AMLR Solutions 
AMLR Consultation
EUDI Wallet
Onboarding
Ongoing Monitoring
FRAML
KYC
KYB
KYI
Age Assurance
Workforce IAM
Candidate Verification
Account Takeover
Bonus/ Promotion Abuse
Chargeback Fraud
Deepfake
Document Fraud
Fraud Networks
Impersonation Fraud
Money Mule Activity
Multi-Accounting
Party Fraud
Regulatory & Compliance Risks
Synthetic Identity Fraud
Adult Content
Banking
Crypto
Fintech
Forex
Compliance
Fraud prevention
Trust & safety
Global expansion
Compliance Officers
Developers
Fraud Analysts
Product Managers
Journey Builder 
Global Trust Platform
Customer Profiles
Vendor Comparison
IDV Case Management
AML Case Management
Regulatory Reporting
Agentic Rule Builder 
AI Compliance Co-Pilot 
Fraud Analytics
Fraud Hub 
OCR
Shufti AI
Bank Account Verification 
Biometric Duplication
Database Checks
Document Intelligence
Government ID
Mobile Driver's License
NFC
Selfie Liveness
Brand Personalisation
Deployment Options
Identity Methods
IDV Modes
Multi-tenancy
On-Premise IDV
Secure Capture
Shufti MCP
- Algeria
- Argentina
- Armenia
- Australia
- Austria
- Bahrain
- Bangladesh
- Belarus
- Belgium
- Brazil
- Bulgaria
- Cambodia
- Cameroon
- Canada
- Chile
- China
- Colombia
- Costa Rica
- Croatia
- Cyprus
- Czech Republic
- Denmark
- Dominican Republic
- Ecuador
- Egypt
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Germany
- Greece
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Saudi Arabia
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- UAE
- Uganda
- Ukraine
- UK
- USA
- Vietnam
Scale Identity Verification and KYC Operations in the USA
Verify customers across the USA through mDLs, driver's licenses from all 50 states and 10,000+ foreign ID document types, run KYB on state-registered businesses and their owners, and monitor transactions and OFAC lists. One platform runs compliance and fraud prevention across the full customer lifecycle for FinCEN-, SEC- and state-supervised firms.
Operational Performance for US KYC
Our Numbers Speak Volumes
98.68%
Pass
rates
Under 5 secs
IDV
Verification
99%
eIDV
Coverage
USA IDV/KYC Challenges
State-Issued IDs Vary in Design and Security Features
Each state designs its own driver's licenses and ID cards, with REAL ID, enhanced, temporary and mobile versions in circulation, so a reviewer in one state rarely knows what a genuine card from another looks like. Shufti checks every state format against its issuing template.
Synthetic Identities Built on Real SSNs Pass Data-Only Checks
A Social Security number carries no photo, so fraudsters pair real numbers with invented names and build credit files that clear database matching. Shufti ties the SSN, the ID document and a live face to one person through eCBSV, document and liveness checks.
Banks Now Verify Beneficial Owners Without a Federal Register
Since March 2025, US companies no longer file beneficial ownership reports with FinCEN, so banks cannot check owners against a federal register and must collect and verify them under the CDD Rule. Shufti confirms each entity through live state registry calls and maps the ownership chain from company documents before the account opens.
Federal and State Firms Follow Different Rulebooks
The Bank Secrecy Act sets a federal floor, and NYDFS Part 504, state money transmitter laws and biometric privacy statutes add their own. Shufti's AI Journey Builder configures checks by state, license and risk tier, so a New York BitLicensee and an Illinois fintech share one platform.
Documents and Languages
Individual Documents Shufti Verifies in the USA
Shufti verifies US identity documents from all 50 states plus passports and ID cards from other countries. The cards below cover the core documents US onboarding relies on, with the full list on the supported documents page.
View All Supported DocumentsMobile Driver's License (mDL)
State-issued mDLs carry license data digitally signed by the issuing state under ISO/IEC 18013-5. Shufti validates that signature and the device binding, then requests only the attributes onboarding needs, such as name, address or an over-21 flag.
State Driver's License and ID Card
Each state's motor vehicle agency issues licenses and ID cards, with REAL ID-compliant cards marked by a star. Shufti decodes the PDF417 barcode and matches it to the printed front, runs forensic and liveness checks, and confirms license data with the issuing state through authorised AAMVA access.
Permanent Resident Card and Employment Authorization Document
USCIS issues Green Cards to lawful permanent residents and EADs to non-citizens authorized to work, and both onboard customers who hold no US passport. Shufti reads the Green Card's machine-readable zone, checks USCIS security features and matches the card photo to a live selfie.
US Passport and Passport Card
US passports carry a chip that Shufti reads over NFC, with nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding. The passport card's chip holds no personal data, so it is verified as a document.
Foreign Passports and National ID Cards
Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Visa holders, international students and non-resident account holders open US accounts with these documents.
Social Security Number and ITIN
SSA issues Social Security numbers, and the IRS issues ITINs to people who cannot get one. The CIP Rule accepts either as a taxpayer identification number, and Shufti matches an SSN to name and date of birth through eCBSV, or either number through credit-header data.
Proof of Address
Utility bills, bank statements, lease agreements and property tax bills confirm where a customer lives. Shufti extracts the address and matches it to the ID in the same step, flagging documents issued to a different name or outside the accepted date range.
Entity Identity
Articles of Incorporation or Organization
Filed with the Secretary of State in the formation state, these documents prove a corporation or LLC exists. Shufti reads entity name, file number and formation date, then confirms each against the state registry through a live call at every check.
Certificate of Good Standing
Issued by the state, for example by the Delaware Division of Corporations, the certificate shows the entity is current on filings and fees. Shufti compares it with live registry status and flags companies that have lapsed since it was issued.
Bylaws and Operating Agreement
Corporate bylaws and LLC operating agreements set out ownership, member capital and who can sign for the business. Shufti's AI-OCR reads those terms and flags GAN-generated or edited pages before the documents reach a reviewer.
Business Address Proof
Commercial leases, utility bills and bank statements in the company's name confirm where it operates. Shufti cross-checks that address against the registered and principal office addresses on the state filing and the business license.
Tax Identity
Employer Identification Number (EIN)
The IRS assigns each business an EIN and confirms it in the CP 575 notice or a 147C letter. Shufti extracts the EIN and legal name from these letters and cross-checks both against the state registry record and the customer's application.
State Sales Tax Permit
State revenue departments issue sales tax permits to businesses that sell taxable goods or services. Shufti reads the permit number, legal name and address, and checks each against the entity's formation filing and EIN records.
Forms W-9 and W-8BEN-E
US entities certify their taxpayer identification number on Form W-9, while foreign entities document their status and FATCA classification on Form W-8BEN-E. Shufti extracts both, matches the TIN to the EIN record and stores the certification in the case file.
Ownership and Control
Beneficial Ownership Under the CDD Rule
The CDD Rule makes the bank, not a federal register, the place where a company's owners are recorded. Shufti builds that ownership list from formation and ownership documents, verifies each owner's ID, screens them against sanctions and PEP lists and stores the signed certification.
Shareholder Register and Ownership Chart
Holding companies and LLC chains can push a real owner several layers away from the customer. Shufti maps ownership through each intermediate company and screens every person and entity against OFAC's SDN List and PEP data.
Officers, Directors, Managers and Authorized Signers
State annual reports list officers, directors and managers, and account resolutions name who can sign. Shufti verifies each signer's ID, screens every listed name and raises an alert when a state filing shows a change in officers.
Languages We Cover
English and Expat Document Parsing
US documents are issued in English, while visa holders and non-residents bring passports in Arabic, Cyrillic, CJK and other scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and averages 93% against Google Vision's 78.4% across its published benchmark. Zero-shot document intelligence reads passport layouts it has never seen on first sight, without waiting for a template.
US Name Matching
Middle names, initials, suffixes such as Jr. and III, hyphenated surnames and two-part Hispanic surnames vary from one document to the next. Shufti's phonetic and transliteration models in 80+ languages match these forms in OFAC and PEP screening.
Cross-Document Consistency Checks
Names, dates of birth, SSNs and EINs are reconciled across the driver's license, passport, Form W-9, state registry filing and beneficial ownership certification, so a single mismatch surfaces before approval.
Independent Validation
Shufti's Recognition Across Independent Evaluations
Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read More
Regulatory Update
Every Verification Route US Regulators Recognize, in One Platform
The CIP Rule at 31 CFR 1020.220(a)(2)(ii) recognizes documentary verification with unexpired government-issued photo ID and non-documentary verification against consumer reporting agencies and public databases, and FinCEN's September 2026 FAQs with the federal banking agencies confirm an unexpired mDL can qualify as government-issued ID. Shufti supports each of these routes, plus chip, database, document and video routes for non-residents and customers without a US driver's license.
AAMVA Driver's License Data Verification
LiveThrough authorised DLDV access, Shufti sends the license number, name, date of birth and address to the issuing state's records and receives a match flag for each field. Every result is stored in the case file with its timestamp.
SSA eCBSV Social Security Number Check
LiveWith the customer's consent and your institution's SSA enrolment, Shufti confirms through eCBSV that an SSN, name and date of birth match Social Security Administration records.
Mobile Driver's License Verification
LiveCustomers share an mDL from their phone wallet, and the verified record lands in the case file with no card photo, glare or retake, the fastest route for residents of states that issue mDLs.
Docless Database (eIDV)
LiveShufti matches name, date of birth, address and SSN against credit-header and public-record data in seconds, giving a decision for customers who onboard without uploading an ID or taking a selfie.
NFC Chip Verification
LiveShufti reads the chip in US ePassports and most foreign biometric passports, the high-assurance route for customers without a US license or mDL and for accounts your risk policy rates as higher risk.
Document and Face Biometric
LiveCustomers photograph an ID and take a selfie, and Shufti's iBeta Level 3 certified liveness confirms a live person matches the document, the route most non-residents and visa holders take.
Video Identification
LiveAn agent verifies the customer and the document on a live call, run in the language your customers use, and the full session, including consent, is recorded as evidence for high-risk or escalated onboarding.
Fraud Prevention Across the US Customer Journey
Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help US businesses act on risk while keeping legitimate customers moving.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer Avoidable Re-submissions
Capture guidance for every state license design, including the barcode side, cuts blurred, cropped and glare-hit uploads before they reach review.
Cleaner Audit Trails
Shufti's case management records sources, results, timestamps, evidence, analyst notes and decision history, packaged as report-ready bundles for SAR filing through FinCEN's BSA E-Filing System.
One Workflow, One Back Office
Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director and transaction changes, managing the full compliance lifecycle.
mDL and Driver's License-First Flow Design
Residents share an mDL or scan their state license first, and non-residents move to passport verification in the same flow.
Shufti's IDV/KYC Solutions for the USA
KYC Solutions
US customers include mDL holders, license-carrying residents, Green Card holders, visa holders and non-residents with no SSN. One Shufti flow routes each by risk, so nobody faces checks they don't need.
Explore More
Face Verification
License photos are easy to find online, and synthetic identities have no face behind them. Shufti's iBeta Level 3 passive liveness and one-to-one face match, with a false match rate below 0.001 in DHS RIVR 2025, tie the applicant to the ID before the account opens.
.
Age Verification
State age-verification laws and 21+ rules for gaming and alcohol require a confirmed age before access. Shufti estimates age from a selfie in under 5 seconds, falls back to the ID when needed, and reads an mDL's over-21 flag without exposing the birth date.
.
Bank Account Verification
ACH funding and payouts go wrong when the account belongs to someone else. Shufti checks US routing and account numbers and matches the account-holder name to the verified customer, so first funding comes from an account the customer actually owns.
.
Address Verification
The CIP Rule asks for a residential or business street address, and a PO box does not qualify. Shufti extracts addresses from bills, statements and leases with layout-aware AI, or confirms them docless in under 3 seconds, and fuzzy-matches the result to the ID.
.
Document Verification
Fifty states issue different license designs and refresh them on their own schedules. Shufti processes every current and older state format with forensic checks for font, layout, barcode and photo tampering, returning a decision within seconds.
.
Identity Verification
CIP evidence often sits in separate tools for documents, selfies and data checks. Shufti runs document, biometric, NFC, address and eIDV checks in one API session and writes every result into one customer record an examiner can follow.
.KYB Solutions
US companies register in 50 separate state systems, often as LLCs held through other LLCs, and banks verify their owners under the CDD Rule. Shufti follows each ownership layer until it reaches the people behind the business.
Explore More
Business Verification
Onboarding a US company means confirming its Secretary of State filing, EIN, authorized signers and everyone who owns 25% or more, plus one control person. Shufti's live registry call confirms the state filing, and owners are checked against the ownership documents and certification the company provides.
.
Enhanced Due Diligence
MSBs, cross-border correspondents and businesses with PEP owners need more than a registry match. Shufti's due diligence forms branch by risk, score answers against your policy and send UBO verification links, so high-risk files close with documented source-of-funds evidence.
.AML Screening
A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC rescreens every customer against 4,000+ watchlists, including OFAC's SDN and Consolidated Sanctions Lists and UN lists, refreshed every 15 minutes, with every alert resolved in one case file.
Explore More
Business AML Screening
OFAC's 50 Percent Rule blocks any entity owned 50% or more in aggregate by blocked persons, even when the entity itself is not listed. Shufti screens owners and directors, adds up their combined stakes through perpetual KYB and flags hidden SDN List exposure.
.
Transaction Monitoring
Cash split to stay under the $10,000 CTR threshold and mule activity on instant rails need US-specific rules. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity with 60% fewer false positives and prepares SAR and CTR filings in FinCEN's BSA XML format for your team to submit.
.
Travel Rule
Virtual currency transfers that cross FinCEN's Travel Rule threshold must carry originator and beneficiary data. Shufti exchanges IVMS101 data with counterparty VASPs through one integration and verifies who owns an unhosted wallet before funds move.
.
AI Compliance Co-Pilot
One common name can return 140+ screening hits. Shufti's AI Compliance Co-Pilot reviews each hit and assigns a confidence score with a written reason, while the BSA officer keeps the final call.
.Built To Fit the USA's Compliance Landscape
Federal law and FinCEN rules apply to every covered financial institution, while banking, securities, commodities and state regulators examine firms against their own rules. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each license your group holds.
Bank Secrecy Act and CIP Rule
The Bank Secrecy Act (31 U.S.C. 5311 et seq.) and USA PATRIOT Act Section 326 require a written Customer Identification Program. Under 31 CFR 1020.220, banks collect name, date of birth, address and an identification number before opening an account and keep identifying records five years after account closure.
CDD Rule
31 CFR 1010.230 requires covered institutions to identify and verify each 25% owner and one control person of a legal entity customer. FinCEN Order FIN-2026-R001 of February 2026 limits this to first account opening, doubts about reliability and risk-based reviews, while 31 CFR 1020.210 requires ongoing monitoring.
Financial Crimes Enforcement Network (FinCEN)
FinCEN is the US financial intelligence unit and receives SARs and CTRs through the BSA E-Filing System. Banks file a SAR within 30 calendar days of initial detection for suspicious activity of $5,000 or more (31 CFR 1020.320), report cash transactions over $10,000 and answer Section 314(a) requests.
Office of the Comptroller of the Currency (OCC)
The OCC charters and supervises national banks, federal savings associations and federal branches of foreign banks. 12 CFR 21.21 requires each to run a board-approved BSA program with internal controls, independent testing, a designated BSA officer, training and a Customer Identification Program, which OCC examiners then test.
Federal Reserve, FDIC and NCUA
The Federal Reserve supervises state member banks and bank holding companies under 12 CFR 208.63, the FDIC supervises state non-member banks under 12 CFR 326.8, and the NCUA covers federally insured credit unions under 12 CFR 748.2. Each rule sets the same core BSA program elements for examiners.
SEC and FINRA
Broker-dealers run a Customer Identification Program under 31 CFR 1023.220 and keep BSA records under SEC Rule 17a-8. FINRA Rule 3310 requires a written AML program with suspicious activity procedures, annual independent testing for most firms, a designated AML compliance person, ongoing training and risk-based customer due diligence.
CFTC and NFA
Futures commission merchants and introducing brokers follow 31 CFR Part 1026, which sets their AML program and Customer Identification Program duties. NFA Compliance Rule 2-9(c) requires these member firms to adopt a written AML program approved by senior management, and NFA examines members against it.
Office of Foreign Assets Control (OFAC)
OFAC administers US sanctions under IEEPA, TWEA and 31 CFR Chapter V and publishes the SDN List and the Consolidated Sanctions List. Since March 2025, 31 CFR 501.601 has required sanctions-related transaction records to be kept for 10 years, matching the 10-year statute of limitations set in 2024.
New York State Department of Financial Services (NYDFS)
NYDFS requires regulated banks and money transmitters to run transaction monitoring and sanctions filtering programs under 3 NYCRR Part 504 and to file a board resolution or compliance finding each April 15. Virtual currency firms need a BitLicense under 23 NYCRR Part 200, and Part 500 sets cybersecurity rules.
State Money Transmitter Regulators
Money services businesses register with FinCEN under 31 CFR 1022.380 and also need a license in most states where they serve customers. The Conference of State Bank Supervisors reports that 31 states had enacted its Money Transmission Modernization Act in full or in part by September 2026.
FinCEN Virtual Currency Guidance
FinCEN guidance FIN-2019-G001 treats virtual currency exchangers and administrators as money transmitters, bringing registration, AML program and Travel Rule duties for transfers of $3,000 or more under 31 CFR 1010.410(f). The GENIUS Act of July 2025 treats permitted payment stablecoin issuers as financial institutions under the BSA.
New Jersey Division of Gaming Enforcement
Casinos and card clubs run BSA programs under 31 CFR Part 1021, and state gaming regulators add player verification rules. In New Jersey, N.J.A.C. 13:69O-1.3 requires online gaming operators to verify that each patron is 21 or older and not self-excluded, using approved multi-source authentication.
AAMVA and REAL ID
The REAL ID Act of 2005 and 6 CFR Part 37 set minimum standards for state licenses, enforced for air travel since May 7, 2025. AAMVA's card design standard makes the PDF417 barcode mandatory, and its DLDV service lets approved organizations match license data against issuing-state records.
Social Security Administration eCBSV
Section 215 of the Economic Growth, Regulatory Relief, and Consumer Protection Act created eCBSV, which lets financial institutions and their service providers confirm whether an SSN, name and date of birth match SSA records. Each check needs the number holder's consent and can return a death indicator.
FTC Red Flags Rule
16 CFR Part 681 requires financial institutions and creditors with covered accounts to run a written Identity Theft Prevention Program. The program must detect red flags such as suspicious documents and mismatched identifying information, respond to them, and be updated as identity theft risks change.
Treasury National Money Laundering Risk Assessment
Treasury's 2024 National Money Laundering Risk Assessment names fraud as the largest source of illicit proceeds laundered in or through the US, ahead of drug trafficking, cybercrime and corruption. The FATF last evaluated the US in 2016, and the country is on the calendar for the FATF's fifth round.
US Data Residency and Deployment
Shufti hosts US customer data in US regions of Amazon Web Services, Microsoft Azure, Google Cloud, Oracle Cloud Infrastructure and IBM Cloud, or deploys on-premises inside your own infrastructure. Hosting locations and any transfer arrangements are defined in your agreement before go-live.
Gramm-Leach-Bliley Act and FTC Safeguards Rule
The Safeguards Rule (16 CFR Part 314) requires encryption of customer information and, since May 13, 2024, FTC notice within 30 days of a breach affecting 500 or more consumers. Shufti protects identity and biometric data with encryption, role-based access controls and configurable retention.
State Biometric Privacy Laws
Illinois BIPA requires written consent before collecting biometric identifiers and a public retention schedule, with destruction within three years of the last interaction, and Texas and Washington add their own rules. Shufti captures consent inside the flow and deletes face data on your schedule.
California CCPA and State Privacy Laws
California treats biometric processing that identifies a consumer as sensitive personal information, and CPPA rules in force since January 1, 2026 add risk assessment and automated decision duties. Shufti acts as a service provider under the CCPA and supports access and deletion requests under other state laws.
Retention Controls
CIP, SAR and OFAC records carry different statutory minimums, and those minimums are not automatic deletion dates. Shufti sets retention by client, license and record type, applies legal holds while an examination or investigation is open, and deletes data once the period ends.
Encryption and Security
Data is encrypted in transit and at rest, and role-based access and audit logging cover every case file. Shufti holds ISO 27001:2022 certification and an independently audited SOC 2 Type 2 report that your vendor risk team can review during third-party due diligence.
Automated Decisions and Biometric Data
When a selfie or database check declines a customer, your team needs the reason. Shufti returns verification results and supporting details through the API and back office, so support staff can explain outcomes and escalate disputed results to a reviewer.
Scope of Our Role
Shufti processes data on your instructions as a service provider, and supports the oversight banks apply under the June 2023 Interagency Guidance on Third-Party Relationships. Your firm keeps responsibility for its BSA program, and Shufti's privacy notice identifies any activities where it acts independently.
Data Residency and Privacy Controls in the USA
US AML Sources That Strengthen Decisions
Financial Crimes Enforcement Network (FinCEN)
Office of Foreign Assets Control (OFAC)
Board of Governors of the Federal Reserve System
Office of the Comptroller of the Currency (OCC)
Federal Deposit Insurance Corporation (FDIC)
Securities and Exchange Commission (SEC)
Financial Industry Regulatory Authority (FINRA)
Commodity Futures Trading Commission (CFTC)
Internal Revenue Service (IRS)
National Association of Secretaries of State (NASS)
Financial Action Task Force (FATF)
UN Security Council Consolidated List
Egmont Group of Financial Intelligence Units
Wolfsberg Group
Basel Committee on Banking Supervision
Turn US Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.
Certified to Global Standards
PROVEN WORKFLOWS
Identity Verification Built Around Your Industry in the USA
CIP And CDD Evidence Ready For Examiners
Banks verify every new customer under the CIP Rule and collect entity owners under the CDD Rule, and examiners test both. Shufti combines mDL, license, eIDV and eCBSV checks with KYB, OFAC screening and transaction monitoring, so each account file holds the evidence an OCC, Federal Reserve or FDIC examiner asks for.
Frequently Asked Questions
Does Shufti support mobile driver's licenses, and what happens when customers cannot use one?
Yes. Shufti accepts mDLs from issuing states and verifies the state's digital signature, and FinCEN's 2026 FAQs confirm an mDL can serve as CIP identification. Customers without one scan their physical license or passport, or complete a docless SSN check, in the same flow.
Is a driver's license image enough to verify a US customer?
No. Shufti decodes the license barcode and compares it with the printed front, runs forensic tamper checks, matches the photo to a live selfie and confirms the license details against issuing-state records through authorised AAMVA access, giving documentary evidence that stands up in an exam.
Can Shufti verify foreign documents or identity formats it has not encountered before?
Yes. Visa holders and non-residents arrive with documents from every region, and Shufti's zero-shot AI learns a new format in minutes instead of waiting for template updates. NFC chip reads cover most biometric passports, and face matching ties each document to the person presenting it.
How does Shufti OCR compare with Google OCR on the foreign identity documents US firms receive?
Across the languages in Shufti's published benchmark, its OCR averages 93% accuracy against Google Vision's 78.4%. For US firms onboarding visa holders and non-residents, that means fewer manual corrections to names and dates of birth before CIP records are created and OFAC screening runs.
How does Shufti verify ownership when a US company has several corporate layers?
Shufti pulls each entity's state filing through a live registry call, then follows ownership through holding companies and LLC members until it reaches the individuals with 25% or more or with control. Each person is ID-verified and screened against OFAC and PEP lists.
Does Shufti's ongoing monitoring cover more than sanctions screening?
Yes. 31 CFR 1020.210(a)(2)(v) requires banks to monitor customers on a risk basis and keep their information current. Shufti compares transactions with each customer's profile, rescreens customers against watchlists and alerts you when state filings show new owners or officers.
How does Shufti keep screening current and handle US name variations?
Shufti refreshes OFAC's SDN and Consolidated Sanctions Lists, PEP data and adverse media every 15 minutes. Matching runs across spelling variants, transliterations and incomplete names, so a listed person is caught even when a document shows a different form of the name.
Can we choose US hosting or run verification inside our own infrastructure?
Yes. Shufti runs in US regions of AWS, Azure, Google Cloud, Oracle Cloud and IBM Cloud, or on-premises inside your environment with the same features. Your agreement records the hosting location, so vendor risk and examination teams can see where customer data sits.
What controls help us protect identity and biometric data?
Shufti encrypts data in transit and at rest, limits access by role, logs every action and holds ISO 27001:2022 certification and a SOC 2 Type 2 report. Consent capture for laws such as Illinois BIPA and configurable deletion keep face data only as long as needed.
Can we configure different retention periods for different US licenses?
Yes. Retention is set per client, license and record type, so CIP files, SAR support documents and OFAC records each follow their own statutory period inside one platform. Legal holds pause deletion while an examination, investigation or litigation is open.
What does Shufti provide when our compliance team needs to file a SAR with FinCEN?
Shufti assembles the case into a SAR-ready package with customer identity, transaction history, alerts, analyst notes and evidence, formatted in FinCEN's BSA XML schema for the BSA E-Filing System. Your team reviews the narrative, files within the deadline and keeps the full record.
Can we add verification checks without rebuilding our onboarding journey?
Yes. Shufti's AI Journey Builder adds checks such as eCBSV, AAMVA license data or video identification to an existing flow through configuration, and one API returns every result. You can tighten checks for one state, license or product without touching the rest of the journey.
How does Shufti make verification queries easier for our customer support team?
Every decision in Shufti's back office shows the checks run, the result of each and the reason for any decline, from a barcode mismatch to a failed liveness test. Support staff can explain the outcome, request a resubmission or escalate without contacting engineering.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
16 April, 2026
Document Verification: North America
FinCEN has warned that AI-generated IDs are getting past verification checks. How Shufti's document checks keep North American onboarding ahead of fraud and regulators.
Regional Brief
