# Zyphe

> The AI agents platform for compliance: KYC, KYB, and AML reviews prepared by agents and approved by your team, with no central store of customer PII.

Zyphe is an AI agents platform for compliance. Its agents prepare KYC, KYB, AML, sanctions and transaction monitoring reviews inside the tools regulated companies already use, with the evidence and a written rationale attached, and the customer's team approves the decisions. Zyphe sells this two ways: operated review desks that work an agreed queue under a service level, and a verification platform and API priced per verification. Customer PII is encrypted and split across storage nodes rather than held in one Zyphe database, and every decision carries a per-decision audit trail.

## Key facts

- AI agents for compliance operations: KYC, KYB, AML, sanctions, transaction monitoring, EDD
- Two ways to buy: agent review desks (https://www.zyphe.com/agents), priced per completed task on pay as you go, Growth or Enterprise; or the verification platform and API, priced per verification (https://www.zyphe.com/pricing)
- Agents prepare; the customer approves. The decisions AMLR Article 18(3) reserves for the obliged entity stay with the customer
- Decentralised PII storage, NFC chip read, two-step liveness, per-decision audit trail
- Native Model Context Protocol (MCP) server: an agent in Claude, ChatGPT, or Cursor can work KYB cases (clarifications, UBO and director changes, document requests, guarded approval) and dispose of AML screening hits (guarded false-positive clear, escalate to a human), as well as configure verification flows, forms, and API keys
- Designed around GDPR and Regulation (EU) 2024/1624, the EU AML Regulation that applies from 10 July 2027. SOC 2 and ISO/IEC 27001 audits are in progress, with completion targeted Q4 2026. Neither is certified today.
- Agents work inside existing tools the way an analyst does (Unit21, Sumsub, Persona, Alloy, Sift, Jumio, ComplyAdvantage, Chainalysis, TRM Labs, Salesforce, Jira). Naming a tool does not imply a partnership or endorsement
- Coverage: US, UK, EU, multilingual
- Based in New York, London, and Milan

## Core Pages

- [The AI Agents Platform for Compliance | Zyphe](https://www.zyphe.com/): AI agents that prepare KYC, KYB, and AML reviews for your team to approve, with no central store of customer PII and a per-decision audit trail.
- [AI Compliance Agents for KYC, KYB & AML](https://www.zyphe.com/product): AI compliance agents that complete KYC verification, KYB and periodic reviews, AML investigations, sanctions/PEP/adverse media screening, transaction monitoring, EDD, document review and case management end-to-end inside existing tools, with a per-decision audit trail and no central store of customer PII.
- [KYC Software](https://www.zyphe.com/product/kyc-software): KYC verification that runs through Zyphe agents on a substrate that never stores customer PII centrally.
- [AML Software](https://www.zyphe.com/product/aml-software): AML investigations, sanctions and adverse media screening, transaction monitoring, all handled by Zyphe agents inside your existing TM platform.
- [Sanctions Screening Software](https://www.zyphe.com/product/sanctions-screening-software): Sanctions, PEP, and watchlist screening run by Zyphe agents with continuous re-screening as designations change, without pooling customer PII in a central database.
- [KYB Software](https://www.zyphe.com/product/kyb-software): KYB and periodic review agents that resolve UBO chains, registry lookups, and ownership refresh on schedule or on trigger events.
- [KYC Passport](https://www.zyphe.com/product/kyc-passport): Reusable identity credentials customers carry across products. Verify once, reuse everywhere. No repeated uploads, no stored copies.
- [Compliance as a Service: AI Review Desks](https://www.zyphe.com/agents): Operated review desks where Zyphe agents work your compliance queue against your own policy and your team approves. Covers which decisions AMLR Article 18(3) reserves to the obliged entity, and the narrow derogations in Art. 18(3)(e) and Art. 18(7).
- [Sanctions and PEP Alert Review Desk](https://www.zyphe.com/agents/sanctions-pep-alert-review): Operated desk for sanctions and PEP screening alerts: agents compare each hit against your matching policy, write the disposition and its reasoning, and escalate genuine matches for your analysts to approve.
- [Adverse Media Review Desk](https://www.zyphe.com/agents/adverse-media-review): Operated desk for adverse media and negative news screening: agents read the source coverage, resolve whether it concerns your customer, classify it against your risk taxonomy, and summarise with citations.
- [UBO and EDD Review Desk](https://www.zyphe.com/agents/ubo-edd-review): Operated desk for beneficial ownership resolution and enhanced due diligence: agents walk the ownership chain through corporate registries to natural persons, screen them, and assemble the EDD file including what could not be resolved.
- [Transaction Monitoring Alert Triage Desk](https://www.zyphe.com/agents/transaction-monitoring-alert-triage): Operated desk for transaction monitoring alerts: agents reconstruct the account history behind each alert, test it against that customer’s own baseline and your typologies, and draft the disposition or a SAR/STR narrative for your investigator to approve and file.
- [KYC Periodic Review and Refresh Desk](https://www.zyphe.com/agents/kyc-periodic-review-refresh): Operated desk for KYC periodic review, ongoing due diligence and remediation backlogs: agents re-run the checks, diff the result against the file you hold, and flag what materially changed for your team to approve.
- [Industries](https://www.zyphe.com/industry): AI compliance agents for fintech, crypto, payments, banks, neobanks, lending, marketplaces, healthcare, government, and more.
- [Pricing](https://www.zyphe.com/pricing): Two price lists. Identity verification (ID verification, liveness and face match) is priced per verification with self-serve sign-up and no platform fee or monthly minimum, with standalone checks billed per use: AML screening (sanctions, PEP and adverse media), KYB verification priced per jurisdiction with metered ownership discovery, proof of address, wallet screening and transaction monitoring; the first 500 identity verifications each month are free. AI compliance agents are priced per completed task (screening alert reviews, adverse media, KYB, transaction investigations, EDD, SAR/STR drafts, periodic reviews): pay as you go with no minimum, Growth with a monthly minimum credited against usage and lower task rates, or Enterprise on agreed scope. Includes both cost estimators and the full rate tables.
- [Compare: Hiring vs Generic BPO vs Zyphe](https://www.zyphe.com/compare): Real cost, delay, and coverage tradeoffs of internal hiring vs generic BPO vs Zyphe AI compliance agents. Includes a cost calculator.
- [AI compliance agents compared: Castellum.AI, Bretton, Sphinx, WorkFusion, Zyphe](https://www.zyphe.com/agents/compare): Comparison of five agentic AML vendors on supervisory framing, AMLR Article 18 outsourcing boundaries, decision rationale, the human decision boundary, data protection and deployment, integration and delivery model, watchlist data and named references, written by Zyphe (one of the five) with every competitor fact linked to the vendor's own page and checked on 1 October 2026. Castellum.AI, Bretton (formerly Greenlite AI), Sphinx and WorkFusion frame their compliance mainly around US bank supervision (OCC, FDIC, Federal Reserve, NCUA, NY DFS, FinCEN, OFAC) and none addresses Article 18 outsourcing; Zyphe is built around Regulation (EU) 2024/1624. Includes the six tasks Article 18(3) does not permit an EU obliged entity to outsource, subject to the narrow exceptions in Article 18(3)(e) (intra-group FIU reporting in the same Member State) and Article 18(7) (certain collective investment undertakings, with supervisory approval).
- [Customer stories](https://www.zyphe.com/customers): Public, permissioned customer stories: Azimut Group (wealth manager; KYB business verification), Supra (KYC for a 500,000+ user blockchain ecosystem, live six weeks after signing) and Protocol Labs (identity verification for Filecoin storage providers). Each states what it does not claim.
- [Switch KYC providers](https://www.zyphe.com/switch): How to migrate off Sumsub, Onfido, Veriff, or Jumio: five-step migration playbook, contract timing, switching FAQ, and what changes when the new provider keeps no central store of PII.
- [AML Enforcement Tracker](https://www.zyphe.com/resources/aml-enforcement-tracker): Open dataset of major AML fines, sanctions actions, GDPR enforcement and identity-data breaches, with regulator, jurisdiction, penalty amount, a stable record id, and a link to each record’s source labelled by type (the authority’s own announcement wherever one exists). Free to cite under CC BY 4.0, with a methodology, data dictionary and change history on the page. Machine-readable as [CSV](https://www.zyphe.com/enforcement.csv) and [JSON](https://www.zyphe.com/enforcement.json), with new actions on the [RSS feed](https://www.zyphe.com/enforcement.xml).
- [KYC & IDV Breach Tracker](https://www.zyphe.com/resources/blog/kyc-idv-breach-tracker): Running log of identity-verification vendor and KYC data breaches: who was breached, what PII leaked, and what centralized storage cost each company.
- [Sample KYB report (fictional company; page public, PDF sent by email)](https://www.zyphe.com/resources/sample-kyb-report): A complete nine-page Zyphe KYB report generated in the sandbox for a fictional Italian company: risk ratings, registry record and VIES check, directors, shareholders, ownership chain traced through 23 entities to two beneficial owners with a completeness disclosure, the four beneficial-owner tests under Art. 20 D.Lgs. 231/2007, sanctions/PEP/adverse media screening per subject, five years of financials, and a source label (registry, provider, AI analysis, screening engine) on every value. States what the sample does not show.
- [About](https://www.zyphe.com/about-us): The team and mission behind Zyphe, the AI agents platform for compliance, built on a privacy-first substrate. Based in New York, London, and Milan.
- [Security & Trust](https://www.zyphe.com/security): Security architecture (no reconstructable customer PII at rest, geo-locked encrypted shards, no master key), certifications, data residency, the human approval boundary under AMLR Article 18 and GDPR Article 22, and the contact route for certification documentation.
- [GDPR: how Zyphe processes personal data](https://www.zyphe.com/gdpr): GDPR statement for identity verification: controller and processor roles, regional processing and storage (EEA and UK data on EEA and UK nodes), no central store of documents or faces, what is retained and for how long, erasure by key revocation, biometric data under Article 9 with in-house liveness and face matching, sub-processors (Annex III of the DPA), Standard Contractual Clauses and UK Addendum, Article 22 human approval, and what remains with the customer as controller. SOC 2 and ISO/IEC 27001 in progress, not certified.
- [FAQ](https://www.zyphe.com/faq): How Zyphe agents work, what they integrate with, security and audit posture, and where the legal scope ends.
- [Contact / Book a demo](https://www.zyphe.com/contact): See Zyphe agents triage L1 alerts, complete EDD cases, and run KYB reviews against your real workflows.
- [Careers](https://www.zyphe.com/careers): Open roles building the AI agents platform for compliance. Engineering, AI, design, marketing, sales, and content.

## Developer Documentation (docs.zyphe.com)

- [Zyphe Developer Documentation](https://docs.zyphe.com/docs/): Developer documentation for the Zyphe API: KYC, KYB, reusable credentials, AML, and transaction monitoring, with sandbox-first testing and signed webhooks.
- [Quickstart](https://docs.zyphe.com/docs/quickstart): Run a first verification end to end, from API key to result.
- [API Reference (OpenAPI)](https://docs.zyphe.com/docs/openapi/zyphe-sdk/): Full OpenAPI reference for the Zyphe REST API, generated from the live schema.
- [Backend API integration (without the npm SDK)](https://docs.zyphe.com/docs/guides/backend-api-integration): End-to-end recipe for integrating Zyphe from your backend over plain HTTP.
- [Choosing an integration method](https://docs.zyphe.com/docs/choosing-an-integration-method): Hosted flow, direct API, or SDK: which integration path fits which use case.
- [SDKs (Node, browser, React Native)](https://docs.zyphe.com/docs/guides/sdk/): Official Zyphe SDKs for Node.js, browser JavaScript, and React Native.
- [Model Context Protocol (MCP) integration](https://docs.zyphe.com/docs/guides/model-context-protocol-mcp): Operate Zyphe from Claude, ChatGPT, or Cursor over the Model Context Protocol.
- [Webhooks: payloads, structure, and signatures](https://docs.zyphe.com/docs/guides/webhook/): Signed webhook payloads, event structure, custom fields, and backwards compatibility.
- [Sandbox mode and going live](https://docs.zyphe.com/docs/guides/sandbox-and-go-live): Test against the sandbox, then promote an integration to production.
- [KYB and the agentic review engine](https://docs.zyphe.com/docs/guides/kyb/agentic-review-engine): How Zyphe agents resolve company data, ownership chains, and KYB review decisions.
- [AML: monitoring, risk scoring, and agentic review](https://docs.zyphe.com/docs/aml/): Ongoing AML monitoring, risk scoring, and the agentic review engine behind alert dispositions.
- [Transaction monitoring rules and alerts](https://docs.zyphe.com/docs/guides/transaction-monitoring/): Rules and templates, condition fields, lists, and alert settings for transaction monitoring.
- [KYC Passport: reusable credentials](https://docs.zyphe.com/docs/guides/kyc-passport/): Reusable identity credentials: partner invitations, user consent, and one-click KYC.
- [PII access control](https://docs.zyphe.com/docs/pii-access-control): How access to customer PII is granted, scoped, and revoked without central custody.
- [Supported documents by region](https://docs.zyphe.com/docs/supported-documents/): Accepted identity documents across Europe, North and South America, Africa, Asia, Oceania, and the Caribbean.
- [Statuses and codes reference](https://docs.zyphe.com/docs/reference/statuses-and-codes): Complete list of verification statuses and result codes returned by the API.

## Connect an agent (MCP)

- MCP endpoint: `https://api.zyphe.com/mcp` (Streamable HTTP, `Authorization: Bearer <bot token>`)
- 36 tools: 13 KYB case tools, 3 AML disposition tools, and 20 configuration tools for flows, forms, and API keys. Every call is stamped as an audit row with redacted arguments.
- [MCP Server Card](https://www.zyphe.com/mcp/server-card.json): Machine-readable connection details for the Zyphe MCP server (SEP-2127 format).
- [AI Catalog](https://www.zyphe.com/.well-known/ai-catalog.json): Domain-level discovery document listing the agent-facing artifacts Zyphe publishes.

## Italian Market (Italiano)

- [Zyphe Italia: agenti AI per compliance, antiriciclaggio, KYC e KYB](https://www.zyphe.com/it): La piattaforma di agenti AI per la compliance. Automatizza antiriciclaggio, KYC e KYB senza conservare le PII dei clienti, con un audit trail per ogni decisione.
- [Software Antiriciclaggio](https://www.zyphe.com/it/prodotti/software-antiriciclaggio): Agenti AI per lo screening antiriciclaggio, sanzioni, PEP e monitoraggio delle transazioni. Adeguata verifica della clientela e audit trail per ogni decisione.
- [Software KYB](https://www.zyphe.com/it/prodotti/software-kyb): Software KYB: dato richiesto al registro ufficiale a ogni verifica, catena proprietaria fino al titolare effettivo, KYC su ogni persona individuata.
- [Software KYC](https://www.zyphe.com/it/prodotti/software-kyc): Software KYC per verificare l'identità su larga scala senza un archivio centrale di PII dei clienti. Controlli su documenti, biometria e chip NFC, con audit trail per ogni decisione.
- [Guide alla compliance antiriciclaggio](https://www.zyphe.com/it/risorse/guide): Guide in italiano su antiriciclaggio, adeguata verifica della clientela, titolare effettivo e obblighi KYC e KYB.
- [Adeguata verifica della clientela: la guida completa](https://www.zyphe.com/it/risorse/guide/adeguata-verifica-della-clientela): Cos'è l'adeguata verifica della clientela, quando si applica, i livelli ordinario, semplificato e rafforzato e come automatizzarla.
- [Antiriciclaggio e D.Lgs 231/2007: gli obblighi in sintesi](https://www.zyphe.com/it/risorse/guide/antiriciclaggio-dlgs-231-2007): Il decreto antiriciclaggio italiano: chi sono i soggetti obbligati, quali sono gli obblighi di adeguata verifica, conservazione e segnalazione.
- [MiCA e antiriciclaggio per le cripto attività](https://www.zyphe.com/it/risorse/guide/mica-antiriciclaggio-crypto): Cosa prevede il regolamento MiCA per i prestatori di servizi in cripto attività e come si integrano gli obblighi antiriciclaggio, KYC e KYB.
- [Registro dei titolari effettivi: cosa comunicare e come](https://www.zyphe.com/it/risorse/guide/registro-titolari-effettivi): Cos'è il registro dei titolari effettivi, chi è tenuto alla comunicazione e come si inseriscono i dati sulla titolarità effettiva.
- [Titolare effettivo: chi è e come si individua](https://www.zyphe.com/it/risorse/guide/titolare-effettivo): Cos'è il titolare effettivo, i criteri per individuarlo secondo il D.Lgs 231/2007 e gli obblighi legati al registro dei titolari effettivi.

## German Market (Deutsch) — Germany and Austria

- [Zyphe Deutschland: KI-Agenten für Compliance, Geldwäscheprävention, KYC und KYB](https://www.zyphe.com/de): Die KI-Agenten-Plattform für Compliance. Automatisiert Geldwäscheprävention, KYC und KYB, ohne personenbezogene Daten zentral zu speichern, mit Audit Trail.
- [Geldwäsche-Software](https://www.zyphe.com/de/produkte/geldwaesche-software): KI-Agenten für Geldwäscheprävention nach dem GwG: Sanktions und PEP-Screening, Transaktionsmonitoring und Verdachtsmeldungen, mit nachvollziehbarem Audit Trail.
- [KYB-Software](https://www.zyphe.com/de/produkte/kyb-software): KYB-Software: amtlicher Registerauszug für jede Prüfung, Beteiligungskette bis zur natürlichen Person, Identitätsprüfung für jede ermittelte Person.
- [KYC-Software](https://www.zyphe.com/de/produkte/kyc-software): KYC-Software für die Identitätsprüfung im großen Maßstab, ohne personenbezogene Daten zentral zu speichern. Dokument, Biometrie und NFC-Chip, mit Audit Trail.
- [Sanktionslistenprüfung](https://www.zyphe.com/de/produkte/sanktionslistenpruefung): Sanktionslistenprüfung und PEP-Screening per Software: unscharfer Namensabgleich, Risikowert von 0 bis 100 je Treffer, tägliche Neuprüfung, Audit Trail.
- [Leitfäden zu Geldwäscheprävention und Compliance](https://www.zyphe.com/de/ressourcen/leitfaeden): Leitfäden auf Deutsch zu Geldwäschegesetz, Sorgfaltspflichten, wirtschaftlich Berechtigten und Transparenzregister.
- [Geldwäschegesetz (GwG): die Pflichten im Überblick](https://www.zyphe.com/de/ressourcen/leitfaeden/geldwaeschegesetz): Wer Verpflichteter nach dem Geldwäschegesetz ist und welche Pflichten gelten: Sorgfaltspflichten, Aufzeichnung und Verdachtsmeldung.
- [Sorgfaltspflichten nach dem Geldwäschegesetz](https://www.zyphe.com/de/ressourcen/leitfaeden/sorgfaltspflichten): Allgemeine, vereinfachte und verstärkte Sorgfaltspflichten nach dem GwG: wann sie greifen, was sie umfassen und wie der risikobasierte Ansatz funktioniert.
- [Transparenzregister: wer meldet was](https://www.zyphe.com/de/ressourcen/leitfaeden/transparenzregister): Wer zur Meldung an das Transparenzregister verpflichtet ist, welche Angaben zum wirtschaftlich Berechtigten zu melden sind und wie die Meldung abläuft.
- [Wirtschaftlich Berechtigter: Definition und Ermittlung](https://www.zyphe.com/de/ressourcen/leitfaeden/wirtschaftlich-berechtigter): Wer als wirtschaftlich Berechtigter gilt, wie die 25-Prozent-Schwelle angewendet wird und welche Pflichten sich aus dem Geldwäschegesetz ergeben.

## Austrian Market (Deutsch) — Austria, FM-GwG / WiEReG

- [Zyphe Österreich: KI-Agenten für FM-GwG, KYC und KYB](https://www.zyphe.com/at): Die KI-Agenten-Plattform für Compliance in Österreich. Sorgfaltspflichten nach dem FM-GwG, Feststellung der wirtschaftlichen Eigentümer, KYC und KYB.
- [Geldwäsche-Software](https://www.zyphe.com/at/produkte/geldwaesche-software): KI-Agenten für Geldwäscheprävention nach dem FM-GwG: Sanktions und PEP-Screening, Transaktionsmonitoring und Verdachtsmeldungen, mit nachvollziehbarem Audit Trail.
- [KYB-Software](https://www.zyphe.com/at/produkte/kyb-software): KYB-Software: amtlicher Registerauszug für jede Prüfung, Beteiligungskette bis zur natürlichen Person, Identitätsprüfung für jede ermittelte Person.
- [KYC-Software](https://www.zyphe.com/at/produkte/kyc-software): KYC-Software für die Identitätsprüfung im großen Maßstab, ohne personenbezogene Daten zentral zu speichern. Dokument, Biometrie und NFC-Chip, mit Audit Trail.
- [Sanktionslistenprüfung](https://www.zyphe.com/at/produkte/sanktionslistenpruefung): Sanktionslistenprüfung und PEP-Prüfung für Österreich: unscharfer Namensabgleich, Risikowert von 0 bis 100 je Treffer, tägliche Neuprüfung, Audit Trail.
- [Leitfäden zum österreichischen Geldwäscherecht](https://www.zyphe.com/at/ressourcen/leitfaeden): Leitfäden zu FM-GwG, Sorgfaltspflichten, wirtschaftlichen Eigentümern und WiEReG.
- [FM-GwG: die Pflichten im Überblick](https://www.zyphe.com/at/ressourcen/leitfaeden/fm-gwg): Wer Verpflichteter nach dem Finanzmarkt-Geldwäschegesetz ist und welche Pflichten gelten: Sorgfaltspflichten, Aufzeichnung und Verdachtsmeldung.
- [Sorgfaltspflichten nach dem FM-GwG](https://www.zyphe.com/at/ressourcen/leitfaeden/sorgfaltspflichten-fm-gwg): Vereinfachte, allgemeine und verstärkte Sorgfaltspflichten nach dem FM-GwG: wann sie greifen, was sie umfassen und wie der risikobasierte Ansatz wirkt.
- [WiEReG: Meldung an das Register der wirtschaftlichen Eigentümer](https://www.zyphe.com/at/ressourcen/leitfaeden/wiereg): Wer nach dem WiEReG meldepflichtig ist, welche Angaben zu den wirtschaftlichen Eigentümern gemeldet werden und wie die Meldung über das USP abläuft.
- [Wirtschaftliche Eigentümer: Definition und Feststellung](https://www.zyphe.com/at/ressourcen/leitfaeden/wirtschaftliche-eigentuemer): Wer als wirtschaftlicher Eigentümer gilt, wie die 25-Prozent-Schwelle angewendet wird und welche Pflichten sich aus FM-GwG und WiEReG ergeben.

## Swiss Market (Deutsch) — Switzerland, GwG / FINMA / MROS (non-EU)

- [Zyphe Schweiz: KI-Agenten für GwG, KYC und KYB](https://www.zyphe.com/ch): Die KI-Agenten-Plattform für Compliance in der Schweiz. Sorgfaltspflichten nach dem GwG, Feststellung der wirtschaftlich berechtigten Person, KYC und KYB. Nicht EU-Recht.
- [GwG-Software](https://www.zyphe.com/ch/produkte/geldwaescherei-software): KI-Agenten für Geldwäschereibekämpfung nach dem GwG: Sanktions und PEP-Screening, Transaktionsmonitoring und Verdachtsmeldungen, mit nachvollziehbarem Audit Trail.
- [KYB-Software](https://www.zyphe.com/ch/produkte/kyb-software): KYB-Software: amtlicher Registerauszug für jede Prüfung, Beteiligungskette bis zur natürlichen Person, Identitätsprüfung für jede ermittelte Person.
- [KYC-Software](https://www.zyphe.com/ch/produkte/kyc-software): KYC-Software für die Identitätsprüfung im grossen Massstab, ohne Personendaten zentral zu speichern. Dokument, Biometrie und NFC-Chip, mit Audit Trail.
- [Leitfäden zum schweizerischen Geldwäschereirecht](https://www.zyphe.com/ch/ressourcen/leitfaeden): Leitfäden zum GwG, zu den Sorgfaltspflichten und zur wirtschaftlich berechtigten Person.
- [Geldwäschereigesetz (GwG): die Pflichten im Überblick](https://www.zyphe.com/ch/ressourcen/leitfaeden/gwg-schweiz): Wer Finanzintermediär nach dem schweizerischen GwG ist und welche Pflichten gelten: Sorgfaltspflichten, Dokumentation, Meldung an die MROS und Organisation.
- [Sorgfaltspflichten der Finanzintermediäre](https://www.zyphe.com/ch/ressourcen/leitfaeden/sorgfaltspflichten-schweiz): Die Sorgfaltspflichten nach dem schweizerischen GwG: Identifizierung, Feststellung der wirtschaftlich berechtigten Person, Abklärungen und Dokumentation.
- [Wirtschaftlich berechtigte Person: Feststellung nach GwG](https://www.zyphe.com/ch/ressourcen/leitfaeden/wirtschaftlich-berechtigter-schweiz): Wer als wirtschaftlich berechtigte Person gilt, wie sie nach dem schweizerischen GwG festgestellt wird und welche Rolle Formular A und die VSB spielen.

## Spanish Market (Español) — Spain

- [Zyphe España: agentes de IA para cumplimiento, blanqueo, KYC y KYB](https://www.zyphe.com/es): La plataforma de agentes de IA para el cumplimiento. Automatiza la prevención del blanqueo, el KYC y el KYB sin almacenar los datos de tus clientes.
- [Software antiblanqueo](https://www.zyphe.com/es/productos/software-prevencion-blanqueo): Agentes de IA para la prevención del blanqueo de capitales: screening de sanciones y PEP, monitorización de transacciones y comunicaciones, con trazabilidad completa.
- [Software KYB](https://www.zyphe.com/es/productos/software-kyb): Software KYB que consulta el registro oficial en cada verificación, traza la propiedad hasta las personas físicas y verifica la identidad de cada titular real.
- [Software KYC](https://www.zyphe.com/es/productos/software-kyc): Software KYC para verificar la identidad a escala sin un almacén central de los datos personales de sus clientes. Documento, biometría y chip NFC, con trazabilidad completa.
- [Guías de prevención del blanqueo y cumplimiento](https://www.zyphe.com/es/recursos/guias): Guías en español sobre la Ley 10/2010, diligencia debida, titular real y obligaciones de prevención del blanqueo.
- [Blanqueo de capitales: qué es y cómo se previene](https://www.zyphe.com/es/recursos/guias/blanqueo-de-capitales): Qué es el blanqueo de capitales, cuáles son sus fases, qué obligaciones impone la normativa española y cómo se previene en la práctica.
- [Diligencia debida: la guía completa](https://www.zyphe.com/es/recursos/guias/diligencia-debida): Qué es la diligencia debida, cuándo se aplica y en qué se diferencian las medidas simplificadas, normales y reforzadas según la Ley 10/2010.
- [Ley 10/2010: obligaciones de prevención del blanqueo](https://www.zyphe.com/es/recursos/guias/ley-10-2010): Quiénes son sujetos obligados por la Ley 10/2010 y qué obligaciones tienen: diligencia debida, conservación, comunicación al SEPBLAC y control interno.
- [Titular real: quién es y cómo se identifica](https://www.zyphe.com/es/recursos/guias/titular-real): Qué es el titular real, qué criterios se aplican para identificarlo según la Ley 10/2010 y qué relación tiene con el registro de titularidades reales.

## Industry Solutions

- [KYC for Fintech](https://www.zyphe.com/industry/kyc-for-fintech): Reusable identity for neobanks, BaaS providers, payment companies, and lenders. Stop re-verifying the same customer across products and partners.
- [KYC for Casino](https://www.zyphe.com/industry/kyc-for-casino): Age verification, source of funds, GAMSTOP, and EDD across MGA, UKGC, AGCO, and ADM. Players bring a portable credential; operators stop losing the deposit at document upload.
- [KYC for iGaming](https://www.zyphe.com/industry/kyc-for-igaming): KYC for iGaming across sportsbook, DFS, casino, and lottery on one player base. Multi-state US ready, GeoComply-compatible, perpetual monitoring built in.
- [KYC for Crypto](https://www.zyphe.com/industry/kyc-for-crypto): MiCA-aligned KYC for crypto exchanges, wallets, on-ramps, and DeFi platforms. Verify users from 190+ countries, reuse credentials across products, with no central store of customer PII.
- [KYC for DAOs](https://www.zyphe.com/industry/kyc-for-dao): Credential-gated identity for token-voting governance, multisig signer screening, treasury KYB, and grant disbursement under FATF VASP and Ooki DAO precedent.
- [KYC for Government](https://www.zyphe.com/industry/kyc-for-government): Citizen identity for benefits, permits, and voting under eIDAS 2.0 EU Digital Identity Wallet, Login.gov, FedRAMP/StateRAMP, with sovereign data residency.
- [KYC for Healthcare](https://www.zyphe.com/industry/kyc-for-healthcare): Prescriber identity (NPI/DEA), EPCS two-factor, patient identity matching across HIE, age verification for restricted services, HIPAA-aligned audit, no PHI honeypot.
- [KYC for Neobanks](https://www.zyphe.com/industry/kyc-for-neobanks): Reusable identity for retail neobanks running multiple products on a single customer base. Multi-jurisdictional KYC, perpetual CDD, EMI/banking licence audit-ready.
- [KYC for Banking](https://www.zyphe.com/industry/kyc-for-banking): Retail and commercial banking onboarding, UBO verification, correspondent-banking due diligence, perpetual CDD under FFIEC, OCC, FCA SYSC, AMLD6.
- [KYC for Transport](https://www.zyphe.com/industry/kyc-for-transport): Driver onboarding (TLC, PHV, CDL, Driver CPC), continuous background-check monitoring, Platform Workers Directive disclosures, age verification for car-sharing.
- [KYC for Ecommerce](https://www.zyphe.com/industry/kyc-for-ecommerce): Age-gated SKUs, high-value purchase fraud, returning-customer one-tap reuse. UK Online Safety Act, US INFORM Consumers Act, GDPR Article 6 lawful basis.
- [KYC for Marketplaces](https://www.zyphe.com/industry/kyc-for-marketplace): Two-sided platform identity under DSA Article 30 and INFORM Consumers Act, payments-aggregator KYB pass-through, P2P fraud controls without bank-grade PII retention.
- [KYC for Adult Platforms](https://www.zyphe.com/industry/kyc-for-adult): Age-assurance under UK Online Safety Act, Texas HB 1181, EU DSA, France ARCOM. 2257 record-keeping for performers via threshold-encrypted vaults, no PII honeypot.
- [KYC for Enterprise](https://www.zyphe.com/industry/kyc-for-enterprise): Unified identity across employee, customer, and supplier with SSO/IdP federation, B2B counterparty KYB, supplier due diligence, SOC 2 / ISO 27001 audit alignment.

## Blog

- [Money20/20 Las Vegas 2026: Side Events, Parties and the Compliance Track](https://www.zyphe.com/resources/blog/money2020-las-vegas-guide): Money20/20 Las Vegas 2026 runs 18 to 21 October at The Venetian. Day-by-day schedule, official parties, verified side events and the sessions for compliance.
- [Biometric Data in Passports: NFC Chips Explained (2026)](https://www.zyphe.com/resources/blog/biometric-nfc-passport): What biometric data does your passport chip store? Check if your passport is biometric, see how NFC verification works, and keep your data private.
- [Monzo AML Fine: What the FCA Found and the Lessons for Fintechs](https://www.zyphe.com/resources/blog/monzo-aml-fine-lessons): The Monzo AML fine was £21.1m. What the FCA Final Notice found, how 26,325 high-risk accounts broke a restriction, and the lessons every fintech should apply.
- [AML Enforcement by the Numbers: 2026 Year to Date (September 2026 Edition)](https://www.zyphe.com/resources/blog/aml-enforcement-by-the-numbers-september-2026): AML enforcement in 2026 so far, from Zyphe's open dataset: 23 actions, about $324 million in penalties, three fines carrying 79 percent, and what repeats.
- [AML/CTF for Digital Currency Exchanges in Australia: AUSTRAC Obligations After the Virtual Asset Reforms](https://www.zyphe.com/resources/blog/aml-ctf-digital-currency-exchanges-australia): What an Australian crypto exchange must do under the AML/CTF Act after the virtual asset reforms: registration, designated services, CDD and the travel rule.
- [KYB for Property Developers Selling Through SPVs and Staged Releases: Australia's AML/CTF Rules Applied](https://www.zyphe.com/resources/blog/kyb-property-developers-spv-staged-releases-australia): How Australia's AML/CTF Act applies to a developer selling through an SPV in staged releases: the reporting entity, the SPV's owners, bulk purchaser CDD.
- [AML/CTF for Trust and Company Service Providers in Australia: Tranche 2 Obligations Explained](https://www.zyphe.com/resources/blog/aml-ctf-trust-company-service-providers-australia): What a trust and company service provider must do under Australia's AML/CTF Act from 1 July 2026: designated services, enrolment, CDD, ECDD and reporting.
- [AUSTRAC Tranche 2: Enrolment, Obligations and Deadlines (2026)](https://www.zyphe.com/resources/blog/austrac-tranche-2-enrolment-guide): AUSTRAC tranche 2 explained: who is caught, the enrolment deadline, the AML/CTF programme and CDD duties, and what the Act actually changed from 1 July 2026.
- [Beneficial Ownership Verification for Multi-Layer Trusts With Offshore Owners: An Australian Guide](https://www.zyphe.com/resources/blog/beneficial-ownership-multi-layer-trusts-offshore-owners-australia): How to verify every beneficial owner behind a layered trust with offshore owners under Australia's AML/CTF Act: who counts, evidence, ECDD triggers, example.
- [Document Fraud Detection: How It Works](https://www.zyphe.com/resources/blog/document-fraud-detection): Document detection is the automated analysis of an identity document to confirm it is genuine and unaltered. It checks the document against known templates, validates security features such as holograms and microprint, reads and cross-checks the machine-readable zone, detects digital tampering in the image, and confirms the data matches the customer’s other records.
- [Is Cryptoasset Trading Regulated in the UK? (2026 Guide)](https://www.zyphe.com/resources/blog/uk-crypto-regulation): Is cryptoasset trading regulated in the UK? Yes, and full FCA authorization lands in 2027. Get the timeline, rules, and KYC/AML duties for crypto firms.
- [Identity Verification Statistics 2026: KYC & Fraud Data](https://www.zyphe.com/resources/blog/identity-verification-statistics): 30+ sourced identity verification statistics for 2026: identity fraud losses, deepfake attacks, KYC costs, onboarding drop-off, and AML fines.
- [How to Check If a Business Is a Registered MSB (FinCEN Lookup)](https://www.zyphe.com/resources/blog/how-to-check-msb-registration): Search FinCEN's MSB Registrant Search to confirm a business registered as an MSB, read the result correctly, and learn what registration does not prove.
- [Best Age Verification Services & Software 2026 Compared](https://www.zyphe.com/resources/blog/best-age-verification-software): Compare 11 age verification services for 2026, listed alphabetically: methods, certifications, UK OSA and US state-law coverage, and shortlists by use case.
- [ECCTA: Companies House ID Verification Rules 2026](https://www.zyphe.com/resources/blog/eccta-companies-house-verification): ECCTA makes Companies House identity verification mandatory for UK directors and PSCs by 18 November 2026. See deadlines, penalties, and how ACSPs work.
- [Best KYB Software in 2026: 13 KYB Providers Compared, Not Ranked](https://www.zyphe.com/resources/blog/kyb-providers): 13 KYB software providers compared alphabetically, not ranked: registry coverage, UBO discovery, screening and public pricing, from each vendor's own pages.
- [How to Reduce KYC Drop-off: A Conversion Playbook](https://www.zyphe.com/resources/blog/how-to-reduce-kyc-drop-off-conversion-playbook): KYC drop-off quietly kills onboarding conversion. Here's a practical, step-by-step playbook to reduce KYC drop-off without ever weakening your compliance.
- [KYC for Neobanks: Perpetual Customer Due Diligence on a Single Customer Base](https://www.zyphe.com/resources/blog/kyc-for-neobanks-perpetual-cdd): One customer, several products, one audit trail. See how neobanks run perpetual CDD under FFIEC and EU AML rules, and who owns liability in a BaaS stack.
- [KYC for Healthcare: NPI, DEA, EPCS Two-Factor and HIPAA-Aligned Identity in 2026](https://www.zyphe.com/resources/blog/kyc-for-healthcare-2026): Healthcare identity spans prescriber, patient and age-gated users. See how NPI/DEA checks, EPCS two-factor, and HIPAA-aligned handling fit a 2026 playbook.
- [Decentralized PII Storage: How Sharded Identity Architecture Removes the Honeypot](https://www.zyphe.com/resources/blog/decentralized-pii-storage): Centralized identity databases are breach honeypots. See how decentralized PII storage shards encrypted data so no single node ever holds a full record.
- [KYC for DAOs After Ooki: Staying Compliant Under FATF VASP Rules in 2026](https://www.zyphe.com/resources/blog/kyc-for-daos-after-ooki): Ooki DAO set the precedent that token holders can be personally liable. Here's what FATF, the CFTC and MiCA require from DAO governance, treasury and grants.
- [KYC for Online Casinos in 2026: MGA, UKGC, AGCO and ADM Requirements Compared](https://www.zyphe.com/resources/blog/kyc-for-online-casinos-2026): Online casino KYC across MGA, UKGC, AGCO and ADM sets four different bars. See what each regulator requires and where operators lose deposits at onboarding.
- [KYC Without Storing Passports: Is It Possible?](https://www.zyphe.com/resources/blog/kyc-without-storing-passports): Can you run KYC without storing passports? Yes. Here's the difference between keeping a passport scan and keeping verification evidence, and how to do it.
- [Sanctions Screening False Positives: The 60% Budget Drain You Can Actually Fix](https://www.zyphe.com/resources/blog/sanctions-screening-false-positives): Most of a sanctions screening budget clears noise. See where false positives originate, why name-match tuning is the wrong fix, and what OFAC expects.
- [UBO Mapping With AI: Resolving Four-Tier Beneficial Ownership Chains in Under 60 Seconds](https://www.zyphe.com/resources/blog/ubo-mapping-with-ai): Beneficial ownership chains took days. See how AI UBO mapping resolves four-tier graphs across registries, scores confidence per edge, and meets FATF Rec 24.
- [The TD Bank $3 Billion Lesson: What 92% Unmonitored Volume Actually Means](https://www.zyphe.com/resources/blog/td-bank-3-billion-aml-lesson): TD Bank paid about $3 billion in 2024 for AML failures, with most volume unmonitored. Here's the scope gap, and what every bank should audit this quarter.
- [Building an Audit-Ready Compliance Stack: From Onboarding to SAR Filing](https://www.zyphe.com/resources/blog/audit-ready-compliance-stack): Most compliance stacks are six vendors and a diagram. Here's how to build an audit-ready compliance stack from onboarding through to SAR filing, end to end.
- [KYC for iGaming in 2026: Multi-State US Compliance from Day One](https://www.zyphe.com/resources/blog/kyc-for-igaming-multi-state-us-2026): Launching across US states? iGaming KYC diverges by regulator. Here's the playbook for one customer base, 21-plus age, geolocation and multi-state onboarding.
- [The Binance $4.3B Settlement: Five Compliance Architecture Lessons for VASPs](https://www.zyphe.com/resources/blog/binance-4-3-billion-settlement-lessons): Binance paid over $4.3B in 2023 and its CEO pleaded guilty. Here are five compliance architecture lessons every crypto exchange and VASP should act on now.
- [AMLD6 and the AMLA Regulation: What Actually Changed for Your Compliance](https://www.zyphe.com/resources/blog/amld6-amla-2026): The EU's 2024 AML package reshapes compliance with a single rulebook and a new authority. Here's what AMLD6, the AML Regulation and AMLA require, and when.
- [Zero-Knowledge KYC and Regulators: MiCA, FATF and AMLA](https://www.zyphe.com/resources/blog/zero-knowledge-kyc-regulators-mica-fatf-amla): Does zero-knowledge KYC satisfy MiCA, FATF and AMLA? An evenhanded look at where ZK proofs fit, where retention duties remain, and what actually works today.
- [Correspondent Banking Due Diligence in 2026: AMLD6, FFIEC and the Nordea Lesson](https://www.zyphe.com/resources/blog/correspondent-banking-due-diligence-2026): NYDFS fined Nordea $35M in 2024 for correspondent-banking AML failures. See what FATF, FFIEC and Wolfsberg's CBDDQ require, and the gaps Nordea exposed.
- [Source of Funds Verification: What the FCA, FinCEN and FATF Actually Require](https://www.zyphe.com/resources/blog/source-of-funds-verification-2026): Source of funds and source of wealth differ, and regulators treat them differently. Here's what the FCA, FinCEN and FATF require, and what documentation counts.
- [The Bank Secrecy Act (BSA) Explained: Requirements, Reporting Thresholds and Compliance in 2026](https://www.zyphe.com/resources/blog/bank-secrecy-act-bsa-explained): Bank Secrecy Act reporting thresholds for 2026: the CTR and SAR dollar triggers, filing deadlines, the five pillars, who must comply, and BSA penalties.
- [Persona Alternatives: Zyphe vs Persona Compared for 2026](https://www.zyphe.com/resources/blog/zyphe-vs-persona): Weighing Persona alternatives? See how Zyphe vs Persona compares on data storage, reusable credentials, pricing and configurability, and which fits best.
- [Age Verification in the UK: An Online Safety Act Playbook for 2026](https://www.zyphe.com/resources/blog/age-verification-uk-online-safety-act): Age verification UK rules under the Online Safety Act: who must comply, what counts as highly effective age assurance, every Ofcom fine to date, and methods.
- [Crypto Compliance Software: A 2026 Comparison](https://www.zyphe.com/resources/blog/crypto-compliance-software-2026-comparison): Comparing crypto compliance software? See how on-chain analytics (Chainalysis, Elliptic, TRM Labs) and KYC layers (Sumsub, Zyphe) fit a 2026 compliance stack.
- [The US Corporate Transparency Act in 2026: What FinCEN Now Requires](https://www.zyphe.com/resources/blog/corporate-transparency-act-2026): The Corporate Transparency Act changed dramatically in 2025. See who must report beneficial ownership to FinCEN now, after domestic companies were exempted.
- [Best KYC Software 2026: 10 Vendors Compared](https://www.zyphe.com/resources/blog/best-kyc-software-2026): Ten KYC software vendors for 2026, listed alphabetically, not ranked. Compare Sumsub, Persona, Veriff, Zyphe and 6 more on pricing, coverage and data privacy, then pick by use case.
- [AU10TIX Alternatives: Privacy-First Identity Verification Options for 2026](https://www.zyphe.com/resources/blog/au10tix-alternatives): The best AU10TIX alternatives in 2026, compared on data architecture, reusable credentials and migration effort, plus a five-step playbook for switching.
- [Fourthline Alternatives: The 2026 Guide for European Compliance Teams](https://www.zyphe.com/resources/blog/fourthline-alternatives): Compare the best Fourthline alternatives for 2026: why European teams switch, how Zyphe, Sumsub, Onfido, Veriff and Jumio stack up, plus a migration plan.
- [iDenfy Alternatives in 2026: 6 Competitors Compared](https://www.zyphe.com/resources/blog/idenfy-alternatives): iDenfy is an SMB favourite for accessible KYC, but applicant documents still sit in a vendor cloud. Compare the best iDenfy alternatives for 2026, honestly.
- [IDnow Alternatives in 2026: Privacy-First Options Beyond VideoIdent](https://www.zyphe.com/resources/blog/idnow-alternatives): Compare the best IDnow alternatives for 2026: why teams move beyond VideoIdent, how Zyphe removes the vendor-held PII store, and how to migrate without risk.
- [Incode Alternatives in 2026: Privacy-First Options for Biometric Verification](https://www.zyphe.com/resources/blog/incode-alternatives): Why teams look beyond Incode's biometrics-led platform in 2026: the best Incode alternatives compared, plus a five-step migration playbook without disruption.
- [Ondato Alternatives in 2026: 6 Competitors Compared](https://www.zyphe.com/resources/blog/ondato-alternatives): Comparing Ondato alternatives in 2026? See how Zyphe, Sumsub, Veriff and Onfido differ on data architecture and GDPR exposure, plus a five-step migration plan.
- [Persona Alternatives in 2026: 6 Competitors Compared](https://www.zyphe.com/resources/blog/persona-alternatives): Persona alternatives compared for 2026: what the Discord age verification episode revealed, how Zyphe, Sumsub, Onfido and Veriff differ, and how to migrate.
- [Regula Alternatives 2026: From Document SDK to Verification as a Service](https://www.zyphe.com/resources/blog/regula-alternatives): Regula gives you document forensics SDKs; you still own orchestration, review and data custody. Compare the best Regula alternatives for 2026, Zyphe first.
- [Shufti Pro Alternatives 2026: Privacy-First Identity Verification Options](https://www.zyphe.com/resources/blog/shufti-pro-alternatives): Shufti Pro alternatives for 2026: why teams outgrow the centralised vendor cloud, how Zyphe, Onfido, Jumio and Persona compare, and how to switch without risk.
- [Signicat Alternatives: The Honest 2026 Guide for Compliance Teams](https://www.zyphe.com/resources/blog/signicat-alternatives): Comparing Signicat alternatives in 2026? See how Zyphe and other vendors compare on eID coverage, data architecture and migration, with an honest guide.
- [Socure Alternatives: Privacy-First Identity Verification Options for 2026](https://www.zyphe.com/resources/blog/socure-alternatives): Socure alternatives for 2026 compared honestly: where US data-network risk scoring still wins, where document-based verification fits better, and how to switch.
- [Yoti Alternatives in 2026: Full KYC, KYB and AML Beyond Age Assurance](https://www.zyphe.com/resources/blog/yoti-alternatives): Yoti leads age assurance, but compliance teams need full KYC, KYB and AML coverage. Compare the best Yoti alternatives for 2026, including privacy-first Zyphe.
- [Age Verification and Digital Identity in 2026: Methods, Laws, and How to Verify Without Storing IDs](https://www.zyphe.com/resources/blog/age-verification-digital-identity-guide): Age verification methods, the 2026 laws (UK Online Safety Act, SCOTUS, EU Wallet) and how to verify age online without storing a single ID. Privacy-first.
- [The USA PATRIOT Act Explained: Section 326, KYC/CIP Mandates and FinCEN (2026)](https://www.zyphe.com/resources/blog/usa-patriot-act-kyc-explained): How PATRIOT Act Section 326 created the Customer Identification Program, the CIP rule behind modern KYC, FinCEN's role, and who must comply with it in 2026.
- [How Money Laundering Is Detected in 2026: Stages, Examples and AML Controls](https://www.zyphe.com/resources/blog/what-is-money-laundering): How money laundering is detected in 2026: placement, layering and integration, plus examples, penalties, and AML controls that skip a central data store.
- [Privacy-First Identity Verification Vendors Compared for 2026](https://www.zyphe.com/resources/blog/privacy-first-identity-verification-vendors): Which identity verification vendors are truly privacy-first? Compare decentralized, data-minimizing IDV options on storage, reusable credentials and residency.
- [KYC vs AML: What's the Difference?](https://www.zyphe.com/resources/blog/kyc-vs-aml): KYC verifies a customer's identity; AML is the wider framework that prevents money laundering. See how KYC and AML relate, and why KYC sits inside AML.
- [Model Validation for AI in Compliance: How to Meet SR 11-7, NYDFS and the EU AI Act](https://www.zyphe.com/resources/blog/model-validation-for-ai-in-compliance): SR 11-7, NYDFS and the EU AI Act all touch compliance AI. Here's the validation checklist, the audit pack regulators ask for, and how to govern a vendor model.
- [Deepfake Detection in KYC: Passive Liveness vs Active Liveness in 2026](https://www.zyphe.com/resources/blog/deepfake-detection-kyc-2026): Deepfake injection attacks are rising. See how deepfake detection works in KYC: passive versus active liveness, and why active is now an attack surface.
- [Fraud Detection Software: What It Is and How to Choose](https://www.zyphe.com/resources/blog/fraud-detection-software): Fraud detection software spots and stops fraud across identity, payments and accounts. See how it works, the main types, and how to evaluate a solution in 2026.
- [Customer Identification Program (CIP): The Complete 2026 Guide to Requirements and Verification](https://www.zyphe.com/resources/blog/customer-identification-program-cip-guide): A customer identification program is the CIP banks run under 31 CFR 1020.220. The 4 elements, required data, documentary vs non-documentary verification, 2026.
- [How to Register as an MSB with FinCEN (2026): Step-by-Step Form 107 and Ongoing AML Duties](https://www.zyphe.com/resources/blog/how-to-register-as-an-msb): How to register as an MSB with FinCEN: file Form 107 via BSA E-Filing inside 180 days, renew biennially, and build the four-pillar AML program every MSB needs.
- [KYB Requirements: The 2026 Compliance Checklist](https://www.zyphe.com/resources/blog/kyb-requirements): What are the KYB requirements? See the documents, the UBO thresholds, the US, EU and UK rules, and a practical KYB compliance checklist for onboarding.
- [How to Verify If a Company Is Legitimate: 7 Checks Before You Trust a Business](https://www.zyphe.com/resources/blog/how-to-verify-a-company-is-legitimate): Is this company legit? Learn how to find out if a company is legit with 7 practical checks, from registry lookups to beneficial owners and red flags.
- [KYB Onboarding: How to Onboard Businesses Fast and Compliantly](https://www.zyphe.com/resources/blog/kyb-onboarding): KYB onboarding verifies a business and its owners at sign-up. See the steps, why it's harder than individual onboarding, and how to cut friction, not checks.
- [Perpetual KYC vs Periodic KYC: Why Annual Reviews Don't Survive 2026 Audits](https://www.zyphe.com/resources/blog/perpetual-kyc-vs-periodic-kyc): Annual KYC reviews are a paper-era residue. See what FFIEC, the FCA and the EU AML framework actually require, and the cost of perpetual versus periodic.
- [KYC API: Pricing and Integration, a Developer's Guide](https://www.zyphe.com/resources/blog/kyc-api-pricing-integration-developer-guide): How KYC API pricing works, what drives the cost, and how to integrate one. A developer's guide to pricing models, hidden fees, and going live in under a day.
- [PEP Screening in 2026: Tiers, RCAs and Why Most Vendors Get the Definition Wrong](https://www.zyphe.com/resources/blog/pep-screening-2026): FATF treats PEPs as categories, not a binary, and most vendors flatten them. Here's the 2026 playbook for tiers, decay windows, RCAs and what regulators expect.
- [KYB Verification: How Business Verification Works in 2026](https://www.zyphe.com/resources/blog/kyb-verification): KYB verification confirms a business is real and reveals who really owns it. See what it checks, how automation works, and what to look for in a KYB solution.
- [Adverse Media Screening With AI: Cutting False Positives by 80% Without Missing Real Risk](https://www.zyphe.com/resources/blog/adverse-media-screening-with-ai): Keyword adverse-media screening hits 70%+ false positives. See how AI adverse media screening reads full articles, disambiguates entities, and clears PEP hits.
- [Compliance-as-a-Service (CaaS): The 2026 Complete Guide](https://www.zyphe.com/resources/blog/compliance-as-a-service-caas-guide): Compliance as a service moves KYC, AML and monitoring to a managed, API-delivered model. Here's what CaaS covers, the trade-offs, and how to evaluate it.
- [Enhanced Due Diligence Workflows: From Trigger to Documented Decision](https://www.zyphe.com/resources/blog/enhanced-due-diligence-workflows): Enhanced due diligence is a documented chain from trigger to decision. Here's the six-step EDD workflow regulators expect and how to make it audit-ready.
- [What Is Sanctions Screening? How It Works, Lists and Software (2026)](https://www.zyphe.com/resources/blog/sanctions-screening-guide): Sanctions screening explained: how it works, the OFAC, UN, EU and UK lists, false positives, sanctions vs PEP, and how to screen in 2026 without a central PII store.
- [KYC & Identity Verification Breach Tracker (2026): Every Major IDV Provider Incident](https://www.zyphe.com/resources/blog/kyc-idv-breach-tracker): A continuously updated KYC breach tracker logging every major identity verification provider incident: Persona, Sumsub, IDmerit, AU10TIX and Veriff, with dates.
- [Document Verification in 2026: How It Works, and How to Verify an ID Without Storing It](https://www.zyphe.com/resources/blog/document-verification-guide): How document verification works step by step, why retained ID images are a breach honeypot, and how to verify a document without storing it under GDPR and NIST.
- [Can AI Draft SAR Narratives? What Regulators Accept in 2026](https://www.zyphe.com/resources/blog/can-ai-draft-sar-narratives-2026): Can AI write SAR narratives FinCEN will accept? What US, UK and EU regulators say about AI in BSA reporting, and how AI SAR drafting grounds every claim.
- [Synthetic Identity Fraud and Fullz in 2026: How Stolen Identity Packages Beat KYC](https://www.zyphe.com/resources/blog/fullz-synthetic-identity-fraud-kyc): What is fullz? How fraudsters use stolen identity packages and synthetic IDs to beat KYC in 2026, what they cost on the dark web, and how to stop the fraud.
- [CLARITY Act KYC and AML Requirements (2026): What Crypto Firms Must Do](https://www.zyphe.com/resources/blog/clarity-act-kyc-aml-requirements): The CLARITY Act makes crypto exchanges Bank Secrecy Act institutions. A 2026 guide to its KYC and AML requirements, the SEC and CFTC split, and Senate status.
- [L1 Alert Triage With AI: Cutting Sanctions and PEP Backlogs 80%](https://www.zyphe.com/resources/blog/l1-alert-triage-with-ai): Sanctions and PEP false positives drain most alert budgets. See how AI alert triage clears L1 in seconds, what regulators accept, and Starling's £29M FCA fine.
- [Jumio & Trulioo Alternatives: The Privacy-First Option for KYC in 2026](https://www.zyphe.com/resources/blog/jumio-trulioo-alternatives): Looking for Jumio or Trulioo alternatives? Compare Jumio, Trulioo, Onfido, Sumsub and privacy-first Zyphe on data storage, reusable credentials and pricing.
- [Veriff Alternatives in 2026: 6 Competitors Compared](https://www.zyphe.com/resources/blog/veriff-alternatives): Looking for Veriff alternatives? Compare Veriff, Sumsub, Onfido and the privacy-first option Zyphe on data storage, reusable credentials, pricing and coverage.
- [AI Compliance Agents: Replacing Manual KYC, KYB and AML Review Work](https://www.zyphe.com/resources/blog/ai-compliance-agents): AI compliance agents run L1 triage, EDD, UBO mapping and KYB refresh with reasoning AI inside Unit21, Jira and Salesforce, with audit trails regulators accept.
- [KYC for Fintech Startups: Build Compliance Into Your Product From Day One](https://www.zyphe.com/resources/blog/kyc-for-fintech-startups-compliance-from-day-one): Building a fintech? KYC compliance isn't a blocker, it's a product layer. Here's what early-stage startups need (and don't need) to build from day one.
- [AML Compliance Software in 2026: What to Look For and What to Avoid](https://www.zyphe.com/resources/blog/aml-compliance-software-2026): Buying AML software without fixing your onboarding layer is a compliance gap waiting to happen. Here's the framework for evaluating AML platforms in 2026.
- [Onfido Alternatives in 2026: 6 Competitors Compared, and What Onfido Is Now](https://www.zyphe.com/resources/blog/onfido-alternatives): Onfido is now Entrust IDV. See what Onfido verification is, the best Onfido alternatives in 2026, and how Zyphe's decentralized, privacy-first model compares.
- [eIDAS 2.0 and KYC: How the EU Digital Identity Wallet Changes Your Onboarding Stack](https://www.zyphe.com/resources/blog/eidas-2-and-kyc-eu-digital-identity-wallet): The EU Digital Identity Wallet goes live by end of 2026. Most KYC tools cannot handle wallet-based credentials. Here's what eIDAS 2.0 means for your onboarding.
- [Sumsub Alternatives in 2026: 6 Competitors Compared](https://www.zyphe.com/resources/blog/sumsub-alternatives): Looking for Sumsub alternatives? Compare Sumsub, Onfido, Veriff, Persona and privacy-first Zyphe on data storage, reusable credentials, pricing and coverage.
- [KYC Automation: How to Replace Manual Verification Without Losing Compliance Control](https://www.zyphe.com/resources/blog/kyc-automation-replace-manual-verification): Manual KYC costs 10x more and has a higher error rate. Learn what to automate, what to keep human, and how to build an audit-ready hybrid compliance workflow.
- [Why Your KYC Vendor Is Your Biggest Data Breach Risk](https://www.zyphe.com/resources/blog/why-your-kyc-vendor-is-your-biggest-data-breach-risk): Centralised KYC vendors are honeypots. The Sumsub breach went 18 months undetected. Here's how to assess your vendor's architecture and the alternative that.
- [KYC for Crypto Exchanges: Building a Compliant Onboarding Flow in 2026](https://www.zyphe.com/resources/blog/kyc-for-crypto-exchanges-compliant-onboarding-2026): Crypto exchange compliance isn't just collecting IDs. Here's how to build a tiered KYC onboarding flow that satisfies MiCA, FinCEN, and FCA without killing.
- [FATF Travel Rule Compliance for Crypto in 2026: A Practical Guide for VASPs](https://www.zyphe.com/resources/blog/fatf-travel-rule-vasp-compliance-2026): The FATF Travel Rule applies to every VASP above $1,000. This guide covers what originators and beneficiaries must transmit, and how to build a compliant KYC.
- [KYC Pricing and Cost Per Customer: How to Cut KYC Costs by 39%](https://www.zyphe.com/resources/blog/kyc-cost-reduction): KYC cost reduction restructures verification spend. See the six cost lines and how reusable credentials cut 39% from a 1,000-checks/month stack.
- [Proof of Address Verification: What It Is, Why It Matters, and How to Automate It](https://www.zyphe.com/resources/blog/proof-of-address-verification): Proof of address verification confirms a customer lives where they claim. Learn what regulators accept and how to automate POA.
- [AML Transaction Monitoring in 2026: What the Regulations Actually Require](https://www.zyphe.com/resources/blog/aml-transaction-monitoring-2026): Volume thresholds are not an AML transaction monitoring program. Regulators expect typology coverage, identity-linked alerts, and audit-ready logs.
- [KYC API Integration: How to Add Identity Verification to Your App in 15 Minutes](https://www.zyphe.com/resources/blog/kyc-api-integration): KYC API integration done right ships in 15 minutes: REST, signed webhooks, pre-built UI, sandbox on sign-up. No compliance expertise required.
- [Decentralised KYC: What It Is, How It Works (2026)](https://www.zyphe.com/resources/blog/decentralised-kyc-what-it-is-how-it-works): Decentralised KYC keeps verification compliant under GDPR, MiCA and CCPA without storing the breach surface. The architecture, in 12 minutes.
- [KYC Web3: How DeFi Protocols Stay Compliant Without Centralising](https://www.zyphe.com/resources/blog/kyc-for-defi-protocols): KYC web3 for DeFi: zero-knowledge proofs, decentralised credentials, 15-minute integration. Stay MiCA + FATF compliant without storing users' identity documents.
- [Zyphe MCP vs Anthropic's KYC Screener: How They Compare, and Why They Are Complementary, Not Competitive](https://www.zyphe.com/resources/blog/zyphe-mcp-vs-anthropic-kyc-screener): Anthropic's KYC Screener is an agent template. Zyphe MCP is the platform under it. Complementary, not competitive — side-by-side breakdown.
- [Perpetual KYC: Your KYC Is a Photograph, It Should Be a Video](https://www.zyphe.com/resources/blog/perpetual-kyc-photograph-video): Perpetual KYC turns one-time onboarding into a continuous risk view. TD Bank's $1.3B fine, FATF and 6AMLD expectations, and what to fix first.
- [MiCA KYC Requirements in 2026: What Crypto Firms Must Do Before It’s Too Late](https://www.zyphe.com/resources/blog/mica-kyc-requirements-in-2026): Discover all the MiCA KYC requirements in 2026, including a full checklist of what crypto firms need to check before it's too late.
- [How to Reduce KYC Onboarding Drop-Off by 40%](https://www.zyphe.com/resources/blog/reduce-kyc-onboarding-drop-off): KYC onboarding drop-off costs fintechs millions. Five root causes, step-by-step fixes, and how reusable credentials cut abandonment.
- [PRA Enforcement Action 2026: What the Bank of London Fine Means for Compliance](https://www.zyphe.com/resources/blog/pra-enforcement-action-2026-bank-of-london-fine): The PRA fined Bank of London Group £2m for integrity failings. Here's why compliance teams need automated audit trails now.
- [Compliance Enforcement 2026: What This Week's Crackdowns Mean for Fintech](https://www.zyphe.com/resources/blog/compliance-enforcement-2026-fintech-takeaways): UK banking fines, EU GDPR transparency sweeps, AML enforcement in legal services — what compliance enforcement 2026 means for regulated fintechs.
- [GDPR Transparency Enforcement 2026: What the EDPB Sweep Means for KYC](https://www.zyphe.com/resources/blog/gdpr-transparency-enforcement-2026-edpb-sweep): 25 EU regulators are running coordinated GDPR transparency enforcement. If your KYC flow has a generic privacy policy, you have a problem.
- [AML Compliance in the Legal Sector 2026: What the SRA Fine Signals](https://www.zyphe.com/resources/blog/aml-compliance-legal-sector-2026-sra-enforcement): The SRA fined Ranson Houghton LLP for AML failures. Enforcement is expanding beyond banks with AI-driven monitoring planned. What to do now.
- [Why Centralized Identity Verification Is a Ticking Time Bomb](https://www.zyphe.com/resources/blog/idmerit-data-breach-centralized-identity-verification-risk): Cybernews linked an unprotected database of 1 billion identity records to IDMerit, which disputes the link. Why centralized KYC invites this, and the fix.
- [eIDAS 2.0 Is Here: How the EU Digital Identity Wallet Changes KYC Forever](https://www.zyphe.com/resources/blog/eidas-2-eu-digital-identity-wallet-kyc-compliance-guide): Every EU member state must deploy a compliant EUDI Wallet by Dec 31, 2026. What fintechs must do now and why Zyphe is already aligned.
- [Adverse Media Screening: AML Workflow, Tools and Best Practices](https://www.zyphe.com/resources/blog/adverse-media-screening-aml-guide): Adverse media screening is the process of checking customers against negative news sources, reports of fraud, money laundering, corruption, sanctions breaches or organised crime, to surface risk that standard identity checks miss. Regulators expect it as part of a risk-based AML programme, performed at onboarding and monitored continuously thereafter.
- [Third-Party Breach Risk in 2026: What Fintechs Must Fix Now](https://www.zyphe.com/resources/blog/third-party-breach-risk-fintech-2026): Four real incidents reveal how supply chain attacks, BPO compromises, and 2FA bypass are reshaping fintech compliance in 2026. Audit Now.
- [The Identity Breach Epidemic of 2026: Why Centralized PII Storage Is Your Biggest Liability](https://www.zyphe.com/resources/blog/identity-breach-epidemic-2026-centralized-pii-storage-liability): From the 1B-record exposure Cybernews linked to IDMerit to Aura's ironic breach, 2026's data disasters share one root cause: centralized PII storage.
- [When Your KYC Provider Gets Breached: Lessons From the Sumsub Security Incident](https://www.zyphe.com/resources/blog/sumsub-security-breach-kyc-provider-lessons): Sumsub breach went undetected for 18 months. What compliance teams need to ask about their KYC provider and the alternative that eliminates the risk.
- [What the Persona-Discord Incident Reveals About Centralised Identity Verification](https://www.zyphe.com/resources/blog/persona-discord-centralised-identity-verification-incident): Persona's leaked dashboard exposed 269 hidden checks & 3-year data retention—a stark warning about centralised KYC risk.
- [VASP KYC Compliance: How to Pass MiCA Without a Central PII Store](https://www.zyphe.com/resources/blog/vasp-kyc-compliance): VASP KYC compliance under MiCA: how to pass the audit without a central store of customer PII. The sharded architecture regulators now accept.
- [Crypto KYC Compliance: What Exchanges and Web3 Platforms Need to Know in 2026](https://www.zyphe.com/resources/blog/crypto-kyc-compliance): Crypto KYC compliance is the obligation of exchanges, custodians and other virtual asset service providers to identify and verify their customers, screen them against sanctions and PEP lists, and monitor them under anti-money-laundering law. It is required by FATF Recommendation 15, by MiCA and the EU Transfer of Funds Regulation, by the US Bank Secrecy Act and by the UK Money Laundering Regulations.
- [Automated Compliance Reporting: The Data Retention Risk Nobody Names](https://www.zyphe.com/resources/blog/automated-compliance-reporting): Automated compliance reporting and the data-retention risk nobody names. SAR, CTR, and audit trails without becoming the next breach.
- [KYC vs AML in 2026: What Regulators Actually Fine](https://www.zyphe.com/resources/blog/kyc-vs-aml-differences): KYC vs AML in 2026: fines showing how each fails differently, the operational distinction, and what to fix first.
- [Zyphe vs Sumsub: Why Choose Zyphe?](https://www.zyphe.com/resources/blog/zyphe-vs-sumsub): Zyphe vs Sumsub: Compare decentralized and traditional KYC architectures. Learn why data minimization, reusable credentials, and privacy-first matter.
- [The 4 Key Objectives of KYC: Ensuring Regulatory Adherence](https://www.zyphe.com/resources/blog/key-objective-of-kyc-ensuring-regulatory-adherence): The key objectives of KYC: identity verification, risk assessment, ongoing monitoring, and full reporting. A complete guide for all the businesses.
- [KYC Failure: The 3 Founder Decisions That Killed Crypto Startups](https://www.zyphe.com/resources/blog/kyc-failure-consequences-start-up-guide): KYC failure killed Bittrex, BitMEX, and cost Cash App $160M. Three founder decisions behind every shutdown — and how to avoid each.
- [Is KYC Safe in 2026? The Math After the IDmerit Breach](https://www.zyphe.com/resources/blog/are-kyc-safe): Is KYC safe in 2026? Not centralised. Cybernews linked 1B exposed records to IDmerit. The math behind sharded KYC and the attack-surface gap.
- [KYC Onboarding Process: Ultimate Guide](https://www.zyphe.com/resources/blog/kyc-onboarding-process-ultimate-guide): Master the KYC onboarding process with our ultimate guide. Learn identity verification, compliance best practices, and how to reduce abandonment.
- [CIP Compliance Checklist: 4 Essential Elements Every Financial Institution Needs](https://www.zyphe.com/resources/blog/cip-compliance-checklist): Complete CIP Compliance Checklist: customer verification, record-keeping, OFAC screening & notice. Complete checklist & best practices for banks
- [Terrorism Financing Screening: Where It Actually Breaks Down](https://www.zyphe.com/resources/blog/how-financial-institutions-screen-for-terrorism-financing): Terrorism-financing screening for financial institutions: where most CFT programmes break down and the architectural fix that closes the gap.
- [Enhanced Due Diligence (EDD): When and How to Apply It](https://www.zyphe.com/resources/blog/enhanced-due-diligence-vs-standard-cdd): Enhanced due diligence (EDD) is the deeper set of AML checks applied to higher-risk customers. On top of standard customer due diligence, EDD requires establishing source of funds and source of wealth, identifying beneficial owners, screening for politically exposed persons and adverse media, obtaining senior management approval, and monitoring the relationship more closely.
- [The Complete Guide to Customer Due Diligence for Fintech Companies](https://www.zyphe.com/resources/blog/guide-to-customer-due-diligence-for-fintech-companies): Complete guide to Customer Due Diligence for fintech companies. Learn CDD requirements, implementation, and how to scale compliance programs.
- [Decentralized KYC Cost Analysis: What the Numbers Actually Show](https://www.zyphe.com/resources/blog/5-ways-decentralized-identity-reduces-costs): Decentralized KYC cost analysis 2026: real numbers on infrastructure, audit, and compliance savings versus centralised vendors.
- [The Compliance Reporting Mistakes That Get Crypto Companies Shut Down](https://www.zyphe.com/resources/blog/crypto-compliance-reporting-mistakes): BitMEX lost $100M over compliance reports, not fraud. Your crypto business is one documentation gap away from the same fate. Here's what to fix.
- [How Fraudsters Are Beating Your KYC With $20 Deepfakes](https://www.zyphe.com/resources/blog/how-fraudsters-are-beating-your-kyc-with-20-deepfakes): AI-generated deepfakes are bypassing KYC for under $20. Learn the three attack vectors targeting your platform and detection methods working in 2025.
- [Your Web3 Startup Is One Compliance Mistake Away From Dying](https://www.zyphe.com/resources/blog/your-web3-startup-is-one-compliance-mistake-away-from-dying): MiCA enforcement and new regulations are forcing Web3 startups to choose: comply or shut down. Discover the privacy-first approach that lets you scale
- [Crypto Compliance Tools: How to Evaluate Vendors in 2026](https://www.zyphe.com/resources/blog/top-compliance-tools-for-crypto-businesses): Crypto compliance tools 2026: how to evaluate vendors on architecture, retention, breach history, and Travel Rule readiness — not just price.
- [The Privacy Coin Dilemma: Where Zyphe Draws the Line](https://www.zyphe.com/resources/blog/balancing-privacy-and-compliance): The privacy coin dilemma in 2026: where Zyphe draws the line between user privacy and regulator audit. The architecture and policy.
- [Synthetic Identity Fraud in 2026: How AI Fake IDs Are Bypassing KYC](https://www.zyphe.com/resources/blog/fake-identity-generator): Synthetic identity fraud in 2026: how AI-generated fake IDs bypass legacy KYC and what NFC + liveness + sharded storage stop cold.
- [KYC Passport Explained: What It Is, Who Holds It, and How It Differs from Reusable KYC](https://www.zyphe.com/resources/blog/what-is-a-kyc-passport): A KYC Passport is a reusable identity credential: a person completes identity verification once, holds the signed result in their own encrypted vault, and presents it to other services that accept it, with consent and disclosing only the attributes each service needs. The service receives confirmation and the attributes it asked for, not the documents, and Zyphe keeps no central copy.
- [Effective Compliance Monitoring for Crypto Exchange Operators](https://www.zyphe.com/resources/blog/effective-compliance-monitoring-for-crypto-exchange-operators): Compliance monitoring requires continuous screening, transaction analysis, and recertification. Build sustainable AML programs for crypto operations.
- [Building Regulatory Frameworks for Web3 Projects](https://www.zyphe.com/resources/blog/building-regulatory-frameworks-for-web3-projects): Build compliant Web3 regulatory frameworks that satisfy regulators while preserving decentralization. Privacy-first KYC/AML solutions for crypto proje
- [Risk Assessment for Crypto Compliance: The Model and the Numbers](https://www.zyphe.com/resources/blog/conducting-effective-risk-assessments-for-crypto-compliance): Risk assessment for crypto compliance in 2026: the model regulators expect and the numbers behind every shutdown that began with a weak score.
- [The Challenges Facing KYC in a Web3 World](https://www.zyphe.com/resources/blog/the-challenges-facing-kyc-in-a-web3-world): Discover how to build robust KYC for Web3 platforms. Address pseudonymity, multi-chain identity, and privacy challenges with practical compliance solu
- [Understanding Cryptocurrency Regulations for New Web3 Projects](https://www.zyphe.com/resources/blog/cryptocurrency-regulations-for-web3-projects): Master Web3 compliance across jurisdictions. Design regulatory-ready architecture with decentralized KYC, AML tools, and data governance solutions.
- [AML Strategy for Crypto Exchanges: The 2026 Playbook](https://www.zyphe.com/resources/blog/building-a-robust-aml-strategy-for-crypto-exchanges): AML strategy for crypto exchanges in 2026: the playbook that survives MiCA, FinCEN, and FATF Travel Rule audits without a central PII store.
- [How Zyphe Solves the DeFi KYC Paradox](https://www.zyphe.com/resources/blog/how-decentralized-finance-platforms-ensure-kyc-compliance): How Zyphe solves the DeFi KYC paradox: regulator-grade verification with no centralised PII honeypot. Architecture and trade-offs.
- [DAO Regulatory Compliance: KYC Without Centralising Governance](https://www.zyphe.com/resources/blog/regulatory-compliance-for-decentralized-autonomous-organizations): DAO regulatory compliance in 2026: KYC and audit trails without centralising governance. The architecture that satisfies regulators.
- [How to fake KYC on Crypto Exchanges](https://www.zyphe.com/resources/blog/how-to-fake-kyc): Understand KYC fraud risks in crypto markets. Learn detection methods, legal implications, and compliance best practices.
- [Coinbase Data Breach 2025: A $400M Wake Up Call & Prevention Guide](https://www.zyphe.com/resources/blog/coinbase-data-breach-2025): Analyze the 2025 Coinbase breach affecting 69K+ users. Learn financial impact, security lessons, and prevention strategies.
- [2026 State of Digital ID Verification: What the Data Shows](https://www.zyphe.com/resources/blog/2025-trends-in-digital-id-verification-tech): 2026 state of digital ID verification: what the IDmerit and Sumsub incidents changed, what regulators now expect, and what the data shows.
- [The Danger of Data Leaks: Protecting Your Digital Shadow](https://www.zyphe.com/resources/blog/the-danger-of-data-leaks-protecting-your-digital-shadow): Protect your business from data leaks with expert guidance. Discover key risks and practical steps for digital security.
- [Zero-Knowledge Proofs in KYC: What They Prove, How They Work, Where the Limits Are](https://www.zyphe.com/resources/blog/what-is-zero-knowledge-proof-in-kyc-verification): A zero-knowledge proof in KYC lets a customer prove a fact about their identity, that they are over 18, resident in the EU, or not on a sanctions list, without revealing the underlying data, such as their date of birth, address or document. The verifier gets a cryptographic proof it can check, and the personal data stays with the person.
- [Zyphe x Spendbase: Simplifying SaaS Spend and User Onboarding](https://www.zyphe.com/resources/blog/partnership-with-spendbase): Celebrate Zyphe's strategic partnership with Spendbase. Learn how we're advancing decentralized identity solutions together.
- [AML Compliance in 2025: New Challenges and Solutions for Businesses](https://www.zyphe.com/resources/blog/aml-compliance-2025): Navigate 2025's AML compliance landscape with expert insights on new regulations, technology solutions, and risk management strategies.
- [How Zyphe Implements DIDs for Compliant Web3 Identity](https://www.zyphe.com/resources/blog/blockchain-identity-verification): How Zyphe implements DIDs for compliant Web3 identity: verifiable credentials, sharded storage, and regulator-readable audit trails.
- [The Evolution of Identity Verification](https://www.zyphe.com/resources/blog/identity-verification-evolution): Trace identity verification evolution from paper to privacy-first digital solutions. See how decentralization transforms trust.
- [KYC vs KYB: The Complete Difference Guide (2026)](https://www.zyphe.com/resources/blog/kyc-vs-kyb-differences): KYC vs KYB explained: clear definitions, a side-by-side table, which one your business actually needs, and why KYB quietly multiplies the PII you hold in 2026.

## Guides

- [The Payment Scam Liability: The $8 Million Cost Hidden In Your Onboarding Process](https://www.zyphe.com/guide/the-payment-scam-liability): UK PSR's 50/50 liability split makes mule accounts a direct P&L cost. What the $8M onboarding risk means for your compliance strategy in 2025

## News

- [The SEB AML penalty: NYDFS takes $33 million over Baltic KYC and monitoring gaps](https://www.zyphe.com/resources/news/seb-aml-penalty-nydfs-baltic-october-2026): New York's DFS fined SEB $33 million on 15 October 2026 over Baltic due diligence, correspondent banking and transaction monitoring failures. What it means.
- [The Korea financial data breach: 16 firms, 100,000 records and a security overhaul](https://www.zyphe.com/resources/news/korea-financial-data-breach-16-firms-october-2026): Korea's financial data breach hit 16 firms, from Shinhan Bank to two crypto firms, leaking resident registration numbers. What changes for KYC teams now.
- [The Bank of America AML penalty: $1.2 billion for a monitoring system that waited for subpoenas](https://www.zyphe.com/resources/news/bank-of-america-aml-penalty-fincen-october-2026): FinCEN fined Bank of America $1.2 billion on 13 October 2026 after its monitoring missed over $5 billion of suspicious activity. What the orders now require.
- [The Grosvenor Casinos settlement: £5 million for source of funds, cash and EDD failures](https://www.zyphe.com/resources/news/grosvenor-casinos-settlement-aml-gambling-commission-october-2026): Rank's Grosvenor Casinos will pay £5,012,261 after the Gambling Commission found AML failures on crypto source of funds, cash play and EDD. What it changes.
- [The Coinme settlement: 34 state regulators close a crypto kiosk business over KYC, SAR and EDD gaps](https://www.zyphe.com/resources/news/coinme-settlement-crypto-kiosk-state-regulators-october-2026): 34 state regulators fined Coinme 2.5 million dollars and ordered its crypto kiosks closed by January 2027. What the consent order found and what it changes.
- [The Modulr fine: DNB penalises an e-money institution for leaving ongoing monitoring to its crypto platform partners](https://www.zyphe.com/resources/news/dnb-modulr-fine-ongoing-monitoring-crypto-partners-october-2026): DNB fined Modulr Finance B.V. 722,160 euros for ongoing monitoring it had left to crypto platform partners. What the decision says and what it changes for EMIs.
- [Japan's FSA wants IC chip verification now, not in April 2027](https://www.zyphe.com/resources/news/japan-fsa-ic-chip-verification-october-2026): On 9 October 2026 Japan's FSA asked firms to stop image-based ID checks before the April 2027 deadline and move to IC chip verification. What changes for KYC.
- [The American Express AML penalty: $350 million for a card bank that assessed its deposits](https://www.zyphe.com/resources/news/american-express-aml-penalty-occ-october-2026): The OCC fined American Express National Bank $350 million on 8 October 2026 over $13 billion of suspected trade-based laundering. What the orders now require.
- [AMLA's final CDD RTS: remote ID checks become a fallback you must justify](https://www.zyphe.com/resources/news/amla-cdd-rts-remote-onboarding-october-2026): AMLA sent its final draft CDD RTS to the Commission on 1 October 2026. ID documents and eID stay the default; remote tools need a reason, and PEP rules tighten.
- [FinCEN withdraws the unhosted wallet rule and its crypto mixing proposal](https://www.zyphe.com/resources/news/fincen-unhosted-wallet-rule-withdrawn-october-2026): FinCEN is withdrawing its 2020 unhosted wallet rule and 2023 mixing proposal, effective 6 October 2026. What still applies to MSBs and banks, and the EU view.
- [The CPR data breach: 8.8 million Danish records taken through one company's lawful access](https://www.zyphe.com/resources/news/denmark-cpr-data-breach-8-8-million-october-2026): Denmark's CPR data breach exposed names, addresses and CPR numbers of 8.8 million people through a company's lawful lookup access. What it means for KYC teams.
- [The Times Car data breach: 1.6 million ID document images and the case for chip reads](https://www.zyphe.com/resources/news/times-car-data-breach-id-document-images-october-2026): The Times Car data breach exposed about 6.6 million accounts and ID document images for 1.6 million. What it means for KYC teams that still store ID photos.
- [A7 Network sanctions: FinCEN proposes a ban on payments to its Sub-Agents](https://www.zyphe.com/resources/news/a7-network-sanctions-fincen-sub-agents-october-2026): On 1 October 2026 OFAC designated the A7 Network and FinCEN proposed a ban on transfers involving its Sub-Agents. What it means for screening, KYB and SARs.
- [Tren de Aragua sanctions: OFAC lists seven TRON addresses behind ATM jackpotting](https://www.zyphe.com/resources/news/tren-de-aragua-sanctions-atm-jackpotting-ofac-september-2026): OFAC sanctioned a Tren de Aragua ATM jackpotting network on 30 September 2026 and listed seven TRON addresses. What changes for screening, blocking and SARs.
- [HKMA remote onboarding circular: deepfake risk prompts a full review of eKYC](https://www.zyphe.com/resources/news/hkma-remote-onboarding-deepfake-circular-september-2026): The HKMA's September 2026 circular replaces its 2019 remote onboarding rules, names deepfakes and asks banks and SVF licensees to review eKYC. What changes.
- [The Tether Iran report: a Senate probe finds USDT behind Iran's shadow banking](https://www.zyphe.com/resources/news/tether-iran-senate-report-usdt-sanctions-september-2026): A Senate minority report finds 84% of 846 Iran-linked sanctioned wallets ran on USDT and flags slow freezes. What it changes for sanctions screening and SARs.
- [EU KIDS Act proposal: age verification at 15 and zero-knowledge proofs](https://www.zyphe.com/resources/news/eu-kids-act-age-verification-proposal-september-2026): The EU KIDS Act proposal would bar under-15s from risky social media accounts and require certified, zero-knowledge age checks. What it requires, what is open.
- [SEC's Peirce backs zero-knowledge KYC: what the CIP rule still requires](https://www.zyphe.com/resources/news/sec-peirce-zero-knowledge-kyc-cip-reliance-september-2026): SEC Commissioner Peirce urged zero-knowledge KYC and easier CIP reliance on 23 September 2026. No rule changed. What stays binding and what to prepare.
- [FCA money mule accounts review: detection is up, sharing is down](https://www.zyphe.com/resources/news/fca-money-mule-accounts-review-september-2026): UK firms offboarded 238,396 suspected money mules in 2025, but the share filed to the National Fraud Database fell to 15.3%. What compliance teams must do.
- [FinCEN sends a customer due diligence rule proposal to the White House](https://www.zyphe.com/resources/news/fincen-customer-due-diligence-rule-omb-september-2026): FinCEN sent a customer due diligence rule proposal to OMB on 17 September 2026. The statute orders most of 31 CFR 1010.230 rescinded. Here is what changes.
- [The UK AML strategy 2026 to 2029 funds enforcement now and consults on relief later](https://www.zyphe.com/resources/news/uk-aml-asset-recovery-strategy-2026-2029-september-2026): The UK AML strategy commits at least £550m and 500 new officers out to 2029, cuts AML supervisors from 25 to 3, and only consults on MLR and SAR relief.
- [TSA's identity verification vendor could extract passport images, and nobody tracked it](https://www.zyphe.com/resources/news/dhs-oig-tsa-identity-verification-vendor-september-2026): A DHS watchdog found TSA's identity verification vendor could extract passport and license images untracked. What it means for your third-party oversight.
- [FATF gambling risk indicators: what the new red flags mean for casino and betting KYC](https://www.zyphe.com/resources/news/fatf-gambling-risk-indicators-september-2026): The FATF published red flags for gaming and gambling on 9 September 2026. What they say about identity evasion, CDD thresholds and SARs for casinos and betting.
- [Digital proof of age is now valid for alcohol sales in England and Wales](https://www.zyphe.com/resources/news/digital-proof-of-age-alcohol-sales-england-wales-september-2026): From 15 September 2026, licensed premises in England and Wales may accept a digital proof of age, but only through a registered provider, never by eye.
- [The Citibank OFSI penalty: a missed name prefix and a wrong ownership call cost £4.73 million](https://www.zyphe.com/resources/news/ofsi-penalty-citibank-london-sanctions-screening-september-2026): OFSI fined Citibank's London branch £4.73m for 970 payments that breached UK sanctions. What the notice says about screening, ownership tests and reporting.
- [The Revolut data breach: a forged government request and the KYC files it unlocked](https://www.zyphe.com/resources/news/revolut-data-breach-fake-government-request-september-2026): Revolut says a fraudster emailing from a real government domain obtained customer ID documents. What happened, what GDPR and AML rules require, and what to fix.
- [Xinbi Guarantee sanctions: OFAC blocks a 24 billion dollar scam marketplace](https://www.zyphe.com/resources/news/xinbi-guarantee-sanctions-ofac-scam-marketplace-september-2026): OFAC designated Xinbi Guarantee on 9 September 2026 and listed 52 TRON addresses. What changes for sanctions screening, SAR filing and crypto KYC controls.
- [FinCEN traces 17.5 billion dollars of suspected health care fraud through BSA data](https://www.zyphe.com/resources/news/fincen-health-care-fraud-bsa-trend-analysis-september-2026): FinCEN found $17.5bn of suspected health care fraud in 5,702 BSA reports. What the filings caught, what they missed, and what it changes for AML teams.
- [FinCEN opens the CIP rule to verifiable digital credentials](https://www.zyphe.com/resources/news/fincen-verifiable-digital-credentials-cip-september-2026): FinCEN says verifiable digital credentials can verify identity under the CIP rule. What the 8 September 2026 FAQs change, what they do not, and what stays open.
- [The IDScan data breach: 153 million ID scans advertised and nine class actions in three days](https://www.zyphe.com/resources/news/idscan-data-breach-class-actions-september-2026): IDScan.net confirms a data security incident and nine class actions land in Louisiana federal court. What 153 million advertised ID scans mean for KYC teams.
- [The FinCEN border GTO returns to March 2027, minus Arizona and California](https://www.zyphe.com/resources/news/fincen-border-gto-reissued-september-2026): FinCEN reissued the southwest border cash reporting order on 3 September 2026. The threshold holds at 1,000 dollars, but the covered map has now shrunk.
- [SAR confidentiality: regulators say banks can tell customers why an account closed](https://www.zyphe.com/resources/news/sar-confidentiality-joint-statement-september-2026): FinCEN and four federal regulators clarified SAR confidentiality on 2 September 2026. What banks may now tell customers about fraud and account closures.
- [The new matters requiring attention rule: what changes for BSA findings](https://www.zyphe.com/resources/news/occ-fdic-matters-requiring-attention-rule-september-2026): The OCC and FDIC final rule on matters requiring attention lands in the Federal Register. What it changes for BSA, sanctions and AML examination findings.
- [Australia's IDLock will let customers switch off their own Document Verification Service checks](https://www.zyphe.com/resources/news/australia-idlock-document-verification-service-september-2026): Australia's IDLock will let people block their own documents in the Document Verification Service. What it changes for KYC onboarding and CDD obligations.
- [Court blocks bulk transfer of driver's license data to federal agencies](https://www.zyphe.com/resources/news/cdlis-driver-license-data-transfer-blocked-august-2026): A US court blocked a federal demand for driver's license data from a database of 17 million commercial drivers. What it changes for KYC, privacy and vendors.
- [Syria sanctions relief is not AML clearance: what the SST rescission changes](https://www.zyphe.com/resources/news/syria-sst-rescission-sanctions-relief-august-2026): Washington rescinded Syria's State Sponsor of Terrorism designation on 24 August 2026. The EU, the UK and the FATF did not follow, so due diligence stands.
- [Meta age assurance settlement: certified accuracy targets and a delete-by-default rule](https://www.zyphe.com/resources/news/meta-age-assurance-settlement-august-2026): Meta's age assurance settlement sets certified false positive caps, ISO 27566 testing and a delete-by-default data rule. What compliance teams should read now.
- [The DVS trust framework 1.0 reaches its earliest start date, and MLR reliance gets sharper edges](https://www.zyphe.com/resources/news/uk-dvs-trust-framework-1-0-september-2026): The UK DVS trust framework 1.0 reached its earliest start date on 1 September 2026. What certification, the CertifID mark and MLR reliance now mean for firms.
- [The Missouri age verification law now in force: section 407.3405 bans the verifier from keeping anything](https://www.zyphe.com/resources/news/missouri-age-verification-law-407-3405-august-2026): Missouri's age verification law took effect on 28 August 2026. Section 407.3405 makes operators use a third party and bars that verifier from keeping data.
- [FinCEN special measure would cut Banque Misr UAE off from US correspondent banking](https://www.zyphe.com/resources/news/fincen-special-measure-banque-misr-uae-august-2026): FinCEN proposed a section 311 special measure against Banque Misr UAE on 28 August 2026. What 103 suspected front companies mean for correspondent duties.
- [FinCEN ends beneficial ownership reporting for US companies](https://www.zyphe.com/resources/news/fincen-ends-beneficial-ownership-reporting-august-2026): FinCEN's final rule permanently ends beneficial ownership reporting for US companies. What it changes for CDD, KYB checks, and the data already on file.
- [AUSTRAC mortgage fraud findings: Operation Claw puts lenders on notice](https://www.zyphe.com/resources/news/austrac-operation-claw-mortgage-fraud-august-2026): AUSTRAC's Operation Claw found suspected mortgage fraud across 10 major Australian banks. What the findings mean for lender due diligence and SMR duties.
- [QuinnBet to pay £609,104 after the Gambling Commission found its AML controls failed](https://www.zyphe.com/resources/news/quinnbet-gambling-commission-aml-controls-settlement-august-2026): QuinnBet will pay £609,104 after the Gambling Commission found its AML controls failed for 29 months. What the source of funds and SAR findings mean for firms.
- [Treasury's GENIUS Act rule would make exchanges vet foreign stablecoin issuers](https://www.zyphe.com/resources/news/treasury-genius-act-foreign-stablecoin-issuers-august-2026): Treasury's GENIUS Act proposal would make crypto exchanges run due diligence on foreign stablecoin issuers before listing. Deadlines, duties and open risks.
- [Foreign subsidiary sanctions liability: OFAC settles with Rice Lake over Iran diversion](https://www.zyphe.com/resources/news/ofac-rice-lake-foreign-subsidiary-sanctions-august-2026): OFAC settled with Rice Lake for 60,764 dollars after its Italian subsidiary shipped goods to Iran through a UAE distributor. What it changes for controls.
- [Identity fraud drives 59% of UK fraud risk cases in Cifas H1 2026 data](https://www.zyphe.com/resources/news/cifas-identity-fraud-uk-half-year-2026): Cifas members filed over 220,000 UK fraud risk cases in the first half of 2026. Identity fraud hit 59% of them, SIM swap filings rose 402% and muling rose 69%.
- [The UBS AML penalty: FinCEN's record action against UBS Financial Services](https://www.zyphe.com/resources/news/ubs-aml-penalty-fincen-record-broker-dealer-august-2026): FinCEN fined UBS Financial Services 125 million dollars for repeat AML failures. What the consent order says and what it changes for your CDD and SAR duties.
- [The 2026 Gambling Commission risk assessment: AI-forged identities and a software sector upgrade](https://www.zyphe.com/resources/news/gambling-commission-risk-assessment-ai-identity-fraud-july-2026): Britain's gambling regulator keeps remote casino at high risk, lifts gambling software to medium, and warns AI-generated documents are defeating CDD checks.
- [FinCEN Venezuela enforcement policy: BSA relief with three conditions](https://www.zyphe.com/resources/news/fincen-venezuela-bsa-enforcement-policy-july-2026): FinCEN will not pursue BSA enforcement against US banks serving Venezuela until 29 January 2027. The three conditions, and the duties that do not change.
- [FinCEN targets federal student aid fraud: ghost students, synthetic identities and new SAR duties](https://www.zyphe.com/resources/news/fincen-federal-student-aid-fraud-alert-july-2026): FinCEN's 24 July 2026 alert FIN-2026-Alert004 tells banks to flag ghost and straw student aid schemes. We map the SAR key term, red flags and the KYC lesson.
- [Wise bank charter denied: the OCC blocks a payments giant over AML failures](https://www.zyphe.com/resources/news/wise-bank-charter-denied-occ-aml-july-2026): The OCC denied Wise a national trust bank charter on 21 July 2026, citing AML programme failures behind a 4.2 million dollar multistate order. What it means.
- [FCA finds beneficial ownership verification gaps across asset management firms](https://www.zyphe.com/resources/news/fca-asset-management-financial-crime-beneficial-ownership-july-2026): The FCA's 22 July 2026 review of 242 asset managers found beneficial ownership verification gaps in complex ownership structures. What it changes for CDD.
- [BaFin orders Helaba to fix customer due diligence failures](https://www.zyphe.com/resources/news/bafin-helaba-customer-due-diligence-order-july-2026): BaFin has ordered Helaba to remedy customer due diligence failures in identification, data updates and monitoring. What the July 2026 order means for KYC teams.
- [The FATF travel rule gap: the seventh targeted update finds enforcement lagging the law](https://www.zyphe.com/resources/news/fatf-seventh-targeted-update-virtual-assets-july-2026): The FATF seventh targeted update finds 83% of jurisdictions have travel rule laws, yet most have never enforced them. What it means for VASP onboarding.
- [Deepfake identity fraud now taints one in every 100 failed checks](https://www.zyphe.com/resources/news/deepfake-identity-fraud-lexisnexis-report-july-2026): LexisNexis says deepfake identity fraud now taints 1 in 100 failed identity checks, up 180% in a year. What it means for your KYC and liveness controls.
- [Swedbank NYDFS penalty: 50 million dollars for hiding Panama Papers links](https://www.zyphe.com/resources/news/swedbank-nydfs-penalty-panama-papers-july-2026): New York's DFS hit Swedbank with a 50 million dollar penalty for withholding Baltic subsidiary and Panama Papers data from its regulators. What it means.
- [The AssuranceAmerica identity data breach: 7 million driver's license numbers and the case for holding less](https://www.zyphe.com/resources/news/assuranceamerica-identity-data-breach-drivers-licenses-july-2026): AssuranceAmerica's identity data breach exposed 6.99 million driver's license numbers. What it means for KYC data duties, breach notification, and holding less.
- [Ninth Circuit blocks the FinCEN border GTO cash reporting order](https://www.zyphe.com/resources/news/ninth-circuit-fincen-border-gto-blocked-july-2026): The Ninth Circuit upheld a block on the FinCEN border GTO, calling it a de facto rule that skipped notice and comment and ignored the cost of compliance.
- [The DNB CCV transaction monitoring fine: a payments firm left 4,200 merchants unmonitored for 23 months](https://www.zyphe.com/resources/news/dnb-ccv-transaction-monitoring-fine-july-2026): De Nederlandsche Bank fined payment institution CCV 2.65 million euros after 4,200 merchants sat outside its transaction monitoring system for 23 months.
- [The Fed's risk-based AML program rule: a higher bar for BSA citations](https://www.zyphe.com/resources/news/fed-risk-based-aml-program-rule-july-2026): The Federal Reserve wants banks cited only for significant or systemic AML failures. We map what its risk-based AML program rule changes for compliance teams.
- [The ABN AMRO fine: DNB penalises 8.5 million euro due diligence failures on high-risk customers](https://www.zyphe.com/resources/news/abn-amro-dnb-fine-customer-due-diligence-july-2026): De Nederlandsche Bank fined ABN AMRO 8.5 million euros for weak ongoing monitoring of high-risk clients. What the ABN AMRO fine means for your CDD duties.
- [The EU age verification trusted list goes live on the eIDAS Dashboard](https://www.zyphe.com/resources/news/eu-age-verification-trusted-list-eidas-dashboard-july-2026): The EU age verification trusted list is now live on the eIDAS Dashboard, naming who may issue proof-of-age attestations and what it means for compliance.
- [AI Act transparency obligations: deepfake and AI disclosure rules apply from 2 August 2026](https://www.zyphe.com/resources/news/eu-ai-act-transparency-obligations-deepfake-august-2026): The EU AI Act transparency obligations apply from 2 August 2026, forcing deepfake and AI chat disclosure. Here is what changes for KYC and identity teams.
- [Supreme Court lets Texas enforce its app store age verification law](https://www.zyphe.com/resources/news/texas-app-store-age-verification-scotus-july-2026): The Supreme Court let Texas enforce its app store age verification law on 6 July 2026. What SB 2420 requires, and how to comply without a data honeypot.
- [FATF fraud roadmap: the UK presidency puts scams at the centre of global AML](https://www.zyphe.com/resources/news/fatf-fraud-roadmap-uk-presidency-july-2026): The FATF fraud roadmap for 2026 to 2028 launched under the new UK presidency, putting scams, information sharing and identity fraud at the top of AML work.
- [PCC money laundering sanctions: OFAC targets a crypto network as Brazil freezes 2 billion dollars](https://www.zyphe.com/resources/news/pcc-money-laundering-sanctions-ofac-crypto-july-2026): OFAC sanctioned a PCC money laundering network moving drug cash through crypto, then Brazil froze 2bn dollars. What it means for KYC and sanctions teams.
- [AMLA ongoing monitoring guidelines: the EU's first single-rulebook standard goes to consultation](https://www.zyphe.com/resources/news/amla-ongoing-monitoring-guidelines-consultation-july-2026): AMLA held its 2 July 2026 hearing on draft ongoing monitoring guidelines under Article 26(5) AMLR. What the CDD and transaction rules change, and by when.
- [EagleBank BSA settlement: $9.7M for a decade of ignored check kiting](https://www.zyphe.com/resources/news/eaglebank-bsa-settlement-aml-program-failure): EagleBank will pay over 9.7 million dollars after admitting it ran no AML programme for a decade while executives shielded a check kiting scheme. What it means.
- [Nebraska's social media age verification law blocked days before it took effect](https://www.zyphe.com/resources/news/nebraska-social-media-age-verification-blocked-july-2026): A federal judge blocked Nebraska's social media age verification law on First Amendment grounds, days before its July 2026 start. What it means for compliance.
- [Merrill's third SEC SAR penalty is a transaction monitoring calibration failure](https://www.zyphe.com/resources/news/merrill-sec-sar-transaction-monitoring-penalty): The SEC fined Merrill $7.5M on 29 June 2026 for a transaction monitoring threshold it knew was miscalibrated. Why repeat SAR failures are the real risk.
- [Binance loses its EU market: the MiCA licence failure explained](https://www.zyphe.com/resources/news/binance-mica-licence-eu-lockout-july-2026): Binance withdrew its Greek MiCA licence bid on 24 June 2026 and must halt new EU services from 1 July. What the fit-and-proper failure means for your firm.
- [FCA censures CACEIS UK over weak financial crime controls in the WealthTek collapse](https://www.zyphe.com/resources/news/fca-caceis-censure-financial-crime-controls-wealthtek): The FCA censured CACEIS UK and secured a 31.7 million pound payout after weak financial crime controls let WealthTek hold assets it was never permitted to hold.
- [Stablecoin KYC rule: five US agencies propose CIP duties under the GENIUS Act](https://www.zyphe.com/resources/news/stablecoin-kyc-rule-genius-act-cip-june-2026): Five US agencies propose a stablecoin KYC rule forcing payment stablecoin issuers to verify every customer under the GENIUS Act. Comments close 21 August 2026.
- [CBUAE AML fine hits a foreign bank branch and its compliance chief](https://www.zyphe.com/resources/news/cbuae-aml-fine-foreign-bank-mlro-june-2026): The CBUAE fined a foreign bank branch 20 million dirhams and its head of compliance 300,000 dirhams for repeated AML and sanctions failures. What it means.
- [Prince Group sanctions widen: OFAC adds 35 targets, FinCEN moves on H-Pay](https://www.zyphe.com/resources/news/prince-group-sanctions-ofac-fincen-june-2026): On 23 June 2026 OFAC hit Cambodia's Prince Group with 35 new sanctions targets and FinCEN moved on H-Pay. Here is what it means for KYC screening teams.
- [Australia's tranche 2 reforms: 80,000 new firms face AML duties from 1 July 2026](https://www.zyphe.com/resources/news/austrac-tranche-2-aml-reforms-july-2026): Australia's tranche 2 reforms put lawyers, accountants and real estate agents under AML/CTF rules from 1 July 2026. See what changes and how to prepare.
- [EUDI Wallet biometric portrait turns optional after the June 2026 eIDAS compromise](https://www.zyphe.com/resources/news/eudi-wallet-biometric-portrait-optional-june-2026): The EU's eIDAS Committee made the EUDI Wallet biometric portrait optional on 18 June 2026. Here is what the compromise changes for KYC and identity teams.
- [The Ikano Bank AML fine: SEK 140 million for risk-assessment failures](https://www.zyphe.com/resources/news/ikano-bank-aml-fine-sek-140-million-sweden): On 17 June 2026 Sweden's Finansinspektionen fined Ikano Bank SEK 140 million, plus a remark, for inadequate AML risk assessment; no laundering alleged.
- [MiCA transitional period ends 1 July 2026: the crypto compliance cliff](https://www.zyphe.com/resources/news/mica-transitional-period-ends-july-2026): The MiCA transitional period ends 1 July 2026, the EU-wide backstop for grandfathered crypto firms. We map the deadline, the AML duties and the wind-down risk.
- [Canaccord's record $80M FinCEN penalty: the AML lesson for broker-dealers](https://www.zyphe.com/resources/news/canaccord-fincen-80-million-aml-penalty): FinCEN's record $80M penalty on Canaccord (6 March 2026) exposed gamed trade surveillance and 160 unfiled SARs. What the broker-dealer case means for AML teams.
- [Germany's cabinet approves the Digital Identities Act and the EUDI wallet](https://www.zyphe.com/resources/news/germany-digital-identities-act-eudi-wallet-kyc): Germany's cabinet approved the Digital Identities Act on 20 May 2026, advancing the EUDI wallet. Here is what the new law means for KYC and onboarding teams.
- [Zyphe Adds MCP Support: Talk to Your Compliance Stack, Ship Onboarding and Manage Cases Faster](https://www.zyphe.com/resources/news/zyphe-mcp-launch): Zyphe now supports the Model Context Protocol. Compliance and product teams can build KYC flows and manage AML cases by talking to their AI assistant.
- [Italy's Garante Fines Poste Italiane €12.5M for Making Device Scans a Condition of App Access](https://www.zyphe.com/resources/news/poste-italiane-garante-gdpr-fine-device-surveillance): Italy's Garante fined Poste Italiane €12.5M for mandatory device surveillance in banking apps. What the ruling means for KYC operators.
- [Zyphe Named a Market Disruptor in Chartis' Financial Crime and Compliance50 2026](https://www.zyphe.com/resources/news/zyphe-chartis-financial-crime-and-compliance2026): Zyphe named Market Disruptor in Chartis Research FCC50 2026, recognizing its AI-driven, privacy-first approach to KYC and AML compliance.
- [IDMerit Data Leak: 1B KYC Records Exposed Across 26 Countries](https://www.zyphe.com/resources/news/idmerit-data-leak): IDMerit Data Leak: 1B KYC records across 26 countries exposed. What compliance officers using identity verification vendors need to do now.
- [Discord's Global Age Verification Push Hits a Trust Wall After 70,000 IDs Were Breached](https://www.zyphe.com/resources/news/discord-age-verification-backlash-2026): Discord announced global age verification for March. Months after 70,000 IDs were stolen, users, streamers, and the EFF refuse to comply.
- [Yescoin Foundation Partners with Zyphe to Scale Its Digital Rewards Platform](https://www.zyphe.com/resources/news/yescoin-partners-with-zyphe): Yescoin Foundation selects Zyphe as identity provider, delivering privacy-first KYC to onboard tens of millions of users in 190+ countries
- [Zyphe to Deliver Identity Verification to Support Supra’s Global Expansion](https://www.zyphe.com/resources/news/zyphe-supra-partnership): Zyphe launches partnership to deliver KYC verifications for Supra's rapidly growing user base of 500,000 and more.
- [Zyphe Announces New Funding to Accelerate Growth](https://www.zyphe.com/resources/news/zyphe-announces-new-funding-to-accelerate-growth): Zyphe secures new funding to expand decentralized identity verification platform, with no central PII store for safer KYC compliance.

## Webinars

- [Your ID Documents Are About to Be Everywhere. That Should Terrify You.](https://www.zyphe.com/resources/webinar/why-decentralized-kyc-is-important-interview): ID laws mean your personal documents may be at risk. See how Zyphe lets you control your data and protect your identity online.
- [Turning Compliance Into User Empowerment: Charlene Wang on The Crypto Megan Podcast](https://www.zyphe.com/resources/webinar/turning-compliance-into-user-empowerment-crypto-megan-podcast): Decentralized KYC and KYB that boost compliance and user trust — Charlene Wang on the Crypto Megan podcast. Listen now.
- [Deepfakes, AI, & Data Breaches - The Latest Onboarding Trends](https://www.zyphe.com/resources/webinar/deepfakes-ai-data-breaches): Stop deepfake and AI-driven KYC fraud. Privacy-first identity verification with NachoNacho × Zyphe — free webinar, watch now.

## Glossary

- [AML vs CFT](https://www.zyphe.com/resources/glossary/aml-vs-cft): CFT stands for Combating the Financing of Terrorism. What it means, how it differs from AML, why the two are regulated as one AML/CFT program, and what that changes operationally.
- [AMLID](https://www.zyphe.com/resources/glossary/amlid): AMLID stands for the Anti-Money Laundering International Database, a secure information platform developed by the United Nations.
- [Account Takeover (ATO) fraud](https://www.zyphe.com/resources/glossary/account-takeover-ato): Account Takeover (ATO) is fraud where attackers gain unauthorized access to legitimate users' online accounts, compromising personal data.
- [Agentic compliance](https://www.zyphe.com/resources/glossary/agentic-compliance): Agentic compliance is the use of AI agents that work a compliance case end to end, gathering evidence, resolving entities, drafting the rationale and proposing or executing a decision, inside limits a human sets and the law reserves. It differs from rules-based automation, which flags activity and leaves the whole investigation to an analyst.
- [Anti-Money Laundering (AML)](https://www.zyphe.com/resources/glossary/what-is-anti-money-laundering): Anti-money laundering is the framework of laws and controls that stops criminals disguising illicit funds. See what AML covers, the key rules, and how it works.
- [Bank Account Verification & Validation Service](https://www.zyphe.com/resources/glossary/bank-account-validation-service): A bank account verification and validation service confirms an account exists, is open, and belongs to the claimed owner before money moves, cutting failed payments and fraud.
- [Bank Secrecy Act (BSA)](https://www.zyphe.com/resources/glossary/bank-secrecy-act-bsa): The Bank Secrecy Act (BSA) requires financial institutions to report and track transactions to detect and prevent money laundering and terrorist financing.
- [Bot protection](https://www.zyphe.com/resources/glossary/bot-protection): Understand Bot Protection, its meaning, benefits, and how it helps safeguard your website and apps from harmful automated bot traffic and attacks.
- [Business lien](https://www.zyphe.com/resources/glossary/business-lien): Understand what a business lien is—a legal claim by creditors on company assets like property, receivables, or equipment used to secure debts owed.
- [CIP (Customer Identification Program)](https://www.zyphe.com/resources/glossary/customer-identification-program-cip): A Customer Identification Program (CIP) is a US anti-money-laundering rule requiring financial institutions to verify the identity of every customer who opens an account. Mandated by Section 326 of the USA PATRIOT Act, a CIP must collect four data points, name, date of birth, address and an identification number, and verify them within a reasonable time after the account is opened.
- [CLARITY Act](https://www.zyphe.com/resources/glossary/clarity-act): The CLARITY Act (Digital Asset Market Clarity Act, H.R. 3633) is the US bill that would split crypto oversight between the CFTC and the SEC and give registered exchanges explicit KYC and AML duties. It passed the House in July 2025 and failed a Senate cloture vote 49-50 on 15 September 2026.
- [California Consumer Privacy Act (CCPA)](https://www.zyphe.com/resources/glossary/california-consumer-privacy-act-ccpa): Explore the California Consumer Privacy Act (CCPA), a law granting California residents enhanced rights over personal data collection, privacy, and use.
- [Children’s Online Privacy Protection Act (COPPA)](https://www.zyphe.com/resources/glossary/childrens-online-privacy-protection-act-coppa): Understand the Children's Online Privacy Protection Act (COPPA), a U.S. law protecting data privacy for children under 13 on websites, apps, and services.
- [Compliance as a Service (CaaS)](https://www.zyphe.com/resources/glossary/compliance-as-a-service-caas): Compliance as a Service (CaaS), a cloud-based solution helping businesses meet regulatory requirements efficiently, reduce costs, and manage risks.
- [Customer Due Diligence (CDD)](https://www.zyphe.com/resources/glossary/customer-due-diligence-cdd): Customer due diligence (CDD) is the set of checks a regulated firm runs to identify and verify a customer, identify the beneficial owners behind a legal entity, understand the purpose of the relationship and monitor it on a risk basis. In the United States it is the fifth pillar of a Bank Secrecy Act compliance programme.
- [Data Subject Access Request (DSAR)](https://www.zyphe.com/resources/glossary/dsar-subject-access-request): A subject access request (DSAR) lets a person obtain the personal data an organisation holds on them. Here's what it covers, the timeline, and how to respond.
- [Data breach](https://www.zyphe.com/resources/glossary/data-breach): Discover what a data breach is, how unauthorized access to sensitive data occurs, its potential impact, and best practices for prevention and response.
- [Deepfake](https://www.zyphe.com/resources/glossary/deepfake): Learn about deepfakes: AI-generated synthetic media that convincingly mimics real people, explores risks, ethics & detection methods.
- [Dirty money](https://www.zyphe.com/resources/glossary/dirty-money): Dirty money is money obtained through crime, such as fraud, drug trafficking, corruption, tax evasion or theft, that cannot be spent or invested openly without revealing its origin. Money laundering is the process of turning dirty money into clean money: funds that appear to come from a legitimate source and can be used without attracting attention.
- [Document check](https://www.zyphe.com/resources/glossary/document-check): Explore Document Check in KYC: verifying customer identity documents for authenticity and compliance to prevent fraud and financial crime.
- [Domestic PEPs](https://www.zyphe.com/resources/glossary/domestic-peps): Domestic PEPs hold prominent public roles in their own country. See how domestic PEPs differ from foreign PEPs, their risk, and the due diligence that applies.
- [Enhanced due diligence (EDD)](https://www.zyphe.com/resources/glossary/enhanced-due-diligence-edd): Enhanced due diligence (EDD) is the higher tier of customer due diligence applied when a customer, product or jurisdiction presents elevated money-laundering risk. It adds source of funds and source of wealth evidence, adverse media screening, senior management approval and closer ongoing monitoring on top of standard CDD.
- [False negative](https://www.zyphe.com/resources/glossary/false-negative): Learn what a false negative is: when a detection system fails to flag real threats, risks in compliance, and strategies to reduce missed cases.
- [False positive](https://www.zyphe.com/resources/glossary/false-positive): Learn what a false positive is: when a detection system wrongly flags legitimate activity as a threat, its impacts, and methods to reduce such errors.
- [FedNow Service](https://www.zyphe.com/resources/glossary/fednow-service): FedNow Service: Real-time payment platform for U.S. banks. Glossary definition for instant payments and financial infrastructure.
- [Federal Trade Commission (FTC)](https://www.zyphe.com/resources/glossary/federal-trade-commission-ftc): The Federal Trade Commission (FTC) protects consumers and promotes competition by enforcing antitrust, privacy, and consumer protection laws.
- [Federated identity management (FIM)](https://www.zyphe.com/resources/glossary/federated-identity-management-fim): Federated identity management (FIM): Secure, unified access across organizations. Key term for enterprise security and compliance glossary pages.
- [Financial Crimes Enforcement Network (FinCEN)](https://www.zyphe.com/resources/glossary/financial-crimes-enforcement-network-fincen): Financial Crimes Enforcement Network (FinCEN): U.S. bureau for AML and financial crime prevention. Glossary entry for compliance terms.
- [Financial Industry Regulatory Authority (FINRA)](https://www.zyphe.com/resources/glossary/financial-industry-regulatory-authority-finra): Financial Industry Regulatory Authority (FINRA): U.S. self-regulatory body for broker-dealers. Glossary term for financial compliance.
- [First-party fraud](https://www.zyphe.com/resources/glossary/first-party-fraud): First-party fraud is fraud committed by a customer in their own name: applying for credit or an account with no intention of paying, misrepresenting income or circumstances, disputing legitimate charges, or abusing refunds and promotions. Unlike third-party fraud, no identity is stolen, so identity verification alone does not catch it.
- [Form W-9](https://www.zyphe.com/resources/glossary/form-w-9): Form W-9: IRS form for collecting taxpayer identification. Glossary entry for U.S. business tax and compliance terms.
- [Fraud investigations](https://www.zyphe.com/resources/glossary/fraud-investigations): Fraud investigations: Process of uncovering and analyzing fraud. Essential glossary term for enterprise risk management.
- [Fullz](https://www.zyphe.com/resources/glossary/fullz): Fullz: Complete stolen personal data set for ID fraud. Glossary entry for cybersecurity and financial risk terms.
- [General Data Protection Regulation (GDPR)](https://www.zyphe.com/resources/glossary/general-data-protection-regulation-gdpr): General Data Protection Regulation (GDPR): EU law on personal data protection. Key glossary entry for privacy and compliance.
- [Generative AI fraud](https://www.zyphe.com/resources/glossary/generative-ai-fraud): Generative AI fraud: Use of AI to create deceptive content for fraud. Glossary entry for cybersecurity and risk management terms.
- [Genius Act](https://www.zyphe.com/resources/glossary/genius-act): The Genius Act (2025) sets federal rules for stablecoins: full reserves, public audits, and legal protection for users if issuers fail.
- [Governance, risk, and compliance (GRC)](https://www.zyphe.com/resources/glossary/governance-risk-and-compliance-grc): Governance, risk, and compliance (GRC): Framework aligning business goals with regulations. Key glossary term for enterprise compliance.
- [Gramm-Leach-Bliley Act (GLBA)](https://www.zyphe.com/resources/glossary/gramm-leach-bliley-act-glba): Gramm-Leach-Bliley Act (GLBA): U.S. law for financial data privacy and security. Glossary entry for banking and compliance.
- [Graph database](https://www.zyphe.com/resources/glossary/graph-database): Graph database: Database optimized for managing relationships. Glossary term for data analysis and fraud detection.
- [Health Insurance Portability & Accountability Act (HIPAA)](https://www.zyphe.com/resources/glossary/health-insurance-portability-accountability-act-hipaa): Health Insurance Portability & Accountability Act (HIPAA): U.S. law for health data privacy. Glossary entry for compliance and healthcare.
- [INFORM Consumers Act](https://www.zyphe.com/resources/glossary/inform-consumers-act): INFORM Consumers Act: U.S. law increasing transparency for online sellers. Glossary entry for marketplace compliance and risk.
- [Identity Assurance Levels (IAL)](https://www.zyphe.com/resources/glossary/identity-assurance-levels-ial): Identity Assurance Levels (IAL): NIST-defined levels of identity proofing rigor. Glossary entry for digital identity and compliance.
- [Identity and access management (IAM)](https://www.zyphe.com/resources/glossary/identity-and-access-management-iam): Identity and access management (IAM): Controls user access to systems and data. Key glossary term for enterprise security.
- [Identity authentication](https://www.zyphe.com/resources/glossary/identity-authentication): Identity authentication: Verifying a user’s claimed identity. Glossary term for cybersecurity and access control.
- [Identity graph](https://www.zyphe.com/resources/glossary/identity-graph): Identity graph: Database linking identifiers to a single user. Glossary entry for digital identity and fraud prevention.
- [Identity proofing](https://www.zyphe.com/resources/glossary/identity-proofing): Identity proofing: Verifying a person’s real-world identity. Key glossary term for onboarding and compliance checks.
- [Identity verification (IDV)](https://www.zyphe.com/resources/glossary/identity-verification-idv): Identity verification (IDV): Confirms a user’s identity at onboarding or transaction. Glossary term for fraud prevention and compliance.
- [Inherent risk](https://www.zyphe.com/resources/glossary/inherent-risk): Inherent risk: Risk level before controls are applied. Glossary term for enterprise risk management and assessment.
- [KBA (knowledge-based authentication)](https://www.zyphe.com/resources/glossary/knowledge-based-authentication-kba): KBA stands for knowledge-based authentication: verifying identity with questions only the genuine person should be able to answer. Once standard in US banking, it is now considered weak because breached data makes the answers easy to buy.
- [KYB (Know Your Business)](https://www.zyphe.com/resources/glossary/what-is-kyb): Know Your Business (KYB) is the process of verifying that a business customer is legitimate: confirming its legal registration and status, mapping its ownership structure, and identifying and screening its ultimate beneficial owners. KYB is the corporate equivalent of KYC and is required of regulated firms that onboard company customers.
- [KYC (Know Your Customer)](https://www.zyphe.com/resources/glossary/what-is-kyc): KYC, or Know Your Customer, is how firms verify who their customers are. See what the KYC process involves, why it matters, and how it differs from AML.
- [Know Your Employee (KYE)](https://www.zyphe.com/resources/glossary/know-your-employee-kye): Know Your Employee (KYE): Due diligence to verify employee identity and background. Glossary entry for internal risk management.
- [Know Your Patient (KYP)](https://www.zyphe.com/resources/glossary/know-your-patient-kyp): Know Your Patient (KYP): Verifies patient identity in healthcare. Glossary term for medical compliance and data accuracy.
- [Know Your Seller (KYS)](https://www.zyphe.com/resources/glossary/know-your-seller-kys): Know Your Seller (KYS): Verifies legitimacy of marketplace sellers. Glossary entry for e-commerce compliance and fraud prevention.
- [Layering (money laundering)](https://www.zyphe.com/resources/glossary/layering): Layering is the second stage of money laundering, in which illicit funds already placed in the financial system are moved through a series of transactions, accounts, entities and jurisdictions to break the audit trail between the money and the crime. Typical layers include wire transfers between shell companies, conversions between currencies and assets, and loans a launderer makes to themselves.
- [Link analysis](https://www.zyphe.com/resources/glossary/link-analysis): Link analysis: Technique to analyze relationships between data points. Glossary entry for fraud detection and cybersecurity.
- [Liveness detection](https://www.zyphe.com/resources/glossary/liveness-detection): Liveness detection is the check that confirms a real, present person is in front of the camera during identity verification, rather than a photograph, a screen, a video replay, a mask or a synthetic image injected into the capture stream. It is what makes a selfie-to-document face match worth anything, and it is tested against presentation attacks under ISO/IEC 30107-3.
- [Marketplace account suspension](https://www.zyphe.com/resources/glossary/marketplace-account-suspension): Marketplace account suspension: Temporary or permanent deactivation due to policy violations. Glossary term for e-commerce risk management.
- [Marketplace risk](https://www.zyphe.com/resources/glossary/marketplace-risk): Marketplace risk: Exposure to fraud, non-compliance, or illegal activity on online platforms. Glossary entry for digital business risk.
- [Money Laundering Reporting Officer (MLRO)](https://www.zyphe.com/resources/glossary/mlro): An MLRO is the person responsible for a firm's suspicious activity reporting. See what the role does, the legal duty, and the personal liability it carries.
- [Money mule](https://www.zyphe.com/resources/glossary/money-mule): A money mule is a person who receives money from a third party into their own account and transfers it onward, in return for a fee or because they have been deceived, so that criminals can move the proceeds of fraud or other crime without the funds being traced to them. Mules may be complicit, careless or genuine victims of a job or romance scam.
- [Money services businesses (MSB)](https://www.zyphe.com/resources/glossary/money-services-businesses-msb): A money services business (MSB) is a company that transmits or converts money: money transmitters, currency dealers and exchangers, check cashers, issuers and sellers of traveller’s cheques or money orders, providers and sellers of prepaid access, and most cryptocurrency exchanges. MSBs must register with FinCEN, maintain an AML programme, and report suspicious activity.
- [Multi-factor authentication](https://www.zyphe.com/resources/glossary/multi-factor-authentication): Multi-factor authentication: Security requiring two or more credentials for access. Glossary entry for cybersecurity best practices.
- [OFAC Check and Sanctions Screening Explained](https://www.zyphe.com/resources/glossary/ofac-check): An OFAC check screens customers and transactions against US sanctions lists maintained by the Office of Foreign Assets Control, including the SDN List, to prevent dealings with sanctioned parties.
- [Personally identifiable information (PII)](https://www.zyphe.com/resources/glossary/personally-identifiable-information-pii): Personally identifiable information (PII): Data that can identify an individual. Glossary term for privacy and data protection.
- [Placement money laundering](https://www.zyphe.com/resources/glossary/placement-money-laundering): Placement money laundering: First stage of laundering introducing illicit funds into the system. Glossary entry for AML processes.
- [Politically Exposed Person (PEP)](https://www.zyphe.com/resources/glossary/politically-exposed-person-pep): A politically exposed person (PEP) is an individual entrusted with a prominent public function, together with their family members and known close associates. The position carries a higher risk of bribery and corruption, so regulated firms apply enhanced due diligence.
- [Progressive risk segmentation](https://www.zyphe.com/resources/glossary/progressive-risk-segmentation): Progressive risk segmentation: Adjusts verification based on user risk profile. Glossary term for adaptive fraud prevention.
- [Proof of address (POA)](https://www.zyphe.com/resources/glossary/proof-of-address): Proof of address (POA) is a document that ties a person to a residential address, usually a utility bill, bank statement, tax letter or tenancy agreement dated within the last three months. Regulated firms collect it under customer due diligence rules.
- [Red Flags Rule](https://www.zyphe.com/resources/glossary/red-flags-rule): Red Flags Rule: U.S. regulation requiring identity theft prevention programs. Glossary entry for financial compliance.
- [Regtech](https://www.zyphe.com/resources/glossary/regtech): Regtech: Technology solutions for regulatory compliance. Glossary term for digital compliance and automation.
- [Sanctions](https://www.zyphe.com/resources/glossary/sanctions): Sanctions: Legal restrictions on individuals, entities, or countries. Glossary entry for compliance and international trade.
- [Second-party fraud](https://www.zyphe.com/resources/glossary/second-party-fraud): Second-party fraud: Fraud involving a legitimate user sharing their account with a third party. Glossary term for fraud types.
- [Secretary of State (SOS) filing](https://www.zyphe.com/resources/glossary/secretary-of-state-sos-filing): Secretary of State (SOS) filing: Official business registration with a state. Glossary entry for business verification.
- [Securities and Exchange Commission (SEC)](https://www.zyphe.com/resources/glossary/securities-and-exchange-commission-sec): Securities and Exchange Commission (SEC): U.S. agency regulating securities markets. Glossary term for financial regulation.
- [Self-sovereign identity (SSI)](https://www.zyphe.com/resources/glossary/self-sovereign-identity-ssi): Self-sovereign identity (SSI): Decentralized digital identity under user control. Glossary entry for identity management.
- [Selfie check](https://www.zyphe.com/resources/glossary/selfie-check): Selfie check: Biometric verification comparing a selfie to an ID. Glossary term for identity proofing methods.
- [Single sign-on (SSO)](https://www.zyphe.com/resources/glossary/single-sign-on-sso): Single sign-on (SSO): One login for multiple systems. Glossary entry for authentication and access management.
- [Smurfing in Money Laundering: Definition and Examples](https://www.zyphe.com/resources/glossary/smurfing): Smurfing is a money laundering technique that splits a large sum of illicit cash into many small transactions across multiple people and accounts to stay below reporting thresholds and avoid detection.
- [Social media profiling](https://www.zyphe.com/resources/glossary/social-media-profiling): Social media profiling: Analyzing digital footprints to assess risk or verify identity. Glossary term for fraud detection.
- [Spear phishing](https://www.zyphe.com/resources/glossary/spear-phishing): Spear phishing: Targeted email scams impersonating trusted sources. Glossary entry for cybersecurity threats.
- [Stages of Money Laundering](https://www.zyphe.com/resources/glossary/stages-of-money-laundering): The stages of money laundering are placement, layering and integration. See what happens at each stage, why it matters for AML, and how each one is detected.
- [Strong Customer Authentication (SCA)](https://www.zyphe.com/resources/glossary/strong-customer-authentication-sca): Strong Customer Authentication (SCA): EU requirement for multi-factor authentication in payments. Glossary for payment security.
- [Structuring (money laundering)](https://www.zyphe.com/resources/glossary/structuring): Structuring is the deliberate splitting of a large sum of cash into smaller deposits, withdrawals or transfers so that each one stays below a reporting threshold, such as the 10,000 dollar currency transaction report limit in the United States. It is a federal crime in its own right under 31 U.S.C. 5324, whether or not the money is criminal in origin.
- [Subject access request (SAR)](https://www.zyphe.com/resources/glossary/subject-access-request-sar): Subject access request (SAR): Request under data laws for a copy of personal data held. Glossary entry for privacy and compliance.
- [Suspicious Activity Report (SAR)](https://www.zyphe.com/resources/glossary/suspicious-activity-report): A suspicious activity report (SAR) alerts authorities to possible financial crime. Here's when to file, the thresholds and deadlines, and what it must contain.
- [Suspicious transaction report (STR)](https://www.zyphe.com/resources/glossary/suspicious-transaction-report-str): Suspicious transaction report (STR): Report filed for potentially illegal or suspicious activity. Glossary term for AML compliance.
- [Synthetic ID](https://www.zyphe.com/resources/glossary/synthetic-id): Synthetic ID: Fake identity built from real and fabricated data. Glossary term for fraud detection and risk management.
- [Synthetic fraud](https://www.zyphe.com/resources/glossary/synthetic-fraud): Synthetic fraud: Fraud using fake identities made from real and false data. Glossary entry for financial crime prevention.
- [The National Institute of Standards and Technology (NIST)](https://www.zyphe.com/resources/glossary/the-national-institute-of-standards-and-technology-nist): The National Institute of Standards and Technology (NIST): U.S. agency setting technical and security standards. Glossary entry.
- [Third-party fraud](https://www.zyphe.com/resources/glossary/third-party-fraud): Third-party fraud: Fraud using someone else’s identity without their knowledge. Glossary term for identity theft and financial crime.
- [Transaction monitoring](https://www.zyphe.com/resources/glossary/transaction-monitoring): Transaction monitoring is the automated review of customer transactions against rules and risk models to identify activity that may indicate money laundering, terrorist financing or fraud, generating alerts for investigation. Regulated firms must run it for the life of each customer relationship, and the alerts it raises are the main source of suspicious activity reports.
- [Types of Fraud](https://www.zyphe.com/resources/glossary/types-of-fraud): A clear guide to the main types of fraud: identity, synthetic identity, payment, account takeover, APP and business fraud, and how each one is detected.
- [USA PATRIOT Act](https://www.zyphe.com/resources/glossary/usa-patriot-act): USA PATRIOT Act: U.S. law for anti-money laundering and security. Glossary term for financial compliance and regulation.
- [Ultimate beneficial owner (UBO)](https://www.zyphe.com/resources/glossary/ultimate-beneficial-owner-ubo): An ultimate beneficial owner (UBO) is the natural person who ultimately owns or controls a company, directly or through layers of intermediate entities. Most jurisdictions set the threshold at 25 percent of shares or voting rights, or effective control by other means. Regulated firms must identify, verify and screen every UBO before onboarding a business customer.
- [VAT validation](https://www.zyphe.com/resources/glossary/vat-validation): VAT validation confirms a business’s VAT number is legitimate, supporting tax compliance and fraud prevention in cross-border trade.
- [Vishing](https://www.zyphe.com/resources/glossary/vishing): Vishing is a phone scam where attackers trick unsuspecting victims into revealing sensitive info like passwords or bank details using fake calls.
- [Watchlists](https://www.zyphe.com/resources/glossary/watchlists): Vishing: Voice phishing scam using phone calls to steal information. Glossary term for social engineering and cybersecurity.
- [eKYC Explained: How Electronic KYC Works](https://www.zyphe.com/resources/glossary/ekyc): eKYC (electronic Know Your Customer) is the digital, remote verification of a customer's identity using document capture, biometric checks, and database screening, replacing in-person KYC review.