Djibouti KYC, KYB & AML compliance checklist
Une checklist pratique et sourcée pour mettre en œuvre les exigences KYC, KYB et AML en Djibouti.
- Dernière revue
- Dernière revue:
- Version
- Version 1.0
Réponse directe
Que couvre la checklist de conformité pour Djibouti ?
La checklist pour Djibouti traduit les principales règles KYC, KYB et AML en 11 domaines de contrôle et 32 contrôles d’implémentation, avec les autorités, obligations de déclaration et preuves à conserver.
Faits réglementaires clés
- FIU
- Agence Nationale de Renseignements Financiers (ANRF)
- Primary AML rule
- Law No. 106/AN/24, as amended by Law No. 178/AN/25
- Suspicion reporting
- Without delay to ANRF; later-arising suspicion is reported immediately
- Cash control
- Payments above DJF 1,000,000 are subject to control; confirm implementing reporting mechanics
- Core retention
- 5 years after relationship end or the last occasional transaction
- FATF status
- Not named on FATF public lists as at 19 June 2026
Détail d’implémentation
Exigences et actions de conformité pour Djibouti
Ouvrez chaque domaine pour consulter l’exigence, l’action recommandée, les preuves à conserver et la source primaire utilisée.
01Scope, authorities, and licensingResolve the entity, activity and supervisor before launch.3 éléments+
Determine whether each activity is a reporting entity activity.
- Action d’implémentation
- Map every entity, product, channel and agent to the financial-institution, VASP or DNFBP categories in Article 2-1-1 and identify ANRF and the competent sector supervisor.
- Preuves à conserver
- Applicability memo, product map and accountable-owner register.
- Source primaire
- Law No. 106/AN/24 as amended, Article 2-1-1
Treat ANRF as Djibouti's financial intelligence unit.
- Action d’implémentation
- Appoint required correspondents, obtain the current filing format and secure channel directly from ANRF, and test a controlled reporting path before operations begin.
- Preuves à conserver
- Correspondent notice, channel test, procedure and access approvals.
- Source primaire
- Law No. 106/AN/24 as amended, Articles 3-2-1-1 to 3-3-4
Obtain authorisation before regulated financial activity.
- Action d’implémentation
- Classify banking, payment, money-transfer, exchange, electronic-money, insurance and virtual-asset activities and obtain every required approval before launch.
- Preuves à conserver
- Perimeter analysis, authority correspondence and licence register.
- Source primaire
- Law No. 119/AN/11/6th L; Instruction No. 2017-01; applicable sector rules
02Governance and risk assessmentThe programme must be documented, risk-based and independently tested.3 éléments+
Maintain a documented ML/TF risk assessment.
- Action d’implémentation
- Assess customers, countries, products, services, transactions and distribution channels; update the assessment when risks or operations materially change.
- Preuves à conserver
- Approved methodology, risk assessment, controls and version history.
- Source primaire
- Law No. 106/AN/24 as amended, Article 2-2-3
Maintain written controls and an empowered compliance function.
- Action d’implémentation
- Assign senior accountability, confidential ANRF reporting authority, resources, staff screening, training and independent testing proportionate to risk.
- Preuves à conserver
- Appointments, policies, training, testing and remediation log.
- Source primaire
- Law No. 106/AN/24 as amended, internal-control provisions
Assess new technology and virtual-asset exposure before use.
- Action d’implémentation
- Identify and mitigate ML/TF/PF risks before launching a new product, channel, delivery mechanism or technology and before supporting virtual-asset activity.
- Preuves à conserver
- Pre-launch assessment, approval, tests and residual-risk acceptance.
- Source primaire
- Law No. 106/AN/24 as amended, Articles 1-2-2 and 3-1-2-1
03Natural-person identificationCDD uses reliable, independent evidence and continues through the relationship.3 éléments+
Identify and verify customers and representatives.
- Action d’implémentation
- Verify the customer using reliable independent documents, data or information; identify representatives and verify their authority.
- Preuves à conserver
- Identity file, source provenance, mandate and verification result.
- Source primaire
- Law No. 106/AN/24 as amended, Articles 2-2-4 and 2-2-8
Understand purpose, nature and expected activity.
- Action d’implémentation
- Record the relationship purpose, business nature, expected activity, counterparties, geography and source of funds sufficient for risk rating and monitoring.
- Preuves à conserver
- Customer profile, expected-activity baseline and approval.
- Source primaire
- Law No. 106/AN/24 as amended, Articles 2-2-6 and 2-2-7
Do not proceed where mandatory CDD fails.
- Action d’implémentation
- Do not execute, establish or continue the relationship when required CDD cannot be completed; file an STR where suspicion exists, without alerting the customer.
- Preuves à conserver
- Decline or exit decision, investigation and restricted STR record.
- Source primaire
- Law No. 106/AN/24 as amended, Article 2-2-18
04KYB, registries, and beneficial ownershipRegistry evidence does not replace natural-person ownership and control analysis.3 éléments+
Verify legal existence, governance and authority.
- Action d’implémentation
- Obtain current ODPIC or free-zone registration, constitutional, address, director, signatory, tax and licence evidence and reconcile inconsistencies.
- Preuves à conserver
- Registry extract, statutes, powers, tax record and licence file.
- Source primaire
- Law No. 106/AN/24 as amended, Articles 2-2-4, 2-2-6 and 3-5-1-1
Identify and verify natural-person beneficial owners.
- Action d’implémentation
- Trace ownership and control to the natural persons who ultimately own or control the customer; document the law's control and fallback analysis and verify each identified person.
- Preuves à conserver
- Ownership chart, source records, control analysis and verified identities.
- Source primaire
- Law No. 106/AN/24 as amended, Article 2-2-4
Reconcile customer CDD with the national beneficial-owner register.
- Action d’implémentation
- Obtain current beneficial-owner information, compare it with ODPIC or free-zone filings, investigate differences and ensure changes are notified within one month by the legal person.
- Preuves à conserver
- Register evidence, discrepancy review and update record.
- Source primaire
- Law No. 106/AN/24 as amended, Articles 3-5-1-2 to 3-5-1-5
05PEPs, EDD, and remote onboardingHigher-risk and remote relationships require enhanced controls.3 éléments+
Detect PEP exposure in customers and beneficial owners.
- Action d’implémentation
- Use risk-based systems to identify PEPs, direct family members and known close associates at onboarding and throughout the relationship.
- Preuves à conserver
- Screening, relationship map, match decision and refresh log.
- Source primaire
- Law No. 106/AN/24 as amended, Article 2-2-20
Apply PEP approval, provenance and monitoring measures.
- Action d’implémentation
- Obtain senior-management approval, establish source of wealth and source of funds, and conduct enhanced ongoing monitoring.
- Preuves à conserver
- Approval, provenance analysis and monitoring plan.
- Source primaire
- Law No. 106/AN/24 as amended, Article 2-2-20
Control non-face-to-face risk.
- Action d’implémentation
- Use reliable identity evidence and proportionate fraud, device, liveness and exception controls; document how remote verification meets AML and Digital Code requirements.
- Preuves à conserver
- Remote-onboarding assessment, vendor review, tests and exceptions.
- Source primaire
- Law No. 106/AN/24 as amended, Article 2-2-4; 2025 Digital Code
06Monitoring and suspicious reportingANRF reporting is prompt, traceable and confidential.3 éléments+
Monitor activity against the current customer profile.
- Action d’implémentation
- Examine complex, unusually large, linked or apparently purposeless activity and preserve the facts, analysis and reasoned conclusion.
- Preuves à conserver
- Alerts, investigation, disposition and rule governance.
- Source primaire
- Law No. 106/AN/24 as amended, Articles 2-2-7 and 2-2-14
Report suspicious transactions and attempts without delay to ANRF.
- Action d’implémentation
- File when required suspicion grounds arise; if suspicion emerges after execution, report immediately, and submit supplemental information without delay.
- Preuves à conserver
- Decision chronology, report, receipt and supplemental-information log.
- Source primaire
- Law No. 106/AN/24 as amended, Article 3-3-1
Prevent tipping off.
- Action d’implémentation
- Restrict access and do not disclose an STR, related transmission or ANRF analysis to the customer or unauthorised third parties.
- Preuves à conserver
- Access logs, confidentiality procedure and training.
- Source primaire
- Law No. 106/AN/24 as amended, Article 3-4-2
07Payments, wires, thresholds, and agentsPayment controls preserve required data and distinguish controls from reporting duties.3 éléments+
Control cash and bearer payments above DJF 1,000,000.
- Action d’implémentation
- Detect single or linked payments above the statutory control level and apply the current implementing control or reporting procedure confirmed with the competent authority; do not infer a universal automatic report from the threshold alone.
- Preuves à conserver
- Detection logic, authority-confirmed procedure, review and filing where required.
- Source primaire
- Law No. 106/AN/24 as amended by Law No. 178/AN/25, Article 2-1-2
Route cross-border transfers above DJF 1,000,000 through an authorised institution.
- Action d’implémentation
- Block or redirect covered transfers unless executed by or through an authorised credit or financial institution; retain required originator and beneficiary data.
- Preuves à conserver
- Routing rule, message sample, exception workflow and authorisation evidence.
- Source primaire
- Law No. 106/AN/24 as amended, Article 2-1-3 and wire-transfer provisions
Retain accountability for agents and outsourcing.
- Action d’implémentation
- Verify permissions, diligence providers, contract for security and record access, train agents, monitor performance and test retrieval.
- Preuves à conserver
- Due diligence, contract, training, monitoring and retrieval test.
- Source primaire
- Instruction No. 2017-01 and applicable Banque Centrale de Djibouti rules
08Targeted financial sanctionsScreen, freeze and report under current national procedures.3 éléments+
Screen applicable UN and national designations.
- Action d’implémentation
- Screen customers, beneficial owners, controllers, representatives and transactions at onboarding, list updates and before relevant execution.
- Preuves à conserver
- List inventory, update logs, screening configuration and dispositions.
- Source primaire
- Law No. 104/AN/24; UN Security Council Consolidated List
Freeze covered funds and assets without prior notice.
- Action d’implémentation
- Prevent prohibited movement or availability immediately upon a confirmed designation match and escalate through the competent national process.
- Preuves à conserver
- Freeze procedure, timestamps, legal basis and authority communication.
- Source primaire
- Law No. 104/AN/24, targeted-financial-sanctions provisions
Govern matches, false positives and release.
- Action d’implémentation
- Report confirmed matches through the current authority route, preserve confidentiality and release assets only on documented lawful authority.
- Preuves à conserver
- Report, receipt, match rationale, authority instruction and reconciliation.
- Source primaire
- Law No. 104/AN/24; current implementing instructions
09Records and regulator accessRecords must reconstruct the customer, ownership, transaction and decision.3 éléments+
Retain CDD and relationship records for at least five years.
- Action d’implémentation
- Retain identification, verification and relationship records for five years after relationship end or the last occasional transaction, subject to longer legal holds.
- Preuves à conserver
- Schedule, configuration, archive sample and legal-hold log.
- Source primaire
- Law No. 106/AN/24 as amended, Article 2-2-19
Retain transaction and analysis records for at least five years.
- Action d’implémentation
- Preserve transaction documents and information, examinations and analyses for five years from relationship end or the last occasional transaction and maintain reconstructability.
- Preuves à conserver
- Transaction reconstruction, storage control and retrieval test.
- Source primaire
- Law No. 106/AN/24 as amended, Article 2-2-19
Respond securely to competent-authority requests.
- Action d’implémentation
- Authenticate requests, protect STR confidentiality, produce reproducibly and log scope, timing and receipt.
- Preuves à conserver
- Request, approval, production index and acknowledgement.
- Source primaire
- Law No. 106/AN/24 as amended, ANRF and supervisory powers
10Privacy, biometrics, and transfersThe 2025 Digital Code applies alongside AML secrecy and retention duties.3 éléments+
Document lawful, fair and accountable identity-data processing.
- Action d’implémentation
- Map purposes, legal bases, notices, rights, recipients, security and retention; appoint a local representative where the extraterritorial rule requires one.
- Preuves à conserver
- Data inventory, legal-basis assessment, notices and representative record.
- Source primaire
- 2025 Digital Code, Book I, Articles 2-6 and 54
Apply enhanced safeguards to biometric and sensitive data.
- Action d’implémentation
- Document necessity and the permitted condition, minimise collection, restrict access, perform the required impact assessment and test security before use.
- Preuves à conserver
- Impact assessment, security tests, access controls and approval.
- Source primaire
- 2025 Digital Code, Book I, sensitive-data and impact-assessment provisions
Control international transfers and incidents.
- Action d’implémentation
- Document the lawful transfer mechanism and equivalent protection before export; implement current Commission notification and incident procedures without inventing a portal or deadline.
- Preuves à conserver
- Transfer assessment, safeguards, incident plan and authority guidance.
- Source primaire
- 2025 Digital Code, Book I, international-transfer and security provisions
11Practical evidence packsMaintain concise packs that reproduce decisions and support supervisory access.2 éléments+
Maintain a reconstructable onboarding pack.
- Action d’implémentation
- Bundle identity, KYB, beneficial ownership, screening, privacy, risk, approvals and exceptions under stable identifiers.
- Preuves à conserver
- Complete sampled onboarding pack.
- Source primaire
- Operational control supporting Law No. 106/AN/24 as amended
Maintain a reconstructable monitoring and reporting pack.
- Action d’implémentation
- Link transactions, alerts, analysis, approvals, reports and post-filing controls while protecting confidentiality.
- Preuves à conserver
- Complete sampled case pack and access log.
- Source primaire
- Operational control supporting Law No. 106/AN/24 as amended, Articles 3-3-1 and 3-4-2
Registre des sources primaires
12 sources utilisées pour cette checklist
Utilisez ces liens pour vérifier la législation, les lignes directrices, les procédures de déclaration et les statuts internationaux.
- Law No. 178/AN/25 amending the AML/CFT/CPF frameworkOfficial Journal of Djibouti · Primary legislation
- Law No. 106/AN/24 - AML/CFT/CPFOfficial Journal of Djibouti · Primary legislation
- Law No. 104/AN/24 - terrorist financing and targeted sanctionsOfficial Journal of Djibouti · Primary legislation
- Decree No. 2024-314 implementing Law No. 106Official Journal of Djibouti · Primary decree
- Djibouti Digital CodeOfficial Journal of Djibouti · Primary legislation
- Djibouti mutual evaluationMENAFATF · Authoritative country assessment
- Djibouti country assessment pageFATF · Authoritative country status
- FATF black and grey listsFATF · Authoritative current status
- Banque Centrale de DjiboutiBanque Centrale de Djibouti · Official regulator guidance
- Instruction No. 2017-01 on electronic moneyBanque Centrale de Djibouti · Official regulatory instruction
- Law No. 119/AN/11 on credit institutions and financial auxiliariesBanque Centrale de Djibouti · Primary legislation
- United Nations Security Council consolidated sanctions listUnited Nations · Authoritative sanctions list
Réponses directes
Questions KYC, KYB et AML pour Djibouti
Who receives suspicious transaction reports?+
Djibouti's Agence Nationale de Renseignements Financiers (ANRF).
When is an STR filed?+
Without delay when the statutory suspicion grounds arise. If suspicion appears after execution, report immediately; supplemental information is submitted without delay.
Is there a cash threshold?+
Payments in cash or bearer instruments above DJF 1,000,000 are subject to control. Confirm the current implementing control or reporting procedure; the threshold alone should not be presented as a universal automatic report.
How is beneficial ownership handled?+
Identify and verify the natural persons who ultimately own or control the customer, and reconcile CDD with the national register administered through ODPIC and the free-zone authority.
How long are AML records retained?+
At least five years after the relationship ends or the last occasional transaction under Article 2-2-19, subject to longer legal holds.
Is Djibouti on a FATF public list?+
It was not named on FATF's high-risk or increased-monitoring lists current at 19 June 2026. The January 2025 MENAFATF evaluation nevertheless documents material weaknesses.
Does personal-data law apply?+
Yes. The 2025 Digital Code governs personal data, including extraterritorial processing, sensitive data and transfers. Confirm current Commission procedures before production use.
Can a payment or electronic-money product launch without approval?+
No. Classify the product under current Banque Centrale de Djibouti legislation and instructions and obtain every required approval before launch.
Méthode de recherche et de revue
VOVE ID Compliance Research cartographie le périmètre réglementaire, traduit les obligations en contrôles opérationnels, relie les affirmations importantes aux sources et date chaque revue.
General regulatory information, not legal advice or a licence determination. Reviewed as applicable on 22 August 2026. Confirm reporting-entity status, ANRF filing specifications, objective-reporting instruments, operational beneficial-owner register access, sanctions procedures, Digital Code implementation and product licensing with the competent authority and qualified Djiboutian counsel before launch.