كازاخستان KYC, KYB & AML compliance checklist
قائمة عملية وموثقة بالمصادر لتنفيذ متطلبات KYC وKYB وAML في كازاخستان.
- تاريخ آخر مراجعة
- تاريخ آخر مراجعة:
- الإصدار
- الإصدار 1.0
دليل تنفيذ قابل للتنزيل
الحصول على ملف PDF
11 مجالات رقابية · 38 فحوص تنفيذ
تاريخ آخر مراجعة: 7 November 2026 · الإصدار 1.0
تنزيل قائمة التحققإجابة مباشرة
ما الذي تغطيه قائمة الامتثال الخاصة بـ كازاخستان؟
تحوّل قائمة كازاخستان قواعد KYC وKYB وAML الأساسية إلى 11 مجالات رقابية و38 فحوص تنفيذ، وتشمل الجهات المختصة وواجبات الإبلاغ والأدلة الواجب الاحتفاظ بها.
حقائق تنظيمية أساسية
- Primary AML law
- AML/CFT/CPF Law No. 191-IV of 28 August 2009, as amended
- FIU
- Agency for Financial Monitoring (AFM)
- Pre-transaction STR
- Immediately before conduct when recognized as suspicious
- Post-transaction STR
- By the next working day after recognition; special timing applies where suspension was impossible
- AML beneficial owner
- Natural person owning directly or indirectly more than 25%, then other control or benefit
- Records
- At least 5 years from transaction or relationship termination, as applicable
- Targeted sanctions
- Freeze immediately, no later than 1 working day after official listing
- FATF public lists
- Not listed at October 2026
تفاصيل التنفيذ
متطلبات وإجراءات الامتثال في كازاخستان
افتح كل مجال لمراجعة المتطلب وإجراء التنفيذ المقترح والأدلة الواجب الاحتفاظ بها والمصدر الأساسي.
01Scope, authorities, and licensingClassify the activity and supervisor before launch.3 عناصر+
Determine whether each activity is a subject of financial monitoring.
- إجراء التنفيذ
- Map banking, insurance, securities, payments, exchange, professional, digital-asset and other services to Article 3 and current sector rules; do not export one sector's requirements to another.
- الأدلة الواجب الاحتفاظ بها
- Perimeter memo, service map and source register.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 3
Obtain every required licence, registration or permit.
- إجراء التنفيذ
- Confirm National Bank, financial-market regulator, AFSA/AIFC, digital-development authority or other competent-authority requirements before operating.
- الأدلة الواجب الاحتفاظ بها
- Licence matrix, approvals and conditions.
- المصدر الأساسي
- Applicable financial, payments and digital-assets legislation
Use AFM and the correct sector supervisor.
- إجراء التنفيذ
- Maintain a dated authority map and current electronic-reporting procedure for the entity type.
- الأدلة الواجب الاحتفاظ بها
- Authority map, portal access, procedures and acknowledgements.
- المصدر الأساسي
- AML/CFT/CPF Law, Articles 16-18
02Governance and risk assessmentControls must be risk-based, approved and tested.3 عناصر+
Maintain an enterprise ML/TF/PF risk assessment.
- إجراء التنفيذ
- Assess customer, geography, product, channel, technology, transaction and sanctions risks and update for material change.
- الأدلة الواجب الاحتفاظ بها
- Methodology, assessment, approval and change log.
- المصدر الأساسي
- AML/CFT/CPF Law; applicable internal-control requirements
Maintain internal-control rules and an accountable AML function.
- إجراء التنفيذ
- Document governance, responsible officer, screening, monitoring, reporting, training, audit and escalation arrangements proportionate to the business.
- الأدلة الواجب الاحتفاظ بها
- Internal-control rules, appointment, training and test reports.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 11
Apply current AFM risk indicators and sector rules.
- إجراء التنفيذ
- Map official suspicious-transaction indicators and supervisor requirements into scenarios without treating indicators as exhaustive.
- الأدلة الواجب الاحتفاظ بها
- Rule inventory, scenario mapping and review record.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 10; current AFM and sector rules
03Natural-person identificationCDD applies at relationship start and other statutory triggers.4 عناصر+
Identify and verify the customer before establishing a relationship.
- إجراء التنفيذ
- Record identity-document data, individual identification number where assigned, address and other required fields using reliable sources.
- الأدلة الواجب الاحتفاظ بها
- Identity record, verification result and provenance.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 5(2)-(3)
Identify and verify representatives and authority.
- إجراء التنفيذ
- Confirm the representative's identity and powers before accepting instructions and retain the mandate.
- الأدلة الواجب الاحتفاظ بها
- Representative KYC, mandate and validation.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 5
Re-perform CDD when statutory triggers arise.
- إجراء التنفيذ
- Refresh CDD for reportable or suspicious activity and where prior customer or beneficial-owner information is doubtful; apply sector-specific periodic updates.
- الأدلة الواجب الاحتفاظ بها
- Trigger log, refreshed records and review outcome.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 5(2)
Do not permit anonymous or inadequately verified use.
- إجراء التنفيذ
- Restrict activation or activity where required data cannot be obtained and document refusal, termination and reporting decisions.
- الأدلة الواجب الاحتفاظ بها
- Restriction, rationale and report assessment.
- المصدر الأساسي
- AML/CFT/CPF Law, Articles 5 and 13
04KYB, company information, and beneficial ownershipVerify legal existence, authority, ownership and ultimate control.4 عناصر+
Verify the legal person or arrangement.
- إجراء التنفيذ
- Obtain registration, legal form, address, governing documents, business purpose and authorized-person data and reconcile them with official records.
- الأدلة الواجب الاحتفاظ بها
- Registry extract, constitutional documents and validation log.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 5
Identify natural-person beneficial owners through the statutory cascade.
- إجراء التنفيذ
- Identify each natural person who directly or indirectly owns more than 25%; if ownership is doubtful or inconclusive, identify control by other means or the person in whose interests transactions are conducted.
- الأدلة الواجب الاحتفاظ بها
- Ownership chart, control analysis and verified identities.
- المصدر الأساسي
- AML/CFT/CPF Law, Articles 1 and 5
Understand legal-arrangement control.
- إجراء التنفيذ
- Identify the natural persons occupying controlling or beneficial roles and document the legal basis and information sources.
- الأدلة الواجب الاحتفاظ بها
- Arrangement documents, role map and verification.
- المصدر الأساسي
- AML/CFT/CPF Law, beneficial-owner definition and Article 5
Resolve discrepancies instead of relying solely on registry data.
- إجراء التنفيذ
- Compare customer evidence with the state legal-entities database and investigate inconsistent ownership, management or status information.
- الأدلة الواجب الاحتفاظ بها
- Registry results, discrepancy log and resolution.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 5; state legal-entities database service
05PEPs, EDD, and remote onboardingHigher-risk relationships require enhanced controls.3 عناصر+
Identify PEP exposure under current sector rules.
- إجراء التنفيذ
- Screen customers, representatives and beneficial owners and apply approval, source-of-wealth, source-of-funds and enhanced-monitoring controls where required.
- الأدلة الواجب الاحتفاظ بها
- Screening, classification, approval and corroboration.
- المصدر الأساسي
- AML/CFT/CPF Law; applicable internal-control requirements
Apply enhanced due diligence to higher risk.
- إجراء التنفيذ
- Obtain additional identity, ownership, purpose, wealth and funds evidence and increase monitoring and review frequency proportionately.
- الأدلة الواجب الاحتفاظ بها
- EDD checklist, evidence, approval and monitoring plan.
- المصدر الأساسي
- AML/CFT/CPF Law, Articles 5 and 11
Control non-face-to-face onboarding.
- إجراء التنفيذ
- Use a method permitted by the competent supervisor, test impersonation and fraud controls, and preserve authentication and exception evidence.
- الأدلة الواجب الاحتفاظ بها
- Method assessment, session evidence and tests.
- المصدر الأساسي
- Applicable sector identification and internal-control rules
06Monitoring and suspicious reportingMonitoring must support AFM's event-specific reporting timelines.4 عناصر+
Monitor transactions and relationships on a risk basis.
- إجراء التنفيذ
- Detect threshold, complex, unusually large, unusual and suspicious activity; review scenarios and customer information periodically.
- الأدلة الواجب الاحتفاظ بها
- Scenario inventory, alerts, tuning and governance.
- المصدر الأساسي
- AML/CFT/CPF Law, Articles 4, 10 and 11
Report a suspicious transaction before conduct where required.
- إجراء التنفيذ
- When an operation is recognized as suspicious before execution, report it to AFM immediately before conduct and follow AFM suspension instructions.
- الأدلة الواجب الاحتفاظ بها
- Recognition time, report, receipt and hold decision.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 13(2)
Apply the correct timing where prior suspension is impossible or suspicion forms later.
- إجراء التنفيذ
- For an operation that cannot be suspended, use the statutory three-hour-after-conduct or 24-hour-after-detection route as applicable; where recognized after conduct, report by the next working day.
- الأدلة الواجب الاحتفاظ بها
- Timeline, legal classification, report and acknowledgement.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 13(2)
Prevent tipping off.
- إجراء التنفيذ
- Restrict access and communications about reports, AFM requests and related assistance except where law permits.
- الأدلة الواجب الاحتفاظ بها
- Access controls, communication review and training.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 10(5)
07Threshold reporting, wires, payments, and digital assetsDo not reduce transaction-specific reporting categories to one universal amount.4 عناصر+
Configure each current financial-monitoring category separately.
- إجراء التنفيذ
- Maintain a legal table of Article 4 transaction types, amounts, aggregation and exemptions for the entity; report covered operations by the applicable deadline.
- الأدلة الواجب الاحتفاظ بها
- Threshold table, configurations, test cases and reports.
- المصدر الأساسي
- AML/CFT/CPF Law, Articles 4 and 10
Carry required wire-transfer information.
- إجراء التنفيذ
- Apply current originator, beneficiary, missing-data, screening and intermediary controls for the institution's role.
- الأدلة الواجب الاحتفاظ بها
- Field matrix, samples, screening and repair queue.
- المصدر الأساسي
- AML/CFT/CPF Law; applicable sector rules
Classify payment and electronic-money services before launch.
- إجراء التنفيذ
- Map payment initiation, processing, wallets, acquiring, transfers and electronic money to the Law on Payments and Payment Systems and National Bank requirements.
- الأدلة الواجب الاحتفاظ بها
- Product memo, registration or licence and control tests.
- المصدر الأساسي
- Law on Payments and Payment Systems
Use the correct digital-asset perimeter.
- إجراء التنفيذ
- Classify secured and unsecured digital assets and obtain the required National Bank, digital-development authority or AFSA/AIFC licence before exchange or platform activity; do not rely on an in-principle approval as authority to operate.
- الأدلة الواجب الاحتفاظ بها
- Classification, licence, register check and AML programme.
- المصدر الأساسي
- Law on Digital Assets; current National Bank and AIFC rules
08Targeted financial sanctionsUse the live official lists and act without delay.3 عناصر+
Screen current terrorism, extremism and proliferation-financing lists.
- إجراء التنفيذ
- Screen customers, owners, representatives and transactions at onboarding, continuously or periodically according to risk, and on list updates.
- الأدلة الواجب الاحتفاظ بها
- List version, screening logs and match decisions.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 12
Freeze listed property immediately.
- إجراء التنفيذ
- Implement the statutory freeze without delay and no later than one working day after official publication of the listing, subject only to express statutory exceptions.
- الأدلة الواجب الاحتفاظ بها
- Listing, freeze timestamp, asset inventory and report.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 12(1-1)
Control releases and permitted access.
- إجراء التنفيذ
- Release or permit access only on documented legal authority and preserve every condition and communication.
- الأدلة الواجب الاحتفاظ بها
- Authority decision, conditions and release record.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 12
09Records and authority accessRecords must reconstruct the complete customer and transaction lifecycle.3 عناصر+
Retain CDD and relationship records for at least five years.
- إجراء التنفيذ
- Run the period from relationship termination and preserve customer files, correspondence, ownership analysis and review results.
- الأدلة الواجب الاحتفاظ بها
- Retention schedule, source records and retrieval test.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 11
Retain reportable, suspicious and unusual-operation records for at least five years.
- إجراء التنفيذ
- Run the period from transaction completion and preserve analysis, decision and reporting evidence.
- الأدلة الواجب الاحتفاظ بها
- Case archive, schedule and integrity controls.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 11
Respond to AFM requests within the applicable deadline.
- إجراء التنفيذ
- Operate controlled production procedures for the general three-working-day deadline and the next-working-day deadline for suspicious-transaction analysis requests, subject to any lawful extension.
- الأدلة الواجب الاحتفاظ بها
- Request log, production, approval and receipt.
- المصدر الأساسي
- AML/CFT/CPF Law, Article 10
10Privacy, biometrics, breaches, and transfersAML processing remains subject to Kazakhstan privacy and security law.4 عناصر+
Document the lawful basis and purpose for personal-data processing.
- إجراء التنفيذ
- Map collection, processing, notices, consent or statutory authority, access rights, correction, blocking, destruction and retention.
- الأدلة الواجب الاحتفاظ بها
- Data map, notices, legal-basis register and rights log.
- المصدر الأساسي
- Law on Personal Data and their Protection
Protect identity and biometric data.
- إجراء التنفيذ
- Minimize collection and apply security, access, accuracy, liveness and deletion controls proportionate to sensitivity and permitted purpose.
- الأدلة الواجب الاحتفاظ بها
- Assessment, architecture, tests and approvals.
- المصدر الأساسي
- Law on Personal Data and their Protection
Control transfers and third parties.
- إجراء التنفيذ
- Confirm consent or another lawful basis, destination protection, contracts and localization requirements before third-party or cross-border transfers.
- الأدلة الواجب الاحتفاظ بها
- Transfer map, legal assessment, safeguards and notices.
- المصدر الأساسي
- Law on Personal Data and their Protection, cross-border-transfer provisions
Use applicable incident and sector reporting rules.
- إجراء التنفيذ
- Maintain an incident workflow that identifies the competent authority, affected systems, notification triggers and deadlines without inventing a universal breach deadline.
- الأدلة الواجب الاحتفاظ بها
- Incident chronology, legal assessment, notices and remediation.
- المصدر الأساسي
- Personal-data law and applicable sector cybersecurity rules
11Practical evidence packsEvidence must reconstruct decisions end to end.3 عناصر+
Maintain an onboarding pack.
- إجراء التنفيذ
- Bundle identity, authority, KYB, beneficial ownership, PEP, sanctions, purpose, risk, privacy and approvals.
- الأدلة الواجب الاحتفاظ بها
- Complete sample and retrieval result.
- المصدر الأساسي
- Operational control supporting AML/CFT/CPF Law, Article 5
Maintain reporting and sanctions case packs.
- إجراء التنفيذ
- Link trigger, classification, decision time, report, receipt, confidentiality, freeze and authority communications.
- الأدلة الواجب الاحتفاظ بها
- Case pack, timeline and access record.
- المصدر الأساسي
- AML/CFT/CPF Law, Articles 10, 12 and 13
Maintain a launch and legal-change pack.
- إجراء التنفيذ
- Record perimeter, licences, transaction categories, reporting, sanctions, privacy, vendors, source versions and tests.
- الأدلة الواجب الاحتفاظ بها
- Signed pack, source register and approvals.
- المصدر الأساسي
- Official sources listed below
سجل المصادر الأساسية
15 مصدرًا مستخدمًا في هذه القائمة
استخدم هذه الروابط للتحقق من التشريعات وإرشادات الجهات الرقابية وإجراءات الإبلاغ والبيانات الدولية.
- AML/CFT/CPF Law No. 191-IVAgency for Financial Monitoring · Primary legislation - official English text
- AML/CFT/CPF Law - current official repository recordAdilet Legal Information System · Primary legislation - official English text
- Agency for Financial MonitoringGovernment of Kazakhstan · Official FIU and regulator portal
- Internal-control requirements for banking-operation and microfinance organizationsAgency for Financial Monitoring · Official sector requirements
- State database - Legal entitiesMinistry of Justice · Official registry service
- Law on Personal Data and their ProtectionAdilet Legal Information System · Primary legislation - official English text
- National Bank of KazakhstanNational Bank of Kazakhstan · Official financial and payments regulator
- Law on Payments and Payment SystemsAdilet Legal Information System · Primary legislation - official English text
- Digital asset industry frameworkGovernment of Kazakhstan · Official regulatory overview
- AFSA public registerAstana Financial Services Authority · Official licence register
- Kazakhstan 2023 mutual evaluationFATF / EAG · Authoritative mutual evaluation
- Kazakhstan EAG follow-up report 2026FATF / EAG · Authoritative follow-up assessment
- FATF increased-monitoring statement - October 2026FATF · Authoritative current public-list status
- FATF call-for-action statement - October 2026FATF · Authoritative current public-list status
- Law and rules on State SymbolsGovernment of Kazakhstan · Official flag-use law and rules
إجابات مباشرة
أسئلة KYC وKYB وAML في كازاخستان
Who receives suspicious-transaction reports?+
The Agency of the Republic of Kazakhstan for Financial Monitoring (AFM), through the prescribed electronic channel for the reporting entity.
When is a suspicious transaction reported?+
A transaction recognized as suspicious before execution is reported immediately before conduct. Different statutory timing applies when suspension is impossible or suspicion forms after execution.
Is there one universal reportable-transaction threshold?+
No. Article 4 uses transaction-specific categories, amounts and conditions. Configure the current table for the entity and transaction type.
How is an AML beneficial owner identified?+
Start with natural persons directly or indirectly owning more than 25%, then examine control by other means or the natural person in whose interests transactions are conducted.
How long are AML records retained?+
At least five years, measured from transaction completion or relationship termination depending on the record type.
How quickly must listed property be frozen?+
Immediately and no later than one working day after the official listing is published, subject to express statutory exceptions.
Are digital-asset services regulated?+
Yes. The perimeter depends on the asset and activity; licences or permissions may involve the National Bank, the digital-development authority or AFSA/AIFC.
Is Kazakhstan on a FATF public list?+
No at the October 2026 statements. That is not a low-risk determination.
منهجية البحث والمراجعة
تحدد VOVE ID Compliance Research النطاق التنظيمي، وتحول الالتزامات إلى ضوابط تشغيلية، وتربط الادعاءات الجوهرية بالمصادر، وتسجل تاريخ وإصدار كل مراجعة.
General information, not legal advice. Reviewed 7 November 2026. Confirm the controlling Kazakh or Russian text, current sector rules, transaction-reporting categories, reporting channels, sanctions lists, privacy requirements and licensing conditions with AFM, the competent supervisor and qualified Kazakhstan counsel.