Quick Answer
Anti-money laundering compliance in Kenya is governed by the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA). Businesses that fall within the definition of reporting institutions must identify their customers, understand and monitor business relationships, keep records and report suspicious transactions to the relevant authorities. The scope now reaches well beyond banks.
Key Takeaways
  • POCAMLA requires reporting institutions to identify customers, understand the nature of business relationships, monitor transactions, retain records and report suspicious transactions where necessary.
  • The reporting obligation extends past banks to microfinance institutions, insurance companies, SACCOs, accountants and auditors, real estate agencies, motor vehicle dealers, foreign exchange dealers, money remittance businesses, investment advisers, casinos and gaming operators, and dealers in high-value goods.
  • Customer due diligence involves verifying customer identity, confirming beneficial ownership, understanding the purpose of the relationship, assessing customer risk and monitoring transactions over time, with enhanced due diligence for higher-risk customers or complex transactions.
  • Businesses must keep records covering customer identification, transaction history, risk assessments, internal approvals, compliance reviews, staff training and suspicious transaction assessments.
  • Potentially suspicious activity includes unusual cash transactions, complex ownership structures with no clear commercial purpose, transactions inconsistent with customer profiles, attempts to avoid reporting thresholds, unexplained movement of funds and multiple linked transactions designed to conceal activity.
  • An AML risk assessment should consider customer types, products and services, geographic exposure, delivery channels and transaction volumes, because failure to comply exposes a business to regulatory investigations, financial penalties, reputational damage and possible criminal liability.

Anti-money laundering compliance in Kenya is a legal obligation for many businesses under the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA). Organisations that fall within the definition of reporting institutions must identify customers, monitor transactions, maintain records, and report suspicious activities to the relevant authorities.

As Kenya strengthens its financial integrity framework and aligns with international anti-money laundering (AML) standards, businesses are expected to implement stronger compliance systems. While banks have traditionally been associated with AML obligations, the scope of anti-money laundering compliance in Kenya now extends to accountants, auditors, estate agents, motor vehicle dealers, casinos, lawyers in specified circumstances, financial service providers, and other designated reporting institutions.

Failure to comply with AML obligations can expose businesses to regulatory investigations, financial penalties, reputational damage, and possible criminal liability. More importantly, weak AML controls increase the risk of criminals using legitimate businesses to disguise proceeds of crime or finance unlawful activities.

Every business that falls under POCAMLA should understand its legal responsibilities and establish policies that support compliance before regulators identify weaknesses.

Adamjee Auditors assists businesses with AML risk assessments, governance reviews, compliance frameworks, internal controls, and regulatory advisory services.

For professional guidance, explore our Business Advisory Services:

business-advisory-services

Anti-Money Laundering Compliance in Kenya: What Is POCAMLA?

Anti-money laundering compliance in Kenya is primarily governed by the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA). The law establishes obligations for reporting institutions to prevent money laundering and related financial crimes.

POCAMLA requires certain businesses to identify customers, understand the nature of business relationships, monitor transactions, retain records, and report suspicious transactions where necessary.

The legislation forms part of Kenya’s wider commitment to combating:

  • Money laundering
  • Terrorism financing
  • Organised crime
  • Corruption-related financial offences
  • Illicit financial flows

Compliance is not limited to financial institutions. Many non-financial businesses now have reporting obligations depending on their activities.

Anti-Money Laundering Compliance in Kenya: Who Must Comply?

Anti-money laundering compliance in Kenya applies to reporting institutions identified under POCAMLA and related regulations. Businesses should determine whether their activities place them within the reporting framework.

Examples may include:

  • Banks
  • Microfinance institutions
  • Insurance companies
  • SACCOs
  • Accountants and auditors
  • Real estate agencies
  • Motor vehicle dealers
  • Foreign exchange dealers
  • Money remittance businesses
  • Investment advisers
  • Casinos and gaming operators
  • Dealers in high-value goods

Even businesses that are not formally classified as reporting institutions should maintain strong governance and customer due diligence practices to reduce financial crime risks.

Anti-Money Laundering Compliance in Kenya: Customer Due Diligence

Customer due diligence (CDD) is one of the most important obligations under anti-money laundering compliance in Kenya. Businesses must know who they are dealing with before establishing or continuing business relationships.

Customer due diligence generally involves:

  • Verifying customer identity
  • Confirming beneficial ownership
  • Understanding the purpose of the relationship
  • Assessing customer risk
  • Monitoring transactions over time

Enhanced due diligence may be required for higher-risk customers or complex transactions.

Businesses should avoid treating customer verification as a one-time exercise. Customer information should be reviewed periodically to ensure it remains accurate.

Anti-Money Laundering Compliance in Kenya: Record-Keeping Requirements

Accurate record keeping supports anti-money laundering compliance in Kenya by providing evidence that customer verification, transaction monitoring, and compliance procedures have been properly followed.

Businesses should maintain records relating to:

  • Customer identification
  • Transaction history
  • Risk assessments
  • Internal approvals
  • Compliance reviews
  • Staff training
  • Suspicious transaction assessments

Well-organised records support regulatory inspections and internal audits.

Businesses seeking stronger financial controls can improve record management through our Bookkeeping Services:

bookkeeping-services

Suspicious Transaction Reporting

Anti-money laundering compliance in Kenya requires reporting institutions to recognise and report suspicious transactions in accordance with legal requirements.

Examples of potentially suspicious activities include:

  • Unusual cash transactions
  • Complex ownership structures with no clear commercial purpose
  • Transactions inconsistent with customer profiles
  • Attempts to avoid reporting thresholds
  • Unexplained movement of funds
  • Multiple linked transactions designed to conceal activity

Employees should receive training to recognise warning signs and understand internal reporting procedures.

Risk Assessments and Internal Controls

A risk-based approach is central to anti-money laundering compliance in Kenya. Businesses should assess the likelihood of money laundering risks and implement controls that reflect their exposure.

An AML risk assessment should consider:

  • Customer types
  • Products and services
  • Geographic exposure
  • Delivery channels
  • Transaction volumes

Internal controls may include:

  • Written AML policies
  • Independent compliance reviews
  • Staff training
  • Approval procedures
  • Ongoing monitoring
  • Internal reporting mechanisms

Adamjee Auditors assists organisations in strengthening governance through Audit & Assurance Services:

audit-assurance-services

Employee Training and Governance

Effective AML programmes depend on knowledgeable employees and strong management oversight.

Businesses should provide regular training covering:

  • Customer due diligence
  • Suspicious transaction indicators
  • Record-keeping obligations
  • Internal reporting procedures
  • Regulatory developments

Senior management should regularly review AML controls and ensure compliance responsibilities are clearly assigned.

Anti-Money Laundering Compliance in Kenya and Tax Governance

Although AML compliance and tax compliance are separate obligations, strong financial governance supports both.

Businesses should maintain:

  • Reliable accounting records
  • Proper transaction documentation
  • Transparent financial reporting
  • Effective internal controls

Good governance reduces regulatory risks and improves overall compliance.

Businesses can strengthen their compliance framework through our Tax Compliance Advisory Services:

tax-compliance-advisory

The Role of Independent Compliance Reviews

Independent reviews help organisations evaluate whether their AML programmes remain effective and compliant with changing regulatory expectations.

An external review may examine:

  • Customer due diligence procedures
  • Risk assessments
  • Internal controls
  • Record-keeping systems
  • Staff awareness
  • Governance arrangements

Independent assessments provide management with practical recommendations for strengthening compliance.

Strategic governance support is also available through our CFO Advisory Services:

cfo-advisory-services

Adamjee Advisory Insights (2026)

AML compliance is no longer viewed as a responsibility for banks alone. Increasing regulatory expectations mean that accountants, professional firms, real estate businesses, dealers in high-value goods, and other reporting institutions should periodically review their compliance frameworks.

Businesses should adopt a proactive approach by conducting regular AML risk assessments, updating internal policies, providing employee training, and reviewing customer due diligence procedures. A well-designed AML programme protects the business from financial crime risks while strengthening regulatory compliance and corporate governance.

Anti-money laundering compliance in Kenya is an essential part of modern corporate governance. Businesses that understand their obligations under POCAMLA, maintain strong customer due diligence procedures, and implement effective internal controls are better positioned to comply with regulatory expectations and reduce financial crime risks.

Whether your organisation is establishing an AML framework for the first time or reviewing an existing compliance programme, early action reduces regulatory exposure and strengthens business resilience.

Adamjee Auditors supports organisations with practical advisory services, governance reviews, compliance assessments, and financial reporting solutions tailored to Kenya’s evolving regulatory environment.

Gain Clarity and Confidence in Your Finances

Navigate the complexities of compliance, tax, audit, and financial management with a trusted partner. Adamjee Auditors, a member of Santa Fe Associates International (SFAI), delivers professional audit, tax, accounting, and advisory services that help businesses remain compliant and strengthen corporate governance.

Whether you need assistance with AML compliance, POCAMLA obligations, internal controls, tax compliance, bookkeeping, audit, or business advisory services, our experienced professionals are ready to help.

Nairobi Office

1st Floor, Le’Mac Building
Church Road, off Waiyaki Way
Westlands, Nairobi

Phone: +254 703 899 606 / +254 717 908 241
Email: info@adamjeeauditors.com

Mombasa Office

Suite 401, Motorwalla Building
Jomo Kenyatta Road
Mombasa

Phone: +254 703 899 606 / +254 717 908 241
Email: info@adamjeeauditors.com

Website: https://adamjeeauditors.com/

Frequently Asked Questions

My business is not a bank — do AML rules still apply to me?
Very likely. The scope of anti-money laundering compliance in Kenya now extends to accountants, auditors, estate agents, motor vehicle dealers, casinos, lawyers in specified circumstances, financial service providers and other designated reporting institutions. You should determine whether your activities place you within the POCAMLA reporting framework. Even businesses not formally classified as reporting institutions should maintain strong governance and customer due diligence practices.
What exactly does customer due diligence require me to do?
You must know who you are dealing with before establishing or continuing a business relationship. That means verifying customer identity, confirming beneficial ownership, understanding the purpose of the relationship, assessing customer risk and monitoring transactions over time. Enhanced due diligence may be required for higher-risk customers or complex transactions.
Is customer verification a one-off exercise when we take a client on?
No. The article warns specifically against treating customer verification as a one-time exercise. Customer information should be reviewed periodically to ensure it remains accurate. Ongoing monitoring of transactions is part of the due diligence obligation.
What records do we need to keep to show we are compliant?
Keep records relating to customer identification, transaction history, risk assessments, internal approvals, compliance reviews, staff training and suspicious transaction assessments. These provide evidence that customer verification, transaction monitoring and compliance procedures have been properly followed. Well-organised records also support regulatory inspections and internal audits.
What happens if we get AML compliance wrong?
Failure to comply can expose the business to regulatory investigations, financial penalties, reputational damage and possible criminal liability. Weak AML controls also increase the risk of criminals using a legitimate business to disguise proceeds of crime or finance unlawful activities. Acting before regulators identify weaknesses is the safer position.
Is it worth having someone outside the business review our AML programme?
Independent reviews help you judge whether your AML programme is still effective and in line with changing regulatory expectations. An external review may examine customer due diligence procedures, risk assessments, internal controls, record-keeping systems, staff awareness and governance arrangements. It gives management practical recommendations for strengthening compliance.