Libye KYC, KYB & AML compliance checklist
Une checklist pratique et sourcée pour mettre en œuvre les exigences KYC, KYB et AML en Libye.
- Dernière revue
- Dernière revue:
- Version
- Version 1.0
Réponse directe
Que couvre la checklist de conformité pour Libye ?
La checklist pour Libye traduit les principales règles KYC, KYB et AML en 11 domaines de contrôle et 33 contrôles d’implémentation, avec les autorités, obligations de déclaration et preuves à conserver.
Faits réglementaires clés
- FIU
- Libyan Financial Information Unit
- Primary AML rule
- Resolution No. 1013 of 2017 issuing the AML/CFT Law
- Suspicion reporting
- Without delay; FIU guide says within 24 hours
- Thresholds
- Committee and sector specific; no universal amount asserted
- Core AML retention
- At least 5 years
- FATF status
- Not named on FATF public lists as at 19 June 2026
Détail d’implémentation
Exigences et actions de conformité pour Libye
Ouvrez chaque domaine pour consulter l’exigence, l’action recommandée, les preuves à conserver et la source primaire utilisée.
01Scope, authorities, and licensingResolve the reporting entity, regulated activity, territory and supervisor before launch.3 éléments+
Determine whether each activity is in AML/CFT scope.
- Action d’implémentation
- Map every entity, product, channel and profession to the financial-institution, DNFBP or nonprofit categories under Resolution 1013/2017; identify the FIU and each competent sector supervisor.
- Preuves à conserver
- Applicability memo, product map and accountable-owner register.
- Source primaire
- Resolution 1013/2017, Articles 1, 12 and 15
Complete current FIU and supervisory registration.
- Action d’implémentation
- Confirm registration required by the competent supervisor, obtain the current FIU reporting form and secure-channel instructions, and test user authority, delivery and receipts.
- Preuves à conserver
- Registration, authority correspondence, channel test and contact log.
- Source primaire
- Resolution 1013/2017, Articles 9, 12 and 15; Libyan FIU reporting page
Obtain authorisation before regulated activity.
- Action d’implémentation
- Classify banking, payments, e-money, remittance, foreign exchange, insurance, securities, agent, fintech and virtual-asset activities and obtain every required approval before launch.
- Preuves à conserver
- Perimeter analysis, licences, conditions and renewal calendar.
- Source primaire
- Resolution 1013/2017, Articles 12-15 and 50; applicable Central Bank and sector rules
02Governance and risk assessmentControls must be risk-based, documented, resourced and independently tested.3 éléments+
Maintain a written ML/TF risk assessment.
- Action d’implémentation
- Assess customers, products, delivery channels, geography, cash, agents, technology, virtual assets and proliferation exposure; update the assessment periodically and before material change.
- Preuves à conserver
- Approved methodology, assessment, controls and version history.
- Source primaire
- Resolution 1013/2017, Article 16
Maintain senior compliance ownership and written controls.
- Action d’implémentation
- Establish a management-level compliance arrangement and written CDD, monitoring, reporting, records, confidentiality, employee-screening, training and group controls proportionate to the business.
- Preuves à conserver
- Appointment, policies, training, screening and board reporting.
- Source primaire
- Resolution 1013/2017, Articles 32-34
Independently test the programme.
- Action d’implémentation
- Use an adequately resourced internal-audit or independent review function to test design and operation, document deficiencies and track remediation through closure.
- Preuves à conserver
- Audit plan, reports, findings and closure evidence.
- Source primaire
- Resolution 1013/2017, Article 32
03Natural-person identificationCDD uses reliable independent evidence and continues through the relationship.3 éléments+
Identify and verify the customer and representative.
- Action d’implémentation
- Use reliable independent documents, data or information; verify any representative's identity and authority and prohibit anonymous or clearly fictitious-name accounts.
- Preuves à conserver
- Identity file, source provenance, mandate and verification result.
- Source primaire
- Resolution 1013/2017, Article 19(1)-(2)
Understand purpose and expected activity.
- Action d’implémentation
- Record the purpose and intended nature of the relationship, expected activity, counterparties, geography and source information sufficient for risk rating and ongoing monitoring.
- Preuves à conserver
- Customer profile, expected-activity baseline and approval.
- Source primaire
- Resolution 1013/2017, Article 19(2)
Do not proceed where mandatory CDD fails.
- Action d’implémentation
- Refrain from opening, establishing or executing, or terminate the relationship, when required identification or verification cannot be completed; consider a confidential suspicious report.
- Preuves à conserver
- Decline or exit decision, investigation and restricted reporting record.
- Source primaire
- Resolution 1013/2017, Article 25
04KYB, registries, and beneficial ownershipVerify legal existence, authority, ownership and control without inventing a percentage threshold.3 éléments+
Verify legal existence, activities and authority.
- Action d’implémentation
- Obtain current commercial-registry evidence, constitutional records, registered address, directors, senior managers, shareholders, signatories, licences and mandates; reconcile inconsistencies.
- Preuves à conserver
- Registry extract, governing records, powers and discrepancy log.
- Source primaire
- Resolution 1013/2017, Article 19(2)-(3); Commercial Activity Law No. 23 of 2010
Apply the statutory beneficial-owner cascade.
- Action d’implémentation
- Identify natural persons holding a controlling share or controlling through other means; use the responsible manager only when no natural person is identified through those limbs, and verify identities with reliable independent evidence.
- Preuves à conserver
- Ownership chart, control analysis, verified identities and fallback rationale.
- Source primaire
- Resolution 1013/2017, Article 19(2)-(3)
Keep company and ownership evidence current.
- Action d’implémentation
- Monitor changes to legal form, registration, ownership, control, directors and authority; refresh registry and customer evidence according to risk and investigate discrepancies.
- Preuves à conserver
- Refresh schedule, extracts, declarations and discrepancy decisions.
- Source primaire
- Resolution 1013/2017, Articles 19 and 29; Commercial Activity Law No. 23 of 2010
05PEPs, EDD, and remote onboardingPEPs, higher-risk and non-face-to-face relationships require enhanced controls.3 éléments+
Detect PEP exposure.
- Action d’implémentation
- Use appropriate risk-management systems to identify whether a customer or beneficial owner is a PEP, including relevant family members and close associates.
- Preuves à conserver
- Screening, relationship map, match decision and refresh log.
- Source primaire
- Resolution 1013/2017, Article 23
Apply enhanced approval, provenance and monitoring.
- Action d’implémentation
- Obtain senior-management approval, take reasonable measures to establish source of wealth and funds, and apply enhanced ongoing monitoring to PEP relationships.
- Preuves à conserver
- Approval, provenance analysis and monitoring plan.
- Source primaire
- Resolution 1013/2017, Article 23
Control remote and biometric onboarding.
- Action d’implémentation
- Use sufficient defined measures for non-face-to-face customers; assess impersonation, liveness, device, data minimisation and security before deployment, and preserve a reliable electronic record.
- Preuves à conserver
- Remote-onboarding assessment, data review, tests and approvals.
- Source primaire
- Resolution 1013/2017, Articles 16 and 19(7); Electronic Transactions Law No. 6 of 2022
06Monitoring and suspicious reportingFIU reporting must be prompt, complete and confidential.3 éléments+
Monitor activity against the customer profile.
- Action d’implémentation
- Scrutinise transactions throughout the relationship for consistency with customer, business, risk and source information; examine complex, unusually large or unexplained activity and document conclusions.
- Preuves à conserver
- Alerts, investigation, disposition and rule governance.
- Source primaire
- Resolution 1013/2017, Articles 19 and 31
Report suspicion and attempts promptly.
- Action d’implémentation
- Report to the Libyan FIU without delay any suspicious transaction or attempt regardless of value; operationalise the FIU guide's expectation to submit within 24 hours after reasonable grounds arise.
- Preuves à conserver
- Decision chronology, STR or SAR, supporting material, delivery and receipt.
- Source primaire
- Resolution 1013/2017, Article 27; FIU Suspicious Transaction Reporting Guide 2023
Prevent tipping off.
- Action d’implémentation
- Restrict access and do not disclose a report, submitted information or related investigation to the customer or unauthorised persons.
- Preuves à conserver
- Access logs, confidentiality procedure and training.
- Source primaire
- Resolution 1013/2017, Article 28
07Payments, wires, thresholds, and agentsAmounts are set by current committee or sector instruments rather than one universal threshold.3 éléments+
Configure only verified CDD thresholds.
- Action d’implémentation
- Apply occasional-transaction CDD and aggregation only at the current amount set by the National Committee or relevant sector rule; retain the authoritative instrument and do not infer a universal threshold.
- Preuves à conserver
- Legal mapping, configuration, test cases and approval.
- Source primaire
- Resolution 1013/2017, Articles 18-19; National Committee Decision No. 1 of 2019
Preserve required wire-transfer information.
- Action d’implémentation
- For transfers above the current committee-set amount, obtain and verify originator and beneficiary information, carry it in the payment message, retain it and apply risk-based rules to incomplete transfers.
- Preuves à conserver
- Threshold authority, message samples, validation rules and exceptions.
- Source primaire
- Resolution 1013/2017, Article 26; National Committee Decision No. 1 of 2019
Retain accountability for agents and third parties.
- Action d’implémentation
- Verify permissions, conduct due diligence, contract for confidentiality, security and prompt record access, and retain primary responsibility for relied-on CDD and outsourced activity.
- Preuves à conserver
- Due diligence, contract, monitoring and retrieval test.
- Source primaire
- Resolution 1013/2017, Articles 22 and 32; applicable Central Bank payment rules
08Targeted financial sanctionsUse current UN and national designations and Libya's statutory implementation process.3 éléments+
Screen applicable designations promptly.
- Action d’implémentation
- Obtain current UN and communicated national lists and screen customers, beneficial owners, controllers, representatives and relevant transactions at onboarding, list updates and before execution.
- Preuves à conserver
- List inventory, update logs, screening configuration and dispositions.
- Source primaire
- Resolution 1013/2017, Article 81; Resolution 1037/2017
Freeze covered funds and resources without delay.
- Action d’implémentation
- On a confirmed designation, freeze covered funds and economic resources without prior notice, prevent prohibited availability and notify the implementing authority within three days.
- Preuves à conserver
- Freeze procedure, timestamps, legal basis, report and authority communication.
- Source primaire
- Resolution 1013/2017, Article 81(6)-(8); Resolution 1037/2017
Govern false positives, exceptions and release.
- Action d’implémentation
- Escalate potential matches through the current implementing-authority process; permit access, exemption, unfreezing or delisting only on documented lawful authority.
- Preuves à conserver
- Match rationale, reports, authority instruction and reconciliation.
- Source primaire
- Resolution 1013/2017, Article 81(10); Resolution 1037/2017
09Records and regulator accessRecords must reconstruct the customer, transaction, ownership and decision.3 éléments+
Retain core AML records for at least five years.
- Action d’implémentation
- Keep identity, beneficial ownership, account, correspondence and analysis records for at least 5 years after the relationship ends or after an occasional transaction.
- Preuves à conserver
- Schedule, configuration, archive sample and legal-hold log.
- Source primaire
- Resolution 1013/2017, Article 29(1)
Retain attempted and completed transaction records.
- Action d’implémentation
- Keep records sufficient to reconstruct attempted and completed transactions for at least 5 years after the attempt or completion, and longer when a competent authority requires it.
- Preuves à conserver
- Transaction archive, attempted-transaction log and retrieval test.
- Source primaire
- Resolution 1013/2017, Article 29(1)-(2)
Respond securely to competent requests.
- Action d’implémentation
- Authenticate requests, protect reporting confidentiality, produce reconstructable records promptly and log scope, timing and receipt.
- Preuves à conserver
- Request, approval, production index and acknowledgement.
- Source primaire
- Resolution 1013/2017, Articles 6, 12 and 30
10Privacy, biometrics, and transfersApply Libya's electronic-transactions and sector data rules to the extent they cover the processing; do not present them as a general comprehensive privacy code.3 éléments+
Map the applicable data rule and processing purpose.
- Action d’implémentation
- Document statutory AML purposes, notices, data categories, access, sharing and retention; separately identify when Electronic Transactions Law Articles 73-79 or a sector rule applies.
- Preuves à conserver
- Data inventory, applicability assessment, notices and retention map.
- Source primaire
- Electronic Transactions Law No. 6 of 2022, Articles 73-79; Resolution 1013/2017, Article 29
Protect identity and reporting data.
- Action d’implémentation
- Apply proportionate confidentiality, access, integrity, incident and processor controls, with heightened restrictions for suspicious-report information.
- Preuves à conserver
- Risk assessment, contracts, security tests and incident records.
- Source primaire
- Resolution 1013/2017, Article 28; Electronic Transactions Law No. 6 of 2022, Articles 75-76
Control covered cross-border personal-data transfers.
- Action d’implémentation
- Where Article 78 applies, assess the data, purpose, duration, destination law and commitments, relevant rules and security measures before transfer; separately confirm banking-sector requirements.
- Preuves à conserver
- Transfer analysis, safeguards, contract and approval.
- Source primaire
- Electronic Transactions Law No. 6 of 2022, Article 78; Central Bank Circular No. 18 of 2025
11Practical evidence packsMaintain concise packs that reproduce decisions and support supervision.3 éléments+
Maintain a reconstructable onboarding pack.
- Action d’implémentation
- Bundle identity, KYB, beneficial ownership, screening, risk, approvals, data records and exceptions under stable identifiers.
- Preuves à conserver
- Complete sampled onboarding pack.
- Source primaire
- Operational control supporting Resolution 1013/2017, Articles 16-25 and 29
Maintain a reconstructable monitoring and reporting pack.
- Action d’implémentation
- Link transactions, alerts, analysis, approvals, FIU reports, delivery evidence and post-filing controls while protecting confidentiality.
- Preuves à conserver
- Complete sampled case pack and access log.
- Source primaire
- Operational control supporting Resolution 1013/2017, Articles 27-32
Maintain a launch and change-control pack.
- Action d’implémentation
- Record licensing, threshold sources, sanctions-list sources, privacy applicability, product risk, testing and authority confirmations before launch and material changes.
- Preuves à conserver
- Signed launch pack, legal-source register and change approvals.
- Source primaire
- Operational control supporting Resolution 1013/2017, Articles 12-16 and 50
Registre des sources primaires
12 sources utilisées pour cette checklist
Utilisez ces liens pour vérifier la législation, les lignes directrices, les procédures de déclaration et les statuts internationaux.
- Resolution No. 1013 of 2017 issuing the Anti-Money Laundering and Terrorism Financing LawLibya Official Gazette / Law Society of Libya · Primary national legislation
- Official Gazette, 2018 special issue No. 1Libya Ministry of Justice / Law Society of Libya · Official gazette record
- Legislation and regulatory instruments libraryLibyan Financial Information Unit · Official FIU legal materials
- Suspicious transaction reporting instructions and formLibyan Financial Information Unit · Official FIU reporting guidance
- Financial Information Unit annual report 2018-2023Libyan Financial Information Unit · Official FIU report
- Laws library, including Banking Law and Commercial Activity LawCentral Bank of Libya · Official legislation library
- Regulatory Rules of the Libyan National Payment SchemeCentral Bank of Libya · Official payment-system rules
- Electronic Transactions Law No. 6 of 2022Libya House of Representatives / Law Society of Libya · Primary national legislation
- MENAFATF annual report 2024MENAFATF · Authoritative regional assessment record
- FATF high-risk and monitored jurisdictionsFATF · Authoritative current status
- United Nations Security Council consolidated sanctions listUnited Nations · Authoritative sanctions list
- United Nations Security Council Libya sanctions committeeUnited Nations · Authoritative country sanctions materials
Réponses directes
Questions KYC, KYB et AML pour Libye
Who receives suspicious transaction reports?+
The Libyan Financial Information Unit, using its current form and secure reporting route.
When is suspicion reported?+
Resolution 1013/2017 requires reporting without delay for transactions and attempts regardless of value. The FIU's 2023 reporting guide says to submit within 24 hours after reasonable grounds arise.
Is there one universal threshold?+
No universal amount is asserted. Resolution 1013/2017 delegates occasional-transaction and wire thresholds to the National Committee, with sector instruments also relevant.
How is beneficial ownership determined?+
Identify natural persons with a controlling share or control by other means; use the responsible manager only when no natural person is identified through those limbs. The core law does not state a percentage in Article 19.
How long are AML records retained?+
At least 5 years after the relationship ends or the occasional transaction, attempt or completed transaction, and longer where a competent authority requires it.
What privacy rules apply?+
Law No. 6 of 2022 contains personal-data rules within its electronic-transactions scope. Confirm its application and any sector rule for each processing activity rather than treating it as a general comprehensive privacy code.
Is Libya on a FATF public list?+
It was not named on FATF's high-risk or increased-monitoring lists current at 19 June 2026. MENAFATF's 2024 report records that Libya's second-round evaluation remained deferred because of security conditions.
Can a payment, fintech or virtual-asset product launch without approval?+
No. Classify the activity and obtain every applicable Central Bank or other competent-authority permission before launch.
Méthode de recherche et de revue
VOVE ID Compliance Research cartographie le périmètre réglementaire, traduit les obligations en contrôles opérationnels, relie les affirmations importantes aux sources et date chaque revue.
General regulatory information, not legal advice or a licence determination. Reviewed as applicable on 31 August 2026. Confirm the current legal and territorial application of national instruments, committee-set CDD and wire thresholds, FIU filing specifications, sanctions communications, registry evidence, data rules and product-specific permissions with the competent authority and qualified Libyan counsel before launch.