AML compliance programme and responsible person
Albania
—
—
source
View →
Customer due diligence (KYC/CDD)
Albania
At onboarding + ongoing
—
source
View →
Operational and ICT incident reporting to the Bank of Albania
Albania
Initial report within 4 hours of classifying an event as critical; classification no later than 24 hours after discovery
—
source
View →
Outsourcing risk assessment and monitoring
Albania
—
—
source
View →
AML record retention
Algeria
At least 5 years
—
source
View →
Suspicious transaction reporting
Algeria
As soon as suspicion arises (Art. 20: "dès qu'il y a soupçon")
—
source
View →
AML/CFT compliance programme and compliance officer
Angola
Ongoing
—
source
View →
AML record retention
Angola
10 years from the transaction or end of the business relationship
—
source
View →
Customer due diligence (KYC/CDD)
Angola
At onboarding + ongoing
—
source
View →
Suspicious transaction reporting to the UIF
Angola
Immediately; no later than 24 hours after concluding a suspicion exists (UIF Instruction 001/DG-UIF/2026)
—
source
View →
Cyber-incident reporting by financial institutions
Angola
First report after detection; updates every 4 hours until service is restored
—
source
View →
Notification to the BNA before contracting cloud services
Angola
At least 60 days before contracting; 90 days before changes
—
source
View →
Whistleblowing channel and irregularity-reporting policy
Angola
Ongoing
—
source
View →
Run a risk-based AML/CFT prevention system and appoint a compliance officer
Argentina
Ongoing
—
source
View →
Keep AML/CFT records for at least ten years
Argentina
10 years (minimum)
—
source
View →
Identify customers and beneficial owners and verify their identity
Argentina
At onboarding; file updates at least every 1 year (high risk), 3 years (medium), 5 years (low)
—
source
View →
AML/CFT internal acts and internal monitoring unit
Armenia
—
—
source
View →
AML record retention
Armenia
At least 5 years after the business relationship ends or after the date of the transaction
—
source
View →
Customer due diligence (KYC/CDD)
Armenia
At onboarding (verification within 7 days of establishing the relationship, where permitted) + ongoing
—
source
View →
Beneficial owner identification
Armenia
—
—
source
View →
AML/CFT minimum requirements: policy, risk-tiered CDD and audit
Armenia
—
—
source
View →
AML/CTF policies and AML/CTF compliance officer
Australia
Ongoing
—
source
View →
AML/CTF record retention
Australia
7 years
—
source
View →
AML compliance programme, officer and training
Austria
—
—
source
View →
AML record retention
Austria
10 years
—
source
View →
Suspicious transaction reporting to the Geldwäschemeldestelle
Austria
Unverzüglich (without delay), on the entity's own initiative; the text sets no numeric deadline
—
source
View →
Enterprise-wide money laundering and terrorist financing risk analysis
Austria
Kept current; also before introducing new products, practices or technologies
—
source
View →
Reporting major ICT-related incidents to the FMA
Austria
Initial: within 4 hours of classification and no later than 24 hours from discovery; intermediate: 72 hours after the initial report; final: within one month of the last intermediate report
—
source
View →
ICT third-party register and notification of critical outsourcing
Austria
Register submitted annually in a window announced each year; contract notifications 'in a timely manner'
—
source
View →
AML/CFT internal controls, compliance system and compliance officer
Azerbaijan
—
—
source
View →
AML record retention
Azerbaijan
5 years
—
source
View →
Customer due diligence (KYC/CDD)
Azerbaijan
At onboarding + ongoing
—
source
View →
AML/CFT/CPF compliance programme, Compliance Officer and MLRO
Bahamas
—
—
source
View →
Notify the Central Bank of material outsourcing agreements
Bahamas
At least 10 business days before entering into or materially varying the agreement
—
source
View →
Prior CBB approval for material outsourcing
Bahrain
At least 6 weeks before committing
—
source
View →
Retain customer account and transaction records after account closure
Bangladesh
At least 5 years after account closure
—
source
View →
Report suspicious transactions to the BFIU
Bangladesh
Without delay
—
source
View →
Disclose sustainability and climate-related information
Bangladesh
Annual report disclosure; half-yearly regulatory submission
—
source
View →
Refrain from dealing in or facilitating virtual assets and virtual currencies
Bangladesh
Continuous prohibition
—
source
View →
Develop and implement AML/CFT policies, procedures and controls
Barbados
Ongoing
—
source
View →
Keep AML transaction and identification records
Barbados
5 years
—
source
View →
Customer due diligence (KYC/CDD)
Barbados
At onboarding + ongoing
—
source
View →
Report suspicious transactions to the FIU
Barbados
Promptly; no fixed number of days stated
—
source
View →
AML record retention
Belarus
At least 5 years after the contract ends (or from the transaction date if no contract)
—
source
View →
AML compliance programme, officer and internal organisation
Belgium
—
—
source
View →
AML record retention
Belgium
10 years
—
source
View →
Internal channel for staff to report AML/CFT non-compliance
Belgium
—
—
source
View →
Customer due diligence (KYC/CDD)
Belize
At onboarding + ongoing
—
source
View →
Suspicious transaction reporting to CENTIF
Benin
Without delay (Art. 60)
—
source
View →
Customer due diligence (KYC/CDD)
Bhutan
At onboarding + ongoing
—
source
View →
AML compliance programme and responsible officer
Bolivia
Ongoing; manual reviewed at least once a year
—
source
View →
AML record retention
Bolivia
Not less than 10 years after the transaction
—
source
View →
Customer due diligence (KYC/CDD)
Bolivia
At onboarding + ongoing
—
source
View →
Registration with the UIF renewed every two years
Bolivia
Every two years
—
source
View →
Digital signature and ATT-authorised certificates for documents in the national payment system
Bolivia
Ongoing; retention of at least 10 years for certificate data and signed documents
—
source
View →
Customer due diligence (KYC/CDD)
Bosnia and Herzegovina
At onboarding + ongoing
—
source
View →
AML/CFT compliance programme and compliance officer
Botswana
Ongoing
—
source
View →
AML/CFT record retention
Botswana
20 years
—
source
View →
Customer due diligence (KYC/CDD)
Botswana
At onboarding + ongoing
—
source
View →
Suspicious transaction reporting to the Financial Intelligence Agency
Botswana
As soon as possible and no later than five working days after the suspicion arose (Reg. 22(1), Financial Intelligence Regulations 2022)
—
source
View →
Cash transaction reporting
Botswana
Within five working days after the transaction is concluded (Reg. 22(2))
—
source
View →
Banking licence required before conducting banking business
Botswana
Before accepting deposits
—
source
View →
Retention of banks' financial records
Botswana
20 years from the date of the last entry
—
source
View →
AML/CFT policy and designated director (banks and other BCB-authorised institutions)
Brazil
Ongoing; policy approved by the board and kept up to date
—
source
View →
AML/CFT record retention (banks and other BCB-authorised institutions)
Brazil
10 years minimum
—
source
View →
Customer due diligence (KYC/CDD) and beneficial ownership (banks and other BCB-authorised institutions)
Brazil
At onboarding + ongoing
—
source
View →
Annual AML/CFT effectiveness report (banks and other BCB-authorised institutions)
Brazil
Annually: base date 31 December, submitted by 31 March; action plan by 30 June
—
source
View →
Bank secrecy over customer operations
Brazil
Ongoing
—
source
View →
Freezing of assets under UN Security Council sanctions
Brazil
Without delay and without prior notice
—
source
View →
Notification of cloud and data-processing outsourcing to the Central Bank (financial institutions)
Brazil
Within 10 days after contracting; 60 days before contracting abroad without an information-exchange agreement
—
source
View →
AML/CFT compliance programme and compliance officer
Brunei
—
—
source
View →
AML record retention
Brunei
7 years from completion of the transaction
—
source
View →
Suspicious transaction reporting to the Financial Intelligence Unit
Brunei
Promptly after forming a suspicion (s.15(1))
—
source
View →
Cyber incident reporting by financial institutions
Brunei
Within 1 hour of discovery; assessment within 2 hours
—
source
View →
Fraud incident reporting by banks
Brunei
1 working day (notice); 5 working days (form); 10 working days after resolution (summary)
—
source
View →
Customer due diligence (KYC/CDD)
Bulgaria
At onboarding + ongoing
—
source
View →
AML/CFT programme, controls and designated officer
Burkina Faso
—
—
source
View →
AML record retention
Burkina Faso
10 years
—
source
View →
Customer due diligence (KYC/CDD)
Burkina Faso
At onboarding + ongoing
—
source
View →
Suspicious transaction declaration to the CENTIF
Burkina Faso
Immediately (Art. 60)
—
source
View →
AML/CFT compliance programme and responsible officer
Cabo Verde
Ongoing
—
source
View →
AML record retention
Cabo Verde
7 years
—
source
View →
Customer due diligence (KYC/CDD)
Cabo Verde
At onboarding + ongoing
—
source
View →
Suspicious transaction reporting to the UIF
Cabo Verde
Immediately on knowledge or suspicion (Art. 20(1))
—
source
View →
BCV authorisation to set up a digital bank
Cabo Verde
Before starting operations
—
source
View →
AML compliance programme and officer
Cameroon
—
—
source
View →
AML record retention
Cameroon
10 years
—
source
View →
Customer due diligence (KYC/CDD)
Cameroon
At onboarding + ongoing
—
source
View →
AML compliance programme and compliance officer
Canada
Ongoing; policies kept up to date
—
source
View →
Technology and cyber incident reporting to OSFI
Canada
Within 24 hours, or sooner if possible
—
source
View →
Annual climate-related disclosure under OSFI Guideline B-15
Canada
Annually, within 180 days after fiscal year-end
—
source
View →
AML record retention
Central African Republic
10 years from closure of accounts / end of relationship; transaction records 10 years from the transaction
—
source
View →
Customer due diligence (KYC/CDD)
Central African Republic
At onboarding + ongoing
—
source
View →
Business continuity plan and IT backup for credit institutions
Central African Republic
—
—
source
View →
AML/CFT programme, compliance officer and independent audit
Chad
—
—
source
View →
AML record retention
Chad
10 years
—
source
View →
Customer due diligence (KYC/CDD)
Chad
At onboarding + ongoing
—
source
View →
Appoint an AML compliance officer and keep a prevention manual
Chile
Ongoing; prevention manual updated at least every two years
—
source
View →
Keep AML records for at least five years
Chile
5 years minimum
—
source
View →
Customer due diligence (KYC)
Chile
At onboarding + ongoing; client records updated at least annually or on relevant change
—
source
View →
No obligations for this country.