Liberia KYC, KYB & AML compliance checklist
A practical, source-linked checklist for implementing KYC, KYB and AML requirements in Liberia.
- Last reviewed
- Last reviewed:
- Version
- Version 1.0
Direct answer
What does the Liberia compliance checklist cover?
The Liberia checklist translates primary KYC, KYB and AML rules into 11 control areas and 33 implementation checks. It identifies the relevant authorities, customer and beneficial-owner controls, reporting duties, recordkeeping expectations and evidence teams should retain.
Key regulatory facts
- FIU
- Financial Intelligence Agency of Liberia (FIA)
- Primary AML law
- AML/CFT, Preventive Measures and Proceeds of Crime Act 2021
- Suspicion reporting
- As soon as possible; no later than 3 days
- Thresholds
- Instrument and sector specific; no single universal amount
- Core AML retention
- Minimum 7 years
- FATF status
- Not named on FATF public lists as at 19 June 2026
Implementation detail
Liberia compliance requirements and actions
Open each control area to review the requirement, recommended implementation action, evidence to retain and the primary-source citation used by the research team.
01Scope, authorities, and licensingResolve the reporting entity, regulated activity and supervisor before launch.3 items+
Determine whether each activity is a reporting entity activity.
- Implementation action
- Map every entity, product, channel, agent and profession to the financial-institution, DNFBP, trustee, fintech or VASP categories under the 2021 Act and applicable instruments; identify the FIA and each sector supervisor.
- Evidence to retain
- Applicability memo, product map and accountable-owner register.
- Primary citation
- AML/CFT Act 2021, sections 15.1.4 and 15.3.27-15.3.28
Complete current FIA onboarding and reporting setup.
- Implementation action
- Obtain the current FIA registration, goAML enrolment, form and secure-submission instructions; validate user roles, access, receipts and escalation contacts without assuming an unpublished route.
- Evidence to retain
- Registration, access approval, channel test and contact log.
- Primary citation
- AML/CFT Act 2021, sections 15.3.20-15.3.21 and 15.5.1; FIA reporting-entity materials
Obtain authorisation before regulated activity.
- Implementation action
- Classify banking, insurance, payments, e-money, remittance, foreign exchange, microfinance, agent, credit, fintech and virtual-asset activities and obtain every required approval before launch.
- Evidence to retain
- Perimeter analysis, authority correspondence and licence register.
- Primary citation
- AML/CFT Act 2021, sections 15.1.4 and 15.3.27-15.3.28; applicable CBL and sector instruments
02Governance and risk assessmentControls must be risk-based, documented, resourced and independently tested.3 items+
Maintain a written ML/TF risk assessment.
- Implementation action
- Assess customers, products, delivery channels, geography, cash, agents, technology, virtual assets and proliferation exposure; update the assessment and apply enhanced measures where risk is higher.
- Evidence to retain
- Approved methodology, assessment, controls and version history.
- Primary citation
- AML/CFT Act 2021, sections 15.3.1 and 15.3.10
Maintain senior compliance ownership and written controls.
- Implementation action
- Appoint an appropriately senior compliance officer and maintain CDD, monitoring, reporting, records, confidentiality, employee-screening, training and group controls proportionate to the business.
- Evidence to retain
- Appointment, policies, training, screening and board reporting.
- Primary citation
- AML/CFT Act 2021, sections 15.3.12-15.3.13
Independently test the programme.
- Implementation action
- Use an adequately resourced independent audit function to test design and operation, document deficiencies and track remediation through closure.
- Evidence to retain
- Audit plan, reports, findings and closure evidence.
- Primary citation
- AML/CFT Act 2021, section 15.3.12; CBL AML/CFT Risk Management Guideline
03Natural-person identificationCDD uses reliable independent evidence and continues through the relationship.3 items+
Identify and verify the customer and representative.
- Implementation action
- Use reliable independent documents, data or information; collect the statutory natural-person particulars and verify any representative's identity and authority.
- Evidence to retain
- Identity file, source provenance, mandate and verification result.
- Primary citation
- AML/CFT Act 2021, section 15.3.2(2)-(3)
Understand purpose and expected activity.
- Implementation action
- Record the purpose and intended nature of the relationship, expected activity, counterparties, geography and source information sufficient for risk rating and monitoring.
- Evidence to retain
- Customer profile, expected-activity baseline and approval.
- Primary citation
- AML/CFT Act 2021, sections 15.3.2(3)(a)(iv) and 15.3.3
Do not proceed where mandatory CDD fails.
- Implementation action
- Refrain from opening, commencing or executing, or terminate the relationship, where required identity, beneficial ownership or other CDD cannot be completed; consider a confidential STR.
- Evidence to retain
- Decline or exit decision, investigation and restricted reporting record.
- Primary citation
- AML/CFT Act 2021, section 15.3.6
04KYB, registries, and beneficial ownershipCDD control analysis and registry disclosure use related but distinct tests.3 items+
Verify legal existence, governance and authority.
- Implementation action
- Obtain current Liberia Business Registry evidence, governing records, registered and principal addresses, directors, senior managers, shareholders, signatories, licences and mandates; reconcile inconsistencies.
- Evidence to retain
- Registry extract, constitutional records, powers and discrepancy log.
- Primary citation
- AML/CFT Act 2021, section 15.3.2(3)(a)(ii)-(iii)
Apply the statutory CDD beneficial-owner cascade.
- Implementation action
- Identify natural persons above the applicable prescribed ownership or voting threshold, then persons exercising ultimate effective control by other means, and use senior managing officials only when no person is identified through the first two limbs; apply trust tests separately.
- Evidence to retain
- Ownership chart, control analysis, verified identities and fallback rationale.
- Primary citation
- AML/CFT Act 2021, section 15.3.2(3)(a)(v)-(vi)
Apply company-register thresholds and deadlines separately.
- Implementation action
- For a domestic entity, test direct or indirect 5% ownership or voting rights, the 1% domestic-PEP ownership test, foreign-PEP and non-ownership control tests, and the 15% benefit test; file at formation, maintain an internal register and submit reportable information or changes within 21 business days.
- Evidence to retain
- BO register, threshold analysis, declaration, receipt and change log.
- Primary citation
- Beneficial Ownership Disclosure Regulation 2023, sections 2.1-2.3
05PEPs, EDD, and remote onboardingPEPs and higher-risk, non-resident or remote relationships require enhanced controls.4 items+
Detect PEP exposure.
- Implementation action
- Use appropriate risk-management systems to identify foreign, domestic and international-organisation PEP exposure in customers and beneficial owners, including relevant family and close-associate relationships.
- Evidence to retain
- Screening, relationship map, match decision and refresh log.
- Primary citation
- AML/CFT Act 2021, section 15.3.7; FIA PEP Regulation 2019
Apply enhanced approval, provenance and monitoring.
- Implementation action
- For foreign PEPs obtain senior approval, establish source of wealth and funds and conduct enhanced ongoing monitoring; apply those measures to domestic and international-organisation PEPs where higher risk.
- Evidence to retain
- Approval, provenance analysis and monitoring plan.
- Primary citation
- AML/CFT Act 2021, section 15.3.7
Apply current financial-institution non-resident controls.
- Implementation action
- For financial institutions, implement Directive CBL/FIA/001/2025, including valid residency and legal-person documentation, the US$5,000 occasional-transaction CDD trigger and only the directive's conditional low-risk verification deferral; do not generalise these rules to every sector.
- Evidence to retain
- Residency evidence, threshold tests, deferral approval and completion log.
- Primary citation
- Directive CBL/FIA/001/2025, signed 16 February 2026
Control remote and biometric onboarding.
- Implementation action
- Assess impersonation, device, liveness, data-minimisation, security and non-face-to-face ML/TF risks before deployment; use contractual, security and consent controls supported by current applicable law.
- Evidence to retain
- Remote-onboarding assessment, data review, tests and approvals.
- Primary citation
- AML/CFT Act 2021, sections 15.3.1 and 15.3.10; applicable communications, consumer and constitutional rules
06Monitoring and suspicious reportingFIA reporting must be prompt, complete and confidential.3 items+
Monitor activity against the customer profile.
- Implementation action
- Scrutinise transactions throughout the relationship for consistency with customer, business, risk and source information; examine complex, unusual or unexplained activity and document conclusions.
- Evidence to retain
- Alerts, investigation, disposition and rule governance.
- Primary citation
- AML/CFT Act 2021, sections 15.3.3-15.3.4
Report suspicion and attempts promptly.
- Implementation action
- Submit the STR to the FIA as soon as possible and no later than 3 days after the reporting trigger; include attempted, cancelled or retracted transactions and rejected onboarding where the statutory suspicion condition is met.
- Evidence to retain
- Decision chronology, STR, supporting material, receipt and supplements.
- Primary citation
- AML/CFT Act 2021, section 15.3.20
Prevent tipping off and protect reporter identity.
- Implementation action
- Restrict access and do not disclose filing, contemplated filing, FIA analysis or protected reporter information to the customer or unauthorised persons.
- Evidence to retain
- Access logs, confidentiality procedure and training.
- Primary citation
- AML/CFT Act 2021, sections 15.3.22 and 15.3.24
07Payments, wires, thresholds, and agentsAmounts and reports are scoped by operative instruments rather than a universal threshold.3 items+
Configure only verified CTR and CDD thresholds.
- Implementation action
- Submit a CTR within 3 working days only when a transaction meets the amount prescribed by the applicable current regulation; separately apply the financial-institution US$5,000 occasional-transaction CDD trigger and verify all other sector amounts before configuration.
- Evidence to retain
- Legal mapping, configuration, test cases, filings and receipts.
- Primary citation
- AML/CFT Act 2021, section 15.3.21; Directive CBL/FIA/001/2025
Preserve required wire-transfer information.
- Implementation action
- Carry accurate originator and beneficiary information at the designated threshold, retain accompanying information and use risk-based rules to execute, reject or suspend incomplete cross-border transfers; verify the current CBL threshold before relying on older amounts.
- Evidence to retain
- Message samples, threshold authority, validation rules and exceptions.
- Primary citation
- AML/CFT Act 2021, section 15.3.11
Retain accountability for agents and third parties.
- Implementation action
- Verify permissions, conduct due diligence, contract for confidentiality, security and prompt record access, and retain ultimate responsibility for relied-on CDD and agent activity.
- Evidence to retain
- Due diligence, contract, monitoring and retrieval test.
- Primary citation
- AML/CFT Act 2021, sections 15.3.9 and 15.3.12; CBL agent and payment instruments
08Targeted financial sanctionsUse current UN and national designations under Liberia's statutory process.3 items+
Screen applicable designations promptly.
- Implementation action
- Obtain current UN and communicated national lists and screen customers, beneficial owners, controllers, representatives and relevant transactions at onboarding, list updates and before execution.
- Evidence to retain
- List inventory, update logs, screening configuration and dispositions.
- Primary citation
- Targeted Financial Sanctions Act 2017; TFS Regulation FIU/OR4A-TFS/10/2019
Freeze covered funds and assets without delay.
- Implementation action
- On a confirmed designation, freeze covered funds, property and economic resources without prior notice, prevent prohibited availability and follow the current FIA communication and reporting process.
- Evidence to retain
- Freeze procedure, timestamps, legal basis, report and authority communication.
- Primary citation
- Targeted Financial Sanctions Act 2017; TFS Regulation FIU/OR4A-TFS/10/2019
Govern false positives, exceptions and release.
- Implementation action
- Escalate potential matches through the current FIA and competent-authority process; permit access, exemption, unfreezing or delisting only on documented lawful authority.
- Evidence to retain
- Match rationale, reports, authority instruction and reconciliation.
- Primary citation
- Targeted Financial Sanctions Act 2017; TFS Regulation FIU/OR4A-TFS/10/2019
09Records and regulator accessRecords must reconstruct the customer, transaction, ownership and decision.3 items+
Retain core AML records for at least seven years.
- Implementation action
- Keep CDD, beneficial ownership, analysis, correspondence, domestic and foreign transaction, attempted-transaction and risk-assessment records for at least 7 years after relationship termination or from the relevant transaction or attempt, and longer where prescribed.
- Evidence to retain
- Schedule, configuration, archive sample and legal-hold log.
- Primary citation
- AML/CFT Act 2021, section 15.3.16(1)-(5)
Retain FIA reporting records for seven years.
- Implementation action
- Keep STR, CTR and attempted-suspicious-transaction reports for 7 years under restricted access and preserve filing evidence and supplements.
- Evidence to retain
- Restricted report archive, receipt, access log and retrieval test.
- Primary citation
- AML/CFT Act 2021, section 15.3.16(6)
Respond securely to competent requests.
- Implementation action
- Authenticate requests, protect reporter and STR confidentiality, produce reconstructable records promptly and log scope, timing and receipt.
- Evidence to retain
- Request, approval, production index and acknowledgement.
- Primary citation
- AML/CFT Act 2021, sections 15.3.16, 15.3.24 and 15.3.28
10Privacy, biometrics, and transfersLiberia's comprehensive privacy bill was not enacted at the review date; apply current sectoral and constitutional duties without presenting the draft as law.3 items+
Map the current basis and purpose for identity data.
- Implementation action
- Document statutory AML purposes, notices, data categories, access, sharing and retention; assess current constitutional, communications, consumer, employment and sector rules for each processing activity.
- Evidence to retain
- Data inventory, legal assessment, notices and retention map.
- Primary citation
- AML/CFT Act 2021, sections 15.3.16 and 15.5.1; Liberia Data Governance Policy 2026
Protect identity and reporting data.
- Implementation action
- Apply proportionate technical and organisational safeguards, least-privilege access, incident handling and written processor or agent controls, with additional protection for STR and reporter information.
- Evidence to retain
- Risk assessment, contracts, security tests and incident records.
- Primary citation
- AML/CFT Act 2021, sections 15.3.22 and 15.3.24; applicable sector rules
Control biometrics and cross-border access conservatively.
- Implementation action
- Before biometric use or overseas access, document necessity, proportionality, security, consent where legally appropriate, vendor controls, data location and applicable foreign-transfer constraints; recheck enactment of the draft privacy law before launch.
- Evidence to retain
- Biometric assessment, transfer analysis, contract and approval.
- Primary citation
- Liberia Data Governance Policy 2026; applicable constitutional, communications and sector rules
11Practical evidence packsMaintain concise packs that reproduce decisions and support supervision.2 items+
Maintain a reconstructable onboarding pack.
- Implementation action
- Bundle identity, KYB, beneficial ownership, screening, risk, approvals, data records and exceptions under stable identifiers.
- Evidence to retain
- Complete sampled onboarding pack.
- Primary citation
- Operational control supporting AML/CFT Act 2021, sections 15.3.2-15.3.16
Maintain a reconstructable monitoring and reporting pack.
- Implementation action
- Link transactions, alerts, analysis, approvals, FIA reports, receipts and post-filing controls while protecting confidentiality.
- Evidence to retain
- Complete sampled case pack and access log.
- Primary citation
- Operational control supporting AML/CFT Act 2021, sections 15.3.16 and 15.3.20-15.3.24
Primary-source register
12 sources used for this checklist
Use these links to verify the underlying legislation, regulator guidance, reporting procedures and international status statements.
- Anti-Money Laundering, Terrorist Financing, Preventive Measures and Proceeds of Crime Act 2021Financial Intelligence Agency of Liberia · Primary national legislation
- AML/CFT laws and regulations libraryFinancial Intelligence Agency of Liberia · Official legal materials
- Beneficial Ownership Disclosure Regulation for Domestic Entities 2023Government of Liberia / Financial Intelligence Agency · Primary company regulation
- Directive on Additional CDD Measures for Financial Institutions CBL/FIA/001/2025Financial Intelligence Agency and Central Bank of Liberia · Official joint directive - signed February 2026
- CBL AML/CFT Risk Management Guideline for Financial InstitutionsCentral Bank of Liberia · Official supervisory guideline
- Central Bank of Liberia regulations libraryCentral Bank of Liberia · Official licensing and sector regulations
- Targeted Financial Sanctions Act 2017Government of Liberia / Financial Intelligence Agency · Primary national legislation
- Targeted Financial Sanctions Regulations 2019Government of Liberia / Financial Intelligence Agency · Primary national regulation
- Liberia second-round mutual evaluation report, June 2023Financial Intelligence Agency / GIABA · Authoritative country assessment
- Liberia Data Governance Policy 2026Government of Liberia, Ministry of Posts and Telecommunications · Official draft-policy catalogue - policy confirms privacy bill not enacted
- FATF high-risk and monitored jurisdictionsFATF · Authoritative current status
- United Nations Security Council consolidated sanctions listUnited Nations · Authoritative sanctions list
Direct answers
Liberia KYC, KYB and AML questions
Who receives suspicious transaction reports?+
The Financial Intelligence Agency of Liberia, using the current FIA-prescribed secure method and form.
When is suspicion reported?+
As soon as possible and no later than 3 days. The 2021 Act also covers attempted, cancelled or retracted suspicious transactions and certain rejected onboarding.
Is there one universal threshold?+
No. CTR amounts must be prescribed by applicable regulation, and sector instruments differ. The US$5,000 occasional-transaction CDD trigger in the February 2026 directive is specifically for financial institutions.
How is beneficial ownership determined?+
AML CDD follows a prescribed ownership threshold, control by other means and senior-management fallback. Separately, the 2023 registry regulation includes 5% ownership or voting tests, a 1% domestic-PEP ownership test and other control or benefit tests.
How long are AML records retained?+
The 2021 Act requires at least 7 years for core CDD, transaction, attempted-transaction, analysis and risk records, and 7 years for STR and CTR reports, with longer retention where prescribed.
Does Liberia have an enacted comprehensive privacy law?+
The official 2026 Data Governance Policy states that the Personal Data Protection and Privacy bill had not yet been enacted. Apply current sectoral and constitutional requirements and recheck the position before launch.
Is Liberia on a FATF public list?+
It was not named on FATF's high-risk or increased-monitoring lists current at 19 June 2026, but remains in GIABA enhanced follow-up.
Can a payment, fintech or virtual-asset product launch without approval?+
No. Classify the activity and obtain every applicable Central Bank or other competent-authority permission before launch.
Research and review method
VOVE ID Compliance Research maps the regulatory perimeter, translates obligations into operational controls, links each material claim to a source and records the date and version of every review.
General regulatory information, not legal advice or a licence determination. Reviewed as applicable on 30 August 2026. Confirm current FIA registration, goAML filing specifications, prescribed CTR amounts, sector thresholds, sanctions communications, business-registry forms, privacy requirements and product-specific permissions with the competent authority and qualified Liberian counsel before launch.