The developer had finally connected the identity-checking software. Then it struggled to verify him. In Shahid Hanif’s telling, the irritation came twice: first as an engineer wrestling with an integration, then as the person waiting to prove who he was. It is a wonderfully inconvenient origin for a company whose business depends on making those moments less painful.
Hanif and co-founder Victor Fredung built Shufti around that problem. Today, the London-based company sells businesses software that examines identity documents, matches faces, screens names and helps decide which applicants need another look. Its customer is the organisation opening the account; the person holding a passport up to a phone is the other half of the transaction.
The stakes are easy to understand. Let an impostor through and someone may lose money. Make a legitimate applicant repeat the same ritual and the business may lose a customer. Shufti occupies that awkward space between suspicion and convenience. Its growing product catalogue suggests it intends to stay there long after the first selfie.
A software headache, incorporated on Halloween
Shufti Pro Limited was incorporated on October 31, 2017. The date also matches the company’s anniversary account. Hanif described his earlier verification troubles in a 2022 interview, recalling a financial-services developer role and repeated attempts to make an existing KYC service work.
Getting established brought a different obstacle: persuading buyers to trust an unfamiliar supplier with trust itself. In the company’s fourth-anniversary report, Fredung described the difficulty of winning large enterprise clients as a small startup. That is a particularly sharp sales problem when the product handles identities and helps customers manage fraud.

The leadership has since changed shape. The current company page lists Hanif as CEO and Fredung as chairman, both still identified as co-founders. Shufti presents its workplace around collaboration and professional development. Those are employer claims; the more tangible evidence of its distributed organisation is an office list stretching from London and Sweden to Dubai, Singapore and Lahore.
The passport is only the first question
Shufti’s basic job is to assemble evidence. Document verification examines the ID. Facial matching compares the person with the photograph. Liveness checks assess whether a real person is present. Address and age checks answer other questions. These are related tasks, but a convincing face does not by itself establish that every detail in an application is sound.
For businesses, the equivalent process is KYB: checking the organisation and identifying its beneficial owners. AML screening adds searches for sanctions, politically exposed persons and adverse media. Monitoring extends the process beyond admission. A person can pass an identity check while still requiring additional scrutiny for a particular service or transaction.
- 01CaptureDocument + person
- 02VerifyAuthenticity + match
- 03ScreenNames + risk signals
- 04MonitorChanges + exceptions
Illustrative sequence. Actual checks depend on the customer’s workflow.
The company markets a shared platform for those functions, with its own verification models and a common audit trail. Its expertise sits at the junction of computer vision, document processing, biometrics and the rather less photogenic work of organising cases. Buyers are purchasing decisions they can investigate, as well as decisions they can automate.
The industries fit the problem: payments, fintech, crypto, gaming and marketplaces all need ways to admit customers remotely. Shufti says it serves more than 2,000 businesses. That is a company-reported customer count, rather than a count of people who have taken a selfie.
Where the queue got shorter
QQ Pay supplies a useful before-and-after story. In a Shufti-published case study, the remittance and payments provider describes manual onboarding, separate compliance vendors and noisy screening results. It selected Shufti in 2022, bringing identity, sanctions and related screening into one system. The case study reports that manual reviews fell by nearly half.
That is an operational result worth paying attention to, while keeping its provenance attached. It is a customer account published by the supplier, not a controlled comparison across verification companies. The persuasive detail is the mechanism: fewer disconnected tools and fewer cases requiring someone to sort through the noise.
A newer deployment shows what that looks like at the front door. Kuwait’s AZ eWallet uses Shufti’s document, face-matching and liveness checks inside its onboarding journey. The July 2026 announcement says the wallet passed 40,000 registrations in six months after its 2025 launch. That number describes the wallet’s registrations; it does not establish how many were completed because of Shufti.
There is also evidence outside the usual customer-logo carousel. Centrifuge’s public software repository identifies an onboarding service using ShuftiPro for KYC and KYB. It is a small but useful glimpse of where the product actually lives: inside another company’s application.
What $20 million bought the plan
Shufti announced a $20 million Series A led by Updata Partners in March 2022. The funding release described a previously bootstrapped business serving more than 500 clients. Updata’s own announcement pointed to capital efficiency, configurable software and expansion of the compliance suite.
“The funding round was about finding a strategic partner”
Shahid Hanif, March 2022 funding announcement
The stated uses were sales and marketing, including US expansion, and continued product development. That explains the decision to accept capital more precisely than a generic appetite for growth. The company had a product and customers; the next plan required greater commercial reach and more services to sell.
Subsequent reporting offers a dated snapshot. Biometric Update reported in November 2022 that Shufti executives claimed almost 60 percent annual recurring revenue growth from June 2021 to June 2022, alongside a 35 percent increase in customers. Those figures describe that period. They should not be stretched into a present-day growth rate.
The 95-cent check and the work around it
On its public pricing page, checked September 8, 2026, Shufti lists ten free verifications each month and an Essentials price of $0.95 per check. Enterprise arrangements depend on volume and selected services. The free tier makes it possible to explore the product before a substantial commitment.
There is another buying route through AWS Marketplace, where listed annual contracts include $9,500 for up to 10,000 verifications and $18,000 for up to 20,000. These are channel-specific packages, not a promise that every combination of identity and compliance services carries the same rate.
per check on the listed Essentials plan
Volume, selected services and enterprise terms shape the actual purchase.The practical cost question extends to implementation. Shufti offers an API, mobile SDKs and configurable journeys. Its developer documentation includes test identities for integration work. A buyer still has to connect results to its own application, decide how exceptions are handled and give staff a usable review process.
Its on-premises option changes the calculation again. Hosting verification on company-controlled infrastructure can suit an organisation’s data requirements, but it creates infrastructure and maintenance work. Control has an operating budget.
Nine hundred attacks, two familiar phones
The cleanest technical evidence comes with a narrow description. In an April 24, 2026 confirmation letter, testing laboratory iBeta reported Level 3 presentation-attack-detection conformance for specified Shufti software running on a Google Pixel 4 and an iPhone 12 Pro, supported by a cloud component.
The lab recorded 900 presentation attacks across the two devices and a zero percent attack presentation classification error rate. In ordinary language, none of those attack presentations received a live-person classification. The older phone models make the result more interesting than a demonstration confined to freshly unboxed hardware.
iBeta Level 3 PAD test · specified Android and iOS configurations · March-April 2026
There is a boundary around the achievement. Testing a defined set of presentation attacks does not establish immunity to every future fraud technique or every possible production environment. Buyers can copy the discipline of the test: name the devices, name the software, name the attacks and count the outcomes. “AI-powered” is a much less useful acceptance criterion.
One supplier, with an expanding job description
Shufti competes for budgets that also attract Jumio, Sumsub, Veriff and Entrust IDV, formerly Onfido. Its positioning combines document coverage, configurable workflows and deployment choice. In August 2026, Shufti announced a Gartner Identity Verification Magic Quadrant Honorable Mention, highlighting document diversity. That is the recognition it received; it should not be promoted into a quadrant leadership claim.
The product direction is broader than checking documents. Its August 13 Summer Innovation Drop introduced qualified electronic signatures, Transaction Trust Monitoring and Travel Rule Compliance. The proposition is continuity: carry the verified identity into signing, investigations and subsequent transaction-related processes.
Partnerships remain part of that story. Shufti’s Evrotrust announcement describes qualified trust infrastructure supporting digital signatures. That is a useful qualification to sweeping claims about owning the whole technology stack. Ownership of verification models and provision of regulated signing infrastructure are different parts of the service.

For a prospective customer, the sensible experiment is specific. Try the documents its users actually carry, on their usual devices, in their usual languages. Track abandonment and manual reviews alongside fraud detection. Exercise the exception process. A system that performs neatly on a familiar passport may still be a poor fit for a different applicant population.
Shufti’s Fast ID adds a further test: whether returning users can reuse an identity through a consent-based selfie and profile-selection flow. Reuse is useful only when the earlier record and the next service’s requirements fit. Where they do not, additional verification remains part of the journey.
The company’s bet is that buyers want fewer awkward handoffs between all these steps. Its founder’s original frustration provides a fair standard for judging the result: can the software make the process work for the engineer, the reviewer and the person waiting on the other side of the camera?