عُمان KYC, KYB & AML compliance checklist
قائمة عملية وموثقة بالمصادر لتنفيذ متطلبات KYC وKYB وAML في عُمان.
- تاريخ آخر مراجعة
- تاريخ آخر مراجعة:
- الإصدار
- الإصدار 1.0
دليل تنفيذ قابل للتنزيل
الحصول على ملف PDF
11 مجالات رقابية · 38 فحوص تنفيذ
تاريخ آخر مراجعة: 2 October 2026 · الإصدار 1.0
تنزيل قائمة التحققإجابة مباشرة
ما الذي تغطيه قائمة الامتثال الخاصة بـ عُمان؟
تحوّل قائمة عُمان قواعد KYC وKYB وAML الأساسية إلى 11 مجالات رقابية و38 فحوص تنفيذ، وتشمل الجهات المختصة وواجبات الإبلاغ والأدلة الواجب الاحتفاظ بها.
حقائق تنظيمية أساسية
- Primary AML law
- Royal Decree 30/2016
- FIU
- National Centre for Financial Information
- STR timing
- Immediately; CBO outer limit 48 hours, FSA sectors 24 hours
- CBO occasional-transaction CDD
- OMR 5,000 or more, including linked operations
- CBO occasional wire CDD
- OMR 350 or equivalent
- Financial-sector retention
- At least 10 years under applicable instructions
- Beneficial ownership
- 25% is a starting point; control still requires analysis
- FATF public lists
- Not listed at 19 June 2026
تفاصيل التنفيذ
متطلبات وإجراءات الامتثال في عُمان
افتح كل مجال لمراجعة المتطلب وإجراء التنفيذ المقترح والأدلة الواجب الاحتفاظ بها والمصدر الأساسي.
01Scope, authorities, and licensingClassify activity and supervisor first.3 عناصر+
Determine the reporting-entity category.
- إجراء التنفيذ
- Map services and Oman nexus to the financial-institution, DNFBP, non-profit and other covered categories.
- الأدلة الواجب الاحتفاظ بها
- Perimeter memo, service map and authority confirmation.
- المصدر الأساسي
- Royal Decree 30/2016
Obtain every licence before regulated activity.
- إجراء التنفيذ
- Classify banking, payments, money services, finance, securities, insurance, fintech and virtual-asset features under current sector law.
- الأدلة الواجب الاحتفاظ بها
- Licence matrix, approvals and conditions.
- المصدر الأساسي
- Banking Law 2/2025; National Payment Systems Law 8/2018
Use the current sector instruction and controlling Arabic text.
- إجراء التنفيذ
- Track BM 1187, FSA decisions and later circulars for the exact licence.
- الأدلة الواجب الاحتفاظ بها
- Source inventory, translations and change log.
- المصدر الأساسي
- CBO AML/CFT Guidelines 2022, sections 1.1-1.3
02Governance and risk assessmentGovernance must be risk-based and demonstrably effective.3 عناصر+
Maintain enterprise and customer risk assessments.
- إجراء التنفيذ
- Assess customers, countries, products, channels, technology, sanctions and emerging risks.
- الأدلة الواجب الاحتفاظ بها
- Methodology, assessment, approvals and updates.
- المصدر الأساسي
- Royal Decree 30/2016; CBO Guidelines chapter 2
Maintain proportionate controls.
- إجراء التنفيذ
- Document CDD, monitoring, reporting, records, sanctions, training and escalation.
- الأدلة الواجب الاحتفاظ بها
- Approved framework, procedures and issue register.
- المصدر الأساسي
- CBO BM 1187
Appoint compliance leadership and independent assurance.
- إجراء التنفيذ
- Preserve authority, resources, senior access and periodic testing.
- الأدلة الواجب الاحتفاظ بها
- Appointment, board reports, audit and remediation.
- المصدر الأساسي
- Royal Decree 30/2016; CBO BM 1187
03Natural-person identificationCDD covers customers, beneficial owners and representatives.6 عناصر+
Apply CDD before a relationship and at every trigger.
- إجراء التنفيذ
- Identify and verify relevant persons, understand purpose, and refresh for suspicion, doubt or change.
- الأدلة الواجب الاحتفاظ بها
- Trigger analysis, identity record and timestamp.
- المصدر الأساسي
- Royal Decree 30/2016 article 33
Apply the CBO OMR 5,000 occasional-transaction threshold correctly.
- إجراء التنفيذ
- For a customer without a relationship, complete CDD for a single or linked operation at or above OMR 5,000; do not treat it as a universal report.
- الأدلة الواجب الاحتفاظ بها
- Aggregation logic and samples.
- المصدر الأساسي
- BM 1187 article 6; CBO Guidelines 3.2.2 note 2
Apply the separate CBO occasional-wire threshold.
- إجراء التنفيذ
- Complete CDD before an occasional wire at OMR 350 or equivalent and apply wire-data controls.
- الأدلة الواجب الاحتفاظ بها
- Transfer samples and message fields.
- المصدر الأساسي
- CBO Guidelines 3.2.2 note 3
Use reliable independent identity evidence.
- إجراء التنفيذ
- Validate current civil, passport, registry or other authoritative evidence.
- الأدلة الواجب الاحتفاظ بها
- Attributes, provenance and fraud checks.
- المصدر الأساسي
- Royal Decree 30/2016 article 33
Validate representatives and authority.
- إجراء التنفيذ
- Verify the person and mandate before accepting instructions.
- الأدلة الواجب الاحتفاظ بها
- Representative KYC and mandate.
- المصدر الأساسي
- CBO BM 1187 CDD provisions
Do not proceed when CDD cannot be completed.
- إجراء التنفيذ
- Decline or end the relationship and consider an NCFI report without tipping off.
- الأدلة الواجب الاحتفاظ بها
- Failure, restriction and report assessment.
- المصدر الأساسي
- Royal Decree 30/2016; CBO Guidelines 3.2-3.3
04KYB and beneficial ownershipVerify legal existence, ownership and effective control.4 عناصر+
Verify the legal person and understand its structure.
- إجراء التنفيذ
- Collect commercial registration, constitutional documents, managers and reliable registry evidence.
- الأدلة الواجب الاحتفاظ بها
- Extract, documents and discrepancy record.
- المصدر الأساسي
- Royal Decree 30/2016 article 33
Identify natural persons who ultimately own or control.
- إجراء التنفيذ
- Trace direct, indirect, layered, nominee and control arrangements.
- الأدلة الواجب الاحتفاظ بها
- Ownership chart, calculations and verified identities.
- المصدر الأساسي
- CBO Guidelines 3.2.4
Use 25% as a starting point, not a safe harbour.
- إجراء التنفيذ
- Identify aggregate interests of 25% or more and assess concert parties, control and lower holdings.
- الأدلة الواجب الاحتفاظ بها
- Calculations and control rationale.
- المصدر الأساسي
- CBO Guidelines 3.2.4
Maintain current BO information and filings.
- إجراء التنفيذ
- Reconcile internal CDD with the commercial register and use the live MOCIIP change procedure.
- الأدلة الواجب الاحتفاظ بها
- BO register, filings, receipts and changes.
- المصدر الأساسي
- Commercial Companies Law 18/2019; FATF/MENAFATF MER 2024
05PEPs, EDD, and remote onboardingApply enhanced measures to PEPs and higher risks.3 عناصر+
Identify PEPs, family and close associates.
- إجراء التنفيذ
- Apply required approval, source-of-wealth, source-of-funds and enhanced monitoring under the sector rule.
- الأدلة الواجب الاحتفاظ بها
- Screening, approval and corroboration.
- المصدر الأساسي
- Royal Decree 30/2016 article 36; CBO Guidelines 3.2.7
Apply EDD to higher-risk relationships.
- إجراء التنفيذ
- Obtain additional customer, purpose, wealth and funds information.
- الأدلة الواجب الاحتفاظ بها
- Risk trigger, additional CDD and approval.
- المصدر الأساسي
- CBO Guidelines 3.2.7
Control digital onboarding.
- إجراء التنفيذ
- CBO licensees must use the National Digital Onboarding Registry as instructed while retaining responsibility for accuracy and EDD.
- الأدلة الواجب الاحتفاظ بها
- Method assessment, registry result and exceptions.
- المصدر الأساسي
- CBO BM 1191
06Monitoring and suspicious reportingOngoing scrutiny supports immediate NCFI reporting.4 عناصر+
Monitor and refresh on a risk basis.
- إجراء التنفيذ
- Compare activity with purpose, expected behaviour, risk and source of funds.
- الأدلة الواجب الاحتفاظ بها
- Scenarios, alerts and refresh records.
- المصدر الأساسي
- CBO Guidelines 3.2.6 and 3.3
Escalate suspicion without waiting for proof.
- إجراء التنفيذ
- Assess transactions and attempts promptly and record grounds and formation time.
- الأدلة الواجب الاحتفاظ بها
- Chronology, information and decision.
- المصدر الأساسي
- Royal Decree 30/2016
Notify NCFI immediately and obey the sector outer limit.
- إجراء التنفيذ
- File immediately; CBO-supervised entities must not exceed 48 hours and FSA capital-markets or insurance sectors must not exceed 24 hours.
- الأدلة الواجب الاحتفاظ بها
- Suspicion timestamp, report and receipt.
- المصدر الأساسي
- CBO Guidelines 3.3.4
Prevent tipping off.
- إجراء التنفيذ
- Restrict report knowledge and customer communications.
- الأدلة الواجب الاحتفاظ بها
- Access controls, training and incidents.
- المصدر الأساسي
- Royal Decree 30/2016 article 49
07Payments, wires, thresholds, and virtual assetsApply activity-specific licensing and transfer controls.3 عناصر+
Carry required wire information.
- إجراء التنفيذ
- Transmit prescribed originator and beneficiary fields and risk-manage missing data.
- الأدلة الواجب الاحتفاظ بها
- Field matrix, samples and repair queue.
- المصدر الأساسي
- CBO BM 1187 articles 31-40
Obtain payment or money-service approval.
- إجراء التنفيذ
- Map wallets, acquiring, remittance, exchange and ancillary activity to current CBO rules.
- الأدلة الواجب الاحتفاظ بها
- Product memo, licence and safeguarding tests.
- المصدر الأساسي
- Banking Law 2/2025; BM 1192
Treat virtual-asset exposure as a distinct risk.
- إجراء التنفيذ
- Apply EDD to elevated exposure and confirm the current VASP registration and licensing path before launch.
- الأدلة الواجب الاحتفاظ بها
- Feature map, perimeter analysis and approval.
- المصدر الأساسي
- CBO Circular BDD/AML/CB/2020/4480
08Targeted financial sanctionsUse current UN and Oman directions.3 عناصر+
Screen designations and ownership or control.
- إجراء التنفيذ
- Screen relevant parties at onboarding, transactions and list updates.
- الأدلة الواجب الاحتفاظ بها
- List versions, tests and decisions.
- المصدر الأساسي
- NCCT Decision 1/2022
Freeze without delay and notify.
- إجراء التنفيذ
- Prevent dealing or asset availability on a true match and notify through the live route.
- الأدلة الواجب الاحتفاظ بها
- Match analysis, restriction time and notification.
- المصدر الأساسي
- NCCT Decision 1/2022; MER 2024
Use licences, delisting or release only under written authority.
- إجراء التنفيذ
- Apply designation-specific procedure and conditions.
- الأدلة الواجب الاحتفاظ بها
- Analysis, permission and release record.
- المصدر الأساسي
- NCCT Decision 1/2022
09Records and regulator accessApply the exact sector retention rule.3 عناصر+
Retain CDD and relationship records for at least ten years where CBO rules apply.
- إجراء التنفيذ
- Run the period from the correct relationship or transaction event and preserve longer holds.
- الأدلة الواجب الاحتفاظ بها
- Schedule, trigger and deletion approval.
- المصدر الأساسي
- CBO BM 1187
Retain transaction and wire data for at least ten years under CBO rules.
- إجراء التنفيذ
- Keep enough information to reconstruct transactions and payment messages.
- الأدلة الواجب الاحتفاظ بها
- Samples, archive and retrieval test.
- المصدر الأساسي
- CBO Guidelines 3.2.5
Produce records promptly to authorities.
- إجراء التنفيذ
- Preserve controlled access, legal holds and production audit trails.
- الأدلة الواجب الاحتفاظ بها
- Access matrix, retrieval and production log.
- المصدر الأساسي
- Royal Decree 30/2016
10Privacy, biometrics, breaches, and transfersApply the 2022 law and 2024 regulation subject to scope and exemptions.3 عناصر+
Map processing conditions and transparency.
- إجراء التنفيذ
- Inventory processing, provide notices, support rights and maintain the processing record and policy.
- الأدلة الواجب الاحتفاظ بها
- Data map, notices, rights and record.
- المصدر الأساسي
- Royal Decree 6/2022; Decision 34/2024
Obtain the Article 5 permit when required.
- إجراء التنفيذ
- Before biometric, genetic, health and other listed sensitive processing, complete the MTCIT permit process unless exempt.
- الأدلة الواجب الاحتفاظ بها
- Classification, permit and conditions.
- المصدر الأساسي
- Royal Decree 6/2022 article 5
Control processors, breaches and transfers.
- إجراء التنفيذ
- Appoint a DPO, contract processors, assess recipient protection and make required notifications.
- الأدلة الواجب الاحتفاظ بها
- Appointment, contracts, assessment and incident record.
- المصدر الأساسي
- Decision 34/2024; MTCIT guidance
11Practical evidence packsEvidence must reconstruct decisions end to end.3 عناصر+
Maintain an onboarding pack.
- إجراء التنفيذ
- Bundle identity, authority, KYB, BO, PEP, sanctions, purpose, risk, privacy and approvals.
- الأدلة الواجب الاحتفاظ بها
- Complete sample and retrieval result.
- المصدر الأساسي
- Operational control supporting Royal Decree 30/2016
Maintain NCFI and sanctions case packs.
- إجراء التنفيذ
- Link activity, suspicion time, report, receipt, confidentiality, restrictions and communications.
- الأدلة الواجب الاحتفاظ بها
- Case pack, timeline and access record.
- المصدر الأساسي
- Royal Decree 30/2016; NCCT Decision 1/2022
Maintain a launch and change pack.
- إجراء التنفيذ
- Record perimeter, licences, reporting, sanctions, privacy, vendors, tests and uncertainties.
- الأدلة الواجب الاحتفاظ بها
- Signed pack, source register and approvals.
- المصدر الأساسي
- Official sources listed below
سجل المصادر الأساسية
14 مصدرًا مستخدمًا في هذه القائمة
استخدم هذه الروابط للتحقق من التشريعات وإرشادات الجهات الرقابية وإجراءات الإبلاغ والبيانات الدولية.
- AML/CFT Law - Royal Decree 30/2016Central Bank of Oman · Primary legislation and official register
- CBO Instructions implementing Royal Decree 30/2016 - BM 1187Central Bank of Oman · Binding instructions
- AML/CFT Guidelines for Financial InstitutionsCentral Bank of Oman · Official guidance
- Digital Onboarding and e-KYC - BM 1191Central Bank of Oman · Official instructions
- Payment Service Providers Policy - BM 1192Central Bank of Oman · Official licensing policy
- Banking Law 2/2025 and current perimeterCentral Bank of Oman · Primary legislation and official summary
- Virtual Assets and VASPs circularCentral Bank of Oman · Official circular
- AML/CFT portal, NCCT Decision 1/2022 and sanctions guidanceCentral Bank of Oman · Official register
- Personal Data Protection Law - Royal Decree 6/2022MTCIT · Primary legislation
- Personal Data Protection Executive Regulation - Decision 34/2024MTCIT · Primary regulation
- Personal Data Protection guidance and formsMTCIT · Official guidance
- Oman Mutual Evaluation Report 2024FATF / MENAFATF · Authoritative assessment
- FATF increased monitoring - 19 June 2026FATF · Authoritative current status
- FATF call for action - 19 June 2026FATF · Authoritative current status
إجابات مباشرة
أسئلة KYC وKYB وAML في عُمان
Who receives STRs?+
The National Centre for Financial Information receives reports through its current prescribed system.
When must an STR be filed?+
Immediately after suspicion arises. CBO entities must not exceed 48 hours; applicable FSA sectors use 24 hours.
What is the CBO occasional-transaction threshold?+
OMR 5,000 or more, including linked operations. It is a CDD trigger, not a universal report.
What threshold applies to an occasional wire?+
OMR 350 or equivalent under CBO rules, plus required wire information.
How is beneficial ownership determined?+
Identify aggregate interests of 25% or more, then assess control, concert parties and lower holdings; 25% is not a safe harbour.
How long are AML records kept?+
Applicable CBO rules use at least ten years. Confirm the trigger and any longer direction.
Can onboarding be digital?+
Eligible CBO licensees may use BM 1191 and the National Digital Onboarding Registry but remain responsible for accuracy and EDD.
Does biometric KYC need a permit?+
Article 5 data including biometrics requires the MTCIT permit process unless exempt.
Can payment or virtual-asset services be offered?+
Only after confirming the current activity-specific licence or registration path.
Is Oman on a FATF public list?+
No at 19 June 2026, but absence is not a low-risk conclusion.
منهجية البحث والمراجعة
تحدد VOVE ID Compliance Research النطاق التنظيمي، وتحول الالتزامات إلى ضوابط تشغيلية، وتربط الادعاءات الجوهرية بالمصادر، وتسجل تاريخ وإصدار كل مراجعة.
General information, not legal advice. Reviewed 2 October 2026. Confirm controlling Arabic text, current sector instructions, NCFI filing specifications, beneficial-owner procedure, sanctions directions, privacy permits and licensing with the competent authority and qualified Oman counsel.