Topic starter
02/08/2026 12:31 pm
TL;DR: UK Government guidance will formally recognise certified digital identities for Money Laundering Regulations compliance, clarifying how firms can use accredited providers for customer due diligence, ongoing monitoring, and higher-risk onboarding, according to Yoti. The shift reduces regulatory uncertainty, but it also raises the bar for governance, attribute assurance, and when additional checks are still required.
Editorial analysis by NHI Mgmt Group, based on content published by Yoti: “UK Government to formally recognise digital identities in new MLR guidance”.
By the numbers:
- The public consultation drew nearly 200 industry responses from finance, tech, regulators and civil society.
- Around 27% of people surveyed reported using a digital identity check to open a bank account.
- Of those surveyed, 75% said the digital identity check was quicker than manual document checks.
Key questions
Q: How should regulated firms use digital identity in AML onboarding?
A: Use digital identity as an evidential control, not just a convenience layer.
Q: When does digital identity evidence still need extra checks in CDD?
A: Extra checks are needed when the risk is higher than the evidence supports, such as complex corporate structures, regulated transactions, or anomalies during onboarding and monitoring.
Q: What do firms get wrong about attribute-based identity verification?
A: They often treat one trusted attribute as if it proves the whole identity.
Practitioner guidance
- Define acceptance rules for certified digital identity Document which certified identity sources can satisfy AML and CDD controls, which assurance levels are acceptable, and where enhanced due diligence still needs additional evidence.
- Separate attribute trust from identity proofing Treat claims such as age, address, or residency as distinct from full identity verification, and make sure workflow logic reflects that difference.
- Rework onboarding decision points Insert explicit checks for high-risk clients, regulated sectors, and corporate roles where the guidance still expects stronger review or step-up verification.
Bottom line: The policy shift is about trust governance, not just digitising onboarding. Certified digital identity is becoming a recognised AML input, which means evidence quality, certification, and escalation rules now matter as much as convenience.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
02/08/2026 1:29 pm
Certified digital identity is becoming an AML control, not just an onboarding convenience. The significance of this guidance is that trust in identity evidence now sits directly inside compliance governance. That shifts the conversation from user experience to assurance, certification, and regulatory defensibility. Compliance teams should treat the identity source as part of the control, not an upstream form factor.
A question worth separating out:
Q: Which governance controls matter most when digital identity is used for AML?
A: The key controls are evidence provenance, assurance mapping, escalation criteria, and ongoing monitoring. Firms should be able to show why a digital identity source is trusted, when it is insufficient, and how it is reviewed when customer or transaction risk changes.
👉 Read our full editorial: UK digital identity guidance reshapes AML and CDD compliance