Mauritanie KYC, KYB & AML compliance checklist
Une checklist pratique et sourcée pour mettre en œuvre les exigences KYC, KYB et AML en Mauritanie.
- Dernière revue
- Dernière revue:
- Version
- Version 1.0
Réponse directe
Que couvre la checklist de conformité pour Mauritanie ?
La checklist pour Mauritanie traduit les principales règles KYC, KYB et AML en 11 domaines de contrôle et 35 contrôles d’implémentation, avec les autorités, obligations de déclaration et preuves à conserver.
Faits réglementaires clés
- FIU
- Mauritanian Financial Intelligence Unit
- Primary AML rule
- Law No. 2019-017 and Decree No. 2019-197, as amended in 2026
- Suspicion reporting
- Immediately, including attempted transactions
- Core AML retention
- At least 10 years after the relevant relationship or occasional transaction ends
- Targeted sanctions
- Freeze within 8 hours of publication; notify within 24 hours
- FATF status
- Not publicly listed as at 19 June 2026
Détail d’implémentation
Exigences et actions de conformité pour Mauritanie
Ouvrez chaque domaine pour consulter l’exigence, l’action recommandée, les preuves à conserver et la source primaire utilisée.
01Scope, authorities, and licensingResolve the reporting entity, activity and supervisor before launch.3 éléments+
Determine whether each activity is in AML/CFT scope.
- Action d’implémentation
- Map every entity, product, branch, agent and profession to the financial-institution, designated non-financial business or profession, non-profit or other covered category and identify the FIU and competent supervisor.
- Preuves à conserver
- Applicability memo, product map, licences and accountable-owner register.
- Source primaire
- Law 2019-017, Articles 1 and 6; Decree 2019-197, as amended
Establish the current FIU reporting route.
- Action d’implémentation
- Designate authorised reporters, obtain the current form or secure procedure directly from the FIU, test delivery and preserve acknowledgements.
- Preuves à conserver
- Appointments, reporter authority, channel test and receipt log.
- Source primaire
- Law 2019-017, Articles 15 and 29; Decree 2019-198, as amended by Decree 2026-116
Obtain authorisation before regulated activity.
- Action d’implémentation
- Classify banking, payment, e-money, money-transfer, foreign-exchange, insurance, securities, fintech, agent and virtual-asset activities and obtain every required approval before launch.
- Preuves à conserver
- Perimeter analysis, licences, conditions and renewal calendar.
- Source primaire
- Law 2019-017, Articles 1, 6 and 24-28; Central Bank official regulatory portal
02Governance and risk assessmentControls must be risk-based, documented, current and independently tested.3 éléments+
Maintain risk-based internal controls.
- Action d’implémentation
- Approve policies for CDD, beneficial ownership, PEPs, sanctions, monitoring, reporting, records, training, employee screening and independent testing.
- Preuves à conserver
- Policy suite, approvals, control library, training and audit reports.
- Source primaire
- Law 2019-017, Article 6; Decree 2019-197, as amended
Identify, assess and document ML/TF risks.
- Action d’implémentation
- Assess customers, countries, products, services, transactions, channels and new technologies before use and update the assessment continuously.
- Preuves à conserver
- Risk assessment, methodology, source data, change log and approvals.
- Source primaire
- Law 2019-017, Article 6(1)
Apply enhanced measures to high-risk countries and situations.
- Action d’implémentation
- Use the entity assessment, FIU directions and current FATF statements to trigger proportionate enhanced diligence and any required countermeasures.
- Preuves à conserver
- Country-risk method, list updates, EDD decisions and monitoring results.
- Source primaire
- Law 2019-017, Articles 10-11
03Natural-person identificationIdentify and verify customers, actors and beneficial owners at every applicable trigger.3 éléments+
Identify and verify customers using reliable evidence.
- Action d’implémentation
- Capture identity attributes, verify reliable independent documents or data, understand purpose and intended nature and establish expected activity before or during the legally permitted onboarding sequence.
- Preuves à conserver
- CDD file, source provenance, verification, purpose and risk decision.
- Source primaire
- Law 2019-017, Article 6; Decree 2019-197, as amended
Apply CDD to occasional transactions, suspicion and identity doubt.
- Action d’implémentation
- Configure the precise relationship, occasional-transaction, wire-transfer, suspicion and identity-quality triggers in the current implementing rules; never treat a threshold as a safe harbour.
- Preuves à conserver
- Trigger matrix, aggregation tests, alerts and CDD timestamps.
- Source primaire
- Decree 2019-197, as amended by Decree 2026-115
Control remote and technology-enabled onboarding.
- Action d’implémentation
- Assess impersonation, document, liveness, device and channel risks before use; apply stronger verification where risk is elevated and preserve the decision trail.
- Preuves à conserver
- Channel assessment, verification results, fraud controls and exceptions.
- Source primaire
- Law 2019-017, Articles 6 and 10
04KYB, registries, and beneficial ownershipVerify legal existence, authority, ownership and ultimate natural-person control.3 éléments+
Verify legal existence and authority.
- Action d’implémentation
- Obtain current commercial-register and constitutional evidence, registered and operating addresses, directors, licences and mandates; reconcile inconsistencies.
- Preuves à conserver
- Registry extract, statutes, managers, licences, mandate and discrepancy log.
- Source primaire
- Law 2019-017, beneficial-owner definition and Article 6; Decree 2019-197, as amended
Identify and verify ultimate natural-person ownership and control.
- Action d’implémentation
- Trace every ownership layer, identify each natural person who ultimately owns or controls the customer or on whose behalf a transaction occurs, and document control exercised by other means.
- Preuves à conserver
- Ownership chart, control analysis, verified identities and rationale.
- Source primaire
- Law 2019-017, Article 1 definition of beneficial owner; Decree 2019-197, as amended
Do not rely on registry data alone.
- Action d’implémentation
- Compare customer declarations, constitutional documents and available registry information and investigate discrepancies before acceptance and during refresh.
- Preuves à conserver
- Source comparison, discrepancy decisions, update log and approvals.
- Source primaire
- Law 2019-017, Articles 6 and 10
05PEPs, EDD, and relianceHigher-risk relationships require enhanced, evidenced controls.3 éléments+
Detect PEP exposure.
- Action d’implémentation
- Use appropriate tools to identify whether customers or beneficial owners hold or held prominent domestic, foreign or international-organisation functions, and assess family members and close associates under current rules.
- Preuves à conserver
- Screening, relationship map, match decision and refresh log.
- Source primaire
- Law 2019-017, Article 9; Decree 2019-197, as amended
Apply proportionate enhanced diligence.
- Action d’implémentation
- Obtain required senior approval, establish source of wealth and source of funds where applicable and intensify ongoing monitoring.
- Preuves à conserver
- Approval, provenance analysis and enhanced-monitoring plan.
- Source primaire
- Law 2019-017, Articles 6(2), 9 and 10
Retain responsibility when using third parties or outsourcing.
- Action d’implémentation
- Assess legal eligibility and control access to CDD records, service levels, confidentiality, audit rights, exit and regulator access; keep the reporting entity accountable.
- Preuves à conserver
- Due diligence, agreement, retrieval test and assurance results.
- Source primaire
- Law 2019-017, Articles 6 and 12; Decree 2019-197, as amended
06Monitoring and suspicious reportingFIU reporting must be immediate, complete and confidential.4 éléments+
Monitor and examine unusual activity.
- Action d’implémentation
- Scrutinise activity against the customer profile and document the background and purpose of complex, important, unusual or apparently purposeless transactions.
- Preuves à conserver
- Alerts, investigation, written findings and disposition.
- Source primaire
- Law 2019-017, Article 10
Report suspicion and attempts immediately.
- Action d’implémentation
- Timestamp when suspicion or reasonable grounds arose and immediately report suspected funds, transactions and attempts to the FIU using its current route; provide requested supplements.
- Preuves à conserver
- Decision chronology, report, supporting material, delivery and receipt.
- Source primaire
- Law 2019-017, Article 15
Prevent tipping off.
- Action d’implémentation
- Restrict knowledge of reports and related action and disclose nothing to the customer or another unauthorised person.
- Preuves à conserver
- Access controls, disclosure protocol, logs and training.
- Source primaire
- Law 2019-017, Article 16
Govern FIU suspension orders.
- Action d’implémentation
- Maintain a continuously available process to implement an FIU suspension of up to five working days and a competent-authority extension of up to ten working days.
- Preuves à conserver
- Escalation tree, timestamps, hold record and release authority.
- Source primaire
- Law 2019-017, Article 31
07Payments, wires, thresholds, and agentsKeep CDD triggers, special examination and authority-set reports distinct.3 éléments+
Do not invent a universal transaction-report threshold.
- Action d’implémentation
- Obtain current threshold decisions and forms from the FIU, Committee or supervisor, document entity and transaction scope, aggregation, currency and filing mechanics before configuration.
- Preuves à conserver
- Authoritative instrument, threshold register, tests, reports and receipts.
- Source primaire
- Law 2019-017, Article 33(14); Decree 2019-197, as amended
Preserve required wire-transfer information.
- Action d’implémentation
- Capture required originator and beneficiary information, keep it through the payment chain and define reject, suspend, execute and follow-up rules for deficient transfers.
- Preuves à conserver
- Field matrix, validation, repair queue, samples and decisions.
- Source primaire
- Law 2019-017, Article 13; Decree 2019-197, as amended
Control agents and payment intermediaries.
- Action d’implémentation
- Confirm licensing and appointment requirements, allocate controls contractually, train and monitor agents and retain immediate access to customer and transaction evidence.
- Preuves à conserver
- Approval, agent register, contracts, training, monitoring and remediation.
- Source primaire
- Law 2019-017, Articles 6 and 24-28; Central Bank official portal
08Targeted financial sanctionsScreen, freeze, restrict and report within the current national deadlines.3 éléments+
Screen current authoritative designations.
- Action d’implémentation
- Screen customers, beneficial owners, controllers, representatives and relevant transactions at onboarding, on list changes and before execution.
- Preuves à conserver
- List inventory, update logs, screening configuration and dispositions.
- Source primaire
- Law 2019-017, Article 14; Decrees 2019-199 and 2026-117
Freeze designated property within eight hours of publication.
- Action d’implémentation
- Freeze without prior notice all direct or indirect owned or controlled funds and other assets within eight hours and prevent funds, services or resources being made available.
- Preuves à conserver
- Freeze procedure, publication and action timestamps, asset record and blocks.
- Source primaire
- National Counter-Terrorism Committee freeze procedure, Articles 16 and 18; Decree 2026-117
Notify freezes, releases and attempted transactions.
- Action d’implémentation
- Notify the National Counter-Terrorism Committee of the value, type, date and time within 24 hours and report measures and attempted transactions through the current procedure.
- Preuves à conserver
- Notifications, receipts, directions and release decision.
- Source primaire
- National Counter-Terrorism Committee freeze procedure, Article 19; Decree 2026-117
09Records and regulator accessRecords must reconstruct customers, ownership, transactions and decisions.3 éléments+
Retain AML records for at least ten years.
- Action d’implémentation
- Retain accounts, transactions, correspondence, identity copies, CDD and enhanced-diligence files and analyses for at least ten years from the end of the relationship or occasional transaction, using the applicable record-specific clock.
- Preuves à conserver
- Schedule, archive sample, deletion control and legal-hold log.
- Source primaire
- Law 2019-017, Article 12(1)-(3)
Reconstruct transactions and provide records diligently.
- Action d’implémentation
- Preserve sufficient information to reconstruct individual transactions and make controlled records available promptly to competent authorities.
- Preuves à conserver
- Reconstruction test, retrieval log, request validation and disclosure receipt.
- Source primaire
- Law 2019-017, Article 12(2)
Apply extensions and holds.
- Action d’implémentation
- Extend retention when requested by the public prosecutor for an investigation or prosecution and suspend deletion for other valid legal holds.
- Preuves à conserver
- Request, hold instruction, affected records and release approval.
- Source primaire
- Law 2019-017, Article 12(4)
10Privacy, biometrics, and transfersAML processing does not displace personal-data obligations.4 éléments+
Map purpose, legal basis, notice, minimisation, security and retention.
- Action d’implémentation
- Document each KYC, screening, monitoring, reporting and fraud use; limit access and fields, give applicable information and align deletion with AML holds.
- Preuves à conserver
- Processing register, notices, access matrix, retention map and security tests.
- Source primaire
- Law 2017-020, Articles 5-11 and 43-47
Complete APD formalities before processing.
- Action d’implémentation
- Determine whether declaration, authorisation or an exemption applies; obtain the required receipt or approval before implementation and repeat formalities after material change.
- Preuves à conserver
- Assessment, filing, receipt or authorisation, exemption rationale and change log.
- Source primaire
- Law 2017-020, Articles 32-45; APD formalities portal
Obtain prior authorisation for biometric and specified sensitive processing.
- Action d’implémentation
- Do not deploy biometric, national-identifier, criminal-record or file-interconnection processing until the APD authorisation analysis and required approval are complete.
- Preuves à conserver
- Data inventory, impact and necessity assessment, APD application and approval.
- Source primaire
- Law 2017-020, Article 37
Control international transfers and overseas cloud services.
- Action d’implémentation
- Apply the current APD adequate-country list and obtain prior authorisation where the destination is not listed; separately apply current overseas-cloud conditions.
- Preuves à conserver
- Transfer map, destination assessment, authorisation, contract and cloud review.
- Source primaire
- Law 2017-020, Articles 21 and 73; amended APD Decisions 004/2025 and 005/2025
11Practical evidence packsKeep evidence retrievable, versioned and suitable for supervisory review.3 éléments+
Maintain a customer and beneficial-owner evidence pack.
- Action d’implémentation
- Link identity and KYB evidence, ownership analysis, risk scoring, PEP and sanctions results, approvals, refreshes and exceptions to one auditable record.
- Preuves à conserver
- Versioned case file with provenance, timestamps and approvals.
- Source primaire
- Law 2019-017, Articles 6, 9-12
Maintain a reporting and sanctions evidence pack.
- Action d’implémentation
- Separate restricted FIU reports from ordinary case material while preserving decision chronology, delivery evidence, freeze actions and lawful releases.
- Preuves à conserver
- Restricted reporting register, receipts, freeze log and access audit.
- Source primaire
- Law 2019-017, Articles 14-17 and 31; national freeze procedure
Schedule legal and control refreshes.
- Action d’implémentation
- Monitor official gazettes, FIU, Central Bank, APD, FATF, MENAFATF, UN and sector authorities and retest controls after changes.
- Preuves à conserver
- Regulatory inventory, alerts, review calendar, test results and remediation.
- Source primaire
- Law 2019-017, Article 6; current competent-authority publications
Registre des sources primaires
12 sources utilisées pour cette checklist
Utilisez ces liens pour vérifier la législation, les lignes directrices, les procédures de déclaration et les statuts internationaux.
- Law No. 2019-017 on AML/CFTNational Counter-Terrorism Committee · Primary legislation
- Official legal-document collection, including Decrees 2019-197 and 2026-115 to 117Inspection Générale d'État · Official legal repository
- Targeted-financial-sanctions freeze procedureNational Counter-Terrorism Committee · Official procedure
- National Counter-Terrorism Committee powersNational Counter-Terrorism Committee · Official procedure
- Central Bank of MauritaniaCentral Bank of Mauritania · Primary regulator
- Law No. 2017-020 on personal-data protectionPersonal Data Protection Authority · Primary legislation
- Prior declaration and authorisation formalitiesPersonal Data Protection Authority · Official procedure
- Amended Decision 004/2025 on international transfersPersonal Data Protection Authority · Regulator decision
- MENAFATF mutual-evaluation preparatory visitMENAFATF · FATF-style regional body
- Jurisdictions under increased monitoring - 19 June 2026FATF · Authoritative international status
- High-risk jurisdictions subject to a call for action - 19 June 2026FATF · Authoritative international status
- United Nations Security Council consolidated listUnited Nations Security Council · Authoritative sanctions list
Réponses directes
Questions KYC, KYB et AML pour Mauritanie
Who receives suspicious-transaction reports?+
The Mauritanian Financial Intelligence Unit. Obtain its current form, secure channel and acknowledgement procedure before filing.
When must suspicion be reported?+
Immediately when suspicion or reasonable grounds arise, including attempted transactions, under Article 15 of Law 2019-017.
Is there one universal threshold report?+
Do not assume one. Article 33 allows the Committee to set reports above specified amounts; confirm the current instrument, entity scope, transaction type, aggregation and route.
How is beneficial ownership identified?+
Identify the natural person who ultimately owns or controls the customer, the person on whose behalf the transaction is conducted, and any natural person exercising ultimate effective control. Confirm any operative percentage or fallback detail in current implementing rules.
How long are AML records retained?+
At least ten years under Article 12, using the applicable clock from relationship end or the occasional transaction, with longer retention when the prosecutor requires it.
What is the sanctions action time?+
The national freeze procedure requires action without prior notice within eight hours of publication and notification within 24 hours; verify the current 2026 procedure and distribution channel.
Are privacy filings required?+
Usually a prior declaration, and specified processing including biometrics, national identifiers, criminal records and file interconnection requires authorisation unless a current exemption applies.
May data be transferred abroad?+
Apply the APD's current adequate-country list. Prior authorisation is required for destinations outside that list, subject to narrow conditions in the amended transfer decision.
Is Mauritania on a FATF public list?+
Mauritania was not named in FATF's 19 June 2026 high-risk or increased-monitoring statements. This is not a low-risk determination.
Méthode de recherche et de revue
VOVE ID Compliance Research cartographie le périmètre réglementaire, traduit les obligations en contrôles opérationnels, relie les affirmations importantes aux sources et date chaque revue.
General regulatory information, not legal advice or a licence determination. Reviewed as applicable on 6 September 2026. Confirm the current Financial Intelligence Unit filing route, thresholds established by competent authorities, beneficial-owner filing procedures, sanctions notices, APD formalities and product-specific permissions with the relevant authority and qualified Mauritanian counsel before launch.