AMLR Solutions 
AMLR Consultation
EUDI Wallet
Onboarding
Ongoing Monitoring
FRAML
KYC
KYB
KYI
Age Assurance
Workforce IAM
Candidate Verification
Account Takeover
Bonus/ Promotion Abuse
Chargeback Fraud
Deepfake
Document Fraud
Fraud Networks
Impersonation Fraud
Money Mule Activity
Multi-Accounting
Party Fraud
Regulatory & Compliance Risks
Synthetic Identity Fraud
Adult Content
Banking
Crypto
Fintech
Forex
Compliance
Fraud prevention
Trust & safety
Global expansion
Compliance Officers
Developers
Fraud Analysts
Product Managers
Journey Builder 
Global Trust Platform
Customer Profiles
Vendor Comparison
IDV Case Management
AML Case Management
Regulatory Reporting
Agentic Rule Builder 
AI Compliance Co-Pilot 
Fraud Analytics
Fraud Hub 
OCR
Shufti AI
Bank Account Verification 
Biometric Duplication
Database Checks
Document Intelligence
Government ID
Mobile Driver's License
NFC
Selfie Liveness
Brand Personalisation
Deployment Options
Identity Methods
IDV Modes
Multi-tenancy
On-Premise IDV
Secure Capture
Shufti MCP
- Algeria
- Angola
- Argentina
- Armenia
- Australia
- Austria
- Azerbaijan
- Bahrain
- Bangladesh
- Belarus
- Belgium
- Bolivia
- Brazil
- Bulgaria
- Cambodia
- Cameroon
- Canada
- Chile
- China
- Colombia
- Costa Rica
- Croatia
- Cyprus
- Czech Republic
- Denmark
- Dominican Republic
- Ecuador
- Egypt
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Germany
- Greece
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Saudi Arabia
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- UAE
- Uganda
- Ukraine
- UK
- USA
- Vietnam
- Zambia
Scale Identity Verification and KYC Operations in Zambia
Verify citizens and residents through NRC and selfie checks, biometric passport NFC and 10,000+ foreign ID document types, run KYB on PACRA-registered businesses and real owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for BoZ-, SEC-, PIA- and FIC-supervised firms.
Operational Performance for Zambia KYC
Our Numbers Speak Volumes
97.95%
Pass
Rates
Under 5 secs
IDV
Verification
100%
Omni-format
Document Recognition
Zambia IDV/KYC Challenges
Two Generations of NRC Circulate During the INRIS Rollout
KYC in Zambia still runs on the green, pink and blue NRC while the Department of National Registration, Passport and Citizenship moves to biometric-enabled cards with a new 13-digit number. Shufti's zero-shot document AI verifies both generations, so the changeover never stalls onboarding.
Beneficial Ownership Now Starts at 5% of Shares
The 2025 Companies Act amendment makes anyone holding 5% of shares a beneficial owner, far below the FIC Act's 25% test, so corporate customers carry more owners than older KYB files show. Shufti maps ownership to that line and screens each owner.
NATC Expects Daily Screening of the Whole Customer Base
The National Anti-Terrorism Centre's 2025 sanctions guidelines ask reporting entities to screen every customer daily and freeze listed funds within 16 hours of receiving a list, inside the Act's 24-hour limit, which manual batch checks cannot meet. Shufti rescreens your whole portfolio automatically whenever a list changes.
Thin Case Files Weaken STRs to the FIC
Section 29 of the FIC Act gives three working days from forming a suspicion to file an STR, and a report built from scattered evidence is hard to defend. Shufti keeps identity, screening and transaction evidence for each alert in one case file.
Documents and Languages
Individual Documents Shufti Verifies in Zambia
Shufti verifies 5+ Zambian identity documents plus passports and ID cards from other countries. The cards below cover the core documents Zambian onboarding relies on, with the full list on the supported documents page.
View All Supported DocumentsNational Registration Card (NRC)
The Department of National Registration, Passport and Citizenship issues the NRC to everyone aged 16 and above, green for citizens, pink for Commonwealth nationals and blue for other foreign nationals. Shufti runs forensic checks on the card and matches the holder with biometric liveness.
Zambian Passport
The Department of National Registration, Passport and Citizenship issues passports under the Passport Act No. 28 of 2016. Shufti applies nine forensic detection layers, from MRZ checksum validation to hologram analysis, and matches the photo to a live selfie, so a cloned or altered passport fails before onboarding.
Residence Permits and Refugee Identification Cards
The Department of Immigration issues residence, employment and investor's permits under the Immigration and Deportation Act No. 18 of 2010, and the FIC regulations accept a refugee identification card. Shufti checks each document's authenticity and validity and pairs it with the holder's passport.
Foreign Passports and National ID Cards
Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. That covers foreign investors, expatriate staff and non-resident customers who onboard without a Zambian document.
Zambian Driving Licence
The Road Transport and Safety Agency issues Zambian driving licences under the Road Traffic Act No. 11 of 2002, and holders can renew them online. Shufti checks the licence's security features, expiry and photo against a live selfie for lending, delivery and transport services.
Proof of Address
Shufti reads ZESCO electricity bills, water bills and council rates receipts, which the FIC regulations name as address evidence, plus bank statements and leases, then verifies the address against the customer's NRC or passport in one step.
Entity Identity
Certificate of Incorporation and Certificate of Share Capital
PACRA issues both certificates with a company registration number under section 14 of the Companies Act No. 10 of 2017. Shufti reads them and checks the details against live PACRA records, so a deregistered or altered company is caught at onboarding.
Business Name Certificate
Sole traders and partnerships register their trading names with PACRA under the Registration of Business Names Act No. 16 of 2011. Shufti matches the certificate to the owner's NRC and the PACRA record, so the person behind the trading name is verified too.
Foreign Company Registration
Foreign companies operating in Zambia register with PACRA under section 299 of the Companies Act, naming their directors and shareholders. Shufti reads the registration record, verifies the local representatives and links the Zambian branch to its parent's ownership data.
Articles of Association
Shufti's AI-OCR reads ownership, share capital, director powers and signing authority from a company's articles, checks them against the PACRA record and flags GAN-generated or edited pages before they reach a reviewer.
Business Address Proof
Leases and ZESCO bills for the business premises show where a company actually trades. Shufti cross-checks them against the registered office on the PACRA record, so the declared address matches the place of business.
Tax Identity
Taxpayer Identification Number (TPIN)
The Zambia Revenue Authority issues every taxpayer a ten-digit TPIN, and companies register using their certificates of incorporation and share capital. Shufti extracts the TPIN, cross-checks it against the company name and PACRA record and flags any mismatch before approval.
VAT Registration
Businesses above the Zambia Revenue Authority's turnover threshold must register for VAT. Shufti reads the VAT registration alongside the TPIN, so a trading company's declared activity and tax status line up in the KYB case.
Foreign Tax Registrations and FATCA/CRS
For foreign shareholders and non-resident group companies, Shufti's due diligence forms capture foreign tax identifiers and FATCA and CRS self-certifications in the same KYB case, so tax status sits beside ownership data.
Ownership and Control
Register of Beneficial Owners
PACRA keeps the Register of Beneficial Owners under section 21 of the Companies Act, and companies must report ownership changes within 14 days. Shufti identifies every natural person holding 5% or more, or exercising control by other means, and screens each one.
Shareholder Register and Ownership Chart
The Companies (Amendment) Act No. 23 of 2025 banned the issue of bearer shares, so every shareholder now has a name on record. Shufti maps ownership through holding layers using share registers, then screens every person and entity against sanctions, PEP and adverse media lists.
Directors, Managers and Authorised Signatories
Incorporation now requires an NRC or passport copy for each director and secretary. Shufti verifies the identity of every director, manager and authorised signatory, screens them against sanctions and PEP lists and sends an alert when PACRA records show a change in management.
Languages We Cover
English and Expat Document Parsing
Zambian NRCs, passports, licences and PACRA records are printed in English, while foreign investors and residents add documents in other scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and averages 93% against Google Vision's 78.4% across its published benchmark. Zero-shot document intelligence reads foreign investors' document layouts it has never seen on first sight, without waiting for a template.
Zambian Name Matching
The same surname can be spelled differently across an NRC, a passport and a bank record, and many customers share common family names. Shufti's phonetic models match these variants in sanctions and PEP screening, so spelling does not hide a true match or raise a false one.
Cross-Document Consistency Checks
Shufti reconciles names, dates of birth and NRC numbers, in the older format and the new 13-digit format, across the NRC, passport, driving licence, TPIN records and the PACRA beneficial ownership register, so a mismatched record surfaces before an analyst approves the customer.
Independent Validation
Shufti's Recognition Across Independent Evaluations
Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read More
Regulatory Update
Every Verification Route Zambian Firms Rely On, in One Platform
Online identity verification in Zambia rests on section 18 of the FIC Act, which requires non-face-to-face due diligence to be no less effective than meeting in person. Regulation 7 of the FIC (General) Regulations, 2022 lists the evidence firms can use, including photo IDs, utility bills and credit reference searches. Shufti supports every route below, for citizens, foreign residents and non-residents alike.
NFC Chip Verification
LiveShufti reads the chip in most foreign biometric passports and chip-enabled national ID cards, then matches the chip photo to a live selfie. It is the high-assurance route for foreign investors, expatriate staff and non-residents.
Registered Mobile Number Checks
LiveThe FIC Act lets a mobile number linked to a registered SIM stand in for a physical address. Shufti confirms the customer controls that number with a one-time passcode and adds phone risk signals to the case file.
Video Identification
LiveAn agent verifies the customer in English over a recorded video session, for customers who need a live check or fail an automated route. The full session is stored in the case file as evidence.
Fraud Prevention Across the Zambian Customer Journey
Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Zambian businesses act on risk while keeping legitimate customers moving.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer Avoidable Re-submissions
Live capture guidance for the NRC, passport and driving licence catches glare, blur and cropping before submission, so fewer customers retry on low-end phones.
Cleaner Audit Trails
Shufti's case management records sources, results, timestamps, evidence, analyst notes and decision history, packaged as report-ready bundles for STR filing with the FIC.
One Workflow, One Back Office
Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director and transaction changes, managing the full compliance lifecycle.
NRC-First Flow Design
Citizens verify with the NRC and a live selfie first, while foreign residents and non-residents move to passport and permit checks in the same flow.
Shufti's IDV/KYC Solutions for Zambia
KYC Solutions
To verify identity in Zambia, a firm has to cover citizens with a green NRC, foreign residents with a pink or blue NRC or a permit, refugees and non-residents onboarding from abroad. One Shufti flow routes each by risk, so nobody faces checks they don't need.
Explore More
Face Verification
Remote onboarding has to prove that the person holding the NRC is the person on camera. Shufti matches a live selfie to the document photo with iBeta Level 3 liveness and a false match rate below 0.001, so impersonation fails early.
.
Age Verification
Betting, alcohol and other age-restricted services need a customer's age confirmed without slowing sign-up. Shufti estimates age from a selfie in under 5 seconds and falls back to the date of birth on the NRC or passport when the estimate is close to the limit.
.
Bank Account Verification
Loan disbursements and payouts sent to an account that does not belong to the customer are hard to recover. Shufti validates Zambian bank account details and matches the account-holder name in real time, so funds reach the verified person and nobody else.
.
Address Verification
The Zambia Revenue Authority asks individuals for a sketch map of where they live, so address proof arrives as utility bills, rates receipts and bank statements in many layouts. Shufti's layout-aware extraction reads each format and fuzzy-matches the address to the ID, with a 99.3% pass rate.
.
Document Verification
Branches, agents and apps see Zambian and foreign documents in many formats, and forgeries hide among them. Shufti verifies each one within seconds with forensic checks on print, holograms and edits, so a fake is rejected before an analyst sees it.
.
Identity Verification
Some customers suit a passport chip read, while others need a video call. Shufti runs document, biometric, NFC and address checks in one API session, so each Zambian customer completes one flow and your team gets one result.
.KYB Solutions
Zambian companies register with PACRA, declare their beneficial owners to its register and often sit under foreign holding structures. Shufti checks PACRA records live and maps ownership to the 5% line set by the Companies (Amendment) Act No. 23 of 2025.
Explore More
Business Verification
Onboarding a Zambian company means confirming its PACRA certificates, TPIN, signatories and everyone who owns or controls 5% or more. Shufti's live registry call pulls that picture together in one check, putting corporate onboarding under two minutes.
.
Enhanced Due Diligence
Section 19 of the FIC Act requires senior management approval, source-of-wealth checks and closer monitoring for high-risk customers, including prominent influential persons. Shufti's branching due diligence forms collect that evidence, score the answers and route the case for approval.
.AML Screening
A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC rescreens every customer against 4,000+ watchlists, including Zambia's national list and UN Security Council lists, refreshes the data every 15 minutes and keeps each alert in one case file.
Explore More
Business AML Screening
Sanctions exposure often sits with an owner, not the company. Shufti screens every owner, director and signatory against sanctions lists, including Zambia's national list, plus PEP and adverse media sources, and rescreens the portfolio through perpetual KYB, so a new designation surfaces quickly.
.
Transaction Monitoring
Section 24 of the FIC Act requires ongoing due diligence that scrutinises transactions against what a firm knows of its customer. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity, cuts false positives by up to 60% and builds case bundles for FIC reporting.
.
Travel Rule
SI 53 of 2022 requires originator and beneficiary details on virtual asset transfers of USD 1,000 or more. Shufti exchanges Travel Rule data across the major networks in IVMS101 format, verifies ownership of unhosted wallets and holds a transfer when counterparty data is missing.
.
AI Compliance Co-Pilot
One common name can return 140+ screening hits, and shared family names multiply them. Shufti's AI Compliance Co-Pilot reviews each hit, gives a confidence score and a written reason, and leaves the final call with your compliance officer.
.Built To Fit Zambia's Compliance Landscape
Zambia's AML rules start with the FIC Act and the Financial Intelligence Centre, while the Bank of Zambia, the SEC, PIA, PACRA and sector supervisors add rules of their own. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each licence your group holds.
Financial Intelligence Centre Act No. 46 of 2010
Zambia's main AML act, amended in 2016 and 2020, works beside the Prohibition and Prevention of Money Laundering Act No. 14 of 2001. Section 16 sets customer and beneficial owner verification, section 18 non-face-to-face due diligence, section 22 ten-year records and section 24 ongoing due diligence.
Bank of Zambia (BoZ)
BoZ supervises banks, non-bank financial institutions and payment providers. Its 2017 AML/CFT Directives set reporting and compliance officer duties, its 2023 e-money Directives sort wallets into Minimum, Medium and Enhanced KYC tiers, and CB Circular 05/2026 requires checks that virtual asset partners are registered.
Financial Intelligence Centre (FIC)
Zambia's financial intelligence unit receives STRs within three working days of a suspicion under section 29 of the FIC Act and currency transaction reports from USD 10,000 under SI 53 of 2022. The FIC (General) Regulations, 2022 set the detailed due diligence and reporting rules.
Securities and Exchange Commission (SEC)
The SEC licenses capital markets operators under the Securities Act No. 41 of 2016, and the 2022 amendment added section 19D on supervising them for money laundering and terrorist financing risk. Its 2017 AML Directives set reporting duties, and it assesses token offerings case by case.
Pensions and Insurance Authority (PIA)
PIA supervises insurers, brokers and pension schemes, and section 120 of the Insurance Act No. 38 of 2021 lets it act on a licensee's AML failings. Its 2017 AML/CFT Directives cover customer identification, high-risk clients, electronic business and record keeping across the sector.
Patents and Companies Registration Agency (PACRA)
PACRA registers companies under the Companies Act No. 10 of 2017 and keeps the Register of Beneficial Owners under section 21. The Companies (Amendment) Act No. 23 of 2025 sets the threshold at 5% of shares and requires companies to share ownership data with reporting entities.
National Anti-Terrorism Centre (NATC)
NATC recommends national listings under the Anti-Terrorism and Non-Proliferation Act No. 6 of 2018, amended in 2023 and 2024, and relays UN Security Council lists. SI 1 of 2024 sets freeze and reporting duties, and the Act defines a freeze without delay as one within 24 hours.
Supervisors of Designated Non-Financial Businesses
The 2020 FIC Act amendment names AML supervisors by sector. The Law Association of Zambia oversees lawyers, ZICA oversees accountants, the Registrar of Estate Agents and the Chief Registrar of Lands cover property, and the FIC inspects casinos and dealers in precious metals and stones.
Department of National Registration, Passport and Citizenship
The department issues NRCs under the National Registration Act, Cap. 126, and passports under the Passport Act No. 28 of 2016. Its Integrated National Registration Information System (INRIS) builds a central biometric register of citizens and non-citizens and introduces biometric-enabled NRCs with a 13-digit number.
Zambia Information and Communications Technology Authority (ZICTA)
ZICTA oversees SIM registration under SI 10 of 2026, which requires an ID document, a facial photo and validation against the national identity management system before activation. The rules cap individuals at five SIMs and make parents register a child's SIM until the child turns 18.
Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG)
ESAAMLG's 2019 mutual evaluation put Zambia in enhanced follow-up, and its 2025 follow-up report upgraded several ratings while beneficial ownership transparency stayed partially compliant. Zambia was not on the FATF increased monitoring list in June 2026, and its second national risk assessment launched in March 2026.
Zambia Data Residency and Deployment
Section 70 of the Data Protection Act requires personal data to be processed and stored in Zambia and keeps sensitive data, including biometrics, in the country. Shufti's on-premises deployment keeps identity data inside your Zambian infrastructure, with nearest-region cloud hosting available where a transfer is authorised.
Data Protection Act No. 3 of 2021
Controllers and processors must register with the Office of the Data Protection Commissioner, biometric data counts as sensitive and breaches must be reported within 24 hours under section 49. Shufti applies encryption, role-based access controls and configurable retention to identity and biometric data.
Cyber Security Act No. 3 of 2025
The Act lists banking, finance, pensions and insurance as critical sectors, requires designated critical information to be hosted in Zambia unless authorised and sets a 12-hour preliminary incident report. Shufti supports those duties with on-premises hosting, audit logs and incident notice to your security team.
Retention Controls
Section 22 of the FIC Act sets at least ten years after a relationship ends and section 51 of the Data Protection Act ties retention to purpose, but neither minimum is an automatic deletion date. Shufti's retention is configurable by client and licence, with legal holds for FIC requests.
Encryption and Security
Shufti encrypts data in transit and at rest, enforces role-based access and keeps audit logs of every action. Its ISO 27001:2022 certification and SOC 2 Type 2 reports give banks, BoZ examiners and your auditors the evidence a vendor risk assessment asks for.
Automated Decisions and Biometric Data
Section 62 of the Data Protection Act gives customers the right to human intervention and to contest a decision based solely on automated processing. Shufti returns verification results and supporting details through the API and back office, so support teams can explain outcomes and escalate disputed results.
Scope of Our Role
Shufti processes personal data only on the client's documented instructions as a data processor, while the client remains the data controller responsible for registration and compliance under the Data Protection Act. Shufti's privacy notice identifies any activity where it acts as an independent controller.
Data Residency and Privacy Controls in Zambia
Zambia AML Sources That Strengthen Decisions
Financial Intelligence Centre (FIC)
Bank of Zambia (BoZ)
Drug Enforcement Commission (DEC)
Anti-Corruption Commission (ACC)
National Prosecution Authority (NPA)
Zambia Police Service (ZPS)
Patents and Companies Registration Agency (PACRA)
Zambia Institute of Chartered Accountants (ZICA)
Law Association of Zambia (LAZ)
Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG)
Financial Action Task Force (FATF)
Egmont Group of Financial Intelligence Units
UNODC Global Programme against Money Laundering (GPML)
World Bank Financial Integrity and Stability
United Nations Security Council Consolidated List
Turn Zambia Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.
Certified to Global Standards
PROVEN WORKFLOWS
Identity Verification Built Around Your Industry in Zambia
Meet Bank Of Zambia Regulations From Onboarding To Monitoring
Bank of Zambia regulations and the FIC Act require banks to verify every customer and beneficial owner, apply enhanced checks to high-risk clients and keep monitoring accounts after onboarding. Shufti combines NRC and passport checks, KYB on PACRA-registered firms, perpetual screening and transaction monitoring in one back office, with case files ready for BoZ examiners.
Frequently Asked Questions
Can Zambian customers verify remotely without a national digital ID?
Yes. Zambia has no national digital ID open to private firms yet, so Shufti verifies the NRC or passport, matches a live selfie with certified liveness and reads foreign passport chips over NFC. Customers who need a live check use an agent-led video session.
Is an NRC image enough to verify a Zambian customer?
An image shows that a card looks right, not that it belongs to the person onboarding. Shufti runs forensic checks on the NRC, matches its photo to a live selfie and cross-checks the NRC number against the passport, driving licence or TPIN records the customer provides.
Can Shufti verify foreign documents or identity formats it has not encountered before?
Yes. Shufti's zero-shot document AI learns an unfamiliar layout in minutes, without a template, so a foreign investor's or resident's ID gets the same forensic checks as a Zambian NRC, including the new biometric-enabled NRC with its 13-digit number.
How does Shufti OCR compare with Google OCR for documents Zambian firms receive?
Zambian documents are printed in English, which Shufti reads within its 99.7% accuracy across 150+ languages. Expat documents add other scripts, and in Shufti's published comparison its OCR averages 93% against Google Vision's 78.4% across the languages tested.
How does Shufti verify ownership when a Zambian company has several corporate layers?
Shufti traces ownership through each holding company using PACRA records, share registers and beneficial ownership declarations, then identifies every natural person holding 5% or more, or exercising control by other means. That covers the FIC Act's 25% test too, and each person is screened.
Does Shufti's ongoing monitoring cover more than sanctions screening?
Yes. Shufti compares each transaction with the customer's profile, tracks ownership and director changes and triggers a review when risk rises. That covers the ongoing due diligence section 24 of the FIC Act requires, alongside sanctions and PEP rescreening of every customer.
How does Shufti keep screening current and handle Zambian name variations?
Shufti updates sanctions, PEP and adverse media data throughout the day, including the national list NATC maintains and UN lists that must be applied within 24 hours. Phonetic models match spelling variants of Zambian names, so a different spelling does not hide a match.
Can we keep verification data in Zambia or run it inside our own infrastructure?
Yes. Shufti offers on-premises deployment, including air-gapped setups, so identity and biometric data stay inside your Zambian environment as section 70 of the Data Protection Act requires. Nearest-region cloud hosting serves data cleared for transfer, with the location set in the agreement.
What controls help us protect identity and biometric data?
Biometric templates and document images are encrypted, access is limited by role and logged, and retention is set per client. A data processing agreement documents Shufti's role as data processor, which supports your registration and 24-hour breach reporting duties under the Data Protection Act.
Can we configure different retention periods for different Zambian licences?
Yes. Retention can be set by licence, product and record type. A bank, insurer or virtual asset provider keeps AML records for at least the ten years the FIC Act requires, while other data follows shorter purpose-based periods, with legal holds where an investigation needs them.
What does Shufti provide when our compliance team needs to prepare an STR for the FIC?
Shufti exports the identity evidence, screening results, transaction history and analyst notes behind each alert as one report-ready bundle. Your compliance officer uses it to file the STR with the Financial Intelligence Centre within the three working days the FIC Act allows.
Can we add verification checks without rebuilding our onboarding journey?
Yes. Shufti's AI Journey Builder adds or reorders checks, such as passport NFC, address proof or enhanced due diligence questions, through configuration. Existing API integrations keep working, so a new rule for a product or wallet tier goes live without new development work.
How does Shufti make verification queries easier for our customer support team?
The back office shows every verification step, the check that failed and the evidence behind it, so an agent can explain a rejection in plain terms. Agents can request a new capture or escalate a disputed result without pulling the compliance team into routine queries.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
16 April, 2026
Document Verification: Middle East & Africa
From AI-forged Emirates IDs and Iqamas to Arabic OCR failures across 54 African markets, how Shufti verifies identity documents from the Gulf to Sub-Saharan Africa.
Regional Brief
