Maldives KYC, KYB & AML compliance checklist
Une checklist pratique et sourcée pour mettre en œuvre les exigences KYC, KYB et AML en Maldives.
- Dernière revue
- Dernière revue:
- Version
- Version 1.0
Guide d’implémentation portable
Obtenir la checklist PDF
11 domaines de contrôle · 37 contrôles d’implémentation
Dernière revue: 13 November 2026 · Version 1.0
Télécharger la checklistRéponse directe
Que couvre la checklist de conformité pour Maldives ?
La checklist pour Maldives traduit les principales règles KYC, KYB et AML en 11 domaines de contrôle et 37 contrôles d’implémentation, avec les autorités, obligations de déclaration et preuves à conserver.
Faits réglementaires clés
- Primary AML law
- Prevention of Money Laundering and Financing of Terrorism Act 10/2014
- FIU
- Financial Intelligence Unit of the Maldives, within MMA
- Suspicious reporting
- As soon as practicable; no later than 3 working days
- Cash reports
- Current MMA-prescribed threshold; linked transactions aggregate
- International transfers
- Report under section 41 and current FIU procedure
- Records
- 5 years under the statutory trigger
- Data protection
- Data Protection Bill remained in committee at review date
- FATF status
- Not on FATF public lists at 30 October 2026
Détail d’implémentation
Exigences et actions de conformité pour Maldives
Ouvrez chaque domaine pour consulter l’exigence, l’action recommandée, les preuves à conserver et la source primaire utilisée.
01Scope, authorities, and licensingClassify every service and reporting-entity role before launch.3 éléments+
Determine whether each activity falls within the reporting-entity perimeter.
- Action d’implémentation
- Map banking, insurance, securities, money or value transfer, foreign exchange, real estate, precious-metals, legal, accounting, trust/company-service, gaming and other designated activities to the current law and sector rules.
- Preuves à conserver
- Perimeter memo, activity map and dated authority sources.
- Source primaire
- PMLFT Act 10/2014, sections 3 and 4 and definition of Reporting Entities
Obtain required licences and approvals.
- Action d’implémentation
- Confirm the MMA, CMDA, Ministry of Economic Development and Trade or other competent-authority route before offering a regulated financial, payment, securities, insurance or business service.
- Preuves à conserver
- Licence matrix, decisions, conditions and renewal calendar.
- Source primaire
- Applicable sector law; National Payment System Act 8/2021
Maintain FIU and supervisor reporting access.
- Action d’implémentation
- Keep current filing credentials, reporting forms and escalation contacts for every regulated activity.
- Preuves à conserver
- Registration evidence, access review and authority directory.
- Source primaire
- PMLFT Act, sections 27-35 and 39-41
02Governance and risk assessmentControls must be governed, risk-based and independently tested.3 éléments+
Assess institutional ML/TF/PF risk.
- Action d’implémentation
- Assess customers, geographies, products, channels, transactions, technology, agents and delivery methods and refresh after material change.
- Preuves à conserver
- Methodology, assessment, approval and remediation log.
- Source primaire
- PMLFT Act, sections 19 and 21; applicable sector regulation
Maintain an AML/CFT programme.
- Action d’implémentation
- Document policies, employee screening, management-level compliance, training, escalation and internal audit proportionate to risk.
- Preuves à conserver
- Programme, appointment, training and audit reports.
- Source primaire
- PMLFT Act, section 21
Control branches, agents and outsourced providers.
- Action d’implémentation
- Apply lawful group standards, due diligence, contractual controls, monitoring and escalation to branches, agents and material vendors.
- Preuves à conserver
- Group standard, agent register, contracts and testing.
- Source primaire
- PMLFT Act, section 22; applicable sector rules
03Natural-person identificationCDD applies at relationship opening and each statutory or regulatory trigger.4 éléments+
Identify and verify customers and principals.
- Action d’implémentation
- Obtain required name, address, birth, national ID, work-permit or passport information and verify it using reliable independent evidence.
- Preuves à conserver
- Identity record, verification result and provenance.
- Source primaire
- PMLFT Act, section 16(a)-(c)
Apply CDD at all triggers.
- Action d’implémentation
- Apply CDD at relationship opening, the current occasional-transaction threshold, domestic or international funds transfer, suspicion, or doubt about prior identification data.
- Preuves à conserver
- Dated trigger table, decision and CDD file.
- Source primaire
- PMLFT Act, section 16(a)
Understand purpose and monitor continuously.
- Action d’implémentation
- Record purpose and intended nature, maintain a risk profile, scrutinize activity and keep information current.
- Preuves à conserver
- Profile, risk decision, alerts and refresh history.
- Source primaire
- PMLFT Act, sections 16(b) and 16(h)
Control failed CDD.
- Action d’implémentation
- Do not establish or maintain the relationship when required CDD cannot be completed and consider an FIU report.
- Preuves à conserver
- Failure record, disposition and reporting assessment.
- Source primaire
- PMLFT Act, section 16(l)
04KYB, representatives, and beneficial ownershipVerify legal existence, authority, ownership and actual control.4 éléments+
Verify legal persons and arrangements.
- Action d’implémentation
- Obtain current incorporation, legal form, constitutional, address, director, registration and business evidence; for trusts identify the settlor, trustees and beneficiaries.
- Preuves à conserver
- Registry evidence, documents and independent checks.
- Source primaire
- PMLFT Act, sections 16(d)-(e); Companies Act 7/2023
Identify and verify beneficial owners.
- Action d’implémentation
- Identify the natural person with controlling interest and the natural person who manages the legal person; apply any more specific current sector test.
- Preuves à conserver
- Ownership chart, control analysis and verified identities.
- Source primaire
- PMLFT Act, section 16(f)
Verify persons acting for customers.
- Action d’implémentation
- Establish whether the customer acts for another person and identify and verify that person and the mandate.
- Preuves à conserver
- Representative KYC, authority and mandate checks.
- Source primaire
- PMLFT Act, section 16(g)
Reconcile registry and customer information.
- Action d’implémentation
- Compare Business Portal and registrar data with customer evidence and resolve discrepancies without relying solely on self-declaration.
- Preuves à conserver
- Registry result and discrepancy record.
- Source primaire
- Companies Act 7/2023; Ministry company-registration services
05PEPs, EDD, and remote onboardingHigher-risk and non-face-to-face relationships require enhanced controls.3 éléments+
Identify PEPs and apply enhanced measures.
- Action d’implémentation
- Determine whether customers or beneficial owners are PEPs, obtain senior-management approval, establish source of wealth and funds, and strengthen ongoing monitoring.
- Preuves à conserver
- Screening, classification, approval and corroboration.
- Source primaire
- PMLFT Act, section 16(j)
Apply enhanced due diligence to higher risk.
- Action d’implémentation
- Collect additional identity, ownership, purpose, source and transaction evidence and intensify monitoring based on documented risk.
- Preuves à conserver
- EDD checklist, approval and monitoring plan.
- Source primaire
- PMLFT Act, sections 16(h), 19 and applicable sector guidance
Mitigate non-face-to-face risk.
- Action d’implémentation
- Use approved methods and additional identity, fraud, device, session and monitoring controls where the customer is not physically present.
- Preuves à conserver
- Method assessment, session record and tests.
- Source primaire
- PMLFT Act, section 16(i)
06Monitoring and suspicious reportingDetection and filing must preserve the statutory clock and confidentiality.4 éléments+
Examine unusual activity.
- Action d’implémentation
- Examine complex, unusual large and unusual-pattern transactions lacking apparent economic or lawful purpose and document parties and findings.
- Preuves à conserver
- Alerts, analysis, supporting material and decision.
- Source primaire
- PMLFT Act, section 19
Report suspicion to the FIU.
- Action d’implémentation
- File as soon as practicable and no later than three working days after forming suspicion or grounds to suspect proceeds of crime, money laundering or terrorist financing.
- Preuves à conserver
- Trigger timestamp, analysis, report, receipt and chronology.
- Source primaire
- PMLFT Act, section 39(a)
Follow FIU instructions on suspected transactions.
- Action d’implémentation
- Notify the FIU and follow its direction; preserve the section 42 exception and immediate-afterwards notification where delay is impossible or would frustrate beneficiary identification.
- Preuves à conserver
- Notification, instruction, execution decision and timestamps.
- Source primaire
- PMLFT Act, section 42
Prevent tipping off.
- Action d’implémentation
- Restrict access and communications about FIU information, reports and investigations.
- Preuves à conserver
- Access logs, confidentiality controls and training.
- Source primaire
- PMLFT Act, section 43
07Thresholds, transfers, and paymentsUse current MMA/FIU specifications rather than assuming one universal operating threshold.4 éléments+
Configure cash reporting at the current prescribed threshold.
- Action d’implémentation
- Use the current MMA amount, aggregate linked transactions and submit in the FIU-prescribed procedure and form.
- Preuves à conserver
- Dated threshold table, aggregation tests, reports and receipts.
- Source primaire
- PMLFT Act, section 40
Report international funds transfers.
- Action d’implémentation
- Detect single and apparently linked international funds transfers and report them under the current FIU procedure.
- Preuves à conserver
- Detection logic, report, receipt and reconciliation.
- Source primaire
- PMLFT Act, section 41
Carry required wire-transfer information.
- Action d’implémentation
- Capture required originator information, identify missing information, obtain repairs, and reject and report where the statutory conditions require.
- Preuves à conserver
- Field matrix, samples, repair queue and decisions.
- Source primaire
- PMLFT Act, section 18
Obtain payment authorization before launch.
- Action d’implémentation
- Classify the service and obtain every applicable MMA authorization under the current national payment-system framework.
- Preuves à conserver
- Product memo, MMA decision and conditions.
- Source primaire
- National Payment System Act 8/2021; MMA payment-system materials
08Targeted financial sanctions and CPFUse current UN and Maldivian instructions and act without delay when required.3 éléments+
Screen current designations.
- Action d’implémentation
- Screen customers, beneficial owners, representatives and transactions at onboarding, on list updates and throughout the relationship.
- Preuves à conserver
- List version, screening logs and match decisions.
- Source primaire
- PMLFT Act, section 52; current FIU/MMA instructions
Freeze and report under operative instructions.
- Action d’implémentation
- Immediately freeze funds or property upon the competent FIU instruction and report linked funds or property without delay.
- Preuves à conserver
- Instruction, freeze timestamp, inventory and report.
- Source primaire
- PMLFT Act, section 52(c)-(e)
Control release and false positives.
- Action d’implémentation
- Release or permit access only on documented competent-authority direction and preserve match-resolution evidence.
- Preuves à conserver
- Authority decision, rationale and release record.
- Source primaire
- Current Maldivian targeted-sanctions procedures
09Records and authority accessRecords must reconstruct identities, decisions and transactions.3 éléments+
Retain identity and relationship records.
- Action d’implémentation
- Retain customer, beneficial-owner, agent, account and correspondence records for at least five years after the relationship ends.
- Preuves à conserver
- Retention schedule, archive and retrieval test.
- Source primaire
- PMLFT Act, section 20(a)
Retain transaction reconstruction records.
- Action d’implémentation
- Keep sufficient transaction information for at least five years from the transaction date.
- Preuves à conserver
- Transaction archive and reconstruction test.
- Source primaire
- PMLFT Act, section 20(b)
Produce information lawfully to authorities.
- Action d’implémentation
- Operate controlled retrieval and disclosure workflows for the FIU, supervisors, investigators and law enforcement.
- Preuves à conserver
- Request log, approval, production and receipt.
- Source primaire
- PMLFT Act, sections 19(b), 20 and 28
10Data governance, biometrics, incidents, and transfersApply existing confidentiality, sector and constitutional duties while the general Data Protection Bill remains pending.3 éléments+
Map lawful collection and disclosure.
- Action d’implémentation
- Document AML and sector duties, customer notice, purpose, access and authorized disclosure for identity, financial and other personal information.
- Preuves à conserver
- Data inventory, notice, legal basis and disclosure log.
- Source primaire
- PMLFT Act confidentiality provisions; applicable sector law
Protect identity and biometric information.
- Action d’implémentation
- Minimize collection, restrict access, secure storage and transmission, and assess vendors handling identity, biometric or financial data.
- Preuves à conserver
- Security assessment, access logs, contracts and tests.
- Source primaire
- Applicable MMA cybersecurity and confidentiality requirements
Track the pending Data Protection Bill.
- Action d’implémentation
- Do not present the bill as enacted; monitor passage and commencement and complete a gap assessment before it takes effect.
- Preuves à conserver
- Legal-change log, bill status and implementation plan.
- Source primaire
- People's Majlis, Data Protection Bill 20/2026/B-13
11Practical evidence packsEvidence must reconstruct decisions end to end.3 éléments+
Maintain an onboarding evidence pack.
- Action d’implémentation
- Bundle identity, authority, KYB, beneficial ownership, PEP, sanctions, purpose, risk and approvals.
- Preuves à conserver
- Complete sample and retrieval result.
- Source primaire
- Operational control supporting PMLFT Act section 16
Maintain reporting and sanctions case packs.
- Action d’implémentation
- Link trigger, analysis, decision time, filing, receipt, FIU instruction, freeze and confidentiality evidence.
- Preuves à conserver
- Case pack, timeline and access record.
- Source primaire
- PMLFT Act, sections 39-43 and 52
Maintain a launch and legal-change pack.
- Action d’implémentation
- Record perimeter, licences, thresholds, reporting, sanctions, data governance, vendors, source versions and control tests.
- Preuves à conserver
- Signed pack, source register and approvals.
- Source primaire
- Official sources listed below
Registre des sources primaires
12 sources utilisées pour cette checklist
Utilisez ces liens pour vérifier la législation, les lignes directrices, les procédures de déclaration et les statuts internationaux.
- Prevention of Money Laundering and Financing of Terrorism Act 10/2014 - EnglishMaldives Monetary Authority · Primary legislation - official translation
- Financial Intelligence Unit official pageMaldives Monetary Authority · Official authority page
- Guidelines for Financial Institutions to Identify Suspicious ActivitiesMaldives Monetary Authority / FIU · Official FIU guidance
- Financial Intelligence Unit Annual Report 2023Maldives Monetary Authority / FIU · Official FIU report
- National Payment System Act 8/2021People's Majlis · Primary legislation
- Companies Act 7/2023 and current company regulationsMinistry of Economic Development, Transport and Trade · Primary legislation and official index
- Business PortalMinistry of Economic Development, Transport and Trade · Official company and business service
- Data Protection Bill 20/2026/B-13People's Majlis · Official bill status - not enacted at review date
- Regulation on Prevention of Money Laundering and Financing of Terrorism for Securities Related BusinessesCapital Market Development Authority · Official sector regulation index
- Maldives AML/CFT Mutual Evaluation Report 2025Asia/Pacific Group on Money Laundering · Authoritative mutual evaluation
- FATF increased-monitoring statement - October 2026FATF · Authoritative current public-list status
- FATF high-risk jurisdictions statement - October 2026FATF · Authoritative current public-list status
Réponses directes
Questions KYC, KYB et AML pour Maldives
Who receives suspicious and transaction reports?+
The Financial Intelligence Unit of the Maldives receives reports in the procedure and form it prescribes.
When is a suspicious transaction report due?+
As soon as practicable and no later than three working days after forming suspicion or grounds for suspicion under section 39(a).
What cash threshold applies?+
Use the current amount prescribed by MMA regulation and aggregate transactions that appear linked; this checklist does not invent a universal amount.
How should beneficial ownership be determined?+
Identify and reasonably verify the natural person with a controlling interest and the natural person who manages the legal person, plus any more specific current sector test.
How long are AML records retained?+
Identity and relationship records are kept at least five years after the relationship ends; transaction reconstruction records are kept at least five years from the transaction date.
Is there a general enacted data-protection law?+
The Data Protection Bill remained at committee stage on 13 November 2026; existing confidentiality, sector and constitutional duties still require implementation controls.
Is Maldives on a FATF public list?+
No. Maldives was not named in the FATF high-risk or increased-monitoring statements dated 30 October 2026.
Méthode de recherche et de revue
VOVE ID Compliance Research cartographie le périmètre réglementaire, traduit les obligations en contrôles opérationnels, relie les affirmations importantes aux sources et date chaque revue.
General information, not legal advice. Reviewed 13 November 2026. Confirm the controlling Dhivehi text, amendments, current sector regulation, FIU filing specifications, sanctions instructions, licensing conditions, company-register data and privacy requirements with the competent authority and qualified Maldivian counsel.