Notifications
Clear all
Topic starter
02/08/2026 12:31 pm
TL;DR: UK Government guidance will formally recognise certified digital identities for Money Laundering Regulations compliance, clarifying how firms can use accredited providers for customer due diligence, ongoing monitoring, and higher-risk onboarding, according to Yoti. The shift reduces regulatory uncertainty, but it also raises the bar for governance, attribute assurance, and when additional checks are still required.
NHIMG editorial — based on content published by Yoti: UK government guidance on digital identities and Money Laundering Regulations
By the numbers:
- Around 27% of people surveyed reported using a digital identity check to open a bank account.
- Of those, 75% said it was quicker than manual document checks.
Questions worth separating out
Q: What breaks when digital identity is accepted without clear AML policy rules?
A: Firms end up with inconsistent onboarding decisions, unclear escalation paths, and weak audit evidence.
Q: Why do certified digital identities matter for regulated onboarding?
A: They give firms a structured way to rely on verified identity evidence instead of paper documents alone, which can improve privacy, speed, and consistency.
Q: How do you know if video identity verification is actually working?
A: You know it is working when high-risk decisions are consistently preceded by an explicit identity check and when virtual camera or deepfake attempts are flagged before approval.
Practitioner guidance
- Define acceptance criteria for certified identity evidence Map each regulated use case to the specific level of certified digital identity assurance you will accept, then document when manual checks still remain mandatory for higher-risk onboarding or enhanced due diligence.
- Separate identity proof from attribute proof Create policy rules that distinguish full identity verification from selective attribute assertions such as age or address, so teams can justify why an attribute is sufficient for each regulated decision.
- Build event-driven re-verification triggers Tie sanctions hits, PEP changes, risk-score movement, and unusual transaction patterns to a formal re-check process so previously trusted digital identities are not treated as permanently valid.
What's in the full analysis
Yoti's full article covers the operational detail this post intentionally leaves for the source:
- Practical explanation of how certified digital identity aligns with UK Money Laundering Regulations and DIATF accreditation.
- Examples of when firms still need additional checks for higher-risk customers or conflicting identity attributes.
- Sector-specific implications for financial services, fintech, insurance, crypto-asset firms, and company director verification.
- The business case for faster onboarding, lower friction, and reduced manual document handling in regulated flows.
👉 Read Yoti's analysis of UK digital identity guidance for AML compliance →
UK digital identity rules for AML: what changes for compliance teams?
Explore further
02/08/2026 1:29 pm
Certified digital identity is becoming an AML control plane, not just a convenience layer. Once regulators recognise certified providers as valid evidence, the control debate shifts from adoption to governance. Compliance teams will need to define assurance thresholds, exception handling, and review triggers with the same discipline they apply to other regulated identity controls. The practitioner conclusion is clear: digital identity now belongs inside formal control design, not outside it.
A question worth separating out:
Q: Who is accountable when digital identity checks fail in AML workflows?
A: Accountability should sit with the business owner of the regulated process, not only the technology team or the identity provider. Compliance, fraud, and onboarding leads must own the policy, while risk and legal teams should define when certified identity can be relied on and when extra checks are compulsory.
👉 Read our full editorial: UK digital identity guidance reshapes AML and CDD compliance
