CASP-grade KYC under FICA Item 22 & FATF Travel Rule.
Use VerifyNow to verify identity, face match, documents, AML/PEP risk and fiat on/off-ramp bank accounts before customers trade, deposit or withdraw. Keep the report evidence your CASP compliance team needs for FICA and Travel Rule workflows.
Crypto and CASP verification
Build faster crypto onboarding with the right checks.
Connect identity, liveness, AML, company and bank verification to customer onboarding and fiat movement.
- CASP identity checks
- AML and PEP screening
- Fiat account verification
Build risk-based crypto onboarding from documented checks
Start with SAID identity verification. Add Home Affairs Face Match and Passive Liveness when your RMCP calls for biometric evidence. Run AML/PEP screening, then add company or document checks for the customer type.
CASP onboarding checks
Follow the links to the request shape and response fields for each documented API check.
In short: what VerifyNow does for a South African CASP
A defensible CASP onboarding workflow can use Age Estimation for early triage, then combines Home Affairs SA ID verification, Face Match and separate Passive Liveness, AML/PEP/sanctions screening (including OFAC crypto designations), document authentication for SA and foreign IDs, and bank account verification on the fiat on/off-ramp. The CASP remains the FICA accountable institution under Schedule 1 Item 22 and owns its RMCP, transaction monitoring and FATF Travel Rule counterparty messaging.
Available through VerifyNow: Age Estimation, Home Affairs SA ID verification, Face Match, separate Passive Liveness, AML/PEP/sanctions screening, document authentication, CIPC company & director verification, Africa / cross-border KYC, bank account verification (AVS), consumer/person trace and phone trace under the CASP’s stated lawful purpose. The broader risk file can also include on-chain risk scoring, FATF Travel Rule messaging, credit checks or SAPS criminal record checks through the CASP’s approved sources.
The KYC stack for a CASP
Six services that map directly to Section 21 CDD, Section 21A EDD and the identity side of a FATF Travel Rule message.
Home Affairs SA ID Verification
Real-time verification of SA customers against Home Affairs HANIS — the source-of-truth identity anchor.
Age Estimation
Early age estimate and review warnings for low-friction onboarding triage.
Face Match + Passive Liveness
Compare the selfie with the reference photo, then read the separate Passive Liveness result for presentation risk.
AML / PEP / Sanctions Screening
Domestic + foreign PEPs and UN/OFAC/EU/UK/SA sanctions lists, including OFAC crypto-specific designations.
Document Authentication
OCR + tamper detection on SA IDs, passports and foreign IDs submitted during onboarding.
Africa / Cross-Border KYC
In-country ID verification for supported African jurisdictions — not every country is HANIS-equivalent; coverage varies.
Bank Account Verification (AVS)
Verify the fiat on/off-ramp account belongs to the verified customer before a deposit or withdrawal.
Related CASP risk evidence
- • On-chain wallet risk scoring / blockchain analytics: obtained from specialist on-chain analytics providers. VerifyNow verifies off-chain identity; on-chain risk is a separate category.
- • FATF Travel Rule messaging: handled by a dedicated Travel Rule protocol between VASP counterparties. VerifyNow supplies the verified identity data that populates the originator payload.
- • Credit bureau data: obtained from a registered South African credit bureau where the CASP elects to layer it for margin/lending products.
- • SAPS criminal clearances for directors / key individuals: obtained from SAPS or an authorised provider.
From sign-up to first fiat ramp
- 01
Sign-up + POPIA consent
Customer accepts POPIA consent, including FICA CDD screening disclosure. Consent reference is recorded against every subsequent verification.
- 02
Home Affairs ID verification
SA customer: live HANIS verification returns name, DOB, ID status, photograph. Non-SA customer: passport + document authentication.
- 03
Age estimate + review warnings
Optional first-pass Age Estimation routes under-age, borderline, or low-confidence captures into full KYC review.
- 04
Passive Liveness + Face Match
The customer captures one selfie. Passive Liveness assesses the capture, while Face Match separately compares it with the approved reference photo.
- 05
AML/PEP/sanctions
Customer screened against PEP and sanctions lists. Any hit routes to the MLRO; clean results are recorded in the FIC file.
- 06
Fiat on-ramp AVS
First ZAR deposit: AVS confirms the bank account belongs to the verified customer. Prevents third-party ramping.
- 07
Ongoing EDD + transaction monitoring
Periodic re-screening per RMCP cadence. Transaction monitoring and on-chain analytics are handled by the CASP's own systems — not VerifyNow.
FICA, FSCA, FATF & POPIA
Crypto in South Africa is now a fully regulated activity. The FIC Act 2022 amendment added CASPs to Schedule 1 as Item 22, placing them inside the full FICA framework (registration, RMCP, CDD, EDD, record-keeping, reporting). Separately, the FSCA declared crypto assets a financial product, requiring CASPs to hold an FSP licence under FAIS. The SARB has also signalled its interest in stablecoin and payment-adjacent use cases.
At the international level, the FATF Recommendation 15 (the Travel Rule) requires VASPs to transmit originator and beneficiary information with crypto transfers above threshold. VerifyNow supplies the verified-identity primitives (Home Affairs ID, face match, document authentication, AML/PEP) that populate the originator fields of a Travel Rule payload. The messaging protocol itself is handled by a dedicated Travel Rule solution between VASPs, not by VerifyNow.
All customer personal information processed through VerifyNow is governed by POPIA. The CASP remains the responsible party and the FICA accountable institution. VerifyNow supplies the verification evidence your FIC and FSCA inspections depend on.
FICA workflow checklist for Crypto
Use this path for CASP onboarding, Travel Rule identity fields, withdrawals, high-risk reviews and EDD.
CASPs are accountable institutions under FICA Schedule 1 Item 22 and need CDD, EDD, record keeping and RMCP controls.
Practical onboarding sequence
- 1Confirm whether your business is a FICA accountable institution for this workflow.
- 2Identify the customer, counterparty or responsible person before the relationship starts.
- 3Verify identity using the right report and save the verification receipt.
- 4Risk-rate the person or entity and decide whether AML/PEP or enhanced due diligence is needed.
- 5Verify bank account ownership before deposits, payouts, refunds or settlements move.
- 6Keep a CDD record, consent/lawful-basis evidence, timestamp and transaction reference.
- 7Use the FICA Toolkit and RMCP generator where your business needs documented procedures.
Toolkit links
Need to screen a customer list?
If your organisation is an accountable institution, or your RMCP calls for a customer-book review, Batch AML lets you upload 10 to 1,000 people or entities and keep one consolidated result file. It is an optional workflow based on your duties and risk controls, not a requirement for every business in this industry.
Educational guidance only. Your accountable-institution status, RMCP, customer risk rating and lawful basis determine the final checks and records you must keep.
CASP & crypto questions
Are Crypto Asset Service Providers accountable institutions under FICA?
Yes. In late 2022 the FIC Act was amended to add Crypto Asset Service Providers (CASPs) to Schedule 1 as Item 22. That makes CASPs — including crypto exchanges, custodial wallets, OTC desks, stablecoin issuers and virtual asset transfer providers — accountable institutions, with the same core obligations as banks: registration with the FIC, a board-approved RMCP (Section 42), CDD under Section 21, EDD under Section 21A, record keeping under Sections 22–23, and CTR/STR reporting under Sections 28 and 29. Separately, CASPs require an FSCA financial services licence under the declaration of crypto assets as a financial product.
Does VerifyNow support the FATF Travel Rule?
The FATF Travel Rule requires VASPs to share originator and beneficiary information on qualifying transfers. VerifyNow supplies verified identity details, Home Affairs Face Match, AML/PEP screening and document evidence for the customer record that feeds the Travel Rule process. The CASP then sends the required message through its approved counterparty channel.
Which VerifyNow checks support CASP customer onboarding?
A CASP can use Home Affairs SA ID Verification, Home Affairs Face Match, Passive Liveness, AML/PEP screening, document authentication, CIPC company and director checks, and Consumer Trace. The flow can step up from basic identity evidence to biometric or corporate evidence according to the CASP's RMCP and customer-risk rules.
Where does Age Estimation fit in crypto onboarding?
Age Estimation can be used before full KYC to reduce friction and flag under-age or borderline signup attempts. It estimates age from a face photo and returns review warnings. CASPs should still use document, Home Affairs, AML/PEP, and face-match checks where their RMCP requires regulated identity evidence.
Why is face match critical for crypto onboarding?
Crypto onboarding is a target for identity fraud and ID-document reuse. Face Match compares the customer's selfie with an approved reference photo. Separate Passive Liveness adds a presentation-attack signal from the selfie. Neither result should be treated as a guarantee or as a replacement for the CASP's full identity and risk controls.
How does VerifyNow handle enhanced due diligence (EDD) on high-risk crypto customers?
Under FICA Section 21A and the FATF risk-based approach, CASPs apply EDD to higher-risk customers such as PEPs, customers from high-risk jurisdictions and unusual account patterns. VerifyNow supports that review with AML/PEP and adverse-media screening, document authentication, Home Affairs Face Match, Passive Liveness and CIPC evidence for corporate customers. The CASP records its source-of-funds review, risk decision and monitoring outcome alongside those results.
Can VerifyNow verify cross-border crypto customers?
VerifyNow supports identity-document authentication for supported non-South African IDs and passports, plus AML/PEP/sanctions screening against supported sources. The Africa Verification service supplies country-specific identity checks in supported jurisdictions. South African and cross-border routes return separate source outcomes, and the CASP applies them through its own risk framework.
Item-22-ready KYC in a single API
Home Affairs ID, Face Match, separate Passive Liveness, AML/PEP (including OFAC crypto designations) and document authentication — purpose-built for SA CASPs.