Shufti pitches AMLR readiness platform ahead of 2027 EU deadline

Shufti is marketing its compliance platform to banks, fintechs and payments firms preparing for the EU’s new anti-money laundering rulebook, which takes effect across all 27 member states on 10 July 2027. The company says its tools help firms prove their controls work under the tougher standard set by the regulation and the new EU Anti-Money Laundering Authority.

Why it matters: - The EU Anti-Money Laundering Regulation will replace 27 national AML/CFT regimes with one rulebook across all member states. - The new framework raises the bar from having controls in place to proving those controls are effective. - Firms in banking, payments, fintech, digital assets, crowdfunding and high-value goods will need to adjust before the 10 July 2027 deadline. - Shufti is positioning its platform as a way to help obliged entities prepare for those requirements in one system.

What happened: - Shufti said it has mapped AMLR requirements to the compliance steps businesses need to take and supports those steps through its platform. - The company framed the launch around the EU AMLR, Regulation (EU) 2024/1624, which takes effect on 10 July 2027 across the 27 EU member states. - The regulation is overseen by the new EU Anti-Money Laundering Authority, or AMLA. - Shufti said its offering is aimed at banking, fintech and payments firms, along with other obliged entities inside the AMLR’s scope. - The company said its platform is built on 100% in-house technology and delivered through a single API.

The details: - AMLR requires identity checks based on reliable and independent sources. - Draft technical standards under Article 28(1) point to eIDAS-grade verification as the reference point. - The rules map “substantial” assurance to standard customer due diligence and “high” assurance to enhanced due diligence. - EUDI Wallets under eIDAS 2.0 are expected to become available from late 2026, with firms required to accept them as rollout continues from 2027. - Existing customers are also covered. - Firms must keep records current on a risk basis under Article 26. - Firms must identify beneficial owners holding 25% or more under Articles 51 and 52. - The regulation pushes continuous, risk-based due diligence using ongoing monitoring and behavioural indicators. - Article 18 allows outsourcing AML tasks, but liability stays with the obliged entity. - Shufti said its remote onboarding verifies IDs by reading the document and NFC chip, matching the face and confirming liveness through iBeta PAD Level 3 passive liveness. - Shufti said its workflow supports legally binding qualified electronic signatures, recognized across the EU and EEA under eIDAS Article 25. - Shufti said every verification is stored in a secure, time-stamped chain of custody for regulators and auditors. - Shufti said its business verification checks companies against official registries and identifies ultimate beneficial owners. - The company said it continuously re-screens entities, ownership structures and directors across 100+ business registries. - Shufti said its perpetual KYC and KYB screening covers 4,000+ watchlists, 215+ sanctions regimes, 2.6 million politically exposed persons and close associates, and adverse media from 50,000+ sources. - The platform links alerts to verified identities and uses online, transactional and behavioural signals to spot risk changes in real time. - Shufti said its behavioural biometrics analyze how users type, navigate and interact with devices. - The company said those signals help flag abuse rings and duplicate registrations while reducing friction for legitimate users. - Shufti said it can re-verify existing users and businesses for back-book remediation and continuous due diligence. - For higher-risk users and complex cases, the company said it applies enhanced due diligence that can include source-of-funds verification, adverse media checks, indirect RCA tracing and corporate document authentication. - Shufti said firms can submit basic user details or a business’s POCs and the platform automates the full compliance lifecycle, from collection to monitoring and case management. - The company said its platform produces explainable decisions and evidence-ready compliance records. - Shufti also offers MLRO as a Service for teams without an in-house compliance function. - The company said its consultancy supports organizations dealing with the operational changes created by AMLR.

Between the lines: - Shufti is using the AMLR deadline to sell a broader compliance stack, not just identity verification. - The emphasis on a single accountable provider reflects a market pain point: many firms still stitch together onboarding, screening, monitoring and audit tools from multiple vendors. - The regulation’s focus on continuous monitoring and proof of effectiveness could increase demand for systems that generate audit trails automatically. - The company’s messaging also suggests that KYB re-verification and beneficial ownership checks will be a major compliance burden for firms with changing customer books.

What's next: - Firms have about a year until the AMLR takes effect on 10 July 2027. - Shufti is steering potential customers toward its EU AMLR Compliance Preparation Guide and tailored AMLR assessments. - The company said those assessments can help firms identify compliance gaps, set implementation priorities and build a roadmap before the deadline. - Draft technical standards and implementation details may still change before the regulation goes live.

The bottom line: - Shufti is betting that the EU’s new anti-money laundering regime will push firms toward unified, evidence-heavy compliance platforms that can prove controls work end to end.