Azerbaijan KYC, KYB & AML compliance checklist
A practical, source-linked checklist for implementing KYC, KYB and AML requirements in Azerbaijan.
- Last reviewed
- Last reviewed:
- Version
- Version 1.0
Portable implementation guide
Get the PDF checklist
11 control areas · 38 implementation checks
Last reviewed: 7 November 2026 · Version 1.0
Download the checklistDirect answer
What does the Azerbaijan compliance checklist cover?
The Azerbaijan checklist translates primary KYC, KYB and AML rules into 11 control areas and 38 implementation checks. It identifies the relevant authorities, customer and beneficial-owner controls, reporting duties, recordkeeping expectations and evidence teams should retain.
Key regulatory facts
- Primary AML law
- Law on Prevention of Legalization of Criminally Obtained Property and Financing of Terrorism
- FIU
- Financial Monitoring Service (FMS)
- Occasional-transaction CDD
- 20,000 AZN, including linked operations
- Suspicious reporting
- Immediately after grounds arise, no later than end of that business day
- Beneficial owner
- Ownership control, then other control, then senior managing official
- Records
- At least 5 years
- Payment services
- Central Bank licence/registration perimeter
- FATF public lists
- Not listed at October 2026
Implementation detail
Azerbaijan compliance requirements and actions
Open each control area to review the requirement, recommended implementation action, evidence to retain and the primary-source citation used by the research team.
01Scope, authorities, and licensingClassify the activity and supervisor before launch.3 items+
Determine whether each activity is an obliged-person activity.
- Implementation action
- Map financial-institution, real-estate, legal, accounting, tax, notarial, company-service, virtual-asset and other services to the current statutory perimeter; do not transfer one sector's rules to another.
- Evidence to retain
- Perimeter memo, service map and source register.
- Primary citation
- AML/CFT Law, Articles 1-3
Obtain every required licence, registration or permit.
- Implementation action
- Confirm Central Bank or other competent-authority requirements before banking, payment, electronic-money, securities, insurance, exchange or other regulated activity.
- Evidence to retain
- Licence matrix, approvals and conditions.
- Primary citation
- Applicable financial-sector and payment-services legislation
Use FMS and the correct sector supervisor.
- Implementation action
- Maintain a dated authority map and the prescribed electronic-reporting procedure for the entity type.
- Evidence to retain
- Authority map, portal access and acknowledgements.
- Primary citation
- AML/CFT Law, Articles 14 and 16
02Governance and risk assessmentControls must be risk-based, approved and tested.3 items+
Complete and document the annual institutional ML/TF/PF risk assessment.
- Implementation action
- Assess customer, geography, product, service, transaction, delivery-channel and technology risks; incorporate national and sector assessments.
- Evidence to retain
- Methodology, assessment, approval and remediation.
- Primary citation
- AML/CFT Law, Article 21
Maintain a compliant internal-control programme.
- Implementation action
- Document governance, responsible employee, CDD, screening, monitoring, reporting, training, audit and escalation arrangements proportionate to risk.
- Evidence to retain
- Programme, appointment, training and test reports.
- Primary citation
- AML/CFT Law, Article 10
Keep rules aligned with current FMS indicators and sector requirements.
- Implementation action
- Map official typologies, indicators and supervisory instruments to scenarios and review them after legal or risk change.
- Evidence to retain
- Rule inventory, mapping and change log.
- Primary citation
- AML/CFT Law; current FMS acts of statutory nature
03Natural-person identificationCDD applies before relationships and at statutory triggers.4 items+
Identify and verify the customer before establishing a business relationship.
- Implementation action
- Use information and documents from reliable, independent sources and databases; capture all fields required for the entity and product.
- Evidence to retain
- Identity record, verification result and provenance.
- Primary citation
- AML/CFT Law, Articles 4.2 and 4.4
Apply CDD before a 20,000 AZN occasional transaction.
- Implementation action
- Aggregate linked operations and apply CDD once it becomes known that the designated threshold is exceeded.
- Evidence to retain
- Aggregation logic, alert and completed CDD.
- Primary citation
- AML/CFT Law, Articles 4.2.2-4.3
Identify and verify representatives and authority.
- Implementation action
- Confirm identity and authorization before accepting instructions; preserve the mandate and validation source.
- Evidence to retain
- Representative KYC, mandate and validation.
- Primary citation
- AML/CFT Law, Article 4.4.2
Repeat CDD when risk or information changes.
- Implementation action
- Refresh for suspicion, doubts, material profile change, complex or unusual activity and ongoing-review triggers.
- Evidence to retain
- Trigger log, refreshed records and outcome.
- Primary citation
- AML/CFT Law, Articles 4.5 and 4.17
04KYB and beneficial ownershipVerify existence, authority, ownership and ultimate control.4 items+
Verify the legal person or foreign legal arrangement.
- Implementation action
- Record incorporation, name, form, existence, senior management, legal address, principal place of business and business nature using reliable independent sources.
- Evidence to retain
- Registry extract, governing documents and validation.
- Primary citation
- AML/CFT Law, Article 4.6
Identify beneficial owners through the statutory cascade.
- Implementation action
- Identify natural persons with ultimate controlling ownership; if doubtful or absent, identify control by other means; if still unresolved, identify the senior managing official.
- Evidence to retain
- Ownership chart, control analysis and identities.
- Primary citation
- AML/CFT Law, Article 4.7
Identify all relevant parties to a foreign legal arrangement.
- Implementation action
- For trusts identify settlor, trustees, protector, beneficiaries or class and any other ultimate controller; map equivalent roles for other arrangements.
- Evidence to retain
- Arrangement documents, role map and verification.
- Primary citation
- AML/CFT Law, Article 4.8
Resolve registry and customer-data discrepancies.
- Implementation action
- Compare official registry, constitutional, customer and reliable-source data and escalate inconsistent ownership, management or status.
- Evidence to retain
- Search results, discrepancy log and resolution.
- Primary citation
- AML/CFT Law, Articles 4.4 and 4.6
05PEPs, EDD, and remote onboardingHigher-risk relationships need enhanced controls.3 items+
Identify PEPs, close relatives and close associates.
- Implementation action
- Screen customers and beneficial owners and obtain senior-management approval, source-of-property/wealth evidence and enhanced monitoring where applicable.
- Evidence to retain
- Screening, classification, approval and corroboration.
- Primary citation
- AML/CFT Law, Article 7
Apply enhanced CDD where higher risk is identified.
- Implementation action
- Obtain additional identity, ownership, purpose and source evidence and increase monitoring proportionately.
- Evidence to retain
- EDD checklist, evidence, approval and monitoring plan.
- Primary citation
- AML/CFT Law, Articles 4.10-4.13
Control non-face-to-face onboarding.
- Implementation action
- Use a method permitted by FMS and the sector supervisor; preserve authentication, liveness, fraud, exception and test evidence.
- Evidence to retain
- Method assessment, session record and tests.
- Primary citation
- AML/CFT Law, Article 14.11; applicable remote-verification rules
06Monitoring and suspicious reportingDetection and reporting must meet event-specific timing.4 items+
Monitor relationships and transactions on a risk basis.
- Implementation action
- Detect complex, unusually large, unusual, threshold and suspicious activity and document the background, purpose and source analysis.
- Evidence to retain
- Scenarios, alerts, analysis, tuning and governance.
- Primary citation
- AML/CFT Law, Articles 4.5, 4.10 and 11
Report suspicion to FMS within the statutory deadline.
- Implementation action
- Submit required suspicious information immediately after grounds are identified and no later than the end of that business day, using the prescribed route.
- Evidence to retain
- Detection time, report, receipt and rationale.
- Primary citation
- AML/CFT Law, Articles 11.2 and 11.4
Apply required pre-transaction suspension controls.
- Implementation action
- For covered financial-institution transactions, suspend for the statutory two-working-day period and report immediately, subject to the law's exception where suspension is impossible.
- Evidence to retain
- Hold timestamp, legal classification, report and release instruction.
- Primary citation
- AML/CFT Law, Articles 11.5-11.7
Prevent tipping off and protect reports.
- Implementation action
- Restrict access and communications concerning reports, analyses and authority instructions except where law permits.
- Evidence to retain
- Access controls, communication review and training.
- Primary citation
- AML/CFT Law, Articles 4.15, 11.8 and 15.4
07Prescribed reporting, wires, payments, and virtual assetsTreat transaction categories and regulated products separately.4 items+
Configure each prescribed monitoring category separately.
- Implementation action
- Maintain a current legal table of reportable transaction types, FMS-designated thresholds, conditions and exemptions; do not assume the 20,000 AZN CDD trigger is a universal reporting threshold.
- Evidence to retain
- Legal table, configurations, tests and reports.
- Primary citation
- AML/CFT Law, Article 11; current FMS rules
Carry and screen required wire-transfer information.
- Implementation action
- Apply current originator, beneficiary, intermediary and missing-data controls for the institution's role.
- Evidence to retain
- Field matrix, samples, screening and repair queue.
- Primary citation
- AML/CFT Law; Central Bank wire-transfer regulations
Classify payment and electronic-money services before launch.
- Implementation action
- Map each service to the Payment Services and Payment Systems Law and obtain the Central Bank licence or registration required for the role.
- Evidence to retain
- Product memo, licence/register result and tests.
- Primary citation
- Law on Payment Services and Payment Systems
Apply the current virtual-asset perimeter and AML controls.
- Implementation action
- Confirm the activity's legal and licensing status with the Central Bank and FMS; apply occasional-transaction CDD and transfer controls under the current implementing rules.
- Evidence to retain
- Classification, authority confirmation and control tests.
- Primary citation
- AML/CFT Law, Articles 1 and 4.2.3; current Central Bank rules
08Targeted financial sanctionsUse live official lists and act without delay.3 items+
Screen current domestic and applicable UN designations.
- Implementation action
- Screen customers, owners, representatives and transactions at onboarding, on list updates and throughout the relationship according to risk.
- Evidence to retain
- List version, logs and match decisions.
- Primary citation
- Targeted Financial Sanctions Law
Freeze designated assets without prior notice.
- Implementation action
- Apply the current statutory freeze and reporting process immediately on a confirmed designation; do not wait for customer consent.
- Evidence to retain
- Designation, freeze timestamp, asset inventory and report.
- Primary citation
- Targeted Financial Sanctions Law
Control permitted access, unfreezing and false positives.
- Implementation action
- Release or permit access only on documented legal authority and preserve every condition, decision and communication.
- Evidence to retain
- Authority decision, conditions and release record.
- Primary citation
- Targeted Financial Sanctions Law and implementing rules
09Records and authority accessRecords must reconstruct decisions and transactions.3 items+
Retain transaction information for at least five years.
- Implementation action
- Run the period from transaction completion and retain enough information to reconstruct each domestic or cross-border transaction.
- Evidence to retain
- Retention schedule, archive and retrieval test.
- Primary citation
- AML/CFT Law, Articles 6.1 and 6.4
Retain CDD, account, correspondence and analysis records for at least five years.
- Implementation action
- Run the period from relationship end or occasional-transaction completion, subject to lawful extension.
- Evidence to retain
- Customer archive, schedule and integrity controls.
- Primary citation
- AML/CFT Law, Articles 6.2-6.3
Produce records to competent authorities within the specified period.
- Implementation action
- Operate controlled retrieval, approval and production procedures that preserve applicable secrecy and access controls.
- Evidence to retain
- Request log, production, approval and receipt.
- Primary citation
- AML/CFT Law, Articles 6.5 and 14
10Privacy, biometrics, incidents, and transfersAML processing remains subject to privacy and security law.4 items+
Document lawful purpose and processing conditions.
- Implementation action
- Map collection, consent or statutory authority, notices, access, correction, blocking, destruction and AML retention.
- Evidence to retain
- Data map, notices, legal-basis register and rights log.
- Primary citation
- Law on Personal Data
Protect identity and biometric information.
- Implementation action
- Minimize collection and apply access, security, accuracy, liveness, vendor and deletion controls proportionate to sensitivity and permitted purpose.
- Evidence to retain
- Assessment, architecture, tests and approvals.
- Primary citation
- Law on Personal Data; applicable biometric and information-security rules
Control cross-border transfers and processors.
- Implementation action
- Confirm legal conditions, destination safeguards, contracts and any registration or consent requirements before transfer.
- Evidence to retain
- Transfer map, legal assessment, safeguards and notices.
- Primary citation
- Law on Personal Data
Use applicable incident-notification rules.
- Implementation action
- Maintain a workflow that identifies the competent authority, trigger and sector-specific deadline without inventing a universal breach deadline.
- Evidence to retain
- Incident chronology, assessment, notices and remediation.
- Primary citation
- Personal-data and applicable sector cybersecurity rules
11Practical evidence packsEvidence must reconstruct decisions end to end.3 items+
Maintain an onboarding pack.
- Implementation action
- Bundle identity, authority, KYB, beneficial ownership, PEP, sanctions, purpose, risk, privacy and approvals.
- Evidence to retain
- Complete sample and retrieval result.
- Primary citation
- Operational control supporting AML/CFT Law, Article 4
Maintain reporting and sanctions case packs.
- Implementation action
- Link trigger, classification, decision time, report, receipt, suspension or freeze, confidentiality and authority communications.
- Evidence to retain
- Case pack, timeline and access record.
- Primary citation
- AML/CFT Law, Articles 11 and 15; Targeted Financial Sanctions Law
Maintain a launch and legal-change pack.
- Implementation action
- Record perimeter, licences, monitoring categories, reporting, sanctions, privacy, vendors, source versions and control tests.
- Evidence to retain
- Signed pack, source register and approvals.
- Primary citation
- Official sources listed below
Primary-source register
16 sources used for this checklist
Use these links to verify the underlying legislation, regulator guidance, reporting procedures and international status statements.
- AML/CFT LawFinancial Monitoring Service · Primary legislation - official English text
- FMS legislation portalFinancial Monitoring Service · Official legal source index
- Financial Monitoring ServiceFinancial Monitoring Service · Official FIU portal
- FMS methodology and guidanceFinancial Monitoring Service · Official guidance
- Suspicious Activity Monitoring System regulationFinancial Monitoring Service · Official reporting-system notice
- Targeted Financial Sanctions LawE-Qanun · Primary legislation - official repository
- Central Bank legal frameworkCentral Bank of Azerbaijan · Official financial regulator source
- Law on Payment Services and Payment SystemsCentral Bank of Azerbaijan · Primary legislation - official English text
- Payment and electronic-money licensing noticeCentral Bank of Azerbaijan · Official licensing guidance
- Commercial legal entities registry informationState Tax Service · Official registry service
- Law on Personal DataE-Qanun · Primary legislation - official repository
- Azerbaijan mutual evaluation 2024FATF / MONEYVAL · Authoritative mutual evaluation
- Azerbaijan follow-up report 2025FATF / MONEYVAL · Authoritative follow-up assessment
- FATF increased-monitoring statement - October 2026FATF · Authoritative current public-list status
- FATF call-for-action statement - October 2026FATF · Authoritative current public-list status
- State Flag lawE-Qanun · Primary legislation - official flag-use rules
Direct answers
Azerbaijan KYC, KYB and AML questions
Who receives suspicious-transaction reports?+
The Financial Monitoring Service, through its prescribed reporting system and form.
When must suspicion be reported?+
For the relevant suspicious-reporting cases, immediately after grounds are identified and no later than the end of that business day.
When does occasional-transaction CDD apply?+
Before an occasional transaction equal to or above 20,000 AZN, including linked operations; special rules also apply to occasional wires and virtual-asset transactions.
Is 20,000 AZN a universal reporting threshold?+
No. It is the statutory occasional-transaction CDD trigger. Reporting categories and FMS-designated thresholds must be configured separately.
How is a beneficial owner identified?+
Identify ultimate controlling ownership, then control by other means, and if no natural person can be identified through either route, the senior managing official.
How long are AML records retained?+
At least five years from transaction completion, relationship end or occasional-transaction completion, depending on the record.
Do payment and e-money institutions need authorization?+
Yes. The Central Bank maintains the licensing and public-register framework under the Payment Services and Payment Systems Law.
Is Azerbaijan on a FATF public list?+
No at the October 2026 statements. That is not a low-risk determination.
Research and review method
VOVE ID Compliance Research maps the regulatory perimeter, translates obligations into operational controls, links each material claim to a source and records the date and version of every review.
General information, not legal advice. Reviewed 7 November 2026. Confirm the controlling Azerbaijani text, current FMS and sector rules, reporting forms and channels, designated thresholds, sanctions lists, privacy requirements and licensing conditions with the competent authority and qualified Azerbaijan counsel.