Country guide

Select a country to view the coverage

Scene setting

Online fraud costs UK businesses billions annually, with £1.17 billion stolen in 2023 through scams like phishing, identity theft, and account takeovers. Fraud now represents over 40% of all crimes in England and Wales, with an estimated 3.5 million incidents in a single year.
Source: UK Finance

To address these escalating threats, the UK has developed robust frameworks like the Digital Identity and Attributes Trust Framework (UKDIATF) to enhance digital identity verification. At the same time, the Financial Conduct Authority (FCA) has intensified enforcement, issuing £42 million in fines and launching 25 new investigations in 2023/24.
Source: FCA

Staying ahead of these challenges requires businesses to adopt robust compliance measures and innovative tools. This page highlights the UK’s key regulations, recent developments, and how ComplyCube’s advanced technologies empower businesses to combat fraud, protect customers, and meet their compliance obligations with confidence.

Digital Identity Standards in the UK

Understanding the UK DIATF Framework

The UK Digital Identity and Attributes Trust Framework (UK DIATF) is transforming how businesses verify identities. By introducing reusable, certified digital identities as an alternative to traditional documents like passports, it aims to reduce fraud and improve compliance efficiency.

The framework sets stringent standards for Digital Identity Service Providers (IDSPs), including confidence levels tailored to specific use cases, known as profiles. For example, the Home Office requires a minimum medium level of confidence for essential checks like Right to Work andRight to Rent. These standards ensure secure, trustworthy identity verification processes across industries.

ComplyCube meets all UK DIATF confidence levels across 24 profiles, offering certified, scalable solutions that empower businesses to meet their compliance obligations with confidence. For more details, visit our Comprehensive Guide to the UK DIATF Framework, or find our certification on our Trust Centre or ACCS website.

Certified Identity Assurance for UK - Specific Use Cases

ComplyCube provides fully certified solutions aligned with the UK Digital Identity andAttributes Trust Framework (UK DIATF). Our services enable businesses to meet compliance standards for essential checks like Right to Rent, Right to Work, and Disclosure and Barring Service (DBS)with ease.

Each check is tailored to specific legal and regulatory requirements, helping you streamlineoperations and reduce fraud. Click below to learn more about each check:

Certified Scheme

ComplyCube Products

Confidence Level

Industry Use Case

Right to Rent check

Tenant Document Authentication
AI-Powered Biometrics
UK Identity Fraud Check
AML Screening
Electoral Roll Registration and Credit Bureau Check
Proof of Address

Medium level of confidence

Real Estate
PropTech
Hospitality
Co-Sharing

Right to Work check

Document Check
Biometric Check
UK Identity Fraud Check
AML Screening
Electoral Roll Registration and Credit Bureau Check
Proof of Address

Medium level of confidence

Recruitment
Human Resources
Gig Economy
Healthcare
Education

DBS checks

Document Check
Biometric Check
UK Identity Fraud Check
Proof of Address
AML Screening
Electoral Roll Registration and Credit Bureau Check

Basic DBS checks require a medium level of confidence

Standard, Enhanced and Enhanced with Barred Lists DBS checks require a high level of confidence

Healthcare
Education
Social Care
Finance
Hospitality
Technology

Certified Scheme

Right to Rent check

ComplyCube Products

Tenant Document Authentication
AI-Powered Biometrics
UK Identity Fraud Check
AML Screening
Electoral Roll Registration and Credit Bureau Check
Proof of Address

Confidence Level

Medium level of confidence

Industry Use Case

Real Estate
PropTech
Hospitality
Co-Sharing

Certified Scheme

Right to Work check

ComplyCube Products

Document Check
Biometric Check
UK Identity Fraud Check
AML Screening
Electoral Roll Registration and Credit Bureau Check
Proof of Address

Confidence Level

Medium level of confidence

Industry Use Case

Recruitment
Human Resources
Gig Economy
Healthcare
Education

Certified Scheme

DBS checks

ComplyCube Products

Document Check
Biometric Check
UK Identity Fraud Check
Proof of Address
AML Screening
Electoral Roll Registration and Credit Bureau Check

Confidence Level

Basic DBS checks require a medium level of confidence

Standard, Enhanced and Enhanced with Barred Lists DBS checks require a high level of confidence

Industry Use Case

Healthcare
Education
Social Care
Finance
Hospitality
Technology

Key Regulators

Financial Conduct Authority (FCA)

The Financial Conduct Authority (FCA) is the primary financial regulator overseeing AML and KYC compliance across the UK’s financial services industry. It enforces the Money Laundering Regulations (MLRs) and ensures that financial institutions implement robust due diligence measures.

HM Treasury (HMT)

HM Treasury oversees the UK’s economic and financial policy, playing a central role in shaping AML/CFT regulations and implementing sanctions policies.

Financial Intelligence Unit (UKFIU) –  Part of the National Crime Agency (NCA)

The UK Financial Intelligence Unit (UKFIU) is responsible for analyzing and processing suspicious activity reports (SARs) filed by financial institutions.

The Information Commissioner’s Office (ICO)

The ICO upholds information rights in the public interest, promoting public body openness and individual data privacy.

UK Data Security, KYC and AML Regulations, what you need to know

Data Security

Cyber Security and Resilience Bill (Introduced 2024)

This bill aims to strengthen the UK’s cyber defences by mandating enhanced security measures for critical infrastructure and digital service providers. It emphasizes the need for robust protections against cyber threats, requiring businesses to adopt stronger incident reporting and risk management practices to safeguard sensitive data and systems. Learn more about the Cyber Security and Resilience Bill

UK General Data Protection Regulation (UK GDPR) (2021)

The UK GDPR governs how the personal data of individuals within the UK is collected, processed, stored, and shared. It builds on the EU GDPR framework with localised changes to accommodate post-Brexit regulations. Businesses must ensure compliance by implementing robust data protection policies, obtaining explicit consent for data collection, and enabling users to exercise their rights over their data. Learn more about UK GDPR

Data Protection Act 2018

The Data Protection Act 2018 supplements the UK GDPR by detailing specific requirements for processing special categories of data, such as biometric or health-related information. It establishes rules for law enforcement data processing and the handling of national security-related data. Learn more about the Data Protection Act 2018.

Digital Identity

Data (Use and Access) Bill (Effective 2025)

The Data (Use and Access) Bill aims to modernize how data is shared and accessed across industries, fostering innovation and improving transparency. By enhancing secure data-sharing practices, the legislation ensures businesses can access and utilize data more effectively while maintaining strong privacy safeguards. It also establishes standards for trusted digital identity services, supporting the development of secure and reliable identity verification systems in the UK. The Data (Use and Access) Bill will bring an estimated £10 billion boost to the UK economy across 10 years. Learn more about the Data (Use and Access) Bill

UK Digital Identity and Attributes Trust Framework (2023)

The UK Government’s Digital Identity and Attributes Trust Framework establishes standards for digital identity providers to ensure secure and trusted identity verification services. It defines requirements for certification, data security, and privacy to foster user confidence in digital identity solutions. This framework is part of the UK’s initiative to promote the adoption of digital identities across public and private sectors. Learn more about the UK Digital Identity and Attributes Trust Framework

Electronic Identification and Trust Services for Electronic Transactions Regulations (UK eIDAS) (2016)

The UK eIDAS regulations provide a framework for secure and seamless electronic transactions. These regulations set standards for electronic identification, trust services (e.g., e-signatures), and cross-border interoperability to enhance the security and reliability of online services in the UK. Learn more about UK eIDAS.

KYC

FCA Handbook SYSC 3.2.6R & 3.2.6A

These provisions detail customer due diligence (CDD) obligations for firms under FCA supervision. They require firms to verify the identity of clients, monitor ongoing business relationships, and report suspicious activity to prevent financial crime. Learn more about FCA Handbook SYSC 3.2.6R & 3.2.6A

The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (as amended in 2020)

This regulation mandates KYC as part of AML compliance. It requires businesses to identify and verify their customers and beneficial owners, maintain accurate records, and report suspicious activities to the relevant authorities. Learn more bout the Money Laundering Regulations 2017

AML

Economic Crime and Corporate Transparency Act 2023

This act introduced the “Failure to Prevent Fraud” offense, holding organizations accountable if employees or associates commit fraud for the company’s benefit. It underscores the importance of implementing “reasonable procedures” to prevent fraud and enhance corporate accountability. Learn more about the Economic Crime and Corporate Transparency Act 2023

Proceeds of Crime Act 2002 (POCA)

This act establishes the legal framework for confiscating the proceeds of crime. It enables law enforcement to recover assets obtained through criminal activities and supports broader AML initiatives. Learn more about the Proceeds of CrimeAct 2002

Sanctions and Anti-Money Laundering Act 2018 (SAMLA)

This act allows the UK to impose sanctions independently post-Brexit. It establishes a framework for implementing sanctions to combat money laundering and terrorist financing while promoting financial security. Learn more about the Sanctions and Anti-Money Laundering Act 2018.

Trusted Solutions for UK Compliance

ComplyCube offers a comprehensive portfolio of checks tailored to meet the UK’s regulatory standards. These include data, document, biometric, fraud, and PEP and sanctions checks – all designed to ensure compliance with UK frameworks and legislation.

Data Sources and Updates

Data types

Credit Agencies
Government Authorities
Commercial Databases
Consumer Databases
Utility Authorities
Postal Authorities
Telco Agencies
Proprietary Databases
Other Sources

Unique sources

Need number from Harry

Coverage quality

Strong

Match rate

> 85% – Does not specify if this is for 1+1 or 2+2 or both Multi-Bureau Check

Matching

Minimum fields for matching Multi-Bureau.

Client attributes

Name*
DOB*

Address attributes

Property Number*
Line*
City*
State*
Postal Code*

Driving Licence Check

Validate 50 million+ driver records and check UK driver’s licence for:

Validity
Infractions

Proof of address

Conduct proof of address in under 12 seconds

Bank statements
Utility Bills
Driving licences
Tax Documents

Screening

Check an individual or business against over 2,500 global, regional, and local lists in less than 1 second.

Sanctions
PEPs
Adverse Media
Other Lists
Continuous Monitoring

Document & biometric coverage

Achieve 23 identity profiles across every level of confidence under the UK DIATF and “Good Practice Guide (GPG 45) – How to prove and verify someone’s identity”

Supported documents:

Passport
Driving Licence
Residence Permit
UK biometric residence permit
UK biometric residence card
UK HM Forces ID Card
UK HM Armed Forces Veteran Card
Photographic Visa
Photographic ID listed on PRADO

Our document verification technology includes

ComplyCube offers entirely proprietary document verification technology, including:

NFC processing
ISO 30107-3 (Presentation Attack Detection Level 2)
Multi-Language Native & WebSDKs
Redaction (not really UK specific but can use it to show off)
7 categories of analysis on government-issued ID documents

UK DIATF-Certified Checks Aligned Checks

Government-Certified Right to Rent Check
Government-Certified Digital Right to Work Checks
Government-Certified Enhanced DBS Checks

UK Identity Fraud Checks

SIRA Network
Amber Hill
Disclosure of Death Registration Information (DDRI)
Electoral Roll
National Fraud Initiative (NFI)

Know Your Business

Verify 5.35 million+ companies on Companies House. Retrieve company data directly from Companies House to verify shareholder and director information.