?

Shufti encrypts data in transit and at rest, limits access by role, logs every action and holds ISO 27001:2022 certification and SOC 2 Type 2 reports. Those controls support the duties the Data Protection and Privacy Act places on firms processing biometric data as a special category.

Can we configure different retention periods for different Vanuatu licences?

Yes. Retention is set by client, licence and jurisdiction, so a bank, a VASP and a financial dealer in one group each keep records under their own rules, with the six-year AML/CTF Act minimum as a floor and legal holds during investigations.

What does Shufti provide when our compliance team needs to prepare an FIU report?

Shufti assembles the verification results, screening hits, transaction alerts, analyst notes and decision history for each case into one bundle. Your team uses it to complete the prescribed suspicious transaction report form and send it to the FIU within the two working days section 20 allows.

Can we add verification checks without rebuilding our onboarding journey?

Yes. Checks such as NFC, video identification or address verification are added or reordered in Shufti's AI Journey Builder by geography, product and risk tier. The change is a configuration update, so your integration and the screens customers already see stay the same.

How does Shufti make verification queries easier for our customer support team?

Each back-office decision lists the checks that passed or failed, the reason and the evidence behind it. Support agents can explain a rejected ID card or selfie, ask the customer for a fresh capture and escalate a disputed result without involving engineers.

Let’s Build Trust Into Your Business

1B+Verifications Processed

240+Regions Actively Processed

99.7%Accuracy Rate

Samer Al Tamimi

CEO of Safwa Bank

Samer Al Tamimi

“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”

Trusted. Compliant. Certified

cetificate-logos cetificate-logos cetificate-logos cetificate-logos

Explore Shufti For Your Business

Get a personalised demo from our experts.

    Which products would you like to check out?

    VideoIdent

    Address Verification

    eIDV (Docless)

    KYB

    AML Screening

    Fraud Prevention

    AMLR

    Face and ID Verification

    Age Verification

    Others

    What is your expected yearly verification volume?

    1 to 1,000

    1,001 to 5,000

    5,001 to 20,000

    20,001 to 50,000

    50,001 to 100,000

    100,001 to 1,000,000

    1,000,000+

    Valid Invalid number

    By clicking Submit, you accept our Privacy Policy and consent to marketing communications.

    PROVEN PLAYBOOKS

    Explore Practical KYC & AML Resources

    Read More
    Cover of Forex Identity Verification Buyer's Guide

    16 February, 2026

    Forex Identity Verification Buyer's Guide

    For brokers licensed across several jurisdictions. How to assess identity verification vendors on KYC and AML compliance, deepfake defence and trader onboarding speed.

    Product Guide

    Read More
    Read More
    Cover of KYC Compliance and Identity Fraud Challenge Across APAC

    19 June, 2026

    KYC Compliance and Identity Fraud Challenge Across APAC

    Shufti's own verification data shows fraud climbing alongside digital growth across APAC. Where that pressure lands, and what the leading markets are doing about it.

    Whitepaper

    Read More
    Read More
    Cover of Document Verification: APAC

    16 April, 2026

    Document Verification: APAC

    APAC documents come in scripts that break generic OCR, and AI forgeries now pass visual checks. How Shufti verifies identity documents across the region's markets.

    Regional Brief

    Read More