0

No products in the basket.

What Is FICA in South Africa? Identity Verification Explained

Published — Updated

What Is FICA?

FICA stands for the Financial Intelligence Centre Act (Act 38 of 2001). It is a South African law designed to combat money laundering, tax evasion, and the financing of terrorism. FICA requires certain businesses — known as accountable institutions — to verify the identity of every person they do business with.

If you have ever opened a bank account, applied for a cellphone contract, or bought property in South Africa, you have been through the FICA process. The business asked you for specific documents to confirm who you are and where you live. That is FICA compliance in action.

FICA is administered by the Financial Intelligence Centre (FIC), which monitors financial transactions across the country and works closely with law enforcement agencies to detect suspicious activity.

Why Does FICA Exist?

Before FICA, it was far easier to open accounts under false names, launder money through legitimate businesses, and move funds without oversight. The Act was introduced to bring South Africa in line with international anti-money laundering (AML) standards set by the Financial Action Task Force (FATF).

FICA serves three core purposes:

1. Preventing Money Laundering

By verifying customer identities, businesses can trace the origin and destination of funds. This makes it significantly harder to disguise the proceeds of crime as legitimate income.

2. Combating Terror Financing

FICA helps authorities identify and freeze accounts linked to terrorist organisations before funds can be used to cause harm.

3. Protecting the Financial System

A financial system where identities are unverified is a system vulnerable to fraud, corruption, and exploitation. FICA strengthens the integrity of South Africa's banking and financial infrastructure.

What Documents Do You Need for FICA?

FICA verification typically requires two categories of documents:

Proof of Identity

You need a valid, government-issued identity document. Acceptable forms include:

  • South African Smart ID Card — the preferred form of identification
  • Green ID Book — still accepted, though being phased out (learn more about the green ID book)
  • Valid passport — required for foreign nationals
  • Temporary ID certificate — issued by Home Affairs while your Smart ID is being processed (see how to apply for a Smart ID)

Your South African ID number is central to FICA verification. It confirms your date of birth, gender, and citizenship status — all in 13 digits. You can validate any SA ID number instantly using our free tool.

Proof of Residential Address

You must provide a document that confirms where you live. It must be dated within the last three months. Acceptable documents include:

  • Utility bill (electricity, water, or municipal rates)
  • Bank statement or credit card statement
  • Lease or rental agreement
  • Insurance policy document
  • SARS correspondence
  • Telephone or internet bill

Important: A cellphone bill from a prepaid account is generally not accepted. The document must show your full name and physical address — not a PO Box.

Who Must Comply with FICA?

FICA does not apply to every business in South Africa. It specifically targets accountable institutions — organisations that handle financial transactions or hold assets on behalf of clients. These include:

  • Banks and financial institutions — all commercial banks, investment banks, and micro-lenders
  • Insurance companies — both short-term and long-term insurers
  • Estate agents — when facilitating property transactions
  • Attorneys — particularly those handling trust accounts or conveyancing
  • Motor vehicle dealers — for transactions above certain thresholds
  • Accountants and tax practitioners
  • Cryptocurrency exchanges — added under the 2022 FICA amendment
  • Foreign exchange dealers

If you run a business that falls into any of these categories, you are legally required to verify your customers' identities before providing services. Non-compliance can result in fines of up to R100 million or imprisonment of up to 15 years.

How FICA Verification Works in Practice

The FICA process follows a standard pattern called Know Your Customer (KYC):

Step 1: Collect Identity Documents

The customer provides their ID document and proof of address. Many businesses now accept digital copies or photographs uploaded through a secure portal.

Step 2: Verify the ID Number

The business checks that the ID number format is valid using the Luhn algorithm checksum. This confirms the number is structurally correct and extracts the date of birth, gender, and citizenship status. Our ID validator tool performs this same check instantly.

Step 3: Cross-Reference Against Databases

Larger institutions verify the ID number against the Department of Home Affairs database to confirm it matches a real person. Some also check against credit bureau records, sanctions lists, and politically exposed person (PEP) databases.

Step 4: Record and Store

FICA requires businesses to keep copies of all verification documents for at least five years after the business relationship ends.

FICA and Digital Verification

South Africa is rapidly moving toward digital FICA compliance. Several developments are making the process faster and more accessible:

  • eKYC (electronic Know Your Customer) — many banks now allow you to complete FICA entirely online using your smartphone camera and a selfie
  • Biometric verification — fingerprint and facial recognition systems linked to Home Affairs data
  • Automated ID validation — services that verify SA ID numbers in real time using the Luhn algorithm and format checks (learn about ID validation services)

These digital tools reduce paperwork, speed up onboarding, and lower the risk of accepting fraudulent documents.

Refugee and asylum seeker documents are a common FICA edge case, because those file numbers do not follow the 13-digit format that standard ID validation expects. A refugee and asylum ID verification check confirms the number against the official identity source instead.

FICA vs POPIA: What Is the Difference?

FICA and POPIA (Protection of Personal Information Act) are sometimes confused, but they serve different purposes:

  • FICA requires businesses to collect and verify personal information (identity documents, proof of address) to prevent financial crime
  • POPIA restricts how businesses may collect, store, and process personal information to protect individual privacy

In practice, businesses must comply with both: they must collect FICA documents (because the law demands it) while handling that data responsibly under POPIA (because the law also demands that). The two acts work in tension but are not contradictory — FICA provides the lawful basis for collecting the data, while POPIA governs how it is treated. Other sector-specific regimes — such as PSIRA for the private security industry and RICA for SIM-card registration — sit alongside FICA and POPIA, layering vocational fitness checks on top of the basic identity verification that every accountable institution must perform.

Common FICA Questions

Can I refuse to provide FICA documents?

Yes, but the business is then legally prohibited from providing you with services. A bank cannot open an account for you without completing FICA verification. This is not the business being difficult — it is the law.

Do I need to FICA again if I already have an account?

Yes. Businesses are required to periodically re-verify existing customers, particularly when your details change or when a significant transaction occurs. This is called ongoing due diligence.

Is FICA the same as KYC?

KYC (Know Your Customer) is the broader international practice of verifying customer identities. Unlike informal methods such as searching for ID numbers by name, FICA-compliant KYC follows strict legal procedures. FICA is the specific South African legislation that mandates KYC procedures for accountable institutions. All FICA compliance involves KYC, but not all KYC is driven by FICA. Verifying a business customer also means confirming the entity itself exists, which you can do by learning how to check if a company is registered in South Africa.

What happens if a business does not comply with FICA?

The Financial Intelligence Centre can impose administrative penalties of up to R50 million. Criminal prosecution can result in fines of up to R100 million or imprisonment of up to 15 years. Directors and compliance officers can be held personally liable.

Does FICA apply to cryptocurrency?

Yes. Since November 2022, crypto asset service providers (CASPs) are classified as accountable institutions under FICA. If you trade cryptocurrency on a South African exchange, the platform must verify your identity before you can transact.

Can I complete FICA online?

Many institutions now offer digital FICA — you upload photographs of your ID and proof of address, take a selfie for biometric matching, and the verification happens electronically. Not all businesses offer this yet, but it is becoming the standard.

Related: FICA-regulated employers commonly run a SAPS criminal record check alongside identity verification. how to check a criminal record in South Africa.