Before a UK or UAE accounting firm can act for a new client, it has to know, in a way it can later prove, who that client actually is. For most of the profession's history that has meant a certified copy of a passport, a printed utility bill, and a filing system that depended on someone remembering to check the copy was legible and the dates were current. Firms that outsource identity checks to a third-party verification vendor solve the reliability problem but add a separate subscription, a separate login for staff, and a client experience that starts on somebody else's website before the relationship has even begun.
There is a particular version of this problem that shows up in mid-sized firms specifically: the partner who does the sales conversation and wins the client is rarely the same person who chases the certified ID copy weeks later, and the handoff between the two is exactly where onboarding stalls. A client who has already mentally committed to the relationship is asked, out of the blue, to book time with a solicitor or notary to certify a passport copy, and the request lands as an odd, faintly bureaucratic ask that has nothing to do with the accounting work they actually signed up for.
Accupe's identity verification is built into the platform itself, so the check happens inside the same client record everything else lives on, with no third-party redirect and no second system to reconcile against the client file. This piece goes through what actually happens from the moment a firm creates a verification session to the moment the result sits on the compliance record, and where the line sits between what this feature does and what it deliberately does not do.
Starting a verification session
From the Compliance area of the client record, a staff member selects the client and creates a new verification session. Accupe generates a unique, secure link tied to that specific client and that specific session, so the request cannot be reused or redirected to the wrong person. The link is sent to the client by email, and nothing further is required from the firm until the client acts on it; there is no appointment to book and no separate portal to explain.
This matters more than it sounds for firms with clients spread across regions, or clients who simply are not going to make a special trip to a firm's office to have a document certified in person. A verification link sent at 9am can be completed before lunch, entirely on the client's own schedule, which is a meaningfully different onboarding experience from "bring your passport in when you next visit," and it removes the awkward administrative step of a staff member handling and photocopying a client's physical passport at all.
It also removes an easily overlooked risk on the firm's own side: a physical passport photocopy sitting in a paper file is itself a sensitive document the firm now has to store securely, track, and eventually destroy in line with its own retention policy. A verification session generates a digital, encrypted record from the outset, with no equivalent paper trail for someone to lose, misfile, or leave on a desk overnight.
What the client experiences
The client opens the link on whichever device is closest to hand, almost always a phone. They are asked to photograph a government-issued ID document, a passport, a driving licence or a national ID card, and then to take a live selfie for biometric matching against the document photograph. The whole exchange typically takes only a few minutes, and because it happens on the client's own device with their own camera, there is no scanner, no printer, and no trip to a firm's office required.
For a firm onboarding a busy business owner who is unlikely to prioritise a compliance errand over running their company, removing every point of friction between "the firm asked for this" and "this is done" measurably improves how quickly onboarding actually completes, rather than stalling on a document that technically was requested weeks ago but never quite got sent. A client who might have let a certified-copy appointment slip for a month has far less reason to delay a task that takes less time than reading the welcome email that contained the link.
A client who genuinely cannot complete the flow, an older client uncomfortable with a smartphone camera, or one whose only available document is damaged or expired, is not simply left stuck at a broken web form. The firm can fall back to handling that specific case manually, collecting and recording the equivalent evidence by hand, while the vast majority of clients who can complete the digital flow do so without ever needing staff involvement at all. The point of the automated path is to absorb the straightforward cases so staff time is available for the genuinely awkward ones.
What the system checks, and what a person still has to decide
Once the document and selfie are submitted, the system validates the document's authenticity, checks the biometric match between the live selfie and the document photo, and records the outcome against the client with full audit logging.
- Document type and apparent authenticity markers
- Match confidence between the live selfie and the document photograph
- Timestamp, IP address and device information for the verification event
- The document's expiry date, captured for later monitoring
- A pass, fail or manual-review outcome the firm can act on
The risk-band context around the check
A single verification event does not exist in isolation. It feeds into the client's overall risk assessment, which the firm sets based on factors like entity complexity, jurisdictional exposure and source of funds, all of which remain matters of professional judgement rather than anything the verification tool decides on the firm's behalf. A standard low-risk personal client's verification might close the file entirely; a higher-risk client's verification is one input the firm weighs alongside beneficial ownership checks, source-of-funds documentation and the firm's own enhanced due diligence procedures.
The system does not attempt to assign that risk band itself. It surfaces a clean, evidenced answer to "is this person who they say they are, based on the document presented," and leaves the firm to decide what that answer means for how the relationship proceeds, which is exactly where the professional judgement a regulator expects a firm to exercise actually belongs. A firm that tried to let the tool make the risk decision would, in effect, be outsourcing a regulated judgement to a document scanner, which is not what the check is designed or intended to do.
What happens after the check passes
A completed verification updates the client's Compliance Radar status and the document's expiry date is captured for ongoing monitoring, so a passport verified today does not silently lapse three years later without anyone noticing. That expiry and renewal cycle is a substantial workflow of its own; the point relevant here is that the initial capture and the later monitoring are two halves of the same system, feeding the same client record, rather than two disconnected tools a firm has to keep in sync manually.
For a firm handling KYC across both a UK client base and a UAE client base, the same verification flow applies regardless of jurisdiction, because confirming a person's identity against a government-issued document is not a task that differs by region in any way that changes the mechanics; what differs is the AML regime that sits on top of it, which remains the firm's own responsibility to apply according to whichever jurisdiction the client falls under.
A completed verification also becomes visible to anyone with the right role who opens the client record afterwards, not just the person who created the session. A manager preparing an engagement letter, a partner reviewing the file before signing off a new client, or a colleague covering for someone on leave can all see the verification status and the date it was completed without asking around or digging through a separate compliance folder, because the result sits directly on the same record everything else about that client lives on, updated the moment the check completes rather than at the end of whatever reporting cycle a separate vendor happened to run on, and available to whoever needs it next without a separate login, a separate password, or a separate vendor account to remember.
What identity verification is not
This is the point firms most often get wrong, so it is worth stating plainly. Accupe's identity verification confirms that a person is who they claim to be and that the document they presented appears genuine. It does not screen that person against sanctions lists, politically exposed persons registers, or adverse media, and Accupe does not offer sanctions or PEP screening as a feature.
A UK firm's obligation to conduct that screening exists under the Money Laundering Regulations 2017 regardless of what software it uses, and a UAE firm's equivalent obligation as a Designated Non-Financial Business or Profession sits under Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and its implementing Cabinet Decision. Firms that need sanctions or PEP screening run it through a dedicated screening provider and then file the outcome in Accupe as evidence against the client record, alongside the identity verification result and the document expiry date, so the full compliance picture sits in one place even though the screening itself happened elsewhere.
Conflating the two, treating a passed identity check as if it also cleared a client against sanctions exposure, is a genuine compliance risk, and firms should build their onboarding checklist to keep the two steps explicitly separate: one confirms who the client is, the other, run through a dedicated provider, confirms whether that person appears on a list the firm is obliged to check against.
What it does not do beyond that
Identity verification does not make the onboarding decision for the firm. A failed or inconclusive check flags for manual review rather than automatically rejecting a client, because the firm, not the software, decides whether to proceed, request further evidence, or decline the engagement. It also does not replace the firm's wider AML policy, its MLRO's role, or its obligation to document why a particular risk rating was assigned. Accupe holds the evidence of the check and proves it happened; the regulated decisions remain the firm's.
Consider a manual-review outcome in practice: a selfie taken in poor lighting produces a lower confidence match against the document photograph than the system's threshold accepts automatically. Rather than silently failing the client or silently passing them through on a weak match, the session is flagged for a staff member to review the same two images directly and make the call, with that decision recorded against the client alongside the original evidence. The system's job is to surface the borderline case clearly; a human still makes the borderline judgement.
What changes for the firm
Firms moving from certified paper copies and a third-party verification vendor to Accupe's built-in check describe two consistent effects. Onboarding speeds up meaningfully, because the client completes verification from their phone in the minutes after receiving the link rather than booking a certified-copy appointment with a solicitor or waiting for a separate vendor portal to process a request. And the compliance file becomes genuinely coherent, because the identity check, the document expiry date, and everything else the firm holds about that client sit against the same record, rather than being split across the practice management system and whatever vendor handled the original ID check.
There is a secondary effect that only becomes visible after a firm has run the built-in check across a full client book: the compliance file stops being a patchwork of formats. A certified paper copy looks different depending on which solicitor stamped it. A third-party vendor's PDF export looks different depending on which vendor the firm was using that year, and firms that have switched providers over time often hold two or three visually inconsistent verification formats across their client base. A single built-in check produces the same structured record every time, for every client, which is precisely the kind of consistency a practice assurance reviewer notices, and a firm eventually stops noticing itself because it has simply become the normal shape of the file.
