كوبا KYC, KYB & AML compliance checklist
قائمة عملية وموثقة بالمصادر لتنفيذ متطلبات KYC وKYB وAML في كوبا.
- تاريخ آخر مراجعة
- تاريخ آخر مراجعة:
- الإصدار
- الإصدار 1.0
إجابة مباشرة
ما الذي تغطيه قائمة الامتثال الخاصة بـ كوبا؟
تحوّل قائمة كوبا قواعد KYC وKYB وAML الأساسية إلى 11 مجالات رقابية و34 فحوص تنفيذ، وتشمل الجهات المختصة وواجبات الإبلاغ والأدلة الواجب الاحتفاظ بها.
حقائق تنظيمية أساسية
- National FIU
- Dirección General de Investigación de Operaciones Financieras (DGIOF), within the Banco Central de Cuba
- Core preventive law
- Decree-Law 317 of 2013 and BCC Resolution 51 of 2013, supplemented by sector rules
- Suspicious reporting
- Report promptly to DGIOF when suspicion or reasonable grounds arise, regardless of amount
- CDD
- Identify every customer and verify identity data and documents; identify the beneficial owner
- Records
- Maintain identification and transaction records under the applicable BCC or sector rule; confirm the live sector retention period
- Company records
- The Central Commercial Registry and other competent registries evidence legal existence; access and beneficial-ownership availability require live confirmation
- Privacy
- Law 149 of 2022 on Personal Data Protection, effective 180 days after its 25 August 2022 publication
- Virtual assets
- BCC licensing and DGIOF AML supervision apply under Resolution 215/2021 and subsequent AML rules
- FATF status
- GAFILAT member; not identified on FATF's June 2026 high-risk or increased-monitoring statements; status reviewed 5 August 2026
تفاصيل التنفيذ
متطلبات وإجراءات الامتثال في كوبا
افتح كل مجال لمراجعة المتطلب وإجراء التنفيذ المقترح والأدلة الواجب الاحتفاظ بها والمصدر الأساسي.
01Scope, authorities and licensingResolve the entity, activity and competent authority before applying a sector rule.3 عناصر+
Entities and activities designated by Decree-Law 317 must apply preventive controls and report to DGIOF.
- إجراء التنفيذ
- Map each product and legal entity to Article 4 and the current sector instruction; obtain written perimeter confirmation for ambiguity.
- الأدلة الواجب الاحتفاظ بها
- Perimeter memo, legal texts, regulator correspondence, licence inventory and launch approval.
- المصدر الأساسي
- Decree-Law 317/2013 arts. 4-5
Reserved banking, financial, payment or exchange activity requires the applicable BCC authorisation.
- إجراء التنفيذ
- Separate regulated functions and block launch until the responsible authority confirms every licence or registration.
- الأدلة الواجب الاحتفاظ بها
- Product map, applications, authorisations, conditions and public-register checks.
- المصدر الأساسي
- Decree-Law 362/2018; current BCC licensing rules
Virtual-asset services within Resolution 215/2021 require a BCC licence and AML controls.
- إجراء التنفيذ
- Classify custody, exchange, transfer, financial and issuer-related services; verify the current licence and DGIOF registration route.
- الأدلة الواجب الاحتفاظ بها
- Service taxonomy, BCC decision, DGIOF registration and control assessment.
- المصدر الأساسي
- BCC Resolution 215/2021; GAFILAT final Fourth-Round follow-up
02Governance and risk assessmentA documented risk-based programme must reflect the operator's actual sector and exposure.3 عناصر+
Reporting entities must identify and evaluate vulnerabilities to ML/TF/PF and illicit capital movements.
- إجراء التنفيذ
- Assess customers, products, geography, channels and delivery methods; approve risk appetite and remediation.
- الأدلة الواجب الاحتفاظ بها
- Risk methodology, assessment, data, approvals and remediation log.
- المصدر الأساسي
- Decree-Law 317/2013 arts. 5 and 19-20
Internal controls must support prevention, detection, reporting and competent-authority access.
- إجراء التنفيذ
- Assign accountable leadership and compliance roles, maintain procedures, training, testing and escalation.
- الأدلة الواجب الاحتفاظ بها
- Governance charter, appointments, manual, training and assurance reports.
- المصدر الأساسي
- Decree-Law 317/2013 arts. 5 and 8; applicable sector rule
Material legal and risk changes require controlled updates.
- إجراء التنفيذ
- Monitor Gaceta Oficial, BCC, DGIOF, FATF and GAFILAT releases and test each parameter change before deployment.
- الأدلة الواجب الاحتفاظ بها
- Source register, change log, approvals, testing and release record.
- المصدر الأساسي
- Implementation control supporting Decree-Law 317/2013
03Natural-person identificationCDD is based on reliable identity evidence, purpose, risk and ongoing consistency.3 عناصر+
Reporting entities must always identify customers and verify the authenticity of submitted data and documents.
- إجراء التنفيذ
- Capture identity and contact data, authenticate reliable documents and bind them to the applicant before activation.
- الأدلة الواجب الاحتفاظ بها
- Application, document images, validation results, timestamps and reviewer decision.
- المصدر الأساسي
- Decree-Law 317/2013 art. 12
CDD includes purpose, intended character and ongoing monitoring consistent with identified risk.
- إجراء التنفيذ
- Record expected activity, assign risk, refresh on change or doubt and investigate deviations.
- الأدلة الواجب الاحتفاظ بها
- Purpose statement, profile, rating, refresh history and monitoring cases.
- المصدر الأساسي
- Decree-Law 317/2013 art. 9
A person acting for a customer must be identified and their authority verified.
- إجراء التنفيذ
- KYC the representative, validate the mandate, scope and expiry and link it to the customer.
- الأدلة الواجب الاحتفاظ بها
- Representative KYC, power, verification and permission record.
- المصدر الأساسي
- Decree-Law 317/2013 arts. 9 and 12; applicable sector rule
04KYB and beneficial ownershipLegal existence, authority, ownership and control must be reconstructed from reliable evidence.3 عناصر+
Legal-person customers require reliable formation, registration, address, activity and authority evidence.
- إجراء التنفيذ
- Obtain current registry evidence, constitutional documents, tax details, directors and powers and reconcile discrepancies.
- الأدلة الواجب الاحتفاظ بها
- Registry extract, formation documents, tax record, governance list and reconciliation.
- المصدر الأساسي
- Decree-Law 317/2013 arts. 9 and 12; Commercial Registry rules
CDD must identify the beneficial owner and take reasonable steps to verify that person's identity.
- إجراء التنفيذ
- Trace natural-person ownership and control through every tier and document the sector-specific test used.
- الأدلة الواجب الاحتفاظ بها
- Ownership chart, source records, declarations, control analysis and verification.
- المصدر الأساسي
- Decree-Law 317/2013 arts. 9 and 12
Registry evidence does not replace independent AML verification.
- إجراء التنفيذ
- Reconcile customer declarations with the Central Commercial Registry and other competent registers; escalate missing or conflicting data.
- الأدلة الواجب الاحتفاظ بها
- Registry results, access log, discrepancy case and resolution.
- المصدر الأساسي
- Commercial Registry rules; Decree-Law 317/2013 arts. 9 and 12
05PEPs, enhanced diligence and remote onboardingHigher-risk relationships require stronger approval, source and monitoring controls under the applicable sector rule.3 عناصر+
Customers and beneficial owners must be assessed for PEP status under the current sector rule.
- إجراء التنفيذ
- Screen at onboarding and periodically, cover family and close associates where required, and preserve the basis.
- الأدلة الواجب الاحتفاظ بها
- Declaration, screening, public-source evidence and review history.
- المصدر الأساسي
- Applicable BCC or sector AML rule; FATF Recommendation 12 implementation assessed by GAFILAT
Higher-risk and PEP cases require enhanced measures proportionate to risk.
- إجراء التنفيذ
- Obtain senior approval, establish source of wealth and funds where required and intensify monitoring.
- الأدلة الواجب الاحتفاظ بها
- Approval, source pack, risk rationale, monitoring plan and reviews.
- المصدر الأساسي
- Applicable sector rule; Decree-Law 317/2013 risk-based framework
Remote onboarding must meet the same identification standard and protect personal data.
- إجراء التنفيذ
- Authenticate document and person, manage impersonation risk, secure the flow and provide manual review.
- الأدلة الواجب الاحتفاظ بها
- Flow design, vendor diligence, security tests, legal basis and review record.
- المصدر الأساسي
- Decree-Law 317/2013 art. 12; Law 149/2022
06Monitoring and suspicious reportingSuspicion is reported promptly and without an amount floor; live submission mechanics must be confirmed.4 عناصر+
Reporting entities must monitor activity against customer knowledge, purpose and risk.
- إجراء التنفيذ
- Implement risk-based scenarios, reconcile complete data, investigate alerts and tune controls.
- الأدلة الواجب الاحتفاظ بها
- Scenario inventory, data lineage, cases, tuning and validation.
- المصدر الأساسي
- Decree-Law 317/2013 arts. 9-10
A suspicious transaction or attempted activity must be reported promptly to DGIOF when suspicion or reasonable grounds arise.
- إجراء التنفيذ
- Document the grounds, preserve supporting material and submit through the current confidential DGIOF route.
- الأدلة الواجب الاحتفاظ بها
- Case analysis, decision, report, attachments, timestamp and acknowledgement.
- المصدر الأساسي
- Decree-Law 317/2013 arts. 13-14
Suspicious reporting applies independently of transaction amount.
- إجراء التنفيذ
- Do not suppress or delay escalation because an amount is below a threshold; aggregate linked activity.
- الأدلة الواجب الاحتفاظ بها
- Rule configuration, linked-case analysis, report decision and testing.
- المصدر الأساسي
- Decree-Law 317/2013 art. 14
Reporting and DGIOF information must remain confidential.
- إجراء التنفيذ
- Restrict access, avoid tipping off and separate customer communications from the reporting decision.
- الأدلة الواجب الاحتفاظ بها
- Access list, confidentiality controls, training and incident log.
- المصدر الأساسي
- Decree-Law 317/2013; BCC Resolution 51/2013
07Payments, wires and threshold reportsDetailed payment fields and threshold reporting are sector-specific and must be confirmed from the live rule.3 عناصر+
Specified cash or other operations above a BCC-set threshold may require registration and reporting.
- إجراء التنفيذ
- Obtain the current sector threshold, currency conversion, aggregation period, report type and filing calendar directly from BCC or DGIOF.
- الأدلة الواجب الاحتفاظ بها
- Authoritative parameter sheet, configuration, tests, report and receipt.
- المصدر الأساسي
- Decree-Law 317/2013 art. 15; BCC Resolution 51/2013 art. 7
Wire transfers must carry and preserve required originator and beneficiary information.
- إجراء التنفيذ
- Validate required fields before release, reject or escalate incomplete messages and screen all parties.
- الأدلة الواجب الاحتفاظ بها
- Message sample, validation, screening, exception and decision.
- المصدر الأساسي
- Applicable BCC transfer rule; GAFILAT technical-compliance assessment
Agents and outsourced providers do not remove the reporting entity's responsibility.
- إجراء التنفيذ
- Contract, train, monitor and test delegated onboarding, payment and reporting controls.
- الأدلة الواجب الاحتفاظ بها
- Contract, agent register, training, testing and remediation.
- المصدر الأساسي
- Applicable BCC or sector rule
08Targeted financial sanctionsScreening and freezing must follow current UN and Cuban designation procedures without delay.3 عناصر+
Reporting entities must identify designated persons and entities under applicable UN and national measures.
- إجراء التنفيذ
- Synchronise authoritative lists and screen customers, beneficial owners, transactions and counterparties.
- الأدلة الواجب الاحتفاظ بها
- List source, version, screening logs, match analysis and disposition.
- المصدر الأساسي
- Decree-Law 317/2013 arts. 16-18; BCC Resolution 51/2013 arts. 9-12
Funds or assets connected to a confirmed designation must be frozen without delay under the competent procedure.
- إجراء التنفيذ
- Block access without warning, notify DGIOF and preserve the complete authority and action chronology.
- الأدلة الواجب الاحتفاظ بها
- Match record, freeze timestamp, notification, acknowledgement and account controls.
- المصدر الأساسي
- Decree-Law 317/2013 arts. 16-18; BCC Resolution 51/2013 arts. 9-12
False-positive, release and exception handling must use the live authority route.
- إجراء التنفيذ
- Maintain escalation and unfreezing procedures and confirm any humanitarian or other exception before acting.
- الأدلة الواجب الاحتفاظ بها
- Procedure, authority correspondence, approvals and audit trail.
- المصدر الأساسي
- Current DGIOF/BCC sanctions procedure; controlled uncertainty
09Records and authority accessRecords must reconstruct identity, transactions, monitoring and reporting decisions.3 عناصر+
Reporting entities must preserve customer-identification and transaction records.
- إجراء التنفيذ
- Apply the live sector retention period from the correct trigger and preserve legal holds.
- الأدلة الواجب الاحتفاظ بها
- Retention schedule, source rule, trigger logic, archive samples and deletion tests.
- المصدر الأساسي
- Decree-Law 317/2013 art. 9; applicable sector rule
Records must support prompt DGIOF and competent-authority requests.
- إجراء التنفيذ
- Verify authority, collect complete records securely and preserve production and acknowledgement evidence.
- الأدلة الواجب الاحتفاظ بها
- Request, authority check, collection log, production and receipt.
- المصدر الأساسي
- Decree-Law 317/2013 arts. 6-8; BCC Resolution 51/2013
Every decision must be reconstructable from source to outcome.
- إجراء التنفيذ
- Preserve versions, timestamps, reviewers, evidence, screening, alerts, approvals and linked reports.
- الأدلة الواجب الاحتفاظ بها
- Reconstruction test, source hashes, case export and remediation.
- المصدر الأساسي
- Implementation control supporting Decree-Law 317/2013
10Privacy, biometrics and transfersLaw 149 applies to personal-data processing, including KYC information and sensitive data.3 عناصر+
Personal data must be processed under Law 149 principles and an applicable legal basis.
- إجراء التنفيذ
- Map each field to purpose, necessity and authority; provide required information and restrict incompatible reuse.
- الأدلة الواجب الاحتفاظ بها
- Data inventory, legal-basis matrix, notice, purpose register and approvals.
- المصدر الأساسي
- Law 149/2022 arts. 1-7
Data subjects have statutory access, correction, updating and cancellation rights subject to lawful limits.
- إجراء التنفيذ
- Operate authenticated rights workflows and document any AML or legal restriction on disclosure or deletion.
- الأدلة الواجب الاحتفاظ بها
- Request log, identity check, decision, response and exception rationale.
- المصدر الأساسي
- Law 149/2022
Sensitive, biometric and cross-border processing require documented safeguards and current-law analysis.
- إجراء التنفيذ
- Assess necessity and proportionality, secure templates and transfers, restrict vendors and obtain Cuban advice before launch.
- الأدلة الواجب الاحتفاظ بها
- Impact assessment, security design, contracts, transfer map and counsel opinion.
- المصدر الأساسي
- Law 149/2022; implementing rules; controlled uncertainty
11Practical evidence packsOperational evidence should show what was known, why a rule applied and when action occurred.3 عناصر+
Onboarding decisions should be reproducible.
- إجراء التنفيذ
- Bundle identity, KYB, ownership, authority, screening, purpose, risk, approvals and exceptions.
- الأدلة الواجب الاحتفاظ بها
- Timestamped onboarding pack with sources, hashes, reviewer and decision.
- المصدر الأساسي
- Implementation control supporting Decree-Law 317/2013 arts. 9 and 12
Monitoring and reporting decisions should preserve the complete chronology.
- إجراء التنفيذ
- Capture rule version, inputs, analysis, requests, suspicion decision, submission and receipt.
- الأدلة الواجب الاحتفاظ بها
- Alert case, linked activity, notes, report and quality review.
- المصدر الأساسي
- Implementation control supporting Decree-Law 317/2013 arts. 13-15
Launch approval must resolve licensing, AML, sanctions, registry, privacy and reporting readiness together.
- إجراء التنفيذ
- Use a cross-functional go-live gate and block unresolved perimeter, source, portal or evidence defects.
- الأدلة الواجب الاحتفاظ بها
- Signed checklist, legal opinions, authorisations, tests and residual-risk acceptance.
- المصدر الأساسي
- Implementation control; Decree-Law 317/2013; Law 149/2022
سجل المصادر الأساسية
9 مصدرًا مستخدمًا في هذه القائمة
استخدم هذه الروابط للتحقق من التشريعات وإرشادات الجهات الرقابية وإجراءات الإبلاغ والبيانات الدولية.
- Decree-Law 317 of 2013 - AML/CFT/CPF preventive frameworkGaceta Oficial de la República de Cuba (FAOLEX official-text mirror) · Primary legislation
- BCC Resolution 51 of 2013 - DGIOF functions and reportingGaceta Oficial de la República de Cuba (FAOLEX official-text mirror) · Primary regulation
- Law 149 of 2022 on Personal Data ProtectionWIPO Lex · Primary legislation repository
- Banco Central de CubaBanco Central de Cuba · Official regulator portal
- Cuba mutual evaluationGAFILAT · Authoritative regional assessment
- Final Fourth-Round follow-up report for CubaGAFILAT · Authoritative regional assessment
- Cuba Fifth-Round preparationGAFILAT · Authoritative current-status update
- FATF high-risk jurisdictions subject to a call for actionFinancial Action Task Force · Authoritative current status
- FATF jurisdictions under increased monitoringFinancial Action Task Force · Authoritative current status
إجابات مباشرة
أسئلة KYC وKYB وAML في كوبا
Who receives suspicious transaction reports in Cuba?+
The Dirección General de Investigación de Operaciones Financieras (DGIOF), Cuba's FIU within the Banco Central de Cuba.
When must suspicion be reported?+
Decree-Law 317 requires prompt reporting when suspicion or reasonable grounds arise, regardless of amount. Confirm the exact current electronic route and any sector workflow with DGIOF.
Is there one universal threshold report?+
This checklist does not state a universal amount. Decree-Law 317 permits BCC-set threshold reporting, so the current amount, currency conversion, aggregation and report type must be confirmed for the sector.
Who is the beneficial owner?+
CDD must identify the natural person who ultimately owns or controls the customer. Apply the detailed test in the current sector rule and document ownership and control through every tier.
Is registry information publicly accessible?+
Cuba maintains commercial and other legal-person registers, but live access, data fields and beneficial-ownership availability are controlled uncertainties. Obtain current official evidence and do not treat a registry extract as a substitute for AML verification.
How long must AML records be retained?+
Decree-Law 317 requires record custody, while detailed periods and trigger dates are set by applicable sector rules. Confirm the current rule before configuring deletion.
Do virtual-asset services require a licence?+
Specified virtual-asset services fall within the BCC licensing framework under Resolution 215/2021 and subsequent rules. Confirm the current scope, AML registration and conditions before launch.
What happens on a sanctions-list match?+
Follow the current DGIOF/BCC procedure to freeze without delay, report confidentially and preserve the authority and action chronology. Do not notify the customer.
What privacy law applies to KYC and biometrics?+
Law 149 of 2022 governs personal-data processing. Sensitive, biometric, vendor and cross-border designs require a documented legal-basis and safeguards assessment under current implementing rules.
Is Cuba on a FATF public list?+
As reviewed on 5 August 2026, Cuba was not named in FATF's June 2026 high-risk or increased-monitoring statements. Recheck the live FATF statements before reliance.
منهجية البحث والمراجعة
تحدد VOVE ID Compliance Research النطاق التنظيمي، وتحول الالتزامات إلى ضوابط تشغيلية، وتربط الادعاءات الجوهرية بالمصادر، وتسجل تاريخ وإصدار كل مراجعة.
General regulatory information, not legal advice, a licensing decision or a substitute for the operative Spanish texts and current sector instructions. Reviewed 5 August 2026. Cuba's framework is sector-specific and official online access can be inconsistent. Confirm the reporting channel, sector thresholds, retention periods, registry access, sanctions procedure, licence perimeter and any post-review amendments directly with DGIOF, BCC, the competent registry and qualified Cuban counsel before launch.