كمبوديا KYC, KYB & AML compliance checklist
قائمة عملية وموثقة بالمصادر لتنفيذ متطلبات KYC وKYB وAML في كمبوديا.
- تاريخ آخر مراجعة
- تاريخ آخر مراجعة:
- الإصدار
- الإصدار 1.1
دليل تنفيذ قابل للتنزيل
الحصول على ملف PDF
11 مجالات رقابية · 38 فحوص تنفيذ
تاريخ آخر مراجعة: 11 November 2026 · الإصدار 1.1
تنزيل قائمة التحققإجابة مباشرة
ما الذي تغطيه قائمة الامتثال الخاصة بـ كمبوديا؟
تحوّل قائمة كمبوديا قواعد KYC وKYB وAML الأساسية إلى 11 مجالات رقابية و38 فحوص تنفيذ، وتشمل الجهات المختصة وواجبات الإبلاغ والأدلة الواجب الاحتفاظ بها.
حقائق تنظيمية أساسية
- Primary AML law
- Law on AML/CFT, Royal Kram NS/RKM/0620/021 (2020)
- FIU
- Cambodia Financial Intelligence Unit (CAFIU)
- Suspicious reporting
- Promptly and within 24 hours
- Beneficial owner
- 20% ownership/voting interest, other control, then senior-management fallback
- Cash reports
- CAFIU-prescribed sector threshold; aggregate connected transactions
- Records
- At least 5 years after closure or relationship end
- CAFIU hold
- Written/confirmed direction for up to 48 hours
- FATF public lists
- Not listed at 30 October 2026
تفاصيل التنفيذ
متطلبات وإجراءات الامتثال في كمبوديا
افتح كل مجال لمراجعة المتطلب وإجراء التنفيذ المقترح والأدلة الواجب الاحتفاظ بها والمصدر الأساسي.
01Scope, authorities, and licensingClassify every activity and supervisor before launch.3 عناصر+
Determine whether each service is a reporting-entity activity.
- إجراء التنفيذ
- Map banking, securities, insurance, microfinance, leasing, exchange, remittance, trust, real-estate, professional, casino, precious-metals and designated activities to the statutory perimeter.
- الأدلة الواجب الاحتفاظ بها
- Perimeter memo, service map and authority register.
- المصدر الأساسي
- AML/CFT Law, Articles 4-5
Obtain required licences or registrations.
- إجراء التنفيذ
- Confirm NBC, SERC, CGMC, Ministry of Commerce or other competent-authority approval before providing a regulated financial, payment, gambling, e-commerce or trust service.
- الأدلة الواجب الاحتفاظ بها
- Licence matrix, approvals and conditions.
- المصدر الأساسي
- Applicable sector laws and regulations
Use CAFIU and the correct sector supervisor.
- إجراء التنفيذ
- Maintain current filing, escalation and supervisory contacts for each regulated activity.
- الأدلة الواجب الاحتفاظ بها
- Authority map, portal access and acknowledgements.
- المصدر الأساسي
- AML/CFT Law, Articles 21-23 and 29
02Governance and risk assessmentControls must be risk-based, governed and tested.3 عناصر+
Assess institutional and customer ML/TF risks.
- إجراء التنفيذ
- Assess customer, geography, product, service, channel, transaction and technology risks and refresh after material change.
- الأدلة الواجب الاحتفاظ بها
- Methodology, assessments, approvals and remediation.
- المصدر الأساسي
- AML/CFT Law, Article 8(1)-(3)
Maintain an AML/CFT prevention programme.
- إجراء التنفيذ
- Document policies, controls, senior compliance leadership, employee screening, training and independent audit proportionate to risk.
- الأدلة الواجب الاحتفاظ بها
- Programme, appointment, training and audit reports.
- المصدر الأساسي
- AML/CFT Law, Articles 16-18
Apply group-wide controls where relevant.
- إجراء التنفيذ
- Extend lawful information-sharing and consistent preventive controls to branches and majority-owned subsidiaries, resolving conflicts with host-country law.
- الأدلة الواجب الاحتفاظ بها
- Group standard, conflict analysis and testing.
- المصدر الأساسي
- AML/CFT Law, Article 8(13); CAFIU internal-controls directive
03Natural-person identificationCDD is required before relationships and defined occasional transactions.4 عناصر+
Identify and verify the customer.
- إجراء التنفيذ
- Obtain minimum identity particulars and verify them with reliable independent documents, data or information before establishing the relationship.
- الأدلة الواجب الاحتفاظ بها
- Identity record, verification result and provenance.
- المصدر الأساسي
- AML/CFT Law, Article 8(4)-(5)
Apply CDD for occasional transactions, suspicion and doubt.
- إجراء التنفيذ
- Apply the current CAFIU threshold for the relevant transaction; apply CDD regardless of amount where suspicion exists or prior data is doubtful.
- الأدلة الواجب الاحتفاظ بها
- Threshold version, trigger log and CDD record.
- المصدر الأساسي
- AML/CFT Law, Article 8(4)
Record purpose and intended nature and monitor continuously.
- إجراء التنفيذ
- Build an expected-activity profile, scrutinize transactions and keep customer data current, especially for higher-risk customers.
- الأدلة الواجب الاحتفاظ بها
- Profile, risk decision, monitoring and refresh history.
- المصدر الأساسي
- AML/CFT Law, Article 8(5)(c)-(e)
Refuse or terminate when required CDD cannot be completed.
- إجراء التنفيذ
- Do not open, commence or perform; terminate an existing relationship unless CAFIU directs otherwise, and consider an STR.
- الأدلة الواجب الاحتفاظ بها
- Failure record, decision and STR assessment.
- المصدر الأساسي
- AML/CFT Law, Article 8(6)-(7)
04KYB and beneficial ownershipVerify existence, authority, ownership and actual control.4 عناصر+
Verify legal persons and arrangements.
- إجراء التنفيذ
- Obtain registration, constitutional, tax, address, management, representation and ownership/control evidence from reliable sources.
- الأدلة الواجب الاحتفاظ بها
- Registry extract, governing documents and validation.
- المصدر الأساسي
- AML/CFT Law, Article 8(5)(a)-(b)
Apply the beneficial-owner cascade.
- إجراء التنفيذ
- Identify natural persons holding directly or indirectly 20% or more of shares or voting rights, then persons controlling by other means; if none is identified, record the senior managing official fallback.
- الأدلة الواجب الاحتفاظ بها
- Ownership chart, control analysis and verified identities.
- المصدر الأساسي
- AML/CFT Law, Articles 3(10) and 8(5)(b); CAFIU FAQ
Identify representatives and validate authority.
- إجراء التنفيذ
- Verify each person acting for the customer and authenticate the mandate before accepting instructions.
- الأدلة الواجب الاحتفاظ بها
- Representative KYC, mandate and verification.
- المصدر الأساسي
- CAFIU Customer Due Diligence Directive
Reconcile registry and customer information.
- إجراء التنفيذ
- Compare Ministry of Commerce records and customer evidence; investigate discrepancies and do not rely solely on self-declaration.
- الأدلة الواجب الاحتفاظ بها
- Registry result, discrepancy log and resolution.
- المصدر الأساسي
- Law on Commercial Enterprises; AML/CFT Law, Article 8
05PEPs, EDD, and remote onboardingHigher-risk relationships require enhanced controls.3 عناصر+
Identify PEPs, family members and close associates.
- إجراء التنفيذ
- Screen customers and beneficial owners and apply the current risk-based approval, source-of-wealth/source-of-funds and monitoring measures.
- الأدلة الواجب الاحتفاظ بها
- Screening, classification, approval and corroboration.
- المصدر الأساسي
- AML/CFT Law, Articles 3(11) and 8(5), 8(10)
Apply enhanced due diligence to higher risk.
- إجراء التنفيذ
- Collect additional identity, ownership, purpose, source and transaction evidence and increase monitoring for high-risk relationships and jurisdictions.
- الأدلة الواجب الاحتفاظ بها
- EDD checklist, approval and monitoring plan.
- المصدر الأساسي
- AML/CFT Law, Article 8(10)-(14)
Control non-face-to-face onboarding.
- إجراء التنفيذ
- Apply enhanced measures, authentication, fraud controls and documented method testing where identification is not face to face.
- الأدلة الواجب الاحتفاظ بها
- Method assessment, session record and tests.
- المصدر الأساسي
- AML/CFT Law, Article 10(1)(e); CAFIU CDD Directive
06Monitoring and suspicious reportingDetection, escalation and filing must preserve the statutory clock.4 عناصر+
Monitor complex, unusual and economically unexplained activity.
- إجراء التنفيذ
- Obtain additional information on source, destination, purpose and parties and document the outcome.
- الأدلة الواجب الاحتفاظ بها
- Alerts, analysis, supporting information and decision.
- المصدر الأساسي
- AML/CFT Law, Article 10
Report suspicious transactions and attempts to CAFIU within 24 hours.
- إجراء التنفيذ
- Start the clock when suspicion or reasonable grounds arise; file promptly through the prescribed current channel and preserve acknowledgement.
- الأدلة الواجب الاحتفاظ بها
- Suspicion timestamp, STR, receipt and chronology.
- المصدر الأساسي
- AML/CFT Law, Articles 3(7), 12(2)-(4) and 13
Comply with a CAFIU transaction-hold direction.
- إجراء التنفيذ
- Prevent execution for the directed period, not exceeding 48 hours, and preserve the oral/written direction and release basis.
- الأدلة الواجب الاحتفاظ بها
- Hold timestamp, direction, controls and release record.
- المصدر الأساسي
- AML/CFT Law, Article 12(5)
Prevent tipping off and protect reports.
- إجراء التنفيذ
- Restrict access and communications concerning STRs and related information except as CAFIU authorizes.
- الأدلة الواجب الاحتفاظ بها
- Access logs, communication controls and training.
- المصدر الأساسي
- AML/CFT Law, Article 15
07Cash reports, wires, payments, and cryptoassetsKeep threshold reporting and product authorization distinct.5 عناصر+
Configure the applicable cash-reporting threshold.
- إجراء التنفيذ
- Use the current CAFIU directive and sector scope; aggregate connected cash transactions and do not invent a universal amount.
- الأدلة الواجب الاحتفاظ بها
- Dated threshold table, rules, tests and reports.
- المصدر الأساسي
- AML/CFT Law, Articles 3(8) and 12(1)
Detect structuring below thresholds.
- إجراء التنفيذ
- Identify linked transactions designed to avoid identification or reporting and apply CDD and suspicious-reporting controls.
- الأدلة الواجب الاحتفاظ بها
- Aggregation logic, alerts and decisions.
- المصدر الأساسي
- AML/CFT Law, Article 9 and 12(1)
Carry and screen required wire information.
- إجراء التنفيذ
- Apply the CAFIU directive to originator, beneficiary, intermediary, missing-data, agent and record controls for the institution's role.
- الأدلة الواجب الاحتفاظ بها
- Field matrix, samples, screening and repair queue.
- المصدر الأساسي
- CAFIU Directive on Remittance and Wire Transfer (2022)
Obtain payment-service authorization before launch.
- إجراء التنفيذ
- Classify the service under current NBC instruments and obtain the relevant licence, approval or registration before operation.
- الأدلة الواجب الاحتفاظ بها
- Product memo, NBC decision and conditions.
- المصدر الأساسي
- NBC payment-system and payment-service instruments
Apply current cryptoasset restrictions precisely.
- إجراء التنفيذ
- For an NBC-supervised institution, map each activity and asset category to the 26 December 2024 Prakas and obtain required prior approval; do not imply a general VASP licence while the national framework remains under development.
- الأدلة الواجب الاحتفاظ بها
- Classification, approval analysis and controls.
- المصدر الأساسي
- NBC Prakas on Transaction Related to Cryptoassets (2024); CAFIU 2026 updates
08Targeted financial sanctions and CPFUse current designations and documented freeze/report procedures.3 عناصر+
Screen current UN and Cambodian designations.
- إجراء التنفيذ
- Screen customers, beneficial owners, representatives and transactions at onboarding, on list updates and throughout relationships.
- الأدلة الواجب الاحتفاظ بها
- List version, logs and match decisions.
- المصدر الأساسي
- AML/CFT Law, Article 8(15); applicable TFS instruments
Freeze covered property without delay when legally required.
- إجراء التنفيذ
- Apply the operative terrorism or proliferation-financing measure, block dealing and report through the prescribed authority route.
- الأدلة الواجب الاحتفاظ بها
- Designation, freeze timestamp, asset inventory and report.
- المصدر الأساسي
- Law on Combating Financing of Proliferation of WMD (2020); TFS sub-decrees
Control false positives, permitted access and unfreezing.
- إجراء التنفيذ
- Release or permit access only on documented competent-authority or court authority and preserve every condition.
- الأدلة الواجب الاحتفاظ بها
- Authority decision, conditions and release record.
- المصدر الأساسي
- Applicable TFS and frozen-property procedures
09Records and authority accessRecords must reconstruct customers, decisions and transactions.3 عناصر+
Retain customer and transaction records for at least five years.
- إجراء التنفيذ
- Run the period from account closure or relationship end and retain enough detail to reconstruct each transaction.
- الأدلة الواجب الاحتفاظ بها
- Retention schedule, archive and retrieval test.
- المصدر الأساسي
- AML/CFT Law, Article 11
Retain reports, analyses and non-reporting rationale.
- إجراء التنفيذ
- Preserve cash and suspicious reports, supporting material and documented alert dispositions under the applicable period and lawful holds.
- الأدلة الواجب الاحتفاظ بها
- Case archive, rationale and integrity controls.
- المصدر الأساسي
- AML/CFT Law, Articles 11-13
Produce information lawfully to CAFIU and supervisors.
- إجراء التنفيذ
- Operate controlled retrieval and disclosure workflows; do not invoke banking or professional secrecy to obstruct lawful AML/CFT access.
- الأدلة الواجب الاحتفاظ بها
- Request log, production, approval and receipt.
- المصدر الأساسي
- AML/CFT Law, Articles 6, 22-23
10Privacy, biometrics, incidents, and transfersApply current sector and e-commerce duties without assuming a comprehensive privacy statute.3 عناصر+
Map applicable data-protection duties by activity.
- إجراء التنفيذ
- Document the Electronic Commerce Law and applicable banking, telecom, consumer, cybersecurity, contractual and confidentiality duties; monitor the developing general personal-data framework.
- الأدلة الواجب الاحتفاظ بها
- Legal map, notices, purposes and change log.
- المصدر الأساسي
- Law on Electronic Commerce (2019); applicable sector rules
Protect identity and biometric data proportionately.
- إجراء التنفيذ
- Minimize collection, restrict access, secure storage and transmission, test vendors and document retention/deletion without claiming a universal biometric rule.
- الأدلة الواجب الاحتفاظ بها
- Data inventory, security assessment, access logs and vendor controls.
- المصدر الأساسي
- Electronic Commerce Law and applicable sector/confidentiality duties
Manage incidents and cross-border processing under applicable rules.
- إجراء التنفيذ
- Maintain detection, containment, assessment, evidence and notification workflows; confirm sector-specific requirements and safeguards before transfer.
- الأدلة الواجب الاحتفاظ بها
- Incident plan, transfer map, assessments and contracts.
- المصدر الأساسي
- Applicable Cambodian sector and cybersecurity instruments
11Practical evidence packsEvidence must reconstruct decisions end to end.3 عناصر+
Maintain an onboarding pack.
- إجراء التنفيذ
- Bundle identity, authority, KYB, beneficial ownership, PEP, sanctions, purpose, risk and approvals.
- الأدلة الواجب الاحتفاظ بها
- Complete sample and retrieval result.
- المصدر الأساسي
- Operational control supporting AML/CFT Law, Article 8
Maintain reporting and sanctions case packs.
- إجراء التنفيذ
- Link trigger, classification, decision time, filing, receipt, hold/freeze, confidentiality and authority communications.
- الأدلة الواجب الاحتفاظ بها
- Case pack, timeline and access record.
- المصدر الأساسي
- AML/CFT Law, Articles 12-15; CPF framework
Maintain a launch and legal-change pack.
- إجراء التنفيذ
- Record perimeter, licences, thresholds, reporting, sanctions, privacy, vendors, source versions and control tests.
- الأدلة الواجب الاحتفاظ بها
- Signed pack, source register and approvals.
- المصدر الأساسي
- Official sources listed below
سجل المصادر الأساسية
15 مصدرًا مستخدمًا في هذه القائمة
استخدم هذه الروابط للتحقق من التشريعات وإرشادات الجهات الرقابية وإجراءات الإبلاغ والبيانات الدولية.
- Law on Anti-Money Laundering and Combating Financing of TerrorismCAFIU · Primary legislation - official English translation
- CAFIU laws and regulations indexCAFIU · Official legal and regulatory index
- Compilation of CAFIU implementation directivesCAFIU · Official directives
- CAFIU implementation FAQCAFIU · Official implementation guidance
- Law on Combating Financing of Proliferation of WMDCAFIU · Primary legislation - official English translation
- Second National Risk Assessment 2026CAFIU · Official national risk assessment
- National Bank of Cambodia legislation indexNational Bank of Cambodia · Official regulatory index
- National Bank of Cambodia Banking CodeNational Bank of Cambodia · Official sector legal compilation
- Online Business RegistrationRoyal Government of Cambodia · Official company-registration service
- Electronic-commerce legal instrumentsKhmerSME / Royal Government of Cambodia · Official government legal resources
- SERC virtual-asset framework updateSecurities and Exchange Regulator of Cambodia · Official regulatory update
- FATF removal from increased monitoring - February 2023FATF · Authoritative public-list status
- FATF increased-monitoring statement - October 2026FATF · Authoritative current public-list status
- FATF call-for-action statement - October 2026FATF · Authoritative current public-list status
- Mutual Evaluation of CambodiaFATF / APG · Authoritative mutual evaluation index
إجابات مباشرة
أسئلة KYC وKYB وAML في كمبوديا
Who receives AML reports?+
The Cambodia Financial Intelligence Unit (CAFIU).
When must suspicion be reported?+
Promptly and within 24 hours after suspicion or reasonable grounds arise.
Is there one universal cash-reporting amount?+
No amount should be assumed universally; use the current CAFIU directive and sector scope and aggregate connected transactions.
How is a beneficial owner identified?+
Apply the 20% direct or indirect ownership/voting-interest test, then control by other means, then the senior managing official fallback.
How long are AML records retained?+
At least five years after account closure or the end of the business relationship, subject to lawful longer holds.
Can CAFIU stop a transaction?+
CAFIU may direct a reporting entity not to proceed for a specified period not exceeding 48 hours under Article 12(5).
Are cryptoasset services generally licensed?+
NBC-supervised institutions must follow the 2024 Prakas and obtain required approval for covered activities; Cambodia's broader virtual-asset framework remained under development at review.
Is Cambodia on a FATF public list?+
No at 30 October 2026. Cambodia remains an APG member and public-list absence is not a low-risk determination.
منهجية البحث والمراجعة
تحدد VOVE ID Compliance Research النطاق التنظيمي، وتحول الالتزامات إلى ضوابط تشغيلية، وتربط الادعاءات الجوهرية بالمصادر، وتسجل تاريخ وإصدار كل مراجعة.
General information, not legal advice. Reviewed 11 November 2026. Confirm the controlling Khmer text, current CAFIU directives, reporting portal specifications, sector thresholds, live sanctions measures, privacy duties and product licensing with the competent authority and qualified Cambodian counsel.