Shufti Pro Review
7.1/10A UK identity verification vendor founded in 2017, running document, biometric, AML, and self-exclusion checks from one API and native mobile SDKs, priced at $0.75 per verification on the Standard pack, with Certified-class registration on the Pennsylvania Gaming Control Board list, an iBETA PAD Level 3 liveness result at 0% error, and WhiteHat Gaming and Penn National Gaming among its gaming clients.
Our read
- Per-verification pricing at $0.75 on the Standard pack, billed pay-as-you-go with no resubmission charge and a 7-day free trial.
- iBETA Presentation Attack Detection Level 3 at 0% APCER and 0% BPCER over 900 attacks, on both iOS and Android, May 2026.
- Pennsylvania PGCB Certified gaming registration (Shufti Pro Limited, exp 01/18/2027), the higher of Pennsylvania's two gaming service provider classes.
- Gaming-native compliance: self-exclusion integration for GamStop, Spelpaus, Cruks, and OASIS, 1:N face verification for multi-accounting, and coverage mapped to UKGC Licence Condition 17, MGA, and the EU regimes.
- Small scale: roughly 140 to 180 staff, one $20M funding round, and no audited financials.
- The 0% iBETA result covers liveness only. Document-side edge cases include damaged documents and strict passport country-match rules that reject users whose residence and issuing country differ.
- A $2,500 one-time setup fee sits on top of the per-verification rate.
Cost-sensitive and mid-market operators, and platforms or aggregators reselling KYC, that want per-verification pricing they can model, strong passive liveness, and deep UK and EU self-exclusion coverage without enterprise minimums.
The largest US operators that need a big-balance-sheet, audited vendor with a broad tier-one client roster, or buyers who need a no-code orchestration canvas.
Markets & licensing
The Pennsylvania PGCB lists Shufti Pro Limited as a Certified gaming service provider for identity and document verification, expiring January 18 2027, the higher of the two PA classes. An iBETA Presentation Attack Detection Level 3 result, issued by iBeta Quality Assurance, shows 0% APCER and 0% BPCER on both a Google Pixel 4 and an iPhone 12 Pro.
Pennsylvania is the only US state where Shufti holds a gaming registration.
Shufti Pro Limited is a UK company based at One Canada Square in Canary Wharf. Checks map to UKGC Licence Condition 17, and GamStop is integrated in the gaming flow. There is no DIATF certification.
- Pennsylvania PGCB registrationPennsylvania, United States
- Certified gaming service provider for identity and document verification checks (KYC), the higher of the two PA classes · Shufti Pro Limited, DBA Shufti Pro · expires January 18, 2027
- iBETA PAD Level 3ISO/IEC 30107-3 conformance
- Presentation Attack Detection Level 3 for fully passive single-selfie liveness, 0% APCER and 0% BPCER over 900 attacks across silicone, urethane, and resin masks on iOS and Android · iBeta Quality Assurance · announced May 7, 2026
Platform & capabilities
Everything the product does out of the box. If a feature isn't listed, the vendor either doesn't offer it or doesn't say.
Integrations & engineering
One contract and one API instead of a separate deal per studio, feed, or PSP. Here's what connects, how fast, and on what stack.
Integration runs through one REST API with native iOS and Android SDKs. An operator can start on a 7-day free trial with self-serve signup, then move to pay-as-you-go billing with no resubmission charge. Document, biometric, passive liveness, age estimation, NFC, electronic IDV, and AML screening all sit behind the same connection.
Products & tools
One API covers the whole onboarding check: document verification, biometric face match with fully passive single-selfie liveness, age estimation, NFC e-passport reads, electronic IDV, AML screening against 4,000+ watchlists, and self-exclusion register checks against GamStop, Spelpaus, Cruks, and OASIS.
Identity Verification
The core onboarding flow: document authentication with tamper forensics, biometric face match, fully passive single-selfie liveness, age estimation, and NFC reads for e-passports, all callable from one API and native iOS and Android SDKs.
- Fully passive liveness tested at 0% APCER and 0% BPCER by iBeta at PAD Level 3
- Age verification with age estimation for the 18-plus gate
- NFC verification for chip e-passports
- 240+ countries actively processed
AML Screening
Sanctions, PEP, and adverse-media screening against 4,000+ watchlists with ongoing monitoring, run alongside the identity check inside the same onboarding call.
- 4,000+ watchlists screened
- Ongoing monitoring for changes after onboarding
- Runs in the same flow as document and biometric checks
- Address verification and consent verification available in the suite
- Behavioral biometrics, device fingerprinting, and transaction monitoring on the platform
Gaming Compliance
The gaming-specific layer: self-exclusion register checks against GamStop, Spelpaus, Cruks, and OASIS, plus 1:N face verification for multi-accounting detection.
- 1:N face verification to catch duplicate and multi-account sign-ups
- Mapped to UKGC Licence Condition 17, MGA, Dutch KSA, Sweden Spelpaus, and Germany GluStV plus OASIS
- Checks map to FATF Recommendation 22 and the EU Digital Services Act
Integration
An API-first platform with versioned native mobile SDKs, a 7-day free trial, and self-serve signup.
- Pay-as-you-go billing, upgrade or downgrade anytime
- No charge for resubmission sessions, billed only for successful verifications
- DevCode Identity as an orchestration partner
The history
Longevity in this industry usually comes with a change of owner somewhere in it.
Shahid Hanif and Victor Fredung founded Shufti Pro in 2017, building an API-first identity verification platform out of the UK with an engineering presence in Pakistan. Victor Fredung is CEO and Shahid Hanif co-founder and CTO. The company raised one institutional round, a US$20M Series A from Updata Partners, and otherwise stayed founder-led and private with no M&A in or out. It employs roughly 140 to 180 people. Gaming sits inside the product: coverage maps to the UK and EU self-exclusion regimes, and the company holds a Pennsylvania Certified gaming registration.
Brands & clients on the platform
Corporate
Leadership
Milestones
- 2017
Shahid Hanif and Victor Fredung found Shufti Pro as a UK-registered identity verification vendor.
- 2021-2023
Raises a US$20M Series A from Updata Partners and builds out the gaming vertical with self-exclusion register integration.
- 2026
Listed as a Certified gaming service provider on the Pennsylvania PGCB list.
- 2026
iBeta certifies the fully passive single-selfie liveness at PAD Level 3, announced May 7, 2026.
Where they're pushing next
- US state gaming beyond Pennsylvania
- UK and EU operators bound by UKGC and EU self-exclusion regimes
- Platforms and aggregators reselling KYC on the pay-as-you-go price
Longevity and ownership
Switching vendors is expensive, which makes the company's staying power part of the purchase. What the contract says about your data decides how expensive an exit gets.
Shufti Pro vs alternatives
Most buyers in this market shortlist three or four vendors long before they take a single sales call.
Pricing & terms
Shufti Pro publishes pricing. Ranges are below, and final terms are quoted per project.
Pay-as-you-go per verification: $1.20 on the Starter pack and $0.75 on the Standard pack, each with a one-time $2,500 setup fee, no long-term commitment, and no charge for resubmission sessions
Turnkey
Rates run $1.20 per verification on Starter and $0.75 on Standard, each with a one-time $2,500 setup fee, on a pay-as-you-go model with no long-term commitment, no resubmission charge, and a 7-day free trial. An operator can model cost and test before a sales call.
Path to launch
- 1Start on the 7-day free trial with self-serve signup, or contact sales (hello@shuftipro.com)
- 2Pick between the Starter and Standard packs
- 3Run a compliance and security review
- 4Integrate the REST API and the native iOS and Android SDKs
- 5Wire the gaming-specific checks: self-exclusion registers (GamStop, Spelpaus, Cruks, OASIS), 1:N multi-accounting, and age estimation
- 6Confirm your gaming registrations, with Pennsylvania Certified already in hand, and go live
Support & account management
You can't demo service before you sign, so what a vendor puts in writing is the only floor you can hold it to.