Georgia
Georgia runs national licensing with no passporting from foreign regimes. The National Bank of Georgia licenses banks, payment and crypto firms and supervises their AML compliance, while the Financial Monitoring Service of Georgia receives suspicious and threshold reports. Remote onboarding is allowed once the NBG approves each firm's process, with liveness, document and state database checks, and gambling, telecoms, healthcare and travel follow their own identity rules.
Compliance guides by industry
More countries in this region
Launching in a new market?
Navigate local compliance requirements with confidence. Identomat helps you build verification workflows tailored to your business and the markets you operate in.
Frequrently asked questions
The National Bank of Georgia supervises banks, payment and e-money providers, crypto firms and currency exchange. The State Insurance Supervision Service covers insurers and brokers, and the Ministry of Finance covers gambling operators. Suspicious and threshold reports go to the Financial Monitoring Service of Georgia, the country's financial intelligence unit.
Yes, but the process must be approved first. Firms supervised by the National Bank need its written consent to their remote onboarding process, backed by an independent audit, and every remote check must include liveness detection, a real-time document check and a face match. Georgian citizens and residents are also checked against the state identity database.
Reporting entities file suspicious transaction reports with the Financial Monitoring Service on the day suspicion arises, whatever the amount. Banks also report large cash transactions and high-risk transfers within five working days. Every business, whether or not it is covered by the AML law, must report when it freezes assets of people on UN sanctions lists.
Biometric data such as face images is a special category under Georgian data protection law, supervised by the State Audit Office since 2 March 2026. Selfie and face-match checks are allowed only where strictly necessary, usually with written consent, and the purpose, scope and retention period must be documented in writing before the checks start.
Online shops and marketplaces, telecom operators, healthcare providers and pharmacies, and travel agencies and hotels are not reporting entities under the AML law. Their identity duties come from sector rules, such as subscriber identification for SIM cards, e-prescriptions and hotel bookings, but all of them must still refuse to deal with people on UN sanctions lists.