Kuwait -- AML/CFT Compliance Regulatory Overview

Kuwait has adopted a cautious and generally restrictive approach to virtual assets and cryptocurrency activities for regulated entities. While there isn't a specific, dedicated regulatory framework for licensing and overseeing Virtual Asset Service Providers (VASPs) that lays out bespoke AML/KYC requirements, Kuwait possesses a robust general Anti-Money Laundering and Combatting the Financing of Terrorism (AML/CFT) framework that would apply to any entity falling under its scope, including potentially VASPs if they were to become regulated or operate in the jurisdiction.

It's important to note the current regulatory stance:

• Central Bank of Kuwait (CBK) Stance: In 2018, the CBK issued a circular (CBK Circular 2/2018) prohibiting banks and other financial institutions under its supervision from dealing in cryptocurrencies, providing services related to them, or allowing their customers to use credit cards for crypto purchases. This effectively restricts regulated financial entities from engaging with virtual assets. As such, there is currently no licensing regime for VASPs in Kuwait, meaning there are no specific AML/KYC requirements tailored for licensed VASPs.

However, any entity operating in the virtual asset space, even if unregulated, could still be subject to Kuwait's general AML/CFT laws, especially if involved in illicit activities. Should Kuwait move to regulate VASPs in the future, these general AML/CFT requirements, aligned with FATF standards, would form the foundation.

Below are the general AML/CFT requirements based on Kuwaiti legislation that would apply to any relevant entity, including potential future regulated VASPs:

AML/CFT Legislation in Kuwait

The primary legislation governing AML/CFT in Kuwait includes:

1. Law No. 106 of 2013 regarding Anti-Money Laundering and Combating the Financing of Terrorism.
2. Law No. 37 of 2020 amending Law No. 106 of 2013.
3. Executive Regulations and Ministerial Decrees issued to implement these laws.

These laws are designed to align Kuwait with international standards set by the Financial Action Task Force (FATF). They impose obligations on financial institutions and designated non-financial businesses and professions (DNFBPs).

Customer Due Diligence (CDD) Requirements

Under Kuwaiti AML/CFT laws, obliged entities (which would include VASPs if regulated) are required to perform comprehensive CDD. Key elements include:

1. Identification and Verification:
   • For Individuals: Obtaining and verifying the identity of the customer and any beneficial owners using reliable, independent source documents (e.g., Civil ID, passport).
   • For Legal Persons/Arrangements: Obtaining and verifying legal name, form, proof of incorporation, powers that regulate and bind the legal person, and the identity of beneficial owners and persons exercising control over the entity.
2. Beneficial Ownership: Identifying and verifying the identity of the natural persons who ultimately own or control the customer, and those on whose behalf a transaction is being conducted.
3. Purpose and Nature of the Business Relationship: Understanding the purpose and intended nature of the business relationship or occasional transaction.
4. Ongoing Monitoring: Conducting ongoing due diligence on the business relationship, scrutinizing transactions undertaken throughout the course of that relationship to ensure that they are consistent with the obliged entity's knowledge of the customer, their business, and risk profile.
5. Enhanced Due Diligence (EDD): Applying EDD measures for high-risk situations, such as transactions with politically exposed persons (PEPs), cross-border correspondent relationships, or transactions involving high-risk countries or activities.
6. Simplified Due Diligence (SDD): Permitted in low-risk situations, provided that there is a reasonable basis for concluding that the risk is low and subject to adequate monitoring.

Suspicious Transaction Reporting (STR) Obligations

Obliged entities are required to report suspicious transactions to the Kuwait Financial Intelligence Unit (KwFIU).

• Reporting Threshold: The obligation to report is based on suspicion, not a specific monetary threshold. Any transaction (or attempted transaction), regardless of amount, that an obliged entity suspects may be related to money laundering or terrorism financing must be reported.
• No Tipping-Off: Obliged entities, their directors, officers, and employees are strictly prohibited from disclosing to the customer or any third party that an STR has been or will be filed.
• Protection for Reporters: Individuals and entities reporting in good faith are protected from criminal and civil liability.

Record-Keeping Obligations

Obliged entities must maintain adequate records for a specified period to assist in investigations and analysis.

• Duration: Records of transactions, customer identification data, and documentation related to CDD and STRs must generally be kept for a period of at least five (5) years after the business relationship has ended or after the date of the occasional transaction.
• Types of Records: This includes copies of identification documents, account files, business correspondence, and records of transactions sufficient to reconstruct individual transactions.

Oversight Authority

The primary authorities responsible for AML/CFT compliance in Kuwait are:

1. Kuwait Financial Intelligence Unit (KwFIU):

   • Role: The KwFIU is the central national agency responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs) to relevant law enforcement authorities. It is the core institution for AML/CFT enforcement and coordination.
   • URL: https://www.kwfiu.gov.kw/

2. Central Bank of Kuwait (CBK):

   • Role: The CBK is responsible for supervising and regulating banks and other financial institutions, including issuing AML/CFT regulations and conducting inspections to ensure compliance within its supervised sector. It also sets the general policy regarding financial innovations like cryptocurrencies.
   • URL: https://www.cbk.gov.kw/

3. Capital Markets Authority (CMA):

   • Role: The CMA supervises and regulates the securities market, including brokerage firms, investment companies, and other entities involved in capital market activities. If virtual assets were to be classified as securities, they would fall under CMA's purview.
   • URL: https://www.cma.gov.kw/

4. Ministry of Commerce and Industry (MOCI):

   • Role: The MOCI is responsible for business registration and oversight of commercial activities, including designated non-financial businesses and professions (DNFBPs).

In summary: While Kuwait has a strong general AML/CFT legal framework, the absence of a specific licensing regime for VASPs means there are no tailored AML/KYC requirements for such entities. The existing regulatory environment, particularly the CBK's stance, has largely restricted regulated financial institutions from engaging with virtual assets. Any future move to regulate VASPs would likely see the application of the existing general AML/CFT laws, adapted to the specific risks posed by virtual assets, in line with FATF recommendations.