قائمة امتثال KYC وKYB وAML
كينيا KYC, KYB & AML
A practical implementation checklist for reporting institutions working under Kenya's anti-money laundering, counter-terrorist financing and counter-proliferation financing framework.
- تاريخ المراجعة
- 14 July 2026
- الإصدار
- 1.0
- مجالات رقابية
- 7
- فحوص تنفيذ
- 45
إجابة مباشرة
ما الذي تغطيه قائمة الامتثال الخاصة بـ كينيا؟
تحوّل قائمة كينيا قواعد KYC وKYB وAML الأساسية إلى 7 مجالات رقابية و45 فحوص تنفيذ، وتشمل الجهات المختصة وواجبات الإبلاغ والأدلة الواجب الاحتفاظ بها.
حقائق تنظيمية أساسية
- Primary FIU / AML supervisor
- Financial Reporting Centre
- Core rules
- POCAMLA and 2023 Regulations
- Record retention
- Minimum 7 years
- Suspicion reporting
- Within 2 days after suspicion arises
تفاصيل التنفيذ
متطلبات وإجراءات الامتثال في كينيا
افتح كل مجال لمراجعة المتطلب وإجراء التنفيذ المقترح والأدلة الواجب الاحتفاظ بها والمصدر الأساسي.
01Applicability and governanceEstablish whether the organization is a reporting institution and make accountability visible.7 عناصر+
Confirm reporting-institution status
- إجراء التنفيذ
- Determine whether the business is a financial institution, designated non-financial business or profession, or virtual asset service provider under section 2 of POCAMLA. Apply activity-specific limits in section 48 where relevant and identify the FRC and any First Schedule sector supervisor.
- الأدلة الواجب الاحتفاظ بها
- Documented applicability and sector-overlay assessment
- المصدر الأساسي
- POCAMLA, ss.2 and 48; First Schedule
Confirm the competent supervisor
- إجراء التنفيذ
- Identify the sector supervisor or self-regulatory body and the FRC obligations that apply to the institution.
- الأدلة الواجب الاحتفاظ بها
- Regulatory obligations register
- المصدر الأساسي
- FRC compliance guidance
Register with the FRC
- إجراء التنفيذ
- Complete FRC registration, keep particulars current and notify changes to registration information within 90 days.
- الأدلة الواجب الاحتفاظ بها
- Registration confirmation, change log and profile owner
- المصدر الأساسي
- POCAMLR 2023; FRC compliance guidance
Appoint accountable AML leadership
- إجراء التنفيذ
- Appoint an MLRO at management level with the necessary competence, authority and independence. Notify both the FRC and the supervisory body of appointment or removal within 14 days. An internal auditor or chief executive may not serve as MLRO, except that a chief executive may do so for a sole proprietorship.
- الأدلة الواجب الاحتفاظ بها
- Appointment, role description and dual notifications
- المصدر الأساسي
- POCAMLR 2023, reg. 12
Plan VASP transition where applicable
- إجراء التنفيذ
- Existing virtual asset service providers should map the VASP Act 2025 licensing transition through 4 November 2026 and distinguish enacted requirements from draft 2026 regulations.
- الأدلة الواجب الاحتفاظ بها
- VASP transition plan and legal-status register
- المصدر الأساسي
- Virtual Asset Service Providers Act 2025
Approve a risk-based AML/CFT/CPF program
- إجراء التنفيذ
- Maintain policies, customer-risk methodology, controls, training, testing and governance proportionate to the institution's risks.
- الأدلة الواجب الاحتفاظ بها
- Board-approved program and risk assessment
- المصدر الأساسي
- POCAMLA and POCAMLR 2023
Conduct the mandatory institution-wide risk assessment
- إجراء التنفيذ
- Assess ML, TF and PF risks across customers, countries and geographies, products, services, transactions and delivery channels. Keep it current, update the program at least every two years, obtain board approval for controls and assess risk before new products, practices, delivery mechanisms or technologies.
- الأدلة الواجب الاحتفاظ بها
- Current institutional assessment, board approval and new-product reviews
- المصدر الأساسي
- POCAMLR 2023, regs. 7-8
02KYC for natural personsIdentify the customer, verify identity from reliable independent sources and understand why the relationship exists.6 عناصر+
Collect core identity particulars
- إجراء التنفيذ
- Capture full legal name, date and place of birth, nationality, contact details, residential address, occupation and identity-document details appropriate to the customer.
- الأدلة الواجب الاحتفاظ بها
- Completed customer profile
- المصدر الأساسي
- POCAMLA, s.45; POCAMLR 2023, regs. 14-15
Verify identity independently
- إجراء التنفيذ
- Verify the customer using reliable, independent source documents, data or information such as a valid national identity card or passport.
- الأدلة الواجب الاحتفاظ بها
- Verified document copy and verification result
- المصدر الأساسي
- POCAMLA, s.45; POCAMLR 2023, regs. 14-15
Verify authority to act
- إجراء التنفيذ
- When another person acts for the customer, identify and verify that person and confirm their authority.
- الأدلة الواجب الاحتفاظ بها
- Authority instrument and agent KYC
- المصدر الأساسي
- POCAMLA, s.45(3); POCAMLR 2023, reg. 23
Understand purpose and intended nature
- إجراء التنفيذ
- Record the expected use, products, transaction profile, counterparties and reason for the relationship.
- الأدلة الواجب الاحتفاظ بها
- Purpose and expected-activity statement
- المصدر الأساسي
- POCAMLR 2023, reg. 14(2)(c)
Establish financial profile
- إجراء التنفيذ
- Collect information proportionate to risk on occupation, income, source of funds and, where needed, source of wealth.
- الأدلة الواجب الاحتفاظ بها
- Financial profile and supporting evidence
- المصدر الأساسي
- POCAMLR 2023, regs. 14 and 26
Resolve failed verification
- إجراء التنفيذ
- If required CDD cannot be completed, do not open the account, establish the relationship or execute the transaction; terminate an existing relationship where applicable; and file an STR. If completing CDD would tip off the customer, stop CDD and file an STR.
- الأدلة الواجب الاحتفاظ بها
- Decline or exit decision and STR record
- المصدر الأساسي
- POCAMLR 2023, reg. 25
03KYB for legal persons and arrangementsVerify the entity, understand its ownership and control, and identify the natural persons behind it.7 عناصر+
Verify legal existence
- إجراء التنفيذ
- Obtain the registered name, incorporation or registration evidence, legal form, registration number and governing documents.
- الأدلة الواجب الاحتفاظ بها
- Registry extract and certified incorporation documents
- المصدر الأساسي
- POCAMLR 2023, reg. 16(1)(a)-(b)
Verify addresses and activity
- إجراء التنفيذ
- Confirm the registered office, principal place of business, business activity and operating footprint.
- الأدلة الواجب الاحتفاظ بها
- Address evidence and business profile
- المصدر الأساسي
- POCAMLR 2023, reg. 16(1)(c)
Verify authority and signatories
- إجراء التنفيذ
- Obtain the board resolution or equivalent authority and identify and verify authorized signatories.
- الأدلة الواجب الاحتفاظ بها
- Resolution, mandate and signatory KYC
- المصدر الأساسي
- POCAMLA, s.45(3); POCAMLR 2023, regs. 16(1)(d) and 23
Identify managers, controllers and owners
- إجراء التنفيذ
- Collect the identity particulars of natural persons managing, controlling or owning the entity.
- الأدلة الواجب الاحتفاظ بها
- Directors and ownership register
- المصدر الأساسي
- POCAMLR 2023, reg. 16(1)(e)
Identify and verify beneficial owners
- إجراء التنفيذ
- Obtain and validate company BO information, including relevant CR12 or BOF1 evidence. Do not treat registry evidence or a 10% threshold as conclusive for AML: identify controlling ownership, control by other means, or only after reasonable measures the senior managing official.
- الأدلة الواجب الاحتفاظ بها
- Ownership chart, BO declaration, registry evidence and verified BO KYC
- المصدر الأساسي
- POCAMLR 2023, regs. 14(2)(b), 16(2) and 22
Obtain financial information
- إجراء التنفيذ
- Collect audited financial statements for the last full year for corporate bodies, subject to the regulation's treatment of newly formed entities; apply the relevant rule for sole traders.
- الأدلة الواجب الاحتفاظ بها
- Financial statements or documented exception
- المصدر الأساسي
- POCAMLR 2023, reg. 16(1)(f)-(g)
Recommended: screen connected persons
- إجراء التنفيذ
- As an implementation control, screen the entity, beneficial owners, directors, controllers and authorized signatories in line with the institution's documented risk-based program and any sector rule.
- الأدلة الواجب الاحتفاظ بها
- Screening results and disposition log
- المصدر الأساسي
- Recommended risk-based control; confirm sector rule
04Risk assessment and screeningUse documented risk factors to determine the level of due diligence and monitoring.6 عناصر+
Recommended: document customer risk rating
- إجراء التنفيذ
- Assess customer, geography, product, service, delivery channel, transaction and ownership risks and retain the methodology, rationale and approval required by the institution's program or sector rule.
- الأدلة الواجب الاحتفاظ بها
- Risk score, rationale and approver
- المصدر الأساسي
- Risk-based obligations; confirm sector methodology
Apply targeted financial sanctions
- إجراء التنفيذ
- Screen customers, BOs, controllers, agents and transaction parties against current UN and Kenya Domestic Lists at onboarding, on list or customer changes, ongoing and before relevant transactions. On a match, without delay or notice freeze all directly, indirectly, wholly or jointly owned or controlled funds or other assets, including derived and directed assets. Do not make funds, assets, economic resources or services available. Within 24 hours report frozen assets, actions and attempts through the Committee Secretary at the FRC, file an STR where required and release nothing without authorization or valid delisting.
- الأدلة الواجب الاحتفاظ بها
- Screening, freeze, prohibition, reporting and release audit trail
- المصدر الأساسي
- TFS Regulations 2024, regs. 6-9 and 15; PF Regulations, regs. 6-8; FRC TFS Guidance 2025
Apply the correct PEP treatment
- إجراء التنفيذ
- Identify foreign, domestic and international-organization PEPs, including relevant family and close associates. For foreign PEPs, obtain senior approval, establish source of wealth and funds and enhance monitoring. Apply the same measures to domestic and international-organization PEPs where higher risk.
- الأدلة الواجب الاحتفاظ بها
- PEP result, approval and source analysis
- المصدر الأساسي
- POCAMLR 2023, reg. 26
Use adverse information proportionately
- إجراء التنفيذ
- Review reliable public information where relevant to the risk assessment and record why information is material or not material.
- الأدلة الواجب الاحتفاظ بها
- Adverse-information review and decision
- المصدر الأساسي
- Risk-based control
Check higher-risk jurisdictions
- إجراء التنفيذ
- Use current FATF and local guidance as an input to risk, without applying automatic blanket rejection solely because a jurisdiction is under increased monitoring.
- الأدلة الواجب الاحتفاظ بها
- Geographic-risk rationale
- المصدر الأساسي
- FATF Kenya country profile
Approve or decline with rationale
- إجراء التنفيذ
- Record the outcome, conditions, review frequency and person authorized to approve the relationship.
- الأدلة الواجب الاحتفاظ بها
- Customer acceptance decision
- المصدر الأساسي
- Institution risk-based program
05Enhanced due diligenceApply additional controls when higher money-laundering, terrorist-financing or proliferation-financing risk is identified.5 عناصر+
Collect further identity information
- إجراء التنفيذ
- Obtain information beyond standard CDD that helps establish identity and risk.
- الأدلة الواجب الاحتفاظ بها
- EDD information pack
- المصدر الأساسي
- POCAMLR 2023, reg. 20
Apply extra verification
- إجراء التنفيذ
- Use additional reliable sources or corroboration to verify supplied documents and claims.
- الأدلة الواجب الاحتفاظ بها
- Independent corroboration record
- المصدر الأساسي
- POCAMLR 2023, reg. 20
Obtain senior-management approval where required
- إجراء التنفيذ
- Require senior approval when the applicable high-risk or PEP rule requires it and document any conditions.
- الأدلة الواجب الاحتفاظ بها
- Approval and conditions
- المصدر الأساسي
- POCAMLR 2023, regs. 20 and 26
Establish source of funds and, where applicable, wealth
- إجراء التنفيذ
- Understand and verify source of funds and establish source of wealth where the applicable PEP or sector rule requires it or where justified by the documented higher risk.
- الأدلة الواجب الاحتفاظ بها
- Source evidence and plausibility analysis
- المصدر الأساسي
- POCAMLR 2023, regs. 20 and 26
Increase ongoing monitoring
- إجراء التنفيذ
- Set tighter review cycles, transaction scrutiny and escalation thresholds for high-risk relationships.
- الأدلة الواجب الاحتفاظ بها
- EDD monitoring plan
- المصدر الأساسي
- POCAMLR 2023, reg. 20
06Ongoing due diligence and monitoringKeep customer knowledge current and compare actual activity with the expected profile.5 عناصر+
Monitor transactions and behavior
- إجراء التنفيذ
- Scrutinize transactions throughout the relationship for consistency with the customer, business, risk profile and source of funds.
- الأدلة الواجب الاحتفاظ بها
- Monitoring rules, alerts and case outcomes
- المصدر الأساسي
- POCAMLR 2023, regs. 34-35
Refresh customer information
- إجراء التنفيذ
- Update CDD based on risk, material changes, trigger events and the adequacy of previously collected data.
- الأدلة الواجب الاحتفاظ بها
- Review schedule and refreshed file
- المصدر الأساسي
- POCAMLR 2023, reg. 14(6)
Rescreen relevant parties
- إجراء التنفيذ
- Rescreen customers and connected persons when lists or risk profiles change and at a frequency aligned to risk.
- الأدلة الواجب الاحتفاظ بها
- Rescreening history
- المصدر الأساسي
- Institution risk-based program
Review complex or unusual activity
- إجراء التنفيذ
- Examine the background and purpose of complex, unusually large or unusual-pattern transactions and retain the analysis.
- الأدلة الواجب الاحتفاظ بها
- Investigation notes and supporting evidence
- المصدر الأساسي
- POCAMLA, s.44(1), (4)-(5); POCAMLR 2023, regs. 34-35
Control relationship changes
- إجراء التنفيذ
- Trigger reassessment for ownership, directors, address, activity, products, geography or transaction-profile changes.
- الأدلة الواجب الاحتفاظ بها
- Event-driven review log
- المصدر الأساسي
- Ongoing CDD obligation
07Reporting, records and assuranceEscalate suspicion promptly, retain evidence and test whether the program works.9 عناصر+
Escalate suspicious activity internally
- إجراء التنفيذ
- Give staff a documented route to escalate unusual or suspicious activity to the MLRO without alerting the customer.
- الأدلة الواجب الاحتفاظ بها
- Internal escalation procedure and training
- المصدر الأساسي
- POCAMLA and POCAMLR 2023
Report suspicion to the FRC
- إجراء التنفيذ
- Submit suspicious transactions or activities, including attempts and available supporting information, within two days after the suspicion arose. Do not substitute a working-day interpretation.
- الأدلة الواجب الاحتفاظ بها
- Filed report reference and decision timeline
- المصدر الأساسي
- POCAMLA, s.44(2)-(3); POCAMLR 2023, reg. 38
File applicable cash transaction reports
- إجراء التنفيذ
- Report cash transactions equivalent to or above USD 15,000 under regulation 40, ordinarily by Friday or the end of the reporting week, or immediately where circumstances require.
- الأدلة الواجب الاحتفاظ بها
- CTR rules, filed reports and reconciliation
- المصدر الأساسي
- POCAMLR 2023, reg. 40
Complete annual regulatory reporting
- إجراء التنفيذ
- Submit the annual compliance report for the preceding calendar year and the FRC-requested list of customers from higher-risk countries by 31 January.
- الأدلة الواجب الاحتفاظ بها
- Submitted reports and approval record
- المصدر الأساسي
- POCAMLR 2023, reg. 44; FRC compliance guidance
Prevent tipping off
- إجراء التنفيذ
- Restrict knowledge of reports and investigations and avoid disclosures that could prejudice the process.
- الأدلة الواجب الاحتفاظ بها
- Access controls and communications guidance
- المصدر الأساسي
- POCAMLA reporting framework
Retain CDD and transaction records
- إجراء التنفيذ
- Retain CDD, account, transaction, correspondence and written-analysis records for at least seven years after the transaction, account closure or relationship termination, and longer where the FRC requires this in writing.
- الأدلة الواجب الاحتفاظ بها
- Retention schedule and retrieval test
- المصدر الأساسي
- POCAMLA, s.46; POCAMLR 2023, reg. 42
Make records swiftly available
- إجراء التنفيذ
- Ensure customer and transaction records can be supplied promptly to competent authorities on appropriate authority.
- الأدلة الواجب الاحتفاظ بها
- Retrieval procedure and audit trail
- المصدر الأساسي
- POCAMLA, s.46; POCAMLR 2023, reg. 42
Respect privileged-sector reporting rules
- إجراء التنفيذ
- For advocates, notaries and other independent legal professionals, first determine whether the activity falls within section 48. Suspicion outside the privilege exemption remains reportable and may be submitted through the LSK. Reporting is not required for information protected by professional secrecy or privilege while ascertaining a legal position or representing a client in judicial, administrative, arbitration or mediation proceedings. Document the assessment without improper disclosure.
- الأدلة الواجب الاحتفاظ بها
- Activity-scope, privilege and reporting-route assessment
- المصدر الأساسي
- POCAMLA, ss.18, 44(3)-(3C) and 48; LSK guidance
Train and independently test
- إجراء التنفيذ
- Train relevant personnel, conduct the mandatory independent audit and track remediation to closure.
- الأدلة الواجب الاحتفاظ بها
- Training register, audit report and action plan
- المصدر الأساسي
- POCAMLR 2023, regs. 11(d) and 43
دليل الدولة 2026
7 مجال رقابي و45 فحص تنفيذ مع روابط مباشرة للمصادر التنظيمية.
حمّل قائمة KYC وKYB وAML الخاصة بـ كينيا
شارك بيانات العمل للوصول الفوري إلى قائمة التنفيذ الموثقة بالمصادر لـ كينيا. تاريخ المراجعة التنظيمية: 14 July 2026.
احصل على ملف PDF فورًا
أرسل بياناتك ليبدأ التنزيل تلقائيًا
مراجعة وموثقة بالمصادر
الإصدار 1.0، تمت المراجعة في 14 July 2026
موثوق به من فرق الامتثال الرائدة
سجل المصادر الأساسية
11 مصدرًا مستخدمًا في هذه القائمة
استخدم هذه الروابط للتحقق من التشريعات وإرشادات الجهات الرقابية وإجراءات الإبلاغ والبيانات الدولية.
- POCAMLA, latest available versionKenya Law
- POCAMLA Regulations, 2023Kenya Law
- Compliance obligationsFinancial Reporting Centre
- Due diligence guidance for DNFBPs, March 2025Financial Reporting Centre
- Prevention of Terrorism TFS Regulations, 2024Kenya Law
- Prevention of Proliferation Financing RegulationsKenya Law
- Targeted financial sanctions guidance, July 2025Financial Reporting Centre
- Virtual Asset Service Providers Act, 2025Kenya Law
- Companies Beneficial Ownership Information RegulationsKenya Law
- FATF jurisdictions under increased monitoring, 19 June 2026FATF
- Unlocking Business Trust with KYB in KenyaVOVE ID - contextual reading
إجابات مباشرة
أسئلة KYC وKYB وAML في كينيا
What are the main KYC requirements in Kenya?+
A reporting institution should identify and verify the customer from reliable independent sources, identify and reasonably verify the beneficial owner, understand the purpose and intended nature of the relationship, and conduct ongoing due diligence. The exact data and evidence depend on customer type and risk.
What documents are commonly collected for KYB in Kenya?+
The 2023 Regulations address evidence of registration or incorporation, governing documents, registered and principal business addresses, transaction authority, details of natural persons who manage, control or own the entity, beneficial-owner information and financial statements, subject to the applicable circumstances and exceptions.
How long must AML records be kept in Kenya?+
The 2023 Regulations require reporting institutions to retain transaction records and CDD-related records for a minimum of seven years from completion of the transaction or termination of the account or business relationship.
When must suspicious activity be reported in Kenya?+
Section 44(2)-(3) of POCAMLA and regulation 38 of the 2023 Regulations require suspicious transactions or activities, including attempted transactions, to be reported to the Financial Reporting Centre within two days after the suspicion arose. The legislation does not describe these as working days, and supporting information and directly relevant documentation should accompany the report.
Does Kenya's FATF monitoring status require rejecting Kenyan customers?+
No. Kenya remained under increased monitoring as of 19 June 2026, but FATF does not call for automatic enhanced due diligence or wholesale de-risking solely because a jurisdiction is listed. Apply a proportionate risk-based approach and current Kenyan high-risk-country requirements.
منهجية البحث والمراجعة
تحدد VOVE ID Compliance Research النطاق التنظيمي، وتحول الالتزامات إلى ضوابط تشغيلية، وتربط الادعاءات الجوهرية بالمصادر، وتسجل تاريخ وإصدار كل مراجعة.
VOVE ID Compliance Research · تاريخ المراجعة 14 July 2026 · الإصدار 1.0
This is a general Kenya baseline, not legal advice or a complete sector checklist. Requirements differ by institution type, supervisor, product, customer and risk. Apply the relevant CBK, CMA, IRA, SASRA, LSK, VASP or other sector overlay and confirm current law and regulator guidance before implementation.