توغو KYC, KYB & AML compliance checklist
قائمة عملية وموثقة بالمصادر لتنفيذ متطلبات KYC وKYB وAML في توغو.
- تاريخ آخر مراجعة
- تاريخ آخر مراجعة:
- الإصدار
- الإصدار 1.0
إجابة مباشرة
ما الذي تغطيه قائمة الامتثال الخاصة بـ توغو؟
تحوّل قائمة توغو قواعد KYC وKYB وAML الأساسية إلى 11 مجالات رقابية و40 فحوص تنفيذ، وتشمل الجهات المختصة وواجبات الإبلاغ والأدلة الواجب الاحتفاظ بها.
حقائق تنظيمية أساسية
- Primary AML/CFT/CPF law
- Law No. 2026-001 of 2 March 2026
- Financial intelligence unit
- CENTIF Togo
- STR timing
- Immediately after suspicion or reasonable grounds arise
- Cash transaction report
- XOF 15 million or more, including apparently linked operations
- Core AML retention
- 10 years under record-class-specific clocks
- Beneficial ownership
- Controlling ownership, other control, then senior-manager fallback
- Payments authority
- BCEAO within the UMOA framework
- Privacy authority
- IPDCP Togo
- VASP perimeter
- Prior competent-authority approval or authorisation required
- FATF public lists
- Not named in the June 2026 statements
تفاصيل التنفيذ
متطلبات وإجراءات الامتثال في توغو
افتح كل مجال لمراجعة المتطلب وإجراء التنفيذ المقترح والأدلة الواجب الاحتفاظ بها والمصدر الأساسي.
01Scope, authorities and regulated activitiesResolve entity, activity and supervisor scope before onboarding or launch.4 عناصر+
Financial institutions and listed designated non-financial businesses and professions are reporting persons.
- إجراء التنفيذ
- Map each entity, product, profession, branch, distributor, agent and outsourced function to Law No. 2026-001 and document the responsible supervisor.
- الأدلة الواجب الاحتفاظ بها
- Perimeter memorandum, entity-product map, licences and supervisor correspondence.
- المصدر الأساسي
- Law No. 2026-001, arts. 2-4 and 107
CENTIF receives and analyses suspicious transaction reports and may request information.
- إجراء التنفيذ
- Appoint an authorised correspondent and obtain the current CENTIF access, form and acknowledgement instructions before production reporting.
- الأدلة الواجب الاحتفاظ بها
- Appointment, access record, reporting procedure and test evidence.
- المصدر الأساسي
- Law No. 2026-001, arts. 60, 64 and 95-103
In-scope virtual-asset services require prior approval or authorisation from the competent authority.
- إجراء التنفيذ
- Obtain a written perimeter assessment and the required approval before exchange, transfer, custody or other in-scope virtual-asset activity.
- الأدلة الواجب الاحتفاظ بها
- Classification, application, approval, conditions and service map.
- المصدر الأساسي
- Law No. 2026-001, arts. 58-59
Regulated payment services require the applicable BCEAO authorisation.
- إجراء التنفيذ
- Map each payment, e-money, acquiring, transfer, remittance, initiation and agent function to the current UMOA payment-services framework.
- الأدلة الواجب الاحتفاظ بها
- Licence or exemption analysis, BCEAO register check and partner file.
- المصدر الأساسي
- BCEAO Instruction No. 001-01-2024 and current authorised-institution register
02Governance, risk assessment and control ownershipBuild documented, risk-based controls with accountable governance.3 عناصر+
Reporting persons must maintain internal organisation, controls and risk management proportionate to their activities.
- إجراء التنفيذ
- Approve policies for CDD, BO, PEPs, sanctions, monitoring, reporting, recordkeeping, training, screening and independent testing.
- الأدلة الواجب الاحتفاظ بها
- Policy suite, approvals, control library, training and audit reports.
- المصدر الأساسي
- Law No. 2026-001, arts. 12-14
Money-laundering, terrorist-financing and proliferation-financing risks must be identified, assessed, documented and kept current.
- إجراء التنفيذ
- Assess customers, geographies, products, services, transactions, channels, new products and technologies before launch and on material change.
- الأدلة الواجب الاحتفاظ بها
- Risk assessment, methodology, source data, change log and approvals.
- المصدر الأساسي
- Law No. 2026-001, art. 15
Institutions must be able to justify that customer controls are proportionate to risk.
- إجراء التنفيذ
- Define risk-rating logic, control variants, approval levels and review cycles, then test their operation.
- الأدلة الواجب الاحتفاظ بها
- Risk model, decision records, samples and assurance results.
- المصدر الأساسي
- Law No. 2026-001, arts. 19-21 and 84-85
03Natural-person identification and CDDIdentify and verify customers, actors and beneficial owners at every statutory trigger.4 عناصر+
Before a relationship or assisted transaction, collect and verify identity from reliable, independent sources and understand purpose and intended nature.
- إجراء التنفيذ
- Capture identity attributes, verify evidence provenance, identify the beneficial owner and establish the expected activity profile.
- الأدلة الواجب الاحتفاظ بها
- CDD file, source provenance, verification result, purpose and risk decision.
- المصدر الأساسي
- Law No. 2026-001, arts. 16-17
CDD also applies to transfers, suspicion, identity doubt and applicable occasional or linked transactions.
- إجراء التنفيذ
- Configure relationship, transfer, cash aggregation, suspicion and identity-quality triggers; do not treat a threshold as a safe harbour.
- الأدلة الواجب الاحتفاظ بها
- Trigger matrix, aggregation results, alerts and CDD timestamps.
- المصدر الأساسي
- Law No. 2026-001, arts. 17 and 49; UMOA Decision No. 021
Limited delayed verification must finish as soon as possible and before the first transaction, with effective risk controls.
- إجراء التنفيذ
- Block transaction capability until verification is complete and document why each statutory condition is satisfied.
- الأدلة الواجب الاحتفاظ بها
- Deferral approval, restrictions, completion timestamp and exception testing.
- المصدر الأساسي
- Law No. 2026-001, art. 18
Remote relationships require particular and sufficient preventive measures.
- إجراء التنفيذ
- Use risk-calibrated document, device, liveness, biometric or equivalent safeguards and manual escalation without assuming one technology is legally sufficient.
- الأدلة الواجب الاحتفاظ بها
- Remote-onboarding standard, vendor review, model tests and exceptions.
- المصدر الأساسي
- Law No. 2026-001, art. 22
04KYB, authority and beneficial ownershipVerify legal existence, representatives, ownership and ultimate natural-person control.4 عناصر+
Legal-person and legal-arrangement CDD covers legal name, form, constitutive documents, powers, management and addresses.
- إجراء التنفيذ
- Obtain current registry and constitutional evidence and verify every representative's identity and authority.
- الأدلة الواجب الاحتفاظ بها
- Registry extract, statutes, managers, addresses, mandate and discrepancy log.
- المصدر الأساسي
- Law No. 2026-001, arts. 17 and 26
The BO cascade tests controlling ownership, then control by other means, then the relevant senior managing official.
- إجراء التنفيذ
- Trace every ownership layer and control right; document why each stage did or did not identify a natural person before using the fallback.
- الأدلة الواجب الاحتفاظ بها
- Ownership chart, control analysis, fallback rationale and verified BO files.
- المصدر الأساسي
- Law No. 2026-001, art. 26
Trusts and comparable arrangements use role-based BO tests.
- إجراء التنفيذ
- Identify and verify the settlor, trustee, protector, beneficiaries or class and every other natural person exercising ultimate control.
- الأدلة الواجب الاحتفاظ بها
- Instrument, role register, identity files and control analysis.
- المصدر الأساسي
- Law No. 2026-001, art. 26
Companies must keep accurate, current shareholder, member and BO information; the national BO register is established by law.
- إجراء التنفيذ
- Maintain event-driven updates, reconcile registry data and complete filings under the current competent-authority implementation procedure.
- الأدلة الواجب الاحتفاظ بها
- Registers, update log, filing receipts, supporting documents and discrepancies.
- المصدر الأساسي
- Law No. 2026-001, arts. 76-79 and 122; current competent-authority implementation instruments
05PEPs, enhanced due diligence and relianceApply stronger approval, evidence and monitoring where risk is higher.4 عناصر+
PEP relationships require risk systems, senior-management approval, source-of-wealth and source-of-funds measures, and enhanced monitoring.
- إجراء التنفيذ
- Screen customers and BOs for domestic, foreign and international-organisation PEP exposure and connected-person risk.
- الأدلة الواجب الاحتفاظ بها
- Screening, match rationale, source file, approval and monitoring plan.
- المصدر الأساسي
- Law No. 2026-001, art. 29
Institutions reassess identified PEP customer profiles every three years and retain risk-based treatment where warranted.
- إجراء التنفيذ
- Schedule the statutory reassessment and document any change to status or controls.
- الأدلة الواجب الاحتفاظ بها
- Review diary, reassessment, decision and approval.
- المصدر الأساسي
- Law No. 2026-001, art. 29
Higher-risk relationships require enhanced measures; simplified treatment needs a demonstrated lower-risk basis and cannot override suspicion.
- إجراء التنفيذ
- Document control changes, corroboration, approvals and monitoring intensity for each risk treatment.
- الأدلة الواجب الاحتفاظ بها
- EDD or SDD rationale, evidence, approval and review.
- المصدر الأساسي
- Law No. 2026-001, arts. 30 and 84-85
Reliance on a third party does not remove the institution's responsibility for CDD.
- إجراء التنفيذ
- Assess eligibility, obtain required information immediately, contract for document access and test retrieval.
- الأدلة الواجب الاحتفاظ بها
- Due diligence, agreement, retrieval test and exceptions.
- المصدر الأساسي
- Law No. 2026-001, arts. 35-38
06Failed CDD, monitoring and suspicious reportingBlock unsafe activity, monitor continuously and report suspicion immediately and confidentially.4 عناصر+
If required CDD cannot be completed, do not open or execute, or terminate the relationship, and submit an STR.
- إجراء التنفيذ
- Operate a controlled block or exit and preserve the confidential STR decision.
- الأدلة الواجب الاحتفاظ بها
- Failure reason, block, closure, STR and acknowledgement.
- المصدر الأساسي
- Law No. 2026-001, art. 25
Relationships and transactions require ongoing scrutiny, current CDD and written examination of complex, unusual or apparently purposeless activity.
- إجراء التنفيذ
- Investigate source, destination, purpose and BO, refresh CDD and retain the confidential written analysis.
- الأدلة الواجب الاحتفاظ بها
- Alerts, cases, report, refreshed CDD and review.
- المصدر الأساسي
- Law No. 2026-001, arts. 19-21
Reporting persons must immediately report suspected sums, transactions and attempted transactions to CENTIF.
- إجراء التنفيذ
- Timestamp when suspicion or reasonable grounds arose and file using the current prescribed route and model; send changes or supplements without delay.
- الأدلة الواجب الاحتفاظ بها
- Internal report, analysis, STR, CENTIF receipt and timeline.
- المصدر الأساسي
- Law No. 2026-001, art. 60
Suspicious activity is withheld before reporting unless the statutory post-execution conditions apply; tipping off is prohibited.
- إجراء التنفيذ
- Govern holds, lawful release, post-execution reporting and restricted communications.
- الأدلة الواجب الاحتفاظ بها
- Hold decision, exception rationale, access logs and communications record.
- المصدر الأساسي
- Law No. 2026-001, arts. 61 and 63
07Wires, cash thresholds, payments and agentsKeep CDD triggers, special examination and threshold reports distinct.4 عناصر+
Cash transactions of XOF 15 million or more, including apparently linked operations, are reported to CENTIF.
- إجراء التنفيذ
- Aggregate linked activity, configure the exact in-scope entity and transaction logic, and obtain current CENTIF reporting instructions.
- الأدلة الواجب الاحتفاظ بها
- Threshold configuration, tests, reports, receipts and exception record.
- المصدر الأساسي
- Law No. 2026-001, art. 72; UMOA Decision No. 021, art. 8
Multiple cash transactions exceeding XOF 9 million in one day or at unusual frequency trigger identification and verification for financial institutions.
- إجراء التنفيذ
- Aggregate by person and account across channels and apply CDD regardless of amount where suspicion exists.
- الأدلة الواجب الاحتفاظ بها
- Aggregation logic, customer match, CDD file and testing.
- المصدر الأساسي
- Law No. 2026-001, art. 17(i); UMOA Decision No. 021, art. 3
Payment in cash or bearer title at XOF 50 million or more, and unusual or unjustified operations at XOF 10 million or more, require special examination.
- إجراء التنفيذ
- Investigate origin, destination, purpose and BO and retain a confidential report.
- الأدلة الواجب الاحتفاظ بها
- Scenario, investigation, source evidence, report and approval.
- المصدر الأساسي
- Law No. 2026-001, art. 21; UMOA Decision No. 021, art. 4
Wire transfers must carry required originator and beneficiary information and deficient transfers require governed handling.
- إجراء التنفيذ
- Validate required data throughout the chain and define reject, suspend, execute, investigate and follow-up rules.
- الأدلة الواجب الاحتفاظ بها
- Field matrix, validation, repair queue, samples and decisions.
- المصدر الأساسي
- Law No. 2026-001, arts. 39-47
08Targeted financial sanctions and CPFScreen, freeze, restrict and report without delay under the current designation framework.3 عناصر+
Reporting persons must implement internal procedures for targeted financial sanctions.
- إجراء التنفيذ
- Screen customers, BOs, controllers, representatives and transactions at onboarding, list updates and before relevant activity.
- الأدلة الواجب الاحتفاظ بها
- List inventory, update logs, screening results and match files.
- المصدر الأساسي
- Law No. 2026-001, arts. 89 and 124
Property of a designated person or entity is frozen immediately after notification, without prior notice, and must not be made available.
- إجراء التنفيذ
- Maintain a 24/7 freeze and escalation path covering direct, indirect, owned and controlled exposure.
- الأدلة الواجب الاحتفاظ بها
- Procedure, system test, match decision, freeze and audit trail.
- المصدر الأساسي
- Law No. 2026-001, art. 89
CENTIF and the competent authority are informed immediately of relevant funds, frozen assets, measures and attempted operations.
- إجراء التنفيذ
- Use the current competent-authority route and obtain written direction before release or dealing.
- الأدلة الواجب الاحتفاظ بها
- Notifications, receipts, directions and release decision.
- المصدر الأساسي
- Law No. 2026-001, arts. 90-91
09Records, access and assuranceRetain reconstructable records under the correct statutory clock.4 عناصر+
Customer identity, profile and analysis records are kept for 10 years after account closure or relationship cessation.
- إجراء التنفيذ
- Map every customer record class to the relationship-based clock and apply legal holds.
- الأدلة الواجب الاحتفاظ بها
- Retention schedule, configuration, sample and deletion test.
- المصدر الأساسي
- Law No. 2026-001, art. 23
Transaction, accounting and business-correspondence records are kept for 10 years after execution.
- إجراء التنفيذ
- Use transaction-based clocks and retain enough information to reconstruct individual operations.
- الأدلة الواجب الاحتفاظ بها
- Archive configuration, reconstruction test and retrieval log.
- المصدر الأساسي
- Law No. 2026-001, art. 23
Corporate and BO information is retained for at least 10 years after dissolution or the end of the relevant professional relationship.
- إجراء التنفيذ
- Assign an archive owner and preserve current and historic ownership evidence.
- الأدلة الواجب الاحتفاظ بها
- Dissolution checklist, archive, access controls and retrieval test.
- المصدر الأساسي
- Law No. 2026-001, art. 79
Required records must be available to CENTIF, supervisors, judicial authorities and authorised investigators.
- إجراء التنفيذ
- Index linked identity, transaction, investigation and reporting evidence and test controlled export.
- الأدلة الواجب الاحتفاظ بها
- Request register, retrieval tests, access log and response package.
- المصدر الأساسي
- Law No. 2026-001, arts. 24 and 103
10Privacy, biometrics and transfersApply Law No. 2019-014 alongside AML collection, retention and disclosure duties.4 عناصر+
Personal-data processing requires a defined purpose, lawful treatment, proportionality, security and rights controls.
- إجراء التنفيذ
- Inventory identity, BO, screening, monitoring and reporting data; document purpose, access, recipients, location and retention.
- الأدلة الواجب الاحتفاظ بها
- Processing register, basis assessment, notices, access matrix and retention map.
- المصدر الأساسي
- Law No. 2019-014 of 29 October 2019
Applicable processing must complete the required IPDCP declaration, register or prior-authorisation formality before implementation.
- إجراء التنفيذ
- Classify ordinary, sensitive, biometric, interconnected and cross-border processing with IPDCP or counsel before production use.
- الأدلة الواجب الاحتفاظ بها
- Formality matrix, filing, receipt or authorisation and change log.
- المصدر الأساسي
- Law No. 2019-014, arts. 5-9; IPDCP guidance
Biometric and other sensitive identity data require a specific lawful basis, necessity and stronger safeguards.
- إجراء التنفيذ
- Document the applicable condition, minimise templates and raw images, test vendors and restrict access.
- الأدلة الواجب الاحتفاظ بها
- Legal assessment, necessity record, security design, tests and access logs.
- المصدر الأساسي
- Law No. 2019-014; controlled IPDCP implementation dependency
International transfers and security incidents require analysis under Law No. 2019-014 and current IPDCP procedures.
- إجراء التنفيذ
- Document destinations and safeguards and maintain an incident escalation route; confirm current notification forms and deadlines rather than importing foreign rules.
- الأدلة الواجب الاحتفاظ بها
- Transfer assessment, contracts, incident log and IPDCP correspondence.
- المصدر الأساسي
- Law No. 2019-014; IPDCP official procedures
11Practical evidence packs and change controlMake every acceptance, escalation and regulatory decision reconstructable.2 عناصر+
A complete customer file links identity, KYB, BO, screening, risk, approval, monitoring and reporting decisions.
- إجراء التنفيذ
- Block activation where mandatory evidence or approval is missing and preserve the release decision.
- الأدلة الواجب الاحتفاظ بها
- Control checklist, linked file, approvals and release log.
- المصدر الأساسي
- Law No. 2026-001, arts. 12-26
Time-sensitive thresholds, lists, reporting routes, registers and licences require governed change monitoring.
- إجراء التنفيذ
- Assign owners to review Journal Officiel, CENTIF-Togo, BCEAO, UMOA, CFE, IPDCP, FATF and GIABA sources on a documented schedule.
- الأدلة الواجب الاحتفاظ بها
- Legal inventory, source log, change assessment and implementation tickets.
- المصدر الأساسي
- Official sources listed below
سجل المصادر الأساسية
15 مصدرًا مستخدمًا في هذه القائمة
استخدم هذه الروابط للتحقق من التشريعات وإرشادات الجهات الرقابية وإجراءات الإبلاغ والبيانات الدولية.
- Official confirmation of Law No. 2026-001 of 2 March 2026 on AML/CFT/CPFMinistry of Finance and Budget, Republic of Togo · Official promulgation confirmation
- 2023 UMOA uniform AML/CFT/CPF lawBCEAO · Primary regional legal framework
- UMOA Decision No. 021 of 21 December 2023 setting implementation thresholdsBCEAO · Primary regional decision
- UMOA Decision No. 003 of 28 March 2024 setting complementary thresholdsBCEAO · Primary regional decision
- BCEAO Instruction No. 003-03-2025 on customer identification and knowledgeBCEAO · Primary regulator instruction
- BCEAO Instruction No. 001-03-2025 on AML/CFT/CPF organisation and controlBCEAO · Primary regulator instruction
- BCEAO Instruction No. 001-01-2024 on payment services in the UMOABCEAO · Primary regulator instruction
- CENTIF-Togo reporting information and official guidanceCENTIF-Togo · Official FIU portal
- Official company-creation and CFE registry procedureService public de l'administration togolaise · Official registry procedure
- Law No. 2019-014 of 29 October 2019 on personal-data protectionJournal Officiel de la Republique Togolaise · Primary legislation
- Personal-data compliance documentation and formsIPDCP · Official data-protection authority guidance
- Togo country assessment and follow-upFATF · Authoritative assessment index
- Togo 2025 third enhanced follow-up reportGIABA · Authoritative regional peer review
- Jurisdictions under Increased Monitoring - 19 June 2026FATF · Authoritative public statement
- High-Risk Jurisdictions subject to a Call for Action - 19 June 2026FATF · Authoritative public statement
إجابات مباشرة
أسئلة KYC وKYB وAML في توغو
Who receives suspicious transaction reports in Togo?+
CENTIF Togo receives reports using the current prescribed model and route.
When is an STR due?+
Immediately after suspicion or reasonable grounds arise. Attempted transactions are included, and relevant supplementary information is sent without delay.
What cash transaction report threshold applies?+
Institutions and designated non-financial businesses report cash transactions of XOF 15 million or more, whether a single operation or apparently linked operations.
What beneficial-ownership test applies?+
For legal persons, identify the natural person with controlling ownership, then control by other means, and only then the relevant senior managing official. Trusts and similar arrangements use role-based tests.
How long are AML records kept?+
Customer identity, profile and analysis records are kept for 10 years after relationship cessation; transaction and correspondence records are kept for 10 years after execution.
Do virtual-asset and payment services require authorisation?+
Yes, where the activity falls within the regulated perimeter. Obtain a current activity-specific decision from the competent authority before launch.
Does KYC processing require IPDCP formalities?+
Potentially. Law No. 2019-014 establishes declaration, authorisation and exemption regimes, while sensitive, biometric and transfer processing may need additional treatment. Confirm the current formality with IPDCP.
Is Togo on a FATF public list?+
Togo was not named in FATF's June 2026 increased-monitoring or call-for-action statements. GIABA enhanced follow-up is a separate peer-review process.
منهجية البحث والمراجعة
تحدد VOVE ID Compliance Research النطاق التنظيمي، وتحول الالتزامات إلى ضوابط تشغيلية، وتربط الادعاءات الجوهرية بالمصادر، وتسجل تاريخ وإصدار كل مراجعة.
This checklist is general regulatory information, not legal advice or a licence determination. It reflects primary and authoritative materials reviewed on 24 July 2026. Confirm the live CENTIF reporting route and forms, activity-specific licences, sanctions instructions, beneficial-owner filing workflow, IPDCP formalities and all sector overlays with the competent authority and qualified Togolese counsel before launch.