Customer Due Diligence (CDD) for DNFBPs in Pakistan: A Compliance Roadmap

The Mandatory Framework for DNFBPs

Designated Non-Financial Businesses and Professions (DNFBPs)—including real estate agents, dealers in precious metals and stones, accountants, and lawyers—are front-line entities in Pakistan’s anti-money laundering framework. Under the Anti-Money Laundering Act, 2010, and the SECP/FBR-issued AML/CFT Regulations, these entities are legally mandated to perform rigorous Customer Due Diligence (CDD).

1. CNIC Verification: The Foundation of Identity

Standard practice requires verification of the Computerized National Identity Card (CNIC) for every client. Reliance on a physical copy is insufficient; professionals must verify the status through the NADRA Verisys portal. For entities, this extends to verifying the CNIC of the authorized signatory, directors, and partners. Ensure that the CNIC is valid and not expired, as transactions involving expired documentation are flagged during FBR or SECP audits.

2. Beneficial Ownership Identification

Transparency regarding who ultimately owns or controls a client entity is critical. Under the Companies Act, 2017, and relevant AML guidelines, businesses must look beyond the immediate legal structure. You are required to identify natural persons who exercise effective control (typically holding >25% shareholding or voting rights). If the client is a company, obtain a certified copy of Form 3 (if applicable) or a list of shareholders from the SECP registry to confirm the chain of ownership.

3. Source of Funds (SoF) Documentation

The most common compliance failure lies in the superficial review of the Source of Funds. Documentation must be commensurate with the transaction size and the client's risk profile. Acceptable documentation includes:

• Bank statements reflecting clear audit trails of transaction amounts.
• Proof of income, such as tax returns filed with the FBR.
• Notarized affidavits or legal deeds for property sales or inheritance transfers.
• Investment certificates or dividend records.

Failure to link the source of funds to a legitimate economic activity poses severe operational and legal risks, including potential prosecution or hefty penalties under the AML framework.

Practical Compliance Checklist

Managing Risks and Avoiding Common Failures

Common pitfalls include accepting ‘third-party payments’ without due diligence or failing to conduct a risk assessment for high-risk jurisdictions. If you fail to maintain these records for the mandatory five-year period, you expose your firm to regulatory scrutiny. For specialized advice on your compliance protocols, our team offers corporate legal services in Pakistan to ensure your business remains protected.

If your organization requires an internal audit of its CDD processes or needs assistance in aligning with AML/CFT requirements, contact our professionals for a structured consultation. Compliance is not merely a box-ticking exercise; it is an essential layer of risk management for your corporate reputation.