مالي KYC, KYB & AML compliance checklist
قائمة عملية وموثقة بالمصادر لتنفيذ متطلبات KYC وKYB وAML في مالي.
- تاريخ آخر مراجعة
- تاريخ آخر مراجعة:
- الإصدار
- الإصدار 1.0
إجابة مباشرة
ما الذي تغطيه قائمة الامتثال الخاصة بـ مالي؟
تحوّل قائمة مالي قواعد KYC وKYB وAML الأساسية إلى 11 مجالات رقابية و35 فحوص تنفيذ، وتشمل الجهات المختصة وواجبات الإبلاغ والأدلة الواجب الاحتفاظ بها.
حقائق تنظيمية أساسية
- FIU
- CENTIF Mali
- Primary AML rule
- Ordinance 2024-011, modified and ratified by Law 2024-022
- Suspicion reporting
- Immediately, including attempted transactions
- Cash transaction report
- XOF 15 million or more, including apparently linked operations
- Core AML retention
- 10 years under record-specific clocks
- FATF status
- Removed from increased monitoring in June 2025
تفاصيل التنفيذ
متطلبات وإجراءات الامتثال في مالي
افتح كل مجال لمراجعة المتطلب وإجراء التنفيذ المقترح والأدلة الواجب الاحتفاظ بها والمصدر الأساسي.
01Scope, authorities, and licensingResolve the reporting entity, activity and supervisor before launch.3 عناصر+
Determine whether each activity is in AML/CFT/CPF scope.
- إجراء التنفيذ
- Map every entity, product, channel, branch, agent and profession to the financial-institution, DNFBP or other covered categories and identify CENTIF and the competent supervisor.
- الأدلة الواجب الاحتفاظ بها
- Applicability memo, product map, licences and accountable-owner register.
- المصدر الأساسي
- Ordinance 2024-011, Articles 2-4 and 107
Establish the current CENTIF reporting route.
- إجراء التنفيذ
- Designate authorised reporters, obtain the current declaration form or electronic procedure, test secure delivery and preserve acknowledgements.
- الأدلة الواجب الاحتفاظ بها
- Appointment, user authority, channel test and receipt log.
- المصدر الأساسي
- Ordinance 2024-011, Articles 60, 64 and 95-103; CENTIF declaration page
Obtain authorisation before regulated activity.
- إجراء التنفيذ
- Classify banking, payment, e-money, money-transfer, agent, foreign-exchange, insurance, securities, fintech and virtual-asset activities and obtain every required approval before launch.
- الأدلة الواجب الاحتفاظ بها
- Perimeter analysis, licences, conditions and renewal calendar.
- المصدر الأساسي
- Ordinance 2024-011, Articles 2-4 and 58-59; BCEAO Instruction 001-01-2024
02Governance and risk assessmentControls must be risk-based, documented, current and independently tested.3 عناصر+
Maintain internal organisation and controls proportionate to risk.
- إجراء التنفيذ
- Approve policies for CDD, beneficial ownership, PEPs, sanctions, monitoring, reporting, records, training and independent testing.
- الأدلة الواجب الاحتفاظ بها
- Policy suite, approvals, control library, training and audit reports.
- المصدر الأساسي
- Ordinance 2024-011, Articles 12-14; BCEAO Instruction 001-03-2025
Identify, assess and document ML, TF and PF risks.
- إجراء التنفيذ
- Assess customers, geographies, products, transactions, channels, agents and new technologies before launch and on material change.
- الأدلة الواجب الاحتفاظ بها
- Risk assessment, methodology, source data, change log and approvals.
- المصدر الأساسي
- Ordinance 2024-011, Article 15
Apply proportionate group and outsourcing controls.
- إجراء التنفيذ
- Map group standards, local-law conflicts, outsourced functions, data access and testing while retaining accountability.
- الأدلة الواجب الاحتفاظ بها
- Group policy, conflict register, vendor reviews and assurance results.
- المصدر الأساسي
- Ordinance 2024-011, Articles 12-14 and 35-38
03Natural-person identificationIdentify and verify customers, actors and beneficial owners at every statutory trigger.3 عناصر+
Identify and verify the customer before a relationship or assisted transaction.
- إجراء التنفيذ
- Capture identity attributes, verify reliable independent evidence, understand purpose and intended nature and establish expected activity.
- الأدلة الواجب الاحتفاظ بها
- CDD file, source provenance, verification, purpose and risk decision.
- المصدر الأساسي
- Ordinance 2024-011, Articles 16-17
Apply CDD to transfers, suspicion, identity doubt and applicable occasional or linked transactions.
- إجراء التنفيذ
- Configure relationship, transfer, cash-aggregation, suspicion and identity-quality triggers; never treat a threshold as a safe harbour.
- الأدلة الواجب الاحتفاظ بها
- Trigger matrix, aggregation, alerts and CDD timestamps.
- المصدر الأساسي
- Ordinance 2024-011, Articles 17 and 49; UMOA Decision 021
Control delayed and remote verification.
- إجراء التنفيذ
- Permit delay only under the statutory conditions, complete it as soon as possible and before the first transaction, and apply sufficient remote-onboarding safeguards.
- الأدلة الواجب الاحتفاظ بها
- Deferral rationale, restrictions, completion time, remote tests and exceptions.
- المصدر الأساسي
- Ordinance 2024-011, Articles 18 and 22
04KYB, registries, and beneficial ownershipVerify legal existence, authority, ownership and ultimate natural-person control.4 عناصر+
Verify legal existence and every representative's authority.
- إجراء التنفيذ
- Obtain current RCCM and constitutional evidence, addresses, directors, licences and mandates and reconcile discrepancies.
- الأدلة الواجب الاحتفاظ بها
- Registry extract, statutes, managers, licences, mandate and discrepancy log.
- المصدر الأساسي
- Ordinance 2024-011, Articles 17 and 26
Apply the beneficial-owner cascade.
- إجراء التنفيذ
- For companies, identify natural persons holding directly or indirectly more than 25% of capital or voting rights, then test control by other means and only then the senior-managing-official fallback.
- الأدلة الواجب الاحتفاظ بها
- Ownership chart, control analysis, verified identities and fallback rationale.
- المصدر الأساسي
- Ordinance 2024-011, definitions and Article 26
Identify role holders in trusts and comparable arrangements.
- إجراء التنفيذ
- Identify and verify settlor, trustee, protector, beneficiaries or class and every other natural person exercising ultimate control.
- الأدلة الواجب الاحتفاظ بها
- Instrument, role register, identity files and control analysis.
- المصدر الأساسي
- Ordinance 2024-011, definitions and Article 26
Keep shareholder and beneficial-owner information accurate and current.
- إجراء التنفيذ
- Maintain event-driven updates, reconcile customer declarations with available RCCM and beneficial-owner information and complete filings under the live national procedure.
- الأدلة الواجب الاحتفاظ بها
- Registers, update log, filings, supporting documents and discrepancies.
- المصدر الأساسي
- Ordinance 2024-011, Articles 76-79 and 122
05PEPs, EDD, and remote onboardingHigher-risk relationships require enhanced, evidenced controls.3 عناصر+
Detect PEP and connected-person exposure.
- إجراء التنفيذ
- Screen customers and beneficial owners for foreign, domestic and international-organisation PEP status, family and close associates.
- الأدلة الواجب الاحتفاظ بها
- Screening, relationship map, match decision and refresh log.
- المصدر الأساسي
- Ordinance 2024-011, Article 29
Apply approval, source and monitoring controls.
- إجراء التنفيذ
- Obtain senior-management approval, establish source of wealth and source of funds and apply enhanced ongoing monitoring where required.
- الأدلة الواجب الاحتفاظ بها
- Approval, provenance analysis and monitoring plan.
- المصدر الأساسي
- Ordinance 2024-011, Articles 29-30
Govern third-party reliance.
- إجراء التنفيذ
- Assess eligibility, obtain required CDD information immediately, contract for document access and test retrieval; retain ultimate responsibility.
- الأدلة الواجب الاحتفاظ بها
- Due diligence, agreement, retrieval test and exceptions.
- المصدر الأساسي
- Ordinance 2024-011, Articles 35-38
06Monitoring and suspicious reportingCENTIF reporting must be immediate, complete and confidential.4 عناصر+
Monitor and examine unusual activity.
- إجراء التنفيذ
- Scrutinise transactions against the customer profile and document the background and purpose of complex, unusually large or apparently purposeless activity.
- الأدلة الواجب الاحتفاظ بها
- Alerts, investigation, written findings and disposition.
- المصدر الأساسي
- Ordinance 2024-011, Articles 19-21
Report suspicion and attempts immediately.
- إجراء التنفيذ
- Timestamp when suspicion or reasonable grounds arose and report suspected sums, transactions and attempts to CENTIF using the current route; supplement without delay.
- الأدلة الواجب الاحتفاظ بها
- Decision chronology, report, supporting material, delivery and receipt.
- المصدر الأساسي
- Ordinance 2024-011, Article 60
Do not proceed where mandatory CDD fails.
- إجراء التنفيذ
- Do not open or execute, or terminate an existing relationship, when required diligence cannot be completed and submit an STR.
- الأدلة الواجب الاحتفاظ بها
- Decline or exit decision, investigation and restricted reporting record.
- المصدر الأساسي
- Ordinance 2024-011, Article 25
Prevent tipping off and govern execution holds.
- إجراء التنفيذ
- Restrict report access, withhold suspicious activity before reporting unless statutory post-execution conditions apply, and disclose nothing to the customer.
- الأدلة الواجب الاحتفاظ بها
- Hold decision, exception rationale, access logs and communications record.
- المصدر الأساسي
- Ordinance 2024-011, Articles 61 and 63
07Payments, wires, thresholds, and agentsKeep CDD triggers, special examination and automatic reports distinct.3 عناصر+
Report cash transactions of XOF 15 million or more.
- إجراء التنفيذ
- Aggregate apparently linked operations, configure the exact in-scope entity and transaction logic and obtain current CENTIF submission instructions.
- الأدلة الواجب الاحتفاظ بها
- Threshold configuration, tests, reports, receipts and exceptions.
- المصدر الأساسي
- Ordinance 2024-011, Article 72; UMOA Decision 021, Article 8
Apply identification and special-examination thresholds accurately.
- إجراء التنفيذ
- For financial institutions, identify multiple daily or unusually frequent cash transactions above XOF 9 million; specially examine cash or bearer-title payments at XOF 50 million or more and unusual or unjustified operations at XOF 10 million or more.
- الأدلة الواجب الاحتفاظ بها
- Threshold register, aggregation tests, CDD and examination reports.
- المصدر الأساسي
- Ordinance 2024-011, Articles 17 and 21; UMOA Decision 021, Articles 3-4
Preserve required wire-transfer information.
- إجراء التنفيذ
- Carry required originator and beneficiary information throughout the chain and define reject, suspend, execute, investigate and follow-up rules for deficient transfers.
- الأدلة الواجب الاحتفاظ بها
- Field matrix, validation, repair queue, samples and decisions.
- المصدر الأساسي
- Ordinance 2024-011, Articles 39-47
08Targeted financial sanctionsScreen, freeze, restrict and report without delay under current designation procedures.3 عناصر+
Screen current authoritative designation lists.
- إجراء التنفيذ
- Screen customers, beneficial owners, controllers, representatives and relevant transactions at onboarding, on list changes and before execution.
- الأدلة الواجب الاحتفاظ بها
- List inventory, update logs, screening configuration and dispositions.
- المصدر الأساسي
- Ordinance 2024-011, Articles 89 and 124
Freeze designated property without delay and prior notice.
- إجراء التنفيذ
- Maintain a continuously available path to freeze direct, indirect, owned or controlled assets and prevent funds, services or resources being made available.
- الأدلة الواجب الاحتفاظ بها
- Freeze procedure, timestamps, asset record and transaction blocks.
- المصدر الأساسي
- Ordinance 2024-011, Article 89
Report funds, freezes, measures and attempts immediately.
- إجراء التنفيذ
- Notify CENTIF and the competent authority through current national procedures and release nothing without lawful authority.
- الأدلة الواجب الاحتفاظ بها
- Notifications, receipts, directions and release decision.
- المصدر الأساسي
- Ordinance 2024-011, Articles 90-91
09Records and regulator accessRecords must reconstruct customers, ownership, transactions and decisions.3 عناصر+
Retain customer records for 10 years after closure or relationship end.
- إجراء التنفيذ
- Map identity, profile and analysis records to the relationship-based clock and apply legal holds.
- الأدلة الواجب الاحتفاظ بها
- Schedule, archive sample, deletion control and hold log.
- المصدر الأساسي
- Ordinance 2024-011, Article 23
Retain transaction and correspondence records for 10 years after execution.
- إجراء التنفيذ
- Use transaction-based clocks and preserve enough information to reconstruct each operation.
- الأدلة الواجب الاحتفاظ بها
- Archive configuration, reconstruction test and retrieval log.
- المصدر الأساسي
- Ordinance 2024-011, Article 23
Make records available to competent authorities.
- إجراء التنفيذ
- Authenticate requests, protect STR confidentiality, produce controlled records within the required time and log disclosure and receipt.
- الأدلة الواجب الاحتفاظ بها
- Request register, approval, production index and acknowledgement.
- المصدر الأساسي
- Ordinance 2024-011, Articles 24 and 103
10Privacy, biometrics, and transfersAML processing remains subject to Mali's personal-data framework.3 عناصر+
Map lawful purpose, data, security and APDP formalities.
- إجراء التنفيذ
- Inventory identity, ownership, screening, biometric, monitoring and reporting data; document purpose, basis, recipients, access, retention and the applicable declaration or authorisation route.
- الأدلة الواجب الاحتفاظ بها
- Processing register, basis assessment, notices, access matrix and APDP record.
- المصدر الأساسي
- Law 2013-015, Chapters III-V
Apply heightened controls to sensitive and biometric processing.
- إجراء التنفيذ
- Confirm the exact APDP procedure before deploying facial, fingerprint, liveness-template, national-identifier or offence-data processing; minimise data and test security.
- الأدلة الواجب الاحتفاظ بها
- Legal assessment, impact review, APDP decision, access review and tests.
- المصدر الأساسي
- Law 2013-015; APDP authorised-processing register
Control cross-border personal-data transfers.
- إجراء التنفيذ
- Map hosting, support and vendor destinations, assess safeguards and obtain any required APDP authorisation before transfer.
- الأدلة الواجب الاحتفاظ بها
- Transfer map, safeguards, contracts, APDP record and access logs.
- المصدر الأساسي
- Law 2013-015, cross-border transfer provisions
11Practical evidence packsMaintain concise packs that reproduce decisions and support supervision.3 عناصر+
Maintain a reconstructable onboarding pack.
- إجراء التنفيذ
- Bundle identity, KYB, beneficial ownership, screening, risk, approvals, data records and exceptions under stable identifiers.
- الأدلة الواجب الاحتفاظ بها
- Complete sampled onboarding pack.
- المصدر الأساسي
- Operational control supporting Ordinance 2024-011, Articles 12-26
Maintain a reconstructable monitoring and reporting pack.
- إجراء التنفيذ
- Link transactions, alerts, analysis, approvals, CENTIF reports, delivery evidence and post-filing controls while protecting confidentiality.
- الأدلة الواجب الاحتفاظ بها
- Complete sampled case pack and access log.
- المصدر الأساسي
- Operational control supporting Ordinance 2024-011, Articles 19-25 and 60-64
Maintain a launch and change-control pack.
- إجراء التنفيذ
- Record licensing, thresholds, sanctions lists, registry and privacy formalities, product risk, testing and authority confirmations before launch and material changes.
- الأدلة الواجب الاحتفاظ بها
- Signed launch pack, legal-source register and change approvals.
- المصدر الأساسي
- Official sources listed below
سجل المصادر الأساسية
13 مصدرًا مستخدمًا في هذه القائمة
استخدم هذه الروابط للتحقق من التشريعات وإرشادات الجهات الرقابية وإجراءات الإبلاغ والبيانات الدولية.
- Official Gazette No. 29 containing Law No. 2024-022 and Ordinance No. 2024-011Mali General Secretariat of Government · Primary national legislation
- 2023 UMOA uniform AML/CFT/CPF lawBCEAO · Primary regional legal framework
- UMOA Decision No. 021 of 21 December 2023 setting implementation thresholdsBCEAO · Primary regional decision
- BCEAO Instruction No. 001-03-2025 on AML/CFT/CPF organisation and controlBCEAO · Primary regulator instruction
- BCEAO Instruction No. 003-03-2025 on customer identification and knowledgeBCEAO · Primary regulator instruction
- BCEAO Instruction No. 001-01-2024 on payment servicesBCEAO · Primary regulator instruction
- CENTIF Mali suspicious-transaction declaration pageCENTIF Mali · Official FIU reporting page
- Official Gazette containing Law No. 2013-015 on personal-data protectionMali General Secretariat of Government · Primary privacy legislation
- APDP processing declarations, authorisations and transfer formsMali Personal Data Protection Authority · Official privacy-authority procedure
- Mali sixth enhanced follow-up report (2026)GIABA · Authoritative regional assessment
- Mali removed from FATF increased monitoring - 13 June 2025FATF · Authoritative public statement
- FATF high-risk and monitored jurisdictions current at 19 June 2026FATF · Authoritative current status
- United Nations Security Council consolidated sanctions listUnited Nations · Authoritative sanctions list
إجابات مباشرة
أسئلة KYC وKYB وAML في مالي
Who receives suspicious transaction reports?+
CENTIF Mali, using its current prescribed declaration route.
When is suspicion reported?+
Immediately once suspicion or reasonable grounds arise, including attempted transactions; relevant supplements are sent without delay.
What cash transaction report threshold applies?+
Covered institutions and designated non-financial businesses report cash transactions of XOF 15 million or more, whether a single operation or apparently linked operations.
How is beneficial ownership determined?+
For companies, identify natural persons holding directly or indirectly more than 25% of capital or voting rights, then test control by other means, and only then use the senior-managing-official fallback. Legal arrangements use role-based tests.
How long are core AML records retained?+
Customer records are retained for 10 years after relationship cessation; transaction and correspondence records are retained for 10 years after execution.
What privacy rules apply?+
Law No. 2013-015 governs personal-data processing. Confirm the APDP route for the proposed processing, especially biometrics, sensitive data and foreign transfers.
Is Mali on a FATF public list?+
No. FATF removed Mali from increased monitoring on 13 June 2025, and Mali was not named in FATF's public lists dated 19 June 2026. It remains subject to GIABA follow-up.
Can payment, fintech or virtual-asset activity launch without approval?+
No. Classify the provider, product and agent model and obtain every applicable national or UMOA permission before launch.
منهجية البحث والمراجعة
تحدد VOVE ID Compliance Research النطاق التنظيمي، وتحول الالتزامات إلى ضوابط تشغيلية، وتربط الادعاءات الجوهرية بالمصادر، وتسجل تاريخ وإصدار كل مراجعة.
General regulatory information, not legal advice or a licence determination. Reviewed as applicable on 3 September 2026. Confirm current CENTIF filing and receipt mechanics, national threshold and sanctions measures, beneficial-owner registry procedures, APDP formalities and product-specific permissions with the competent authority and qualified Malian counsel before launch.