Table of Contents
Consider a customer whose identity has been verified and whose name produces no sanctions match. Weeks later, their transactions begin to look different from the business described at onboarding. The compliance question is no longer just who the customer is, but whether their activity still makes sense.
This is where AML compliance in Egypt moves from documentation to decision-making. The Central Bank of Egypt’s supervisory framework examines transaction monitoring, screening, customer risk ratings and governance not just the presence of written policies.
Understanding the framework therefore requires three things: knowing the applicable laws, identifying the relevant authority and translating requirements into controls that work throughout the customer relationship.
Understanding AML Regulations in Egypt
The principal anti-money laundering law in Egypt is Law No. 80 of 2002, as amended, which forms the core legal framework and is commonly treated as Egypt’s AML law for compliance purposes. The Financial Regulatory Authority’s legislation register includes its amendment history, including Law No. 154 of 2022. Institutions should read the amended legislation alongside its Executive Regulations and the controls applicable to their activities.
Related legislation has a different purpose. Law No. 8 of 2015 governs the listing of terrorist entities and individuals; it is not a replacement for the AML law. It updates AML measures only in the terrorist-listing context and does not replace the main AML statute. Understanding this distinction helps separate general AML obligations from requirements associated with terrorist designations.
Sector-specific rules add another layer. For non-bank financial institutions, FRA Decision No. 161 of 2024 updated AML/CFT supervisory controls. The FRA states that these operate alongside the AML law and its implementing regulations. A compliance programme should therefore reflect both national legislation and the rules governing the institution’s particular activity.
The framework also extends beyond banking. Egypt’s financial intelligence unit receives suspicious-transaction information from financial institutions and covered non-financial businesses and professions. However, the applicable procedures depend on the institution and activity concerned. CBE Egypt’s AML laws broadly align with recommendations of the financial action task force, and its MENAFATF membership supports international cooperation across the region.
Who Regulates AML Compliance in Egypt?
Three authorities are particularly important for understanding supervisory and reporting responsibilities, and these are the main regulatory authorities responsible for supervision, reporting, and enforcement.
Authority | Role in the AML framework |
|---|---|
Central Bank of Egypt (CBE) | Supervises AML/CFT compliance among banks and other entities under its oversight, using risk-based assessments of institutions and their controls. |
Financial Regulatory Authority (FRA) | Oversees compliance within the non-bank financial activities it supervises. Its framework includes AML/CFT controls and applicable customer due diligence procedures. |
Egyptian Money Laundering and Terrorist Financing Combating Unit (EMLCU) | Egypt’s financial intelligence unit. It receives and analyses suspicious-transaction information, helps fight money laundering and terrorism, coordinates with other relevant authorities, and establishes CDD procedures and other AML/CFT controls. |
Egypt’s supervisory model has also been assessed against international standards set by the Financial Action Task Force.
Sector supervision and financial intelligence are different functions. For implementation, institutions should map their licensed activities to the relevant CBE AML regulations or FRA requirements, while also identifying the EMLCU procedures they must follow.
Key AML Compliance Requirements in Egypt
Risk assessment that influences control decisions
A risk based approach to AML compliance should help determine where scrutiny is needed, rather than simply assign a label. The CBE’s approach considers both an institution’s underlying exposure and the effectiveness of its controls when assessing the risks that remain.
In practice, structure the assessment around customers, products, delivery channels and geographical exposure. For example, an unexplained change in a customer’s transaction pattern should prompt consideration of whether the existing risk assessment remains appropriate, especially where customers or transactions are linked to high risk jurisdictions.
Customer due diligence beyond identity verification
Customer due diligence CDD in Egypt includes identifying customers and beneficial owners, developing customer risk profiles, and maintaining information throughout the relationship. The CBE’s published guidance also connects CDD with ongoing transaction monitoring, and Egyptian anti money laundering requirements make this part of broader AML compliance obligations across the financial sector.
For a corporate customer, focus on the natural persons who ultimately own or control the business, not only the company name appearing on registration documents. Institutions should determine whether customers are natural persons or legal persons and verify customer identities through customer identification supported by official documentation. Keep ownership information useful to investigators by recording how it was established and what uncertainties remain.
A practical review should also consider whether the customer’s stated purpose and expected activity still explain the relationship, with checks refreshed at onboarding and when information changes during the business relationship. Collecting information has limited value unless it informs subsequent decisions.
Sanctions screening and PEP risk assessment
Egypt’s framework includes domestic terrorist-listing legislation and mechanisms for implementing targeted financial sanctions under relevant UN Security Council resolutions.
Screening procedures should explain how potential matches are reviewed, who determines the appropriate response and how required actions are documented, while also aiming to reduce false positives in AML screening so genuine risks can be escalated efficiently.
Politically exposed person screening serves a different purpose. FATF guidance describes PEP measures as preventive: political exposure does not establish criminal involvement. Apply the relevant additional due diligence measures without treating a PEP match as equivalent to a sanctions designation.
Transaction monitoring that uses customer context
For banks, the CBE explicitly examines transaction-monitoring systems covering bank products, alongside screening systems and customer risk-rating mechanisms.
Consider a hypothetical trading company that suddenly receives funds from numerous unrelated individuals and quickly transfers them elsewhere. Reviewing each payment separately may provide an incomplete picture. A useful investigation would examine the combined pattern, the counterparties and the explanation against the company’s expected business activity.
The objective is not to treat every unusual transaction as criminal. It is to identify activity requiring explanation and preserve the reasoning behind the eventual decision.
Suspicious transaction reporting and confidentiality
Suspicious transaction reporting in Egypt involves submitting relevant information to EMLCU, and institutions must report suspicious transactions as a core part of anti money laundering AML controls, which analyses reports and coordinates with competent authorities. Its remit includes suspected money laundering, terrorist financing and attempted activity.
An effective internal workflow should connect detection, review, escalation and reporting. In practice, suspicious transaction reports are the formal output of that process, and institutions should also report transactions when escalation criteria are met. Reports should clearly explain the grounds for suspicion, the transactions involved and the supporting information, not merely reproduce an automated alert.
Confidentiality is essential. The CBE’s guidance explains that informing a customer about suspicious-transaction reporting or related suspicion can constitute prohibited tipping off. Egypt’s AML law includes penalties for failing to report, including possible imprisonment of up to three years.
Records, governance and control testing
The CBE’s published guidance specifies a minimum five-year retention period for relevant bank records, with longer retention where another applicable policy or legal requirement prescribes it. Institutions should confirm the applicable retention rules and triggers for each record category.
Beyond retention, make records retrievable. An investigator or reviewer should be able to reconstruct the information considered, the decision reached and the approvals obtained.
Governance also requires follow-through. The CBE reviews bank compliance reports, Audit Committee records and corrective actions. Use those reviews to address recurring weaknesses, and give staff role-specific training on recognising concerns and escalating them appropriately.
A Recent Egypt Update: Verification and Screening in Non-Bank Finance
On 14 September 2026, the FRA announced a two-month implementation window for covered consumer and micro, small and medium enterprise finance providers to apply OTP verification requirements under Decision No. 133 of 2026. The announcement covers verification when financing agreements are executed and financing is used, alongside maintaining verification records, including controls for higher-risk cash transactions where the activity is cash-intensive, and aligns with broader best practices in AML compliance for digital onboarding and screening. It also reiterates customer-data checks and AML and asset-freeze screening requirements for the relevant entities, and those checks may extend to source verification against relevant foreign exchange records.
For affected providers, a useful implementation approach is to track authentication, screening and record-keeping as distinct responsibilities within the same process. A successful verification step should not be treated as the conclusion of the institution’s wider risk assessment.
Turning Egypt’s AML Requirements into a Working Programme
A practical starting point is to map each applicable requirement to a control owner, a documented procedure and evidence of operation as part of an AML compliance program built to meet local and international laws and align with relevant international laws. That makes it easier to identify a missing screening step, an unresolved alert or a reporting decision without sufficient supporting information.
A working programme also helps protect investors’ reputations and their access to the financial system. Technology should support those responsibilities rather than obscure them. Institutions evaluating vendors can benchmark features against top AML solution providers in 2026.
ZIGRAM’s The Complete AML System brings together customer risk rating, name screening, watchlist screening and transaction monitoring within a connected compliance workflow. These capabilities can support institutions implementing the operational elements of their AML programmes.
The aim is a programme that can explain its decisions: what risk was identified, how it was assessed and what action followed. Non-compliance can trigger financial penalties, administrative fines, license loss, and for serious money-laundering offences, imprisonment of up to seven years.
Book a slot with ZIGRAM to discuss your screening, monitoring and customer risk requirements.
