Know your customer in Bangladesh rules require banks, finance companies, insurers, capital market intermediaries, payment providers and many other businesses to identify their customers, understand who ultimately owns them and monitor their transactions. The Money Laundering Prevention Act 2012, the Anti-Terrorism Act 2009 and instructions of the Bangladesh Financial Intelligence Unit (BFIU) set the requirements. Weak KYC exposes institutions to fines, licence restrictions and reputational damage.

Why know your customer in Bangladesh matters

Money laundering, terrorist financing, fraud and illicit capital flight harm the economy and the reputation of the financial system. International bodies such as the Financial Action Task Force and the Asia/Pacific Group on Money Laundering assess Bangladesh's framework, and correspondent banks abroad scrutinise how local institutions manage risk. Know your customer in Bangladesh is the frontline control: if an institution does not know who its customers are and what they do, it cannot detect suspicious activity.

Our compliance and risk practice advises reporting organisations on AML and KYC programmes, inspections and enforcement.

Who must comply

The list of reporting organisations is set by the Act and expanded by BFIU, so businesses should check whether they fall within it.

Core customer due diligence requirements

• Identification and verification. Collect and verify identity documents, such as national ID, passport or birth registration, and for entities, incorporation and constitutional documents.
• Beneficial ownership. Identify the natural persons who ultimately own or control a customer that is a legal person or arrangement, using thresholds and guidance set by BFIU.
• Purpose and nature. Understand the intended purpose and nature of the relationship and expected transaction patterns.
• Risk assessment. Assign a risk rating considering customer type, geography, products, channels and transactions.
• Ongoing monitoring. Monitor transactions against the customer's profile and update KYC information periodically.

e-KYC and digital onboarding

BFIU's e-KYC guidelines allow financial institutions to onboard customers digitally by verifying national ID data with the Election Commission's database, capturing photographs and, for some products, biometric verification. Simplified e-KYC is available for low-risk accounts with transaction limits, while regular e-KYC applies to higher limits. Digital onboarding has expanded financial inclusion through mobile financial services and digital banks, but it requires strong technology controls to prevent identity fraud. Know your customer in Bangladesh increasingly depends on secure digital processes.

Enhanced due diligence

Know your customer in Bangladesh is risk-based. Higher-risk customers require enhanced due diligence, including senior management approval, verification of source of funds and wealth, and closer monitoring. Politically exposed persons, including senior public officials and their family members and close associates, attract enhanced measures, as do customers from high-risk jurisdictions, complex ownership structures and cash-intensive businesses. Correspondent banking relationships also require enhanced checks.

Sanctions screening

Screening complements know your customer in Bangladesh. Institutions must screen customers and transactions against United Nations Security Council sanctions lists and domestic lists of designated individuals and entities under the Anti-Terrorism Act 2009, and many also screen against other international lists required by their correspondent banks. Matches must be escalated, and assets frozen where required by law. Screening is an essential part of know your customer in Bangladesh for institutions handling cross-border transactions.

Suspicious transaction reporting

Reporting is the endpoint of know your customer in Bangladesh. When an institution suspects that a transaction involves proceeds of crime or terrorist financing, it must file a suspicious transaction or activity report with BFIU through the goAML system. Cash transaction reports above set thresholds are also required. Staff must not tip off the customer that a report has been made. Institutions should have clear escalation procedures, a designated chief anti-money laundering compliance officer and training for frontline staff.

Penalties

The Money Laundering Prevention Act 2012 allows BFIU and regulators to impose fines on reporting organisations that fail to comply with KYC and reporting obligations, and repeated failures can lead to restrictions on business or licence action by the sector regulator. Individuals involved in money laundering face criminal penalties. Regulators have increased inspections and enforcement in recent years.

KYC for corporate customers

Onboarding companies, partnerships, trusts and NGOs is more complex than onboarding individuals. Know your customer in Bangladesh for legal persons usually requires certificates of incorporation, memorandum and articles, trade licence, TIN and BIN, board resolutions authorising the relationship, lists of directors and shareholders, identity documents of signatories and information on beneficial owners. For foreign companies, documents may need notarisation and apostille or legalisation. Layered ownership through offshore entities requires tracing up the chain to identify the natural persons who ultimately control the customer.

Record keeping

Reporting organisations must keep customer identification records, account files and transaction records for the period required by law, typically several years after the end of the relationship or the transaction. Records must be retrievable quickly when BFIU or law enforcement requests them. Digital records are acceptable if they are complete, secure and auditable. Good record keeping is often the difference between passing and failing a KYC inspection.

Periodic review and updating

KYC is not a one-time exercise. Customer information should be reviewed periodically, with higher-risk customers reviewed more frequently, and whenever there is a trigger event, such as unusual transactions, a change in ownership or adverse media. Dormant accounts reactivated after long periods also require fresh checks. A disciplined review cycle keeps know your customer in Bangladesh effective over the life of each relationship.

KYC in fintech and mobile financial services

Mobile financial services and fintech platforms serve tens of millions of customers, many onboarded through agents or apps. Know your customer in Bangladesh in this sector relies on e-KYC, agent training, transaction limits and automated monitoring. Fraud risks include SIM swap fraud, account takeover and mule accounts used to move illicit funds. Providers should combine strong onboarding with behavioural analytics and fast response to suspicious patterns. Regulators expect fintech partners of banks to meet the same standards as the licensed institution.

Real estate, jewellery and other businesses

Designated non-financial businesses, such as real estate developers and dealers in precious metals and stones, face KYC obligations for certain transactions, especially those involving large cash payments. These sectors are considered vulnerable to money laundering because they allow large values to be stored or moved. Businesses should identify buyers and sellers, record the source of payments, avoid large cash transactions where possible and report suspicious activity to BFIU.

Building an effective KYC programme

An effective programme for know your customer in Bangladesh combines governance, policies, people and technology. The board should approve the AML and KYC policy and receive regular reports. A senior compliance officer should have authority and resources. Policies should set out customer acceptance criteria, risk rating methodology, due diligence levels, screening, monitoring and reporting procedures. Staff training should be regular and tailored to roles. Technology should support identity verification, screening and transaction monitoring, with clear audit trails.

Independent audit of the programme, internal or external, helps identify gaps before regulators do. Findings should be tracked and fixed promptly, with progress reported to senior management and the board.

Common inspection findings

• Incomplete customer files or expired identity documents.
• Beneficial owners not identified for corporate customers.
• Risk ratings not documented or not updated.
• Weak monitoring of high-risk customers and PEPs.
• Delayed or missing suspicious transaction reports.
• Inadequate staff training records.

Addressing these issues proactively strengthens know your customer in Bangladesh and reduces enforcement risk.

Data protection and KYC

KYC requires collecting sensitive personal data. Institutions must protect this information against unauthorised access and use it only for legitimate purposes, consistent with Bangladesh's evolving data protection and cyber security laws and Bangladesh Bank ICT security guidelines. Balancing KYC obligations with privacy expectations is increasingly important as digital onboarding grows. A sound approach to know your customer in Bangladesh builds trust with customers as well as regulators.

Correspondent banks and international expectations

Bangladeshi banks rely on foreign correspondent banks for trade finance, remittances and foreign currency payments. Those correspondents assess the quality of know your customer in Bangladesh controls before maintaining relationships, often through questionnaires and on-site reviews. Weak controls can lead to de-risking, where foreign banks restrict or end relationships, raising costs for importers and exporters. Strong KYC therefore supports the wider economy, not only individual institutions.

Remittances and hundi

Informal money transfer systems, known locally as hundi, compete with formal remittance channels and are a significant money laundering and capital flight risk. Bangladesh Bank and the government have encouraged formal channels through incentives on inward remittances. Institutions handling remittances should know their customers and beneficiaries, monitor unusual patterns and report suspected hundi activity. Know your customer in Bangladesh is central to channelling remittances through the banking system.

Training frontline staff

Branch staff, relationship managers and agents are the first line of defence. They need practical training on identifying fake documents, recognising red flags, handling difficult customers and escalating concerns without tipping off. Short, regular sessions with real case examples work better than annual lectures. Training records should show who attended and what was covered, as inspectors routinely check them. Well-trained staff make know your customer in Bangladesh work in practice, not just on paper.

Frequently asked questions about know your customer in bangladesh

How we can help

We advise financial institutions, fintechs and designated businesses on know your customer in Bangladesh: AML and KYC policies, e-KYC implementation, beneficial ownership procedures, BFIU inspections, suspicious transaction reporting and enforcement responses. Learn more about our compliance and risk practice.

Primary sources: the Money Laundering Prevention Act 2012 and Anti-Terrorism Act 2009 on the Laws of Bangladesh portal; circulars and e-KYC guidelines of BFIU; banking regulation by Bangladesh Bank.

This article is general information about Bangladeshi AML and KYC regulation as of October 2026 and is not legal advice. BFIU instructions change frequently; confirm current requirements before acting.