Gabon KYC, KYB & AML compliance checklist
Une checklist pratique et sourcée pour mettre en œuvre les exigences KYC, KYB et AML en Gabon.
- Dernière revue
- Dernière revue:
- Version
- Version 1.0
Réponse directe
Que couvre la checklist de conformité pour Gabon ?
La checklist pour Gabon traduit les principales règles KYC, KYB et AML en 11 domaines de contrôle et 32 contrôles d’implémentation, avec les autorités, obligations de déclaration et preuves à conserver.
Faits réglementaires clés
- FIU
- Agence Nationale d'Investigation Financiere (ANIF)
- Primary AML rule
- CEMAC Regulation No. 02/24
- Suspicion reporting
- Forthwith to ANIF; oral or electronic reports require written confirmation within 48 hours
- Cash reporting
- CFA 5,000,000 or more, single or apparently linked, subject to stated exceptions
- Core retention
- 10 years for financial-institution CDD and transaction records
- FATF status
- Not named on FATF public lists as at 19 June 2026
Détail d’implémentation
Exigences et actions de conformité pour Gabon
Ouvrez chaque domaine pour consulter l’exigence, l’action recommandée, les preuves à conserver et la source primaire utilisée.
01Scope, authorities, and licensingResolve the entity, activity and supervisor before launch.3 éléments+
Determine whether each activity is a CEMAC reporting entity.
- Action d’implémentation
- Map every entity, product, channel and agent to the financial-institution or DNFBP categories and identify ANIF and the competent sector supervisor.
- Preuves à conserver
- Applicability memo, product map and accountable-owner register.
- Source primaire
- CEMAC Regulation No. 02/24, Articles 6-7
Treat ANIF as Gabon's financial intelligence unit.
- Action d’implémentation
- Notify authorised correspondents, obtain the current prescribed filing route and format directly from ANIF, and test controlled access before operations begin.
- Preuves à conserver
- Correspondent notice, channel test, procedure and access approvals.
- Source primaire
- CEMAC Regulation No. 02/24, Articles 86-97 and 107-109; Decree No. 0441/PR/MEP, Articles 2-3, 33 and 48
Obtain authorisation before regulated financial activity.
- Action d’implémentation
- Classify banking, microfinance, insurance, payment, exchange, investment and other financial services with the competent national authority, COBAC, BEAC, COSUMAF, CIMA or other supervisor and obtain every approval before launch.
- Preuves à conserver
- Perimeter analysis, authority correspondence and licence register.
- Source primaire
- Applicable CEMAC, COBAC, BEAC, COSUMAF, CIMA and national sector rules
02Governance and risk assessmentThe programme must be documented, risk-based and independently tested.3 éléments+
Maintain an enterprise-wide ML/TF/PF risk assessment.
- Action d’implémentation
- Assess customers, products, channels, geography, cash, agents, technology and proliferation risk before launch and on material change; reflect Gabon's national risk findings.
- Preuves à conserver
- Approved methodology, risk assessment, controls and version history.
- Source primaire
- CEMAC Regulation No. 02/24, Articles 12-15
Maintain written controls and an empowered compliance function.
- Action d’implémentation
- Assign senior accountability, confidential ANIF reporting authority, resources, training and independent testing.
- Preuves à conserver
- Appointments, policies, training, testing and remediation log.
- Source primaire
- CEMAC Regulation No. 02/24; COBAC Regulation R-2023/01 for covered institutions
Assess new technology before use.
- Action d’implémentation
- Identify and mitigate ML/TF/PF, fraud, cybersecurity and privacy risks before launching a new product, distribution mechanism or technology.
- Preuves à conserver
- Pre-launch assessment, approval, tests and residual-risk acceptance.
- Source primaire
- CEMAC Regulation No. 02/24, Article 25; Law No. 025/2023
03Natural-person identificationCDD uses reliable, independent evidence and continues through the relationship.3 éléments+
Identify and verify customers and representatives.
- Action d’implémentation
- Verify the customer with reliable independent evidence; identify anyone acting for the customer and verify identity and authority.
- Preuves à conserver
- Identity file, source provenance, mandate and verification result.
- Source primaire
- CEMAC Regulation No. 02/24, Articles 20 and 29-30
Understand purpose and expected activity.
- Action d’implémentation
- Record relationship purpose, products, expected volumes, counterparties, geography and source of funds sufficient for risk rating and monitoring.
- Preuves à conserver
- Customer profile, expected-activity baseline and approval.
- Source primaire
- CEMAC Regulation No. 02/24, Article 21
Do not proceed where mandatory CDD fails.
- Action d’implémentation
- Do not open or execute, or terminate as applicable, when required identification cannot be completed; consider and confidentially file an STR.
- Preuves à conserver
- Decline or exit decision, investigation and restricted STR record.
- Source primaire
- CEMAC Regulation No. 02/24, Article 41
04KYB, registries, and beneficial ownershipRegistry evidence does not replace natural-person ownership and control analysis.3 éléments+
Verify legal existence, governance and authority.
- Action d’implémentation
- Obtain current RCCM, constitutional, address, director, signatory, tax and licence evidence and reconcile inconsistencies.
- Preuves à conserver
- RCCM extract, statutes, powers, tax record and licence file.
- Source primaire
- CEMAC Regulation No. 02/24, Article 31; OHADA Uniform Acts
Identify natural-person beneficial owners through ownership, control and fallback tests.
- Action d’implémentation
- Identify natural persons with ultimate controlling interests, then control by other means, and use the principal-manager fallback only where no person is identified under the first two tests.
- Preuves à conserver
- Ownership chart, source records, control analysis and verified identities.
- Source primaire
- CEMAC Regulation No. 02/24, Article 33
Apply register disclosure separately from AML CDD.
- Action d’implémentation
- Capture declared beneficial owners; if none is declared, apply the Regulation's more-than-25% and specified control or officeholder rules. Do not substitute this register fallback for Article 33 CDD.
- Preuves à conserver
- Register filing, calculation, officeholder record and reconciliation.
- Source primaire
- CEMAC Regulation No. 02/24, Articles 76-82
05PEPs, EDD, and remote onboardingHigher-risk and remote relationships require enhanced controls.3 éléments+
Detect PEP exposure in customers and beneficial owners.
- Action d’implémentation
- Use appropriate systems to identify domestic, foreign and international-organisation PEP exposure and connected-person risk.
- Preuves à conserver
- Screening, relationship map, match decision and refresh log.
- Source primaire
- CEMAC Regulation No. 02/24, Articles 23 and 67
Apply PEP approval, provenance and monitoring measures.
- Action d’implémentation
- Obtain senior-management approval, take reasonable measures to establish source of funds or assets, and conduct enhanced ongoing monitoring.
- Preuves à conserver
- Approval, provenance analysis and monitoring plan.
- Source primaire
- CEMAC Regulation No. 02/24, Article 23
Control non-face-to-face and biometric risk.
- Action d’implémentation
- Apply enhanced identity, fraud, device, liveness, sensitive-data and exception controls proportionate to the remote channel and data used.
- Preuves à conserver
- Remote-onboarding assessment, impact review, tests and exceptions.
- Source primaire
- CEMAC Regulation No. 02/24, Article 22; Law No. 025/2023
06Monitoring and suspicious reportingANIF reporting is prompt, traceable and confidential.3 éléments+
Monitor activity against the current customer profile.
- Action d’implémentation
- Examine unusual, complex, linked or apparently purposeless activity and preserve a reasoned conclusion.
- Preuves à conserver
- Alerts, investigation, disposition and rule governance.
- Source primaire
- CEMAC Regulation No. 02/24, Articles 21 and 63-64
Report suspicious and attempted transactions forthwith to ANIF.
- Action d’implémentation
- File when the entity knows, suspects or has good reason to suspect criminal proceeds or ML/TF/PF; confirm a telephone or electronic report in writing within 48 hours using ANIF's current prescribed route.
- Preuves à conserver
- Decision chronology, report, receipt and supplemental-information log.
- Source primaire
- CEMAC Regulation No. 02/24, Articles 105 and 109; ANIF official reporting form
Prevent tipping off.
- Action d’implémentation
- Restrict access and do not disclose an STR, its content or ANIF action to the customer or unauthorised third parties.
- Preuves à conserver
- Access logs, confidentiality procedure and training.
- Source primaire
- CEMAC Regulation No. 02/24, Article 110
07Payments, wires, thresholds, and agentsPayment controls preserve required data and apply scoped objective reporting.3 éléments+
Report covered cash transactions of CFA 5,000,000 or more.
- Action d’implémentation
- Aggregate single and apparently linked cash transactions and report to ANIF, applying only express exceptions while retaining enhanced scrutiny.
- Preuves à conserver
- Aggregation tests, exception basis, filing and receipt.
- Source primaire
- CEMAC Regulation No. 02/24, Article 18
Preserve required wire-transfer information.
- Action d’implémentation
- Carry required originator and beneficiary data through the payment chain; seek missing data and, if not obtained within three days, refrain from execution and inform ANIF.
- Preuves à conserver
- Message sample, exception workflow, request and ANIF notice.
- Source primaire
- CEMAC Regulation No. 02/24, Articles 36-38
Retain accountability for agents and outsourcing.
- Action d’implémentation
- Verify permissions, diligence providers, contract for security and record access, train agents, monitor performance and test retrieval.
- Preuves à conserver
- Due diligence, contract, training, monitoring and retrieval test.
- Source primaire
- CEMAC Regulation No. 04/18; COBAC Regulation R-2023/01 and applicable sector rules
08Targeted financial sanctionsUse the current CEMAC sanctions framework and controlled national procedures.3 éléments+
Screen applicable UN, regional and national designations.
- Action d’implémentation
- Screen customers, beneficial owners, controllers, representatives and transactions at onboarding, list updates and before relevant execution.
- Preuves à conserver
- List inventory, update logs, screening configuration and dispositions.
- Source primaire
- CEMAC Regulation No. 04/24; UN Security Council Consolidated List
Freeze covered property without delay or prior notice.
- Action d’implémentation
- Prevent prohibited movement or availability of covered funds and economic resources and escalate immediately under the competent national process.
- Preuves à conserver
- Freeze procedure, timestamps, legal basis and authority communication.
- Source primaire
- CEMAC Regulation No. 04/24
Report and govern matches, false positives and release.
- Action d’implémentation
- Make required reports within the applicable 24-hour and quarterly periods, file an STR where required, and release only on documented lawful authority.
- Preuves à conserver
- Reports, ANIF receipt, match rationale, authority instruction and reconciliation.
- Source primaire
- CEMAC Regulation No. 04/24
09Records and regulator accessRecords must reconstruct the customer, ownership, transaction and decision.3 éléments+
Retain financial-institution CDD records for at least 10 years.
- Action d’implémentation
- Retain identification and relationship records for at least 10 years after account closure or relationship end, subject to longer legal holds.
- Preuves à conserver
- Schedule, configuration, archive sample and legal-hold log.
- Source primaire
- CEMAC Regulation No. 02/24, Article 39
Retain transaction records for at least 10 years.
- Action d’implémentation
- Preserve transaction, accounting, correspondence and special-examination records for at least 10 years after the transaction.
- Preuves à conserver
- Transaction reconstruction, storage control and retrieval test.
- Source primaire
- CEMAC Regulation No. 02/24, Articles 39-40 and 64
Respond securely to competent-authority requests.
- Action d’implémentation
- Authenticate requests, protect STR confidentiality, produce reproducibly and log scope, timing and receipt.
- Preuves à conserver
- Request, approval, production index and acknowledgement.
- Source primaire
- CEMAC Regulation No. 02/24, Articles 40 and 97; Decree No. 0441/PR/MEP, Articles 31-33
10Privacy, biometrics, and transfersGabon's amended personal-data law applies alongside AML secrecy and retention duties.3 éléments+
Document a lawful, necessary and transparent basis for identity processing.
- Action d’implémentation
- Map purposes, data, notices, rights, recipients, security and retention; obtain APDPVP declarations or authorisations where the current law requires them.
- Preuves à conserver
- Data inventory, legal-basis assessment, notices and authority record.
- Source primaire
- Law No. 025/2023 amending Law No. 001/2011
Apply enhanced safeguards to biometric and sensitive data.
- Action d’implémentation
- Minimise collection, restrict access, test security and document the applicable express-consent, public-interest or other statutory basis before biometric or sensitive-data use.
- Preuves à conserver
- Impact assessment, consent or legal basis, security tests and approval.
- Source primaire
- Law No. 025/2023, including sensitive-data provisions
Control processors, incidents and cross-border transfers.
- Action d’implémentation
- Bind processors, maintain confidentiality and security, and obtain current APDPVP instructions before configuring international transfers or incident notices; do not invent a portal or deadline.
- Preuves à conserver
- Processor contract, transfer assessment, incident procedure and authority guidance.
- Source primaire
- Law No. 025/2023
11Practical evidence packsMaintain concise packs that reproduce decisions and support supervisory access.2 éléments+
Maintain a reconstructable onboarding pack.
- Action d’implémentation
- Bundle identity, KYB, beneficial ownership, screening, risk, approvals, privacy records and exceptions under stable identifiers.
- Preuves à conserver
- Complete sampled onboarding pack.
- Source primaire
- Operational control supporting CEMAC Regulation No. 02/24
Maintain a reconstructable monitoring and reporting pack.
- Action d’implémentation
- Link transactions, alerts, analysis, approvals, reports and post-filing controls while protecting confidentiality.
- Preuves à conserver
- Complete sampled case pack and access log.
- Source primaire
- Operational control supporting CEMAC Regulation No. 02/24, Articles 105-110
Registre des sources primaires
12 sources utilisées pour cette checklist
Utilisez ces liens pour vérifier la législation, les lignes directrices, les procédures de déclaration et les statuts internationaux.
- CEMAC Regulation No. 02/24 - AML/CFT/CPF (English)GABAC · Primary regional regulation
- CEMAC Regulation No. 04/24 - targeted financial sanctionsGABAC · Primary regional regulation
- Decree No. 0441/PR/MEP of 25 November 2024 on ANIFOfficial Gazette of Gabon · Primary national decree
- ANIF Gabon publications and reporting materialsANIF Gabon · Official FIU guidance
- ANIF Gabon suspicious-transaction report formANIF Gabon · Official FIU form
- Gabon second enhanced follow-up report - March 2026GABAC · Authoritative country assessment
- Gabon mutual evaluation - July 2023GABAC · Authoritative country assessment
- COBAC regulations and supervisory materialsBEAC / COBAC · Official banking-supervisor materials
- Law No. 025/2023 amending the personal-data protection lawOfficial Gazette of Gabon · Primary national legislation
- OHADA commercial companies and RCCM frameworkOHADA · Official company-law materials
- FATF high-risk and monitored jurisdictionsFATF · Authoritative current status
- United Nations Security Council consolidated sanctions listUnited Nations · Authoritative sanctions list
Réponses directes
Questions KYC, KYB et AML pour Gabon
Who receives suspicious transaction reports?+
Gabon's Agence Nationale d'Investigation Financiere (ANIF). Confirm and use ANIF's current prescribed filing route and authorised correspondent arrangements.
When is an STR filed?+
Forthwith when the reporting entity knows, suspects or has good reason to suspect covered criminal proceeds or ML/TF/PF, including attempts. Telephone or electronic reports require written confirmation within 48 hours.
Is there an objective cash report?+
Yes. Article 18 covers cash transactions of CFA 5,000,000 or more, single or apparently linked, subject to its express exceptions and continued enhanced scrutiny.
How is beneficial ownership determined?+
CDD follows ultimate controlling interest, control by other means and principal-manager fallback under Article 33. Register disclosure has a separate more-than-25% fallback under Article 77.
How long are financial-institution AML records retained?+
At least 10 years for customer records after closure or relationship end and for transaction records after the transaction under Article 39.
Is Gabon on a FATF public list?+
Gabon was not named on FATF's high-risk or increased-monitoring lists current at 19 June 2026. It remains in GABAC enhanced follow-up, with a second follow-up published in March 2026.
Does personal-data law apply?+
Yes. Law No. 025/2023 amended Gabon's personal-data framework and names the APDPVP. Confirm current declarations, authorisations, transfer mechanics and incident procedures before production use.
Can a financial or payment product launch without approval?+
No. Classify the product under current CEMAC, COBAC, BEAC, COSUMAF, CIMA and national rules and obtain every required approval before launch.
Méthode de recherche et de revue
VOVE ID Compliance Research cartographie le périmètre réglementaire, traduit les obligations en contrôles opérationnels, relie les affirmations importantes aux sources et date chaque revue.
General regulatory information, not legal advice or a licence determination. Reviewed as applicable on 26 August 2026. Confirm reporting-entity status, sector rules, current ANIF filing specifications, beneficial-owner register access and filing, national sanctions procedures, APDPVP formalities, product permissions and later instruments with the competent authority and qualified Gabonese counsel before launch.