Checklist de conformité KYC, KYB et AML
Côte d’Ivoire KYC, KYB & AML
A practical implementation checklist for fintechs, payment institutions and other reporting persons operating in Côte d'Ivoire. It translates Ordinance No. 2023-875, the 2022-2024 supervision and targeted-financial-sanctions framework, the BCEAO's 2024 payment-services rules and 2025 AML/KYC instructions, beneficial-ownership requirements and ARTCI personal-data rules into operational controls and reviewable evidence.
- Revue le
- 15 July 2026
- Version
- 1.3
- domaines de contrôle
- 11
- contrôles d’implémentation
- 62
Réponse directe
Que couvre la checklist de conformité pour Côte d’Ivoire ?
La checklist pour Côte d’Ivoire traduit les principales règles KYC, KYB et AML en 11 domaines de contrôle et 62 contrôles d’implémentation, avec les autorités, obligations de déclaration et preuves à conserver.
Faits réglementaires clés
- Financial intelligence unit
- CENTIF-CI
- Current AML law
- Ordinance No. 2023-875 of 23 November 2023
- Suspicion reporting
- Immediately to CENTIF-CI
- Record retention
- 10 years
- Payment institutions
- 9 authorised in Côte d'Ivoire at 28 February 2026
- FATF public list
- Under increased monitoring as of 19 June 2026
Détail d’implémentation
Exigences et actions de conformité pour Côte d’Ivoire
Ouvrez chaque domaine pour consulter l’exigence, l’action recommandée, les preuves à conserver et la source primaire utilisée.
01Scope, authorities and regulatory perimeterMap every regulated activity, reporting-person category and competent authority before onboarding customers or launching a financial product.5 éléments+
Confirm reporting-person status for every entity and activity
- Action d’implémentation
- Document whether each entity is a financial institution, fintech, payment institution, electronic-money institution, money-transfer provider, foreign-exchange operator, virtual-asset service provider or designated non-financial business or profession. Apply the AML/CFT/CPF duties to all in-scope activities, including activities performed through mandated intermediaries, agents and distributors.
- Preuves à conserver
- Legal-perimeter memo, entity chart, product inventory, reporting-person analysis and accountable owner
- Source primaire
- Ordinance 2023-875, arts. 2-4; BCEAO Instructions 001-03-2025 and 003-03-2025, art. 3
Map each competent regulator and supervisor
- Action d’implémentation
- Record CENTIF-CI as the financial intelligence unit and identify the sector supervisor for each activity, including the BCEAO and UMOA Banking Commission for relevant financial institutions and payment services and ARTCI for personal-data processing. Apply Ordinance No. 2022-237 only after checking its Article 3 exclusions for specified financial-sector categories; Decree No. 2024-58 designates particular EPNFD (DNFBP), non-profit organisation, manual foreign-exchange and decentralised financial-system supervisors.
- Preuves à conserver
- Supervisor matrix, Article 3 exclusion analysis, licence register, regulator contacts, filing inventory and escalation route
- Source primaire
- Ordinance 2023-875, arts. 95-100 and 107; Ordinance 2022-237, art. 3; Decree 2024-58
Obtain the correct financial-services authorisation
- Action d’implémentation
- Do not treat company registration as permission to provide regulated financial services. Obtain the BCEAO or other competent authorisation for the actual service, verify the authorised scope and conditions, and reconcile the entity against the current official register before launch and periodically thereafter.
- Preuves à conserver
- Licence or approval, permitted-services schedule, official-register extract, renewal calendar and regulatory correspondence
- Source primaire
- BCEAO Instruction 001-01-2024, arts. 2, 4 and 17; BCEAO authorised-payment register
Stop unauthorised payment activity
- Action d’implémentation
- Ensure any structure providing payment services is authorised under Instruction No. 001-01-2024. The BCEAO required non-compliant structures to cease providing payment services from 1 May 2025; do not onboard an unlicensed provider merely because it has a commercial registration or technology contract.
- Preuves à conserver
- Counterparty licence check, launch gate, provider inventory, cessation controls and legal sign-off
- Source primaire
- BCEAO Instruction 001-01-2024; BCEAO Notice 004-03-2025
Treat virtual-asset activity as a separately regulated perimeter
- Action d’implémentation
- Identify any custody, exchange, transfer, issuance support or other virtual-asset service. Obtain the prior approval required by the competent authority and apply the AML/CFT/CPF framework; do not assume a payment or fintech authorisation covers virtual-asset services.
- Preuves à conserver
- Virtual-asset perimeter analysis, approval, wallet and product map, control assessment and launch decision
- Source primaire
- Ordinance 2023-875, arts. 58-59
02Governance, risk and independent assuranceBuild a senior-owned, risk-based programme with capable systems, trained staff, independent testing and regulator-ready reporting.6 éléments+
Approve a complete AML/CFT/CPF control framework
- Action d’implémentation
- Maintain formal, regularly updated policies, procedures and controls covering customer and beneficial-owner identification, risk management, CDD, monitoring, records, internal control, compliance, data protection, recruitment and continuing staff training. Obtain senior-management approval and apply the framework across relevant branches, subsidiaries and agents.
- Preuves à conserver
- Approved policy suite, regulatory mapping, version history, group standard, local addenda and staff attestations
- Source primaire
- Ordinance 2023-875, arts. 12-14
Complete and maintain a documented enterprise risk assessment
- Action d’implémentation
- Assess customer, country, geographic, product, service, transaction and delivery-channel risks, including new products, business practices and technologies before launch. Document inherent risk, control effectiveness, residual risk, mitigation and acceptance, and align the assessment with national and regional risk information.
- Preuves à conserver
- Risk methodology, data inputs, approved assessment, pre-launch assessments, residual-risk decisions and remediation plan
- Source primaire
- Ordinance 2023-875, art. 15
Give the AML function authority and independence
- Action d’implémentation
- Designate the internal AML/CFT/CPF function and its responsible officer, ensure direct access to the deliberative body, operational independence, adequate people and tools, and continuity. Communicate authorised CENTIF declarants and relevant changes to CENTIF-CI and the supervisor without delay.
- Preuves à conserver
- Appointment, organisation chart, direct-access protocol, resources, deputy arrangements and regulator notifications
- Source primaire
- Ordinance 2023-875, arts. 12 and 100; BCEAO Instruction 001-03-2025, arts. 4-8
Operate capable monitoring and screening systems
- Action d’implémentation
- For institutions within the 2025 BCEAO instruction, support customer and account profiling, real-time customer and transaction screening, account-movement monitoring, alert generation, aggregation of all accounts and transactions for the same customer, and detection of unusual or suspicious activity. Incorporate risk-profile changes within one month and targeted-sanctions changes without delay.
- Preuves à conserver
- System architecture, data lineage, scenario inventory, sanctions-update log, one-month profile-change samples and effectiveness review
- Source primaire
- BCEAO Instruction 001-03-2025, art. 6
Train annually and audit at least annually
- Action d’implémentation
- Deliver a documented AML/CFT/CPF training and awareness programme at least annually to relevant staff, governance bodies and mandated intermediaries. Independently audit the programme according to risk and at least once each year; submit findings to the deliberative body and track remediation to verified closure.
- Preuves à conserver
- Annual curriculum, attendance, effectiveness results, audit plan, report, board review and closure proof
- Source primaire
- BCEAO Instruction 001-03-2025, arts. 9-11
Submit the annual BCEAO control report on time
- Action d’implémentation
- Prepare the annual report on the internal AML/CFT/CPF framework, including organisation, resources, training, controls, customer identification, retention, detection, suspicious reporting, weaknesses, statistics, audit conclusions and the next-year plan. Submit it to the BCEAO and competent supervisor within two months after financial year-end.
- Preuves à conserver
- Approved annual report, data reconciliation, submission receipts and regulator follow-up
- Source primaire
- BCEAO Instruction 001-03-2025, art. 12
03Customer due diligence and onboardingIdentify customers, representatives and beneficial owners from reliable independent sources before service and maintain the file throughout the relationship.6 éléments+
Identify and verify before the relationship
- Action d’implémentation
- Before establishing a relationship or assisting with a transaction, identify permanent and occasional customers and beneficial owners, verify collected identifiers from reliable and independent documents, data or information, and understand the purpose and intended nature of the relationship.
- Preuves à conserver
- Identity record, verification response, source provenance, purpose profile, expected activity and reviewer approval
- Source primaire
- Ordinance 2023-875, arts. 16-17
Apply every statutory CDD trigger
- Action d’implémentation
- Apply identification and verification at account opening, custody of securities or valuables, safe-deposit allocation, establishment of a business relationship, occasional transactions, domestic or international funds transfers, whenever suspicion exists, for linked manual-exchange or multiple-cash activity when the competent threshold is met, and when a person claims to act for the customer. Configure thresholds only from the current controlling UMOA decisions.
- Preuves à conserver
- CDD-trigger matrix, linked-transaction logic, threshold source register, completed cases and quality testing
- Source primaire
- Ordinance 2023-875, art. 17; UMOA Decisions 021/21/12/2023 and 003/28/03/2024
Collect the BCEAO-prescribed individual identifiers
- Action d’implémentation
- For an individual, collect name, given names, date and place of birth, nationality, home address and identity-document number. Verify against a valid official photographic identity document, using a combination of official documents where necessary, and use sufficiently recent address evidence under the BCEAO instruction.
- Preuves à conserver
- Identity fields, valid document image, authenticity result, address evidence, expiry control and exception decision
- Source primaire
- BCEAO Instruction 003-03-2025, arts. 5-6
Verify authority to act
- Action d’implémentation
- Identify and verify any representative as a customer and obtain certified evidence of the mandate. Confirm that the proposed relationship and transactions are within the representative's delegated powers and screen both representative and principal.
- Preuves à conserver
- Representative identity, certified mandate, power comparison, principal record and screening results
- Source primaire
- Ordinance 2023-875, art. 17(j); BCEAO Instruction 003-03-2025, art. 11
Use deferred verification only within the narrow exception
- Action d’implémentation
- Complete verification before the relationship, throughout it and at the occasional transaction. Defer completion only when it is completed as soon as possible and no later than before the first transaction, is essential not to interrupt normal business and the risks are effectively managed; adopt specific controls for any access before verification.
- Preuves à conserver
- Deferral rationale, approval, product restrictions, completion deadline, verification timestamp and overdue block
- Source primaire
- Ordinance 2023-875, art. 18
Reject or exit when CDD cannot be completed
- Action d’implémentation
- If required CDD cannot be completed, do not open the account, refuse the occasional transaction or terminate the existing relationship, as applicable, and file a suspicious transaction report concerning the customer. If completing CDD would alert a suspected customer, the ordinance permits stopping those CDD steps and requires a report to CENTIF-CI.
- Preuves à conserver
- Rejected or exited case, reason, account restrictions, STR decision, filing receipt and non-tipping-off controls
- Source primaire
- Ordinance 2023-875, art. 25
04KYB and beneficial ownershipVerify legal existence and authority, trace ultimate natural-person ownership and control, and reconcile customer evidence with the official beneficial-ownership register.6 éléments+
Verify legal-person identity and operating reality
- Action d’implémentation
- Collect and independently verify legal name, legal form, constitutional documents, registered and principal business address, directors, shareholders or members, relevant managers, registration, tax identifiers, licences and authorised representatives. Compare registry information with the entity's actual business, website, accounts and transaction footprint.
- Preuves à conserver
- Recent registry extract, constitutional documents, director and shareholder lists, licence checks, operating evidence and discrepancy log
- Source primaire
- Ordinance 2023-875, art. 26; BCEAO Instruction 003-03-2025, arts. 7-8
Apply the natural-person ownership and control cascade
- Action d’implémentation
- Identify and reasonably verify the natural persons who ultimately hold a controlling ownership interest. If ownership does not reveal the beneficial owner or creates doubt, identify control by other means; only when no natural person is identified through either step, record the relevant senior managing official as the statutory fallback and document why.
- Preuves à conserver
- Ownership chart to natural persons, control analysis, identity verification, fallback rationale and compliance approval
- Source primaire
- Ordinance 2023-875, art. 26
Apply the current more-than-25% operational definition correctly
- Action d’implémentation
- For institutions subject to BCEAO Instruction No. 003-03-2025, identify natural persons who directly or indirectly hold more than 25% of a company's capital or voting rights, or more than 25% of interests in a collective-investment structure, together with the instruction's other-control and legal-arrangement tests. Do not use the percentage as a safe harbour where another person exercises ultimate control; preserve the ownership, other-control and senior-managing-official cascade.
- Preuves à conserver
- Capital and voting analysis, more-than-25% test, collective-investment analysis, other-control assessment, legal-arrangement analysis and sign-off
- Source primaire
- BCEAO Instruction 003-03-2025, art. 2
Identify every relevant legal-arrangement party
- Action d’implémentation
- For a trust or comparable legal arrangement, identify and verify the settlor, trustee, protector where applicable, beneficiaries or class of beneficiaries and every other natural person exercising ultimate effective control, including through a chain of ownership or control.
- Preuves à conserver
- Trust deed or equivalent, party register, identity verification, control map and beneficiary-class record
- Source primaire
- Ordinance 2023-875, art. 26; BCEAO Instruction 003-03-2025, arts. 9-10
Reconcile the customer file with the beneficial-ownership register
- Action d’implémentation
- Maintain an internal beneficial-owner file with names, ownership, voting and control percentages. Check the official register, notify its competent authority of a divergence or reasonable doubt, and use other reliable risk-based means if the register cannot verify the customer's list. Treat registry data as evidence, not as a substitute for analysis.
- Preuves à conserver
- Internal BO file, register extract, reconciliation, divergence notification, alternate-source checks and resolution
- Source primaire
- BCEAO Instruction 003-03-2025, art. 12; Law 2024-362; Decree 2024-583
Keep corporate and ownership information accurate and retrievable
- Action d’implémentation
- Ensure legal persons maintain accurate, current basic and beneficial-ownership information and controls against misuse of bearer and nominee arrangements. Preserve the required ownership information for at least ten years following dissolution or the end of the relevant professional relationship.
- Preuves à conserver
- Corporate register, change triggers, periodic review, nominee declarations, dissolution archive and retrieval test
- Source primaire
- Ordinance 2023-875, arts. 76-83
05Remote onboarding and identity technologyMake non-face-to-face onboarding demonstrably reliable, risk-assessed and compliant with both BCEAO identity rules and ARTCI data requirements.6 éléments+
Use reliable electronic-identification schemes
- Action d’implémentation
- For a customer not physically present or represented, use reliable electronic-identification schemes and means under the institution's responsibility while preserving the identification and verification requirements applicable to that customer type.
- Preuves à conserver
- Scheme assessment, vendor due diligence, assurance mapping, verification output, exceptions and approval
- Source primaire
- Ordinance 2023-875, art. 22; BCEAO Instruction 003-03-2025, art. 13
Document the full remote-onboarding control design
- Action d’implémentation
- Maintain a detailed customer journey, reliability measures, authentication and retention procedures, cybersecurity and personal-data compliance, and an internal-control gate ensuring the first transaction occurs only after verification of the customer and, where applicable, the beneficial owner.
- Preuves à conserver
- Journey map, control specification, first-transaction gate test, security review, privacy approval and retention design
- Source primaire
- BCEAO Instruction 003-03-2025, art. 14
Risk-assess the remote channel before and during use
- Action d’implémentation
- Assess the channel's ML/TF/PF, impersonation, document, synthetic-identity, account-takeover and wider operational risks before deployment and after material change. Define human-review levels for categories of legal persons and retain all KYB information required by the instruction.
- Preuves à conserver
- Channel risk assessment, legal-person typology, human-review matrix, change review and control testing
- Source primaire
- BCEAO Instruction 003-03-2025, arts. 15-16
Match the person to the identity evidence
- Action d’implémentation
- Ensure the technology compares the customer's physical characteristics with the submitted identity evidence. Where biometrics are used, ensure they can be linked unambiguously to the customer and apply presentation-attack, duplicate and exception controls proportionate to risk.
- Preuves à conserver
- Face or biometric match result, liveness or equivalent test, duplicate check, thresholds, manual review and QA
- Source primaire
- BCEAO Instruction 003-03-2025, art. 17
Route ambiguous remote evidence to in-person verification
- Action d’implémentation
- Where identification evidence is insufficient, ambiguous or uncertain and affects reliability, stop remote completion and route the customer to physical verification. Do not override this rule merely to preserve conversion.
- Preuves à conserver
- Quality rules, failed cases, in-person referral, completion evidence, override prohibition and monitoring
- Source primaire
- BCEAO Instruction 003-03-2025, art. 18
Obtain ARTCI authorisation before biometric processing
- Action d’implémentation
- Treat facial, fingerprint, voice or other biometric identity processing as sensitive and obtain the required prior authorisation from ARTCI before production use. Align the authorised purpose, dataset, retention, processors and transfers with the deployed workflow.
- Preuves à conserver
- ARTCI authorisation, approved processing description, biometric data map, vendor contract, retention and deletion test
- Source primaire
- Law 2013-450, art. 7; ARTCI biometric-processing guidance
06Customer risk, PEPs and enhanced due diligenceUse documented risk classification to drive approvals, information depth, monitoring and review frequency without indiscriminate exclusion.4 éléments+
Apply enhanced controls to politically exposed persons
- Action d’implémentation
- Use systems and current authoritative lists to identify domestic, foreign and international-organisation PEPs, their family members and close associates. Under Article 29 of Ordinance No. 2023-875, obtain executive approval before establishing or continuing the relationship, establish source of wealth and source of funds, apply enhanced ongoing monitoring, and reassess every PEP customer's profile every three years. Apply periodic and event-driven CDD updates as additional controls, including the sector controls required by BCEAO Instructions No. 001-03-2025 and No. 003-03-2025.
- Preuves à conserver
- PEP and associate screening, list-validation record, executive approval, source-of-wealth and source-of-funds evidence, enhanced-monitoring review, documented three-year profile reassessment under Ordinance Article 29, and additional periodic or event-driven CDD refresh under applicable BCEAO sector controls
- Source primaire
- Ordinance 2023-875, art. 29; BCEAO Instructions 001-03-2025 and 003-03-2025
Apply enhanced or simplified measures only on evidence
- Action d’implémentation
- Apply enhanced diligence where risk is higher and preserve written results. Use simplified measures only where a documented lower-risk assessment supports them; stop simplification whenever suspicion or a specific higher-risk condition exists.
- Preuves à conserver
- Risk decision, EDD or SDD checklist, corroborating records, written outcome, approval and monitoring
- Source primaire
- Ordinance 2023-875, arts. 84-85
Use FATF status as a risk input, not an automatic exit rule
- Action d’implémentation
- Record Côte d'Ivoire's increased-monitoring status in country and institutional risk assessments and track FATF updates. Do not interpret grey-list status as a FATF call for blanket EDD, automatic rejection or de-risking; apply proportionate controls based on actual customer and transaction risk.
- Preuves à conserver
- Country-risk entry, dated FATF source, customer-specific assessment, proportionality rationale and update log
- Source primaire
- FATF Increased Monitoring statements, 13 February and 19 June 2026; Ordinance 2023-875, arts. 15 and 30
Control correspondent and shell-bank exposure
- Action d’implémentation
- Before a cross-border correspondent relationship, understand the respondent's business, reputation, supervision and AML controls, obtain prior senior approval, define responsibilities in writing and test any payable-through access. Do not establish or maintain relationships with shell banks or respondents permitting shell-bank use.
- Preuves à conserver
- Correspondent questionnaire, public checks, control assessment, approval, agreement and shell-bank attestation
- Source primaire
- Ordinance 2023-875, arts. 31-32; BCEAO Instruction 001-03-2025, art. 13
07Ongoing monitoring, unusual activity and transfersKeep profiles current, monitor actual activity against expected behaviour and preserve complete payment-chain information.5 éléments+
Monitor the relationship continuously
- Action d’implémentation
- Scrutinise transactions throughout the relationship to ensure consistency with the customer's identity, business, risk profile, source of funds and expected activity. Keep customer and beneficial-owner information current whenever prior information is no longer accurate or relevant.
- Preuves à conserver
- Customer profile, monitoring coverage, alert cases, trigger reviews, refreshed CDD and quality testing
- Source primaire
- Ordinance 2023-875, arts. 16 and 19-20
Investigate complex, unusual and apparently purposeless activity
- Action d’implémentation
- Specially examine unusually complex, high-value or otherwise atypical operations and cash or bearer-instrument activity meeting the competent threshold. Establish origin and destination of funds, transaction purpose and beneficial owners; prepare a confidential written report and retain it for ten years.
- Preuves à conserver
- Alert, customer inquiry, corroborating evidence, written analysis, disposition and retention record
- Source primaire
- Ordinance 2023-875, arts. 21 and 23
Aggregate related cash activity without inventing thresholds
- Action d’implémentation
- Detect single and linked cash transactions for the reports required by Article 72 and apply enhanced attention to unusual or activity-inconsistent deposits. Configure monetary values and comparison operators only from current competent-authority decisions and preserve the source and effective date in the rules register.
- Preuves à conserver
- Linked-transaction logic, threshold register, rule tests, cash reports, unusual-deposit cases and filing receipts
- Source primaire
- Ordinance 2023-875, art. 72; UMOA Decisions 021/21/12/2023 and 003/28/03/2024
Carry complete originator and beneficiary information
- Action d’implémentation
- For domestic and cross-border wire transfers, collect, verify where required, transmit and retain the prescribed originator and beneficiary information. Apply ordering, intermediary and beneficiary-institution controls for missing or incomplete data and decide whether to execute, reject, suspend, monitor or report.
- Preuves à conserver
- Payment-message specification, validation rules, role matrix, sample transfers, repair and reject queue and STR decisions
- Source primaire
- Ordinance 2023-875, arts. 39-47
Control agents, distributors and outsourced monitoring
- Action d’implémentation
- Apply the programme to operations performed under the institution's responsibility by mandated intermediaries, transfer sub-agents, foreign-exchange sub-delegates and electronic-money distributors. Contract for CDD, screening, records, training, audit and incident rights and monitor effective performance.
- Preuves à conserver
- Agent and provider register, due diligence, contract, training, monitoring results, issues and termination controls
- Source primaire
- Ordinance 2023-875, arts. 12-14 and 33; BCEAO Instructions 001-03-2025 and 003-03-2025, art. 3
08Suspicious transaction reporting and confidentialityEscalate and report suspicion immediately, preserve the pre-transaction rule and prevent tipping off.6 éléments+
Report suspicion immediately to CENTIF-CI
- Action d’implémentation
- Immediately report funds recorded in the books and completed or attempted operations where there is suspicion or reasonable grounds to suspect ML, TF, PF or a predicate offence. Apply the rule regardless of amount and include tax-fraud suspicion where the regulatory criterion is present.
- Preuves à conserver
- Case chronology, suspicion rationale, report, immediate-submission timestamp and CENTIF receipt
- Source primaire
- Ordinance 2023-875, art. 60
Report unresolved identity doubt and supplements
- Action d’implémentation
- Report any operation where the originator, beneficial owner, trust settlor or equivalent asset-arrangement party remains doubtful after diligence. Send without delay any information that negates, reinforces or modifies an earlier report.
- Preuves à conserver
- CDD investigation, unresolved-doubt decision, initial report, supplemental report and timestamps
- Source primaire
- Ordinance 2023-875, art. 60
Report before executing where possible
- Action d’implémentation
- Refrain from executing suspect operations until the report has been made. If an operation was already executed because delay was impossible, would have frustrated an investigation or suspicion arose only afterward, inform CENTIF-CI without delay and preserve the reason execution occurred.
- Preuves à conserver
- Hold decision, filing timestamp, execution chronology, exception rationale and post-execution notice
- Source primaire
- Ordinance 2023-875, art. 61
Protect report confidentiality and prevent tipping off
- Action d’implémentation
- Restrict access to suspicious transaction reports, related analysis and CENTIF follow-up. Do not tell the customer, transaction owner or unauthorised third party that a report exists, what it contains or what action followed; train customer-facing staff on safe communications.
- Preuves à conserver
- Access controls, need-to-know list, communication scripts, training, audit logs and incident response
- Source primaire
- Ordinance 2023-875, art. 63
Operationalise CENTIF opposition orders
- Action d’implémentation
- Capture the declared execution deadline and ensure operations can be stopped when CENTIF-CI issues a written opposition. Maintain the hold for the statutory period of no more than four days and implement only a competent judicial extension or provisional seizure; do not release early without authority.
- Preuves à conserver
- Opposition order, hold timestamp, four-day calculation, judicial decision, release approval and audit trail
- Source primaire
- Ordinance 2023-875, arts. 64-65
Keep the authorised declarant function continuously available
- Action d’implémentation
- Notify CENTIF-CI and the supervisor of the identity and role of authorised declarants and changes without delay. Separate the declarant role from the director-general role, preserve emergency escalation and ensure the function can answer CENTIF requests within required deadlines.
- Preuves à conserver
- Declarant appointment, regulator notifications, incompatibility check, deputy coverage, request log and response evidence
- Source primaire
- Ordinance 2023-875, art. 100
09Targeted financial sanctionsScreen current UN and national designations, freeze immediately without notice and report assets, attempted transactions and implementation measures.5 éléments+
Maintain a without-delay sanctions operating model
- Action d’implémentation
- Maintain documented organisation and procedures to implement asset freezes and prohibitions on making funds, property or other economic resources available or usable without delay, including across group entities where applicable.
- Preuves à conserver
- TFS policy, authoritative-list inventory, roles, decision tree, group deployment and simulation results
- Source primaire
- Ordinance 2023-875, art. 89; Decree 2024-216 as amended by Decree 2024-997
Apply UN and national designations on the correct legal basis
- Action d’implémentation
- Subscribe to the official CENTIF-CI and competent-authority distribution channels. Treat relevant UN Security Council designations as immediately applicable under the amended decree and implement national administrative-freeze decisions ordered by the Minister responsible for Finance.
- Preuves à conserver
- Subscription, designation source, receipt timestamp, legal-basis record, list update and screening completion
- Source primaire
- Ordinance 2023-875, art. 124; Decree 2024-216 as amended by Decree 2024-997
Freeze immediately and without prior notice
- Action d’implémentation
- Immediately freeze funds, property and other economic resources belonging to designated persons and entities upon official notification, without informing the holder in advance. Include directly or indirectly owned or controlled assets and assets of persons acting on behalf of or at the direction of designated parties as required by the amended framework.
- Preuves à conserver
- Match analysis, ownership and control map, freeze timestamp, asset inventory, no-notice record and approval
- Source primaire
- Ordinance 2023-875, art. 89; Decree 2024-216 as amended by Decree 2024-997
Prohibit availability, use and circumvention
- Action d’implémentation
- Prevent direct or indirect availability or use of frozen assets for designated persons, controlled entities, agents or instructed parties, and prevent transactions designed to evade or circumvent the measure. Continue the freeze until a competent delisting, release or other lawful decision applies.
- Preuves à conserver
- Payment blocks, connected-party analysis, circumvention scenarios, continuing-freeze review and release authority
- Source primaire
- Ordinance 2023-875, art. 89; Decree 2024-216 as amended by Decree 2024-997
Report frozen assets, matches and attempted transactions
- Action d’implémentation
- Immediately notify CENTIF-CI of funds linked to listed TF or PF persons, entities and associated terrorists. Report to the competent authority all frozen assets and measures taken under UN prohibitions, including attempted transactions, and suspend any customer order benefiting a frozen target while informing the authority without delay.
- Preuves à conserver
- CENTIF notice, competent-authority report, frozen-asset schedule, attempted-transaction report, suspended order and timestamps
- Source primaire
- Ordinance 2023-875, arts. 90-91; Decree 2024-216 as amended by Decree 2024-997
10Payment-service complianceOverlay the national AML framework with the BCEAO's authorisation, governance, safeguarding and operational requirements for UMOA payment services.5 éléments+
Classify every payment service under Article 4
- Action d’implémentation
- Map account operation, cash placement or withdrawal, payment execution, payment-instrument issuance or acquisition, money remittance, payment initiation and account-information functionality to the service categories in the instruction. Confirm which entity performs each regulated role.
- Preuves à conserver
- Product-to-service map, funds-flow diagram, role allocation, legal opinion and authorised-scope comparison
- Source primaire
- BCEAO Instruction 001-01-2024, arts. 2-4
Meet legal-form and establishment requirements
- Action d’implémentation
- Ensure an applicant payment institution uses a permitted legal form and has its registered office in an UMOA member state. Align governance, shareholding, management, operational programme and controls with the authorisation dossier and notify material changes as required.
- Preuves à conserver
- Constitutional documents, registered-office proof, ownership file, governance records, application and change log
- Source primaire
- BCEAO Instruction 001-01-2024, arts. 13-17
Operate payment governance and risk controls
- Action d’implémentation
- Maintain governance, internal control, risk and security management, personal-data protection, incident handling and customer-complaint arrangements proportionate to the services. Integrate AML ownership, monitoring, sanctions and reporting into those arrangements rather than treating them as a separate paper policy.
- Preuves à conserver
- Governance framework, control map, risk register, security and privacy assessments, incident log and complaints register
- Source primaire
- BCEAO Instruction 001-01-2024, art. 16; BCEAO Instruction 001-03-2025, arts. 4-12
Safeguard customer funds
- Action d’implémentation
- Identify all funds received from payment-service users or through another provider and apply the instruction's separation and safeguarding requirements. Reconcile protected balances, settlement accounts and user liabilities and prevent use for the institution's own account.
- Preuves à conserver
- Safeguarding structure, designated accounts, daily reconciliation, exception log, insolvency analysis and management review
- Source primaire
- BCEAO Instruction 001-01-2024, art. 48
Verify counterparties against the current register
- Action d’implémentation
- Before partnering with a payment institution, verify its name, jurisdiction and authorisation against the latest BCEAO register. As of 28 February 2026, the BCEAO reported nine authorised payment institutions in Côte d'Ivoire; treat the count as dated information and verify the named entity, not only the total.
- Preuves à conserver
- Dated register extract, entity match, permitted-services check, periodic rescreening and discrepancy escalation
- Source primaire
- BCEAO list of authorised payment institutions in the UMOA, 28 February 2026
11Records, privacy and regulatory readinessPreserve reconstructable ten-year evidence while meeting ARTCI formalities, purpose, rights, security and transfer controls.8 éléments+
Retain AML and transaction evidence for ten years
- Action d’implémentation
- Keep customer identity, customer knowledge, risk profile, CDD analyses and other relevant information for ten years after account closure or the end of the permanent or occasional relationship. Keep transaction records, account books and business correspondence for ten years after execution and ensure individual transactions can be reconstructed.
- Preuves à conserver
- Retention schedule, immutable archive, relationship-end triggers, transaction samples, retrieval test and deletion controls
- Source primaire
- Ordinance 2023-875, arts. 23-24
Complete the correct ARTCI prior formality
- Action d’implémentation
- Inventory every personal-data processing activity and determine whether it requires declaration, prior authorisation or another ARTCI formality before use. Obtain ARTCI prior authorisation for biometric processing under Article 7 and for other processing where the law requires it, and keep the authorised purpose and design aligned with production.
- Preuves à conserver
- Processing inventory, formality assessment, declaration or authorisation, change review and ARTCI correspondence
- Source primaire
- Law 2013-450, art. 7; Decree 2015-79; ARTCI biometric guidance
Process lawfully, fairly and for defined purposes
- Action d’implémentation
- Define the legal basis and explicit legitimate purposes for KYC, screening, monitoring, fraud and reporting data; collect only adequate and relevant data, maintain accuracy, provide required notices and do not repurpose or retain identifiable data incompatibly with the declared purpose.
- Preuves à conserver
- Lawful-basis register, privacy notices, purpose map, minimisation review, accuracy controls and retention rationale
- Source primaire
- Law 2013-450, arts. 15-18
Enable data-subject rights without compromising AML law
- Action d’implémentation
- Provide operational channels for information, access, rectification, update, opposition and other applicable rights. Document any restriction required to protect suspicious-report confidentiality, sanctions implementation, investigations or another legal obligation rather than disclosing protected compliance activity.
- Preuves à conserver
- Rights procedure, request log, identity checks, response records, exemption rationale and legal review
- Source primaire
- Law 2013-450, arts. 28-36; Ordinance 2023-875, art. 63
Secure data and govern processors
- Action d’implémentation
- Apply technical and organisational measures appropriate to identity, biometric, financial and screening data so records are not altered, damaged or accessed by unauthorised persons. Contractually limit processors, control access, encrypt sensitive data, test recovery and deletion, and document incidents and remediation.
- Preuves à conserver
- Security risk assessment, access review, encryption evidence, processor agreement, test results, incident log and remediation
- Source primaire
- Law 2013-450, arts. 39-41
Control interconnection and cross-border transfers
- Action d’implémentation
- Map every API, shared database, cloud region and overseas support access. Obtain ARTCI authorisation where interconnection or transfer requires it, document destination safeguards and recipients, and ensure transfers remain within the notified or authorised purpose and security design.
- Preuves à conserver
- Data-flow map, interconnection approval, transfer authorisation, destination assessment, contracts and transfer register
- Source primaire
- Law 2013-450, arts. 14 and 26-27
Maintain annual privacy accountability evidence
- Action d’implémentation
- Where the statutory controller and correspondent reporting duties apply, prepare the annual compliance report and submit it to ARTCI. Keep a personal-data protection correspondent with appropriate independence and records of advice, controls and escalations.
- Preuves à conserver
- Correspondent appointment, annual report, submission receipt, activity log, findings and remediation
- Source primaire
- Law 2013-450, arts. 41-42
Stay inspection- and sanction-ready
- Action d’implémentation
- Maintain a single evidence index connecting each legal duty to policy, owner, system control, sample, issue and remediation. Support on-site and off-site supervision and respond fully to lawful requests. Before applying the 2022 administrative-sanctions regime, check the exclusions for specified financial-sector categories in Article 3; Decree No. 2024-58 designates particular EPNFD (DNFBP), non-profit organisation, manual foreign-exchange and decentralised financial-system supervisors.
- Preuves à conserver
- Obligations register, Article 3 exclusion analysis, evidence library, inspection protocol, request log, issue register and closure proof
- Source primaire
- Ordinance 2022-237, art. 3; Decree 2024-58; Ordinance 2023-875, arts. 107 and 113
Guide pays 2026
11 domaines de contrôle et 62 vérifications d'implémentation avec sources réglementaires directes.
Téléchargez la checklist KYC, KYB et AML pour Côte d’Ivoire
Partagez vos coordonnées professionnelles pour accéder immédiatement à la checklist d'implémentation sourcée pour Côte d’Ivoire. Date de revue réglementaire : 15 July 2026.
Recevez le PDF immédiatement
Envoyez vos coordonnées pour démarrer automatiquement le téléchargement
Revue et sourcée
Version 1.3, revue le 15 July 2026
Approuvé par des équipes conformité de premier plan
Registre des sources primaires
22 sources utilisées pour cette checklist
Utilisez ces liens pour vérifier la législation, les lignes directrices, les procédures de déclaration et les statuts internationaux.
- Ordinance No. 2023-875 of 23 November 2023 on AML/CFT/CPFCENTIF-CI · primary
- Côte d'Ivoire AML/CFT/CPF legislation and regulation portalCENTIF-CI · primary
- Ordinance No. 2022-237 on administrative sanctions and supervisionCENTIF-CI · primary
- Decree No. 2024-58 implementing Ordinance No. 2022-237CENTIF-CI · primary
- Decree No. 2024-216 on targeted financial sanctionsCENTIF-CI · primary
- Decree No. 2024-997 amending Decree No. 2024-216CENTIF-CI · primary
- Official targeted-financial-sanctions lists and customer checkCENTIF-CI · primary
- Law No. 2024-362 establishing the beneficial-ownership registerCENTIF-CI · primary
- Decree No. 2024-583 on access to beneficial-ownership informationCENTIF-CI · primary
- UMOA Decision No. 021 of 21 December 2023 on AML/CFT/CPF thresholdsBCEAO · primary
- UMOA Decision No. 003 of 28 March 2024 on complementary thresholdsBCEAO · primary
- BCEAO Instruction No. 001-01-2024 on payment services in the UMOABCEAO · primary
- BCEAO Notice No. 004-03-2025 ending the payment-services transitionBCEAO · primary
- BCEAO Instruction No. 001-03-2025 on AML/CFT/CPF organisation, internal control and complianceBCEAO · primary
- BCEAO Instruction No. 003-03-2025 on customer identification, verification and knowledgeBCEAO · primary
- Authorised payment institutions in the UMOA at 28 February 2026BCEAO · primary
- Law No. 2013-450 of 19 June 2013 on personal-data protectionARTCI · primary
- ARTCI biometric-processing guidanceARTCI · primary
- ARTCI personal-data protection decisionsARTCI · primary
- FATF jurisdictions under increased monitoring, 13 February 2026FATF · primary
- FATF jurisdictions under increased monitoring, 19 June 2026FATF · primary
- KYC and AML Compliance in Ivory Coast 2026VOVE ID · contextual
Réponses directes
Questions KYC, KYB et AML pour Côte d’Ivoire
What is the current AML law in Côte d'Ivoire?+
Ordinance No. 2023-875 of 23 November 2023 is the current national AML/CFT/CPF baseline. It was ratified by Law No. 2024-363 of 11 June 2024 and displaced contrary provisions of former Law No. 2016-992.
How quickly must a suspicious transaction be reported?+
Article 60 of Ordinance No. 2023-875 requires reporting immediately to CENTIF-CI. The obligation covers relevant funds, completed operations and attempted operations, and Article 61 generally requires reporting before execution where possible.
What beneficial-owner threshold applies to financial institutions?+
BCEAO Instruction No. 003-03-2025 Article 2 uses a more-than-25% test for company capital or voting rights and for interests in collective-investment structures, together with other-control and legal-arrangement tests. The percentage is not a safe harbour: institutions must still identify any natural person exercising ultimate control and use the senior-managing-official fallback only when no natural person is identified through ownership or other control.
Can a fintech onboard customers fully remotely?+
Yes, when it uses reliable electronic-identification means and satisfies BCEAO Instruction No. 003-03-2025. The first transaction must not occur before customer and applicable beneficial-owner verification, ambiguous evidence must be routed to in-person verification, and biometric processing requires prior ARTCI authorisation.
Is Côte d'Ivoire on the FATF grey list?+
Yes. Côte d'Ivoire was under increased monitoring in FATF's 13 February 2026 statement and remained listed on 19 June 2026. FATF then determined that the action plan was substantially completed and an on-site assessment was warranted, but formal removal had not yet been announced. FATF does not call for blanket EDD or de-risking solely because a jurisdiction is on this list.
How long must AML records be kept?+
Article 23 of Ordinance No. 2023-875 requires ten years for customer, KYC, risk and analysis records after account closure or relationship cessation, and ten years for transaction records after the transaction. Records must permit reconstruction of individual transactions.
Does company registration authorise payment services?+
No. Payment services require the applicable BCEAO authorisation under Instruction No. 001-01-2024. The BCEAO required unauthorised providers to cease from 1 May 2025, and its register reported nine authorised payment institutions in Côte d'Ivoire at 28 February 2026.
Méthode de recherche et de revue
VOVE ID Compliance Research cartographie le périmètre réglementaire, traduit les obligations en contrôles opérationnels, relie les affirmations importantes aux sources et date chaque revue.
VOVE ID Compliance Research · Revue le 15 July 2026 · Version 1.3
This checklist is general compliance information, not legal advice. Ordinance No. 2023-875 is the current AML/CFT/CPF baseline; it displaced contrary provisions of former Law No. 2016-992 and this checklist does not use that superseded law as authority. Confirm sector-specific rules, applicable UMOA threshold decisions, reporting forms, supervisory directions and licence conditions directly with CENTIF-CI, the BCEAO, the UMOA Banking Commission, ARTCI and the competent national authority before implementation.