Pakistan’s capital markets regulator has just made opening an investment, insurance, or NBFC account considerably less paper-heavy. The Securities and Exchange Commission of Pakistan (SECP) has introduced IBAN-based digital verification, allowing financial institutions to confirm a customer’s identity using their bank account details instead of repeated manual documentation a change SECP says is designed to accelerate digital onboarding across the financial sector.
Table of Contents
Table of Contents
Key Takeaways
- What launched: IBAN-based digital verification for Know Your Customer (KYC) checks
- Legal basis: Amendment to the AML/CFT/CPF Regulations, 2020
- Who can use it: Securities brokers, futures brokers, insurers, takaful operators, non-banking finance companies (NBFCs), and Modarabas
- Core mechanism: Customers verified using IBAN (International Bank Account Number) details rather than repeated manual documentation
- Verification channel: IBAN verification through SECP-notified entities, including the National Clearing Company of Pakistan Limited (NCCPL), via Raast
- Key safeguard: All future transactions restricted to bank accounts verified in the customer’s own name
- Additional feature: Multi-biometric verification, including facial recognition, aligned with NADRA systems
- Security measure: Accounts linked to blocked or impounded CNICs will be suspended immediately
- Record-keeping change: Digital logs now recognized as valid records for AML/CFT compliance and data retention
What SECP Actually Changed
SECP has amended the Anti-Money Laundering, Combating the Financing of Terrorism and Countering Proliferation Financing (AML/CFT/CPF) Regulations, 2020, formally recognizing digital verification as a valid alternative to traditional, paperwork-heavy KYC processes. In practice, this means regulated financial institutions can now confirm who a customer is by verifying their bank account details, rather than requiring the customer to submit and re-submit physical documents each time they open a new account with a different institution.
The amendment also updates prescribed onboarding forms to align with the Companies Regulations, 2024, and formally recognizes digital logs as valid records for AML/CFT compliance and data retention purposes removing the need for institutions to maintain extensive paper-based compliance files.
A L S O R E A D:
https://www.bigspay.com/nbp-1link-digital-banking-activation-session/
Who This Applies To
The updated framework applies to SECP-regulated entities across several sectors:
- Securities brokers
- Futures brokers
- Insurers
- Takaful operators
- Non-banking finance companies (NBFCs)
- Modarabas
Each of these entity types can now rely on IBAN-based verification to complete KYC requirements for new customers, rather than each conducting fully separate manual document checks.
How IBAN-Based Verification Works
Under the framework, IBAN verification through SECP-notified entities including the National Clearing Company of Pakistan Limited (NCCPL), via the Raast payment system is accepted as valid proof of a customer’s identity, provided all other AML requirements are still met. In effect, a customer’s existing, verified bank account becomes the anchor point for identity confirmation across the capital markets and insurance ecosystem, rather than requiring a fresh identity-verification process every time.
SECP has been clear that this digital pathway is an alternative to, not a replacement for, regulatory oversight: regulated entities remain fully responsible for KYC due diligence, ongoing transaction monitoring, and complete AML/CFT compliance regardless of which verification method is used.
Investor Protection Safeguards Built Into the Framework
Removing paperwork doesn’t mean removing scrutiny SECP has paired the convenience of IBAN verification with several protective measures:
Own-name account restriction. All future financial transactions will be restricted to bank accounts verified in the customer’s own name, closing off a common avenue for unauthorized or third-party financial activity and improving traceability.
Multi-biometric authentication. The amendments introduce advanced biometric verification methods, including facial recognition, aligned with systems used by the National Database and Registration Authority (NADRA) adding another identity-confirmation layer beyond the IBAN check itself.
Immediate suspension for blocked CNICs. Customer accounts linked to blocked or impounded Computerized National Identity Cards will be suspended immediately under the updated rules, a direct response to identity-related fraud risk.
Continued institutional accountability. SECP has explicitly maintained that regulated entities bear full responsibility for KYC, due diligence, and AML compliance the new verification method changes how identity is confirmed, not who is accountable for getting it right.
From Proposal to Final Rule: A Three-Month Timeline
This wasn’t a sudden announcement it’s the conclusion of a public consultation process that began in April 2026, when SECP first floated the amendments as a draft package covering IBAN-based verification, mandatory use of verified bank accounts or e-wallets, and multi-biometric authentication. That draft was opened for public feedback for 14 days before finalization.
By July 2026, the amendments had moved from proposal to formally adopted rule, with the finalized AML/CFT/CPF Regulations, 2020 amendments published on SECP’s official website meaning regulated entities are now expected to implement the changes.
Why This Matters
- It removes one of the most persistent friction points in Pakistan’s capital markets: repeated KYC. Investors previously had to go through fresh biometric verification and documentation each time they opened an account with a different broker, insurer, or NBFC this reform directly targets that redundancy.
- It leans on existing digital infrastructure rather than building something new. By routing verification through Raast and NCCPL both already-established pieces of Pakistan’s digital payments infrastructure SECP is extending infrastructure investment already made elsewhere in the financial system, rather than creating a parallel verification system from scratch.
- It fits a broader pattern of SECP modernization. This launch follows closely behind other 2026 SECP initiatives, including the ESG Mutual Funds Framework and Pakistan’s record year for new company registrations part of a consistent regulatory push toward digital-first, lower-friction financial market access.
- It strengthens rather than loosens compliance. Pairing faster onboarding with biometric verification, own-name account restrictions, and automatic CNIC-linked suspensions shows SECP treating speed and security as complementary goals rather than a trade-off.
Benefits of IBAN-Based Digital Verification
- Faster account opening across brokerage, insurance, and NBFC accounts, without repeated manual documentation
- Lower onboarding costs for financial institutions, which no longer need to process and store extensive physical KYC files
- Improved traceability through mandatory own-name verified accounts, reducing the risk of unauthorized or anonymous financial activity
- Stronger identity assurance through the addition of biometric and facial recognition checks alongside IBAN verification
- Broader financial access, as reduced onboarding friction makes it easier for new investors and customers to enter Pakistan’s regulated financial system
Frequently Asked Questions
What is SECP’s IBAN-based digital verification?
It’s a new KYC method that lets SECP-regulated financial institutions verify a customer’s identity using their bank account’s IBAN details, instead of relying solely on manual documentation.
Which regulations were amended to allow this?
The AML/CFT/CPF Regulations, 2020, were amended to formally recognize digital verification methods as an alternative to traditional KYC processes.
Which institutions can use IBAN-based verification?
Securities brokers, futures brokers, insurers, takaful operators, non-banking finance companies (NBFCs), and Modarabas.
How is the IBAN actually verified?
Through SECP-notified entities, including the National Clearing Company of Pakistan Limited (NCCPL), using the Raast payment system.
Does this reduce the security of the KYC process?
No. The framework adds multi-biometric verification, including facial recognition aligned with NADRA systems, and restricts transactions to accounts verified in the customer’s own name.
What happens to accounts linked to blocked CNICs?
They are suspended immediately under the updated regulations.
When did this framework take effect?
SECP first proposed the amendments for public consultation in April 2026, and the finalized regulations were published on SECP’s website in July 2026.
