• The Banking Brief
  • Posts
  • 🔍 Deep Dive: Why TymeBank Can’t Build Its Own KYC – And Who’s Trying to Fix the System

🔍 Deep Dive: Why TymeBank Can’t Build Its Own KYC – And Who’s Trying to Fix the System

Author

Elly Ngoma
July 05, 2025

🔍 Deep Dive: Why TymeBank Can’t Build Its Own KYC – And Who’s Trying to Fix the System

⚙️ 1. Why TymeBank Can’t Go Solo on KYC

The Core Constraint: South Africa’s National Population Register (NPR) is the only legally recognized source of biometric ID data. Building a parallel system would:

  • Violate POPIA regulations (biometric data protection) and FICA mandates requiring state-verified IDs .

  • Cost R500M+/year to maintain – dwarfing TymeBank’s current tech spend .

  • Fail FATF grey-list compliance without DHA integration .

Technical Reality:

  • NPR contains 57M+ fingerprints and iris scans – impossible to replicate privately.

  • Real-time API access is monopolized by DHA; alternatives like credit bureau data lack biometric rigor for banking KYC .



    🚀 2. Startups Building Workarounds

Emerging Solutions Focused on Cost & Efficiency:

Startup

Approach

Impact

Velmie

Low-code KYC workflows

Cuts onboarding costs by 50% via automated document checks

KYCAID

Pre-built compliance flows + AI fraud detection

Reduces drop-offs by 30% with mobile-first UX

ComplyCube

Unified API for 195+ countries

Slashed GRVT crypto exchange’s fraud by 70% in 6 months

Shufti Pro

Blockchain-based reusable KYC

Lets users “own” verified IDs across platforms

Key Innovation: These tools layer atop NPR (not replace it) – adding fraud analytics while keeping DHA as the source of truth .

⚖️ 3. Regulatory Quicksand

Why Startups Can’t Fully Decouple:

  • FICA Amendment 2024: Mandates biometric checks against NPR for all new bank accounts .

  • DHA’s API Monopoly: Third parties can’t access raw NPR data; must pay per-query fees .

  • Catch-22: Even AI-powered alternatives (e.g., facial recognition) require NPR validation for legal compliance .

Incumbent Advantage:
Traditional banks like Capitec absorb costs via cross-subsidization (e.g., charging SMEs higher fees) – a luxury digital banks lack .

đź’ˇ 4. The Path Forward: Pressure + Partnership

TymeBank’s Demands:

  • Phased fees: R1 → R5 → R10 over 24 months .

  • Performance penalties: Rebates if NPR uptime dips below 99% .

  • Subsidized grants access: R0.25/check for SRD accounts .

Startups as Allies:

  • Pezesha (Kenya) and Borderless (SA) lobby for Africa-wide digital ID standards to break NPR’s monopoly .

  • COSATU’s Warning: Unions threaten strikes if banks pass costs to consumers .

đź”® Bottom Line: Public Infrastructure, Private Innovation

TymeBank’s fight exposes a brutal truth: KYC is a public good. No private entity can rebuild the NPR – but startups can pressure the state to modernize while building leaner verification layers. The real battle isn’t R10 vs. R0.15. The real battle is forcing DHA to view NPR as national infrastructure, not a revenue center.

“This is digital colonialism. We built the market – now the state taxes our pipes.”
— Fintech Founder (Anonymous)

That’s 4 mins. See you in the next one!