DNFBP Compliance Program Audit: What FBR Inspectors Look For and How to Prepare Internal Records

The Changing Landscape of AML/CFT Enforcement in Pakistan

For Designated Non-Financial Businesses and Professions (DNFBPs)—including real estate agents, precious metal dealers, lawyers, and accountants—the Federal Board of Revenue (FBR) is no longer merely a tax collection agency. Under the Anti-Money Laundering Act, 2010, and the associated DNFBP Regulations, FBR acts as a supervisory authority mandated to ensure you are not a conduit for illicit financial flows.

An FBR inspection is not a routine tax audit; it is a compliance review of your internal control systems. Failure to demonstrate these controls can lead to significant penalties, reputational damage, and operational suspension. If you are operating as an AOP, a private limited company, or a sole proprietorship, your administrative records must be as robust as your financial ones.

Core Focus Areas of FBR Inspectors

When an inspector arrives, they are evaluating whether your firm has moved beyond 'paper compliance' into actual risk management. They focus on four primary areas:

• Customer Due Diligence (CDD): Do you have verified documentation for every high-value transaction? Inspectors will cross-reference your client files against the Proscribed Persons list maintained by NACTA.
• Beneficial Ownership Identification: For corporate clients, mere registration documents are insufficient. You must have proof that you have identified the 'ultimate natural person' controlling the entity.
• Record Keeping Systems: Are your records stored in a manner that allows for retrieval within the statutory period? The law requires these to be maintained for at least five years after the completion of the transaction.
• Risk Assessment Policy: You must demonstrate that your business has performed a written enterprise-wide risk assessment. A generic, boilerplate policy is a common trigger for adverse findings.

Preparing Your Internal Records: A Practical Checklist

To withstand scrutiny, your firm should maintain a 'Compliance Manual' and a dedicated file for every high-risk engagement. Ensure you have the following ready:

Common Compliance Failures to Avoid

Many businesses fall into the trap of focusing solely on corporate legal services or tax filings while neglecting the DNFBP-specific registration. If you are not registered with the FBR’s AML supervision portal, you are already in default. Furthermore, failing to report a 'Suspicious Transaction' (STR) due to a lack of understanding of what constitutes 'suspicion' is a critical oversight. It is not about proving guilt; it is about reporting anomalies to the Financial Monitoring Unit (FMU).

How We Assist in Regulatory Compliance

Navigating these audits requires a blend of corporate law expertise and tax regulatory knowledge. Whether you require assistance in updating your internal policies, performing a mock audit, or handling corporate matters consultation, our team provides the necessary oversight to protect your business interests.

Preparation is the strongest defense against regulatory intervention. Do not wait for an inspection notice to begin formalizing your procedures. Contact our office today to schedule a compliance review and ensure your firm remains on the right side of the law.