Ukraine

Ukraine

UA
·
Europe

Ukraine pairs EU-aligned financial regulation with a state-run digital identity layer, under martial law since February 2022. The National Bank of Ukraine licenses banks, insurers and payment firms and supervises their AML compliance, while the State Financial Monitoring Service receives suspicious and threshold reports. Remote onboarding runs through NBU BankID, Diia e-passports and video verification, and gambling, telecoms, healthcare and e-commerce each carry their own identity duties.

Compliance guides by industry

Select an industry to read the full KYC & AML guide: who is regulated, which checks apply and how to stay compliant.

Stay Informed

Get the latest insights, industry news, and updates from Identomat.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Launching in a new market?

Navigate local compliance requirements with confidence. Identomat helps you build verification workflows tailored to your business and the markets you operate in.

FAQ

Frequrently asked questions

Quick answers to the questions we hear most often.
Who supervises AML compliance in Ukraine?

The National Bank of Ukraine supervises banks, insurers, payment and e-money institutions and other financial firms it licenses. The State Financial Monitoring Service is the financial intelligence unit that receives threshold and suspicious transaction reports. Other sectors have their own designated supervisors, such as the Ministry of Digital Transformation for virtual asset service providers.

Can customers be onboarded fully online in Ukraine?

Yes. For firms supervised by the NBU, the accepted remote methods are live video verification to NBU rules, NBU BankID data combined with a document copy signed with a qualified electronic signature, or a Diia e-passport combined with a liveness-checked photo. Video verification done to these rules counts the same as meeting the customer in person.

Can customers be onboarded fully online in Ukraine?

Transactions of UAH 400,000 or more must be reported to the State Financial Monitoring Service when they have a listed feature, such as cash, transfers abroad, politically exposed persons or links to the aggressor state. Suspicious transactions are reported immediately, whatever the amount, and due diligence records are kept for at least five years after the relationship ends.

Do customers have to consent to biometric checks?

Personal data processed to meet the AML law needs no consent, but the customer must be told about that processing at identification. Biometric data such as face images is a special category under the Law on Personal Data Protection, so liveness and face-match checks rest on explicit consent, and NBU video verification requires consent recorded before the session starts.

Which businesses fall outside Ukraine's AML law?

Telecom operators, healthcare providers, travel businesses, public bodies and most online shops are not reporting entities under the AML law. Their identity duties come from sector rules instead, such as SIM replacement checks, eHealth registration, hotel check-in documents and online age verification for alcohol and tobacco.