Introduction
Know Your Customer (KYC) is the foundation of financial compliance in the Philippines. With the Bangko Sentral ng Pilipinas (BSP) maintaining strict standards and the country’s massive digital transformation—led by mobile wallets like GCash and Maya—businesses must implement effective KYC processes to serve the 110+ million population while meeting compliance obligations.
Whether you’re a traditional bank, a digital wallet provider, or a fintech startup, this guide covers everything you need to know about KYC in the Philippines.
—
KYC Regulatory Framework in the Philippines
Bangko Sentral ng Pilipinas (BSP) Requirements
The BSP mandates comprehensive KYC procedures under:
- Republic Act No. 9160 (AMLA)
- Republic Act No. 10927 (AMLA Amendments)
- Republic Act No. 11521 (Latest AMLA Amendments)
- BSP Circulars and Regulations
Key Requirements:
- Customer identification and verification
- Beneficial owner identification (25% threshold)
- Risk assessment and classification
- Ongoing monitoring
- Record keeping (5 years)
Anti-Money Laundering Council (AMLC)
- Financial Intelligence Unit
- STR and CTR processing
- Policy guidance
- International cooperation
Who Must Implement KYC?
Regulated Entities:
- Banks and financial institutions
- Electronic money issuers
- Money service businesses
- Virtual currency exchanges
- Insurance companies
- Securities brokers
- Designated non-financial businesses
—
KYC Requirements for Individuals
Philippine Nationals
Required Documents:
- Passport
- Driver’s license
- SSS ID (Social Security System)
- GSIS ID (Government Service Insurance System)
- PRC ID (Professional Regulation Commission)
- Postal ID
- Voter’s ID
- National ID (Philippine Identification System – PhilSys)
Philippine National ID (PhilSys):
- 12-digit PhilSys Number (PSN)
- Biometric data (fingerprints, iris scan, facial image)
- Digital verification capabilities
- Gradual rollout nationwide
Verification Steps:
- ID document verification
- Biometric matching (where available)
- Address verification
- Occupation confirmation
- Risk assessment
Foreigners and Expatriates
Required Documents:
- Passport
- ACR I-Card (Alien Certificate of Registration)
- Visa documentation
- Proof of address in Philippines
- Work permit or business license
Tiered KYC Approach
BSP permits risk-based tiering:
| Tier | Transaction Limits | Requirements |
|---|---|---|
| Basic | Lower limits (PHP 10,000/month) | ID, basic info |
| Standard | Moderate limits (PHP 100,000/month) | + Address verification |
| Enhanced | High/unlimited | + Source of funds, enhanced DD |
—
KYC for Legal Entities
Philippine Corporations
Required Documents:
- SEC registration certificate
- Articles of incorporation
- By-laws
- Board resolution for account opening
- Authorized signatory identification
- Beneficial ownership declaration
Sole Proprietorships
Required Documents:
- DTI registration
- Mayor’s permit
- TIN (Tax Identification Number)
- Owner’s personal ID
Partnerships
Required Documents:
- SEC registration
- Partnership agreement
- All partners’ identification
- UBO identification
Foreign Companies
Additional Requirements:
- Apostilled corporate documents
- Philippine SEC license (if applicable)
- Enhanced due diligence
- Source of funds verification
—
Digital KYC (eKYC) in the Philippines
Current State
The Philippines is rapidly digitizing:
- Mobile wallet penetration: 80+ million GCash users
- Smartphone adoption: High, especially in urban areas
- Digital banking: Growing with new digital bank licenses
- PhilSys: National ID system rollout
eKYC Technologies
Document Verification:
- ID document scanning
- OCR for data extraction
- Security feature validation
- Real-time authentication
Biometric Verification:
- Facial recognition
- Liveness detection
- Fingerprint matching
- Selfie verification
Database Checks:
- PhilSys verification
- Credit bureau checks
- AMLC watchlist screening
- Sanctions screening
BSP Stance on eKYC
The BSP permits electronic KYC with requirements:
- Secure technology platforms
- Audit trail maintenance
- Data protection compliance (Data Privacy Act)
- Risk-based approach
- Enhanced measures for high-risk
—
KYC Best Practices for Philippines
1. Risk-Based Approach
Low Risk:
- Government employees
- Salaried workers with stable employment
- Established businesses
- Standard verification
High Risk:
- Politically Exposed Persons (PEPs)
- Money service businesses
- Online gambling operators
- Enhanced due diligence required
2. Technology Integration
Automate Where Possible:
- ID document verification
- Database checks
- Risk scoring
- Ongoing monitoring
Maintain Human Oversight:
- Exception handling
- High-risk review
- Complex cases
3. Mobile-First Design
Essential for Philippines:
- Mobile-optimized interface
- Low-bandwidth support
- Offline capabilities
- Simple user experience
4. Financial Inclusion Focus
Challenges:
- Large unbanked population
- Limited documentation
- Rural access issues
Solutions:
- Tiered KYC approaches
- Simplified due diligence for low-risk
- Alternative data sources
- Agent-assisted onboarding
—
Industry-Specific KYC Considerations
Banking
- Comprehensive documentation required
- Face-to-face verification for high-value
- Enhanced scrutiny for large accounts
- Regular relationship reviews
Mobile Wallets (GCash, Maya)
- Tiered KYC based on transaction limits
- Digital-first onboarding
- Biometric verification for higher tiers
- Real-time processing
Remittance Companies
- Sender and receiver verification
- Enhanced scrutiny for large amounts
- Corridor-specific controls
- Source of funds verification
Virtual Currency Exchanges
- Enhanced due diligence
- Source of funds verification
- Ongoing transaction monitoring
- Travel Rule compliance
—
Common KYC Challenges in Philippines
Challenge 1: Document Variety
Issue: Multiple valid ID types, varying quality.
Solution: Support all BSP-recognized IDs, implement quality checks, use AI for document classification.
Challenge 2: Informal Economy
Issue: Many customers lack formal employment documentation.
Solution: Alternative verification methods, source of funds documentation, risk-based approach.
Challenge 3: Rural Access
Issue: Limited internet connectivity in rural areas.
Solution: Offline capabilities, agent-assisted verification, simplified processes.
Challenge 4: Data Privacy
Issue: Data Privacy Act compliance requirements.
Solution: Consent management, data minimization, secure storage, privacy-by-design.
—
Tracefort Identity for Philippines
Tracefort provides comprehensive eKYC solutions designed for the Philippine market:
Features
- Mobile-optimized for GCash/Maya generation
- Philippine ID support (all BSP-recognized IDs)
- Biometric verification with liveness detection
- Real-time verification results
- Offline capabilities
Compliance
- BSP requirements compliant
- Data Privacy Act aligned
- Risk-based approach
- Audit trail generation
Use Cases
- Bank account opening
- Mobile wallet onboarding
- Remittance verification
- Corporate client onboarding
- Fintech customer verification
—
Frequently Asked Questions
Is eKYC legally accepted in the Philippines?
Yes, BSP permits electronic KYC provided it meets security, audit, and data privacy requirements.
How long must KYC records be kept?
BSP requires 5 years retention after account closure or relationship end.
Can I onboard customers without PhilSys ID?
Yes, BSP recognizes multiple valid IDs. PhilSys is not yet mandatory for all transactions.
What about customers in rural areas?
Agent-assisted verification, offline capabilities, and simplified processes can address rural access challenges.
How does the Data Privacy Act affect KYC?
Customer consent required, data minimization principles apply, secure storage mandatory, breach notification required.
—
Conclusion
Effective KYC in the Philippines requires balancing regulatory compliance with financial inclusion goals for a large, diverse population. By leveraging digital verification technology and risk-based approaches, businesses can onboard customers efficiently while meeting BSP and AMLC requirements.
The key is choosing a solution that understands the Philippine context—supporting multiple ID types, mobile-first design, and both urban and rural access needs.
Ready to upgrade your KYC process in the Philippines? Schedule a demo to see Tracefort Identity for Philippines.
