/SEPBLAC and Digital Identity Verification in Spain

Article
March 11, 2025

Edu Gozalo

Introduction: Regulation and Technology Hand in Hand

Spain has been a pioneer in regulating digital identity verification processes, establishing itself as one of the first countries to implement specific regulations in this field. Since 2016, SEPBLAC regulations have allowed the use of advanced technologies to verify citizens’ identities in financial and electronic trust processes.

With increasing digitalization and the need for secure remote transactions, trust in user identity has become a fundamental pillar. This is where technological solutions such as video-identification and biometrics come into play, ensuring security and regulatory compliance.

This article will analyze how the regulation of remote identification has evolved in Spain, the requirements set by SEPBLAC, and how technological solutions like those of Veridas comply with these regulations.

SEPBLAC and Anti-Money Laundering Prevention

The Executive Service of the Commission for the Prevention of Money Laundering and Monetary Offenses (SEPBLAC) is the body responsible for supervising and regulating the prevention of money laundering and terrorist financing in Spain.

Since 2016, SEPBLAC has authorized remote identification for opening bank accounts and other financial operations, establishing a regulatory framework that has evolved to include automated video-identification processes.

SEPBLAC Regulation: Remote Identification

According to Article 21.1.d) of the Regulation of Law 10/2010, obligated entities may establish remote business relationships if:

They use secure identification procedures.
These procedures have been authorized by SEPBLAC.

To meet these requirements, identity verification systems must ensure:

Authenticity, validity, and integrity of the identity document.
Recording of the video conference, ensuring process traceability.
Capture of clear images of the front and back of the document.
Review of evidence by a specialized operator.

Evolution of Remote Identification in Spain

2016: Authorization of Remote Identification

In February 2016, SEPBLAC published the “Authorization of remote identification procedures via video conference,” establishing that:

The technology must verify the authenticity and validity of the documents.
The video conference must be recorded with date and time stamps.
The user must visibly display both sides of their document.
High-quality and clear images of the document must be captured.

2017: Automated Video-Identification

In May 2017, SEPBLAC expanded the regulations to allow automated video-identification, without the need for online interaction with an operator. Additional requirements were established, such as:

Single-device process in real-time.
Live transmission, no pre-recorded files.
Mandatory capture of separate document photographs.
Review of evidence by a trained operator.

These changes promoted the use of advanced biometric technologies and ensured a higher level of security and efficiency in remote identification processes.

Regulation of Remote Identification in Spain: Order ETD/465/2021

To reinforce security in remote identification processes, in May 2021, Order ETD/465/2021 was approved, regulating video verification methods for the issuance of qualified electronic certificates.

Key Requirements of Order ETD/465/2021

Single-session process: The process must be executed on a single device and in a single sequential flow.
Real-time: No pre-recorded or edited recordings are allowed.
Document authenticity: The technology used must guarantee its validity and integrity.
Biometric validation: User identity must be verified through facial recognition technologies certified by NIST.

Veridas provides a reliable, secure, and certified system, ensuring that financial and electronic trust entities comply with the highest security standards.

Identity Verification Process According to SEPBLAC

Below is a diagram of the remote identity verification flow according to the requirements of SEPBLAC and Order ETD/465/2021:

1. Document Capture

The user scans the front and back of their identity document.

2. Selfie and Liveness Check

It is verified that the user’s face matches the document using advanced biometric technology.

3. Video Recording

The user displays their document on video, ensuring authenticity.

4. Biometric and Document Validation

The validity and integrity of the document are analyzed, along with its correspondence to the user’s biometrics.

5. Manual Review by an Operator

A specialist reviews all collected evidence to validate the process.

How Veridas Complies with SEPBLAC

The solutions from Veridas ensure regulatory compliance with SEPBLAC and Order ETD/465/2021 through:

Biometric technology certified by NIST.
Advanced document verification.
Implementation of liveness detection against presentation attacks.
Compliance with Order ETD/465/2021 and the CCN-STIC-140 Guide.

Veridas offers a reliable, secure, and certified system, ensuring that financial institutions and electronic trust services meet the highest security standards.