In Kuwait, digital onboarding rests on the civil ID and the Kuwait Mobile ID app from PACI, which most banks have already integrated for verification and login. In a compact market where every bank has the same identity integration, the competition is in the journey around it: how fast, how few exceptions, and how quickly the account is usable.
This guide covers how Kuwait Mobile ID works in onboarding, how Saudi Arabia, the UAE and Oman differ, and the engineering that turns a verified identity into a funded account in under five minutes.
Kuwait: Mobile ID from PACI
Kuwait’s Public Authority for Civil Information issues the civil ID and operates Kuwait Mobile ID, an app-based digital identity with a legally recognised status for authentication and signing. Banks integrate with it for identity verification and increasingly for login, and the Central Bank of Kuwait has encouraged digital onboarding while keeping banks responsible for their own due diligence. Kuwait’s compact market means most banks have already built this integration; the differentiation is in the journey around it.
Saudi Arabia: Nafath, mandated by SAMA
Nafath is the national single sign-on operated by the National Information Center under the Saudi Data and AI Authority. It authenticates citizens and residents against the Absher identity database using a one-time number matched in the Nafath app, and it returns verified identity attributes to the relying party. A SAMA circular of November 2022 made Nafath mandatory for digital onboarding and for authentication by banks, payment companies and other licensed financial institutions, replacing the patchwork of OTP and document-scan methods used before.
For a bank the consequence is simple: identity proofing is solved by the state, and the bank’s onboarding work shifts to everything around it, which is where the differences between a two-minute journey and a twenty-minute one now lie.
UAE: UAE Pass and Emirates ID
UAE Pass is the federal digital identity, developed by the Telecommunications and Digital Government Regulatory Authority with Digital Dubai and Abu Dhabi, and linked to the Emirates ID issued by the Federal Authority for Identity, Citizenship, Customs and Port Security. It provides authentication, verified identity attributes and legally recognised digital signatures. Banks use it for onboarding and login under the Central Bank’s eKYC and consumer protection guidance, and the Emirates ID chip and facial biometrics provide a second route where a customer is not yet enrolled.
The UAE also permits remote onboarding for non-residents in several free zones under their own rules, which makes the identity design for a UAE bank more varied than in Saudi Arabia: UAE Pass for residents, document and biometric verification for others.
Oman: a national eKYC registry with Mala’a
The Central Bank of Oman launched a national eKYC platform in June 2023, operated by Mala’a, the Oman Credit and Financial Information Centre, and linked to the civil registry at the Royal Oman Police. Banks and licensed financial institutions can verify a customer’s identity and retrieve KYC data from the shared registry with the customer’s consent, rather than each collecting and storing its own copy. Oman’s Personal Data Protection Law, fully enforceable from February 2026, sets the rules for how that data is then handled.
What the national identity does and does not solve
Every scheme above proves who the person is. None of them, by itself, completes the bank’s obligations. The bank still needs liveness detection to be sure the person holding the phone is the person in the identity, sanctions and politically exposed person screening, risk classification under its anti-money-laundering programme, tax residency declarations, product-specific checks such as affordability for credit, and a record of all of it the regulator can inspect. The national identity removes the slowest step; the rest is the bank’s design problem.
The engineering of a five-minute account
Sub-five-minute onboarding is a sequencing problem. Identity verification runs first and in the foreground; screening, risk scoring and data enrichment run in parallel in the background while the customer chooses a product and reviews terms. Exceptions route to a review queue with a clear promise of when the customer will hear back, rather than blocking the journey. The account is created and a virtual card issued immediately for the clear-pass majority, with funding through the instant payment rail so that the customer can use the account in the same session.
Behind that sits an orchestration layer that calls the identity provider, the screening vendors, the core and the card processor, handles each one’s failure modes, and records a complete audit trail. This is the component that distinguishes a platform-grade onboarding system from a sequence of API calls in a mobile app.
Authentication after onboarding
The same identity schemes are increasingly used for strong customer authentication on high-risk actions: adding a beneficiary, raising limits, changing a phone number or authorising an open banking consent. Designing login and step-up authentication around the national identity, with device binding and behavioural signals layered on, reduces account takeover and satisfies regulators who are tightening authentication rules on every instant rail. It also means the identity integration is a core service of the bank, not a one-off in the onboarding project.
Business onboarding is the next frontier
Retail onboarding is largely solved; business onboarding is not. Verifying a company means pulling the commercial registration, the licence and the ownership structure from business registries, identifying every beneficial owner and signatory through the national identity, and understanding the business well enough to risk-rate it. The same orchestration layer handles this, but the data sources, the exception rate and the review workload are all higher, and it is where banks that want SME customers should invest next.
How Eurisko helps
Eurisko’s digital onboarding system integrates with Nafath, UAE Pass, Kuwait Mobile ID and Oman’s eKYC registry, with liveness, screening, risk scoring, case management and core integration as configurable modules. We have shipped onboarding journeys for banks in Saudi Arabia, the UAE, Kuwait and Lebanon and can show you a working five-minute journey rather than describe one. If your onboarding is slower than that, or you are expanding to a new market, talk to our team.
