KYC and KYB in Morocco: Complete Identity Verification Guide for Fintechs

What Are KYC and KYB?

KYC (Know Your Customer) and KYB (Know Your Business) are regulatory processes that require financial institutions to verify the identity of their clients — whether individuals or legal entities — before providing financial services.

In Morocco, these obligations are at the heart of the anti-money laundering and counter-terrorist financing (AML/CFT) framework, supervised by Bank Al-Maghrib. For any fintech, payment institution, or business offering financial services, mastering KYC/KYB is not optional — it is a legal requirement.

The Regulatory Framework in Morocco

Law 43-05 and Bank Al-Maghrib Directives

Morocco's legal framework rests on several pillars:

• Law 43-05 on combating money laundering, amended by Law 12-18, which defines the due diligence obligations of regulated entities.
• Bank Al-Maghrib circulars that specify implementation requirements for payment institutions and banks.
• ANRT (National Telecommunications Regulatory Authority) which oversees electronic identification.
• Law 09-08 on personal data protection, supervised by the CNDP.

Key Obligations

Every licensed payment institution in Morocco must:

1. Identify and verify the identity of each client before establishing a business relationship.
2. Assess the risk of each client using a risk-based approach.
3. Apply enhanced due diligence for high-risk clients (politically exposed persons, high-risk countries, unusual transactions).
4. Retain documents for at least 10 years after the end of the business relationship.
5. Report suspicious transactions to the UTRF (Financial Intelligence Processing Unit).

The KYC Process for Individuals

Verification Levels

KYC in Morocco generally follows a tiered approach, adapted to risk:

Level 1 — Simplified Verification

For accounts with limited features (low transaction limits):

• Capture of the CNIE (National Electronic Identity Card)
• Basic information verification (name, date of birth, CNIE number)
• Verified phone number

Level 2 — Standard Verification

For regular accounts:

• All Level 1 elements
• OCR verification and document authentication
• Proof of address (utility bill or residence certificate)
• Declaration of income source
• Biometric verification (selfie with liveness detection)

Level 3 — Enhanced Verification

For high-limit accounts or high-risk clients:

• All Level 2 elements
• In-person or video conference interview
• Additional documents (pay slips, tax notices)
• Thorough verification of source of funds
• Screening against international sanctions lists (OFAC, EU, UN)

Accepted Documents

The KYB Process for Businesses

KYB (Know Your Business) is more complex because it involves verifying the legal entity and its stakeholders.

Key KYB Steps

1. Legal Entity Verification

   • Trade register (Model J)
   • Company articles of incorporation
   • Business tax certificate and tax ID
   • CNSS registration certificate

2. Ultimate Beneficial Owner (UBO) Identification

   • Identification of any individual directly or indirectly holding more than 25% of capital or voting rights
   • Verification of the ownership chain in complex structures
   • Documentation of control structures

3. Director Verification

   • Full KYC on each director and authorized signatory
   • Verification of signing authority
   • PEP (Politically Exposed Persons) screening

4. Business Risk Assessment

   • Nature of business and sector
   • Geographic area of operations
   • Expected transaction volume
   • Exposure to money laundering risks

KYB Verification Flow

The KYB process can be summarized in four phases:

Phase 1: Collection — Gathering legal documents and identifying stakeholders.

Phase 2: Verification — Document authentication, official registry checks, beneficial owner screening.

Phase 3: Assessment — Risk scoring, determining the level of due diligence, approval or rejection.

Phase 4: Monitoring — Continuous surveillance, periodic information updates, alerts on changes.

KYC/KYB Challenges in Morocco

For Fintechs and Payment Institutions

The main challenges facing Moroccan players:

• Slow onboarding — Manual processes can take several days, leading to high abandonment rates.
• Cost of compliance — Compliance teams, tools, and processes represent a significant cost.
• Regulatory evolution — Requirements change regularly, requiring constant adaptation.
• Document verification — Detecting forged documents remains a major technical challenge.
• Beneficial owners — Identifying beneficial owners in complex structures is often difficult.

The Abandonment Rate

According to industry studies, up to 40% of potential customers abandon the onboarding process when it is too long or too complex. An optimized KYC process is therefore not just a compliance matter — it is a major business issue.

The ChariBaaS Solution: KYC/KYB via API

ChariBaaS offers a complete KYC/KYB solution accessible via API, designed for fintechs and businesses operating in Morocco.

KYC API Features

• Smart document capture — Advanced OCR to automatically extract information from CNIE, passport, or residence permit.
• Biometric verification — Facial comparison between selfie and document photo, with liveness detection to prevent fraud.
• Data validation — Cross-referencing information with official databases.
• Automated screening — Instant verification against sanctions lists (OFAC, EU, UN) and PEP lists.
• Risk scoring — Automatic risk score assignment based on multiple factors.

KYB API Features

• Business verification — Trade register validation and legal information checks.
• Ultimate Beneficial Owner (UBO) identification — Automatic detection and verification of the ownership chain.
• Director KYC — Integrated identity verification of directors and signatories.
• Continuous monitoring — Automatic alerts on status changes, director changes, or sanctions.

Technical Integration

Integration takes just a few lines of code:

# Initiate a KYC verification
curl -X POST https://api.baas.ma/v1/kyc/verify \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "individual",
    "document": {
      "type": "CNIE",
      "front_image": "base64_encoded_image",
      "back_image": "base64_encoded_image"
    },
    "selfie": {
      "image": "base64_encoded_image",
      "liveness_check": true
    }
  }'

# Initiate a KYB verification
curl -X POST https://api.baas.ma/v1/kyb/verify \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "business",
    "company": {
      "legal_name": "Example SARL",
      "rc_number": "123456",
      "ice": "001234567000089"
    },
    "beneficial_owners": [
      {
        "full_name": "Ahmed Bennani",
        "ownership_percentage": 60,
        "document_type": "CNIE",
        "document_number": "AB123456"
      }
    ]
  }'

Benefits of the API Approach

Best Practices for KYC/KYB in Morocco

1. Adopt a Risk-Based Approach

Do not apply the same level of verification to all clients. Adapting due diligence to the risk profile allows you to:

• Reduce friction for low-risk clients
• Focus resources on high-risk cases
• Stay compliant with Bank Al-Maghrib directives

2. Automate as Much as Possible

Automation via APIs enables you to:

• Reduce human errors
• Accelerate onboarding
• Ensure consistent rule application
• Generate complete audit trails

3. Implement Continuous Monitoring

Initial verification is not enough. You need to:

• Monitor transactions continuously
• Update client information periodically
• Re-screen clients against new sanctions lists
• Detect changes in risk profiles

4. Train Your Teams

Technology does not replace human expertise:

• Regularly train compliance teams
• Raise awareness among commercial teams about KYC/KYB obligations
• Establish clear procedures for complex cases

5. Document and Archive

Moroccan regulations require document retention for a minimum of 10 years:

• Implement a secure archiving system
• Ensure traceability of every decision
• Prepare files for Bank Al-Maghrib audits

The Future of KYC/KYB in Morocco

The identity verification landscape in Morocco is evolving rapidly:

• National digital identity — Morocco is developing a digital identity system that will facilitate remote verification.
• eKYC and video identification — Video verification solutions are gaining regulatory acceptance.
• Artificial intelligence — AI is improving document fraud detection and risk assessment.
• Regional interoperability — Harmonization initiatives across the MENA region are facilitating cross-border KYC.
• Open Banking — Data sharing between financial institutions will simplify cross-referencing verifications.

Conclusion

KYC and KYB are fundamental pillars of financial compliance in Morocco. For fintechs and payment institutions, an efficient identity verification process is both a regulatory obligation and a competitive advantage.

With a solution like ChariBaaS, businesses can integrate complete, compliant, and fast KYC/KYB via a simple API — transforming what used to be an onboarding bottleneck into a seamless experience for their customers.

Ready to integrate KYC/KYB into your product? Explore our API or request a demo to see ChariBaaS in action.