Egypt’s Economic Rise and KYB’s Role

An Egyptian company can be properly registered and still leave the one question that matters unanswered: which natural persons stand behind it? VOVE ID builds business verification workflows for regulated teams, and Egypt's rules show where a corporate onboarding file has to go beyond the registry extract.

This guide covers KYB requirements in Egypt. For a full breakdown of the KYB framework, see our KYB Requirements Explained 2026.

Direct answer: For a corporate customer in Egypt, an institution must verify the company's legal existence and status through a competent registry, confirm who is authorized to act for it, and identify and reasonably verify the natural persons behind it using a three-step cascade: controlling ownership first, control through other means second, and the senior manager only as a documented last resort. Layers and nominees must be traced, the file kept current, and, if due diligence cannot be completed, the relationship should not start and an immediate report to the EMLCU should be considered. Records are kept for at least five years.

The rules behind KYB in Egypt

The core framework is AML Law No. 80 of 2002 and its Executive Regulations, which set the customer due diligence and beneficial-ownership duties (articles 22 bis A to 22 bis C) and are enforced with the Egyptian Money Laundering and Terrorist Financing Combating Unit (EMLCU), Egypt's financial intelligence unit (CBE overview of the system). The current text is the Arabic consolidated version published by the FRA (Law; Executive Regulations), and where an English translation differs, the Arabic text controls. On top of it sit the EMLCU's customer due diligence procedures and the sector rules of the CBE or the FRA. Which overlay applies depends on the regulated activity, not on whether a business calls itself a fintech.

For supervisors, reporting channels, and sanctions duties, see our AML compliance guide for Egypt.

Verify that the company exists

Obtain and independently verify the registered name, legal form, commercial-registration number and status, incorporation or governing documents, registered and operating addresses, tax details where required, and any regulated licenses. The checklist names the competent sources: GAFI (the General Authority for Investment and Free Zones), the Commercial Registry run by the Internal Trade Development Authority (ITDA), or whichever registry covers the entity (GAFI services; ITDA).

Then document what the business actually does: its model, products, operating locations, expected counterparties, transaction profile, and source of funds, with reliable evidence for any material claim. The file should show that the customer's real activity matches what it registered.

Verify who can act for it

Identify and verify the authorized representatives and the natural persons relevant to management or control, and confirm signing, account, and transaction authority from current resolutions, powers, or mandates. Keep the authority chain in the file.

Find the beneficial owners

The Executive Regulations frame the test as a cascade rather than as a single percentage (article 22 bis B). First identify and reasonably verify the natural persons with controlling ownership. Then identify those who exercise control through other means. Only when neither can be found after reasonable measures should you identify the natural person in the senior-management position, and you must record why the fallback was used.

Layers and nominees are where files break. Trace every intermediate entity and every nominee until you reach natural persons. For a trust or similar arrangement, identify and verify the settlor, trustee, protector, beneficiaries or class of beneficiaries, and any other person with effective control. Keep the ownership and control chart in the file, with the reasoning for each step.

Keep the file current

Update customer and beneficial-owner data periodically and whenever a trigger arises: a change in ownership or management, new product use, a new geography, unusual behavior, or a sanctions-list change (article 22 bis C). Reconcile what the customer declares with current registry, constitutional, and ownership evidence, and investigate any inconsistency instead of overwriting it. The same file should show purpose, expected activity, ownership structure, risk rating, and screening history, so monitoring and case teams are not working from a static snapshot.

Screening and enhanced due diligence

Screen the company, its beneficial owners, representatives, and transaction parties against UN Security Council lists and Egypt's domestic terrorist lists before onboarding, before transactions, and immediately after every list update. For PEPs, the assessment extends beyond the owner to family members, close associates, persons acting on their behalf, and legal persons or arrangements they control. Covered PEP relationships need senior-management approval before the relationship starts or continues, source-of-wealth and source-of-funds checks, and enhanced continuous monitoring (article 32 bis).

Layered ownership, a PEP in the chain, or an owner who cannot be traced should move the file to enhanced due diligence. That means additional information on the business and its owners, independent corroboration of identity, legal existence, and expected activity, documented senior approval, and tighter review cycles with specific alert thresholds.

When KYB cannot be completed

If required due diligence cannot be completed, do not open the account, start or continue the relationship, or execute the transaction, and document whether the reasons call for an immediate suspicious-transaction report to the EMLCU (article 22 bis C(1)). Suspicion is reported immediately once it exists, whatever the value, and internal review must not be used to delay it. Keep customer, representative, and beneficial-owner records for at least five years from account closure or completion of an occasional transaction, and longer if the EMLCU or an investigating authority asks.

Ownership files also hold personal data, so the Personal Data Protection Law No. 151 of 2020 applies. Records that the AML rules require you to keep take precedence over an erasure request.

How VOVE ID fits

VOVE ID supports KYB cases in which the company submits its registration documents and profile details, adds its beneficial owners, and has each owner complete identity verification before your team reviews the case. Sanctions screening and audit-ready logs sit in the same workflow, so the file shows what was checked, what the reviewer decided, and why. Your team still pulls the GAFI or Commercial Registry evidence and resolves discrepancies. The workflow keeps the results and the documents in one record.

For the full source-linked version, with 7 control areas and 45 implementation checks, see VOVE ID's Egypt KYC, KYB, and AML compliance checklist.

FAQ

Which registries do I check for an Egyptian company?

GAFI, the Commercial Registry run by the ITDA, or the competent registry for the entity or its licensed activity. Take the registration number and status, the formation documents, and the addresses, then verify them independently of what the customer supplied.

Is there a fixed percentage that defines a beneficial owner in Egypt?

The Executive Regulations describe a cascade: controlling ownership, then control through other means, then the senior manager only when neither can be identified after reasonable measures. Confirm any numeric thresholds in the EMLCU's current procedure or your sector rule.

What if the company is held through trusts or nominees?

Trace every intermediate entity and nominee to natural persons. For trusts, identify the settlor, trustee, protector, beneficiaries, and anyone with effective control, and keep the structure chart in the file.

Sources

• AML Law No. 80 of 2002, current Arabic text (FRA)
• Executive Regulations of the AML Law, current Arabic text (FRA)
• Central Bank of Egypt, the Egyptian AML/CFT system
• GAFI, company incorporation and amendment services
• ITDA, Commercial Registry legislation and procedures
• Egyptian Personal Data Protection Center

Conclusion

In Egypt, a corporate file earns its weight in the ownership analysis. Verify the entity at the registry, confirm who can act, follow the cascade down to natural persons, and keep the reasoning next to the evidence. When the people behind a company stay unknown, the rules already say what comes next.

This article is intended for general informational purposes only and does not constitute legal, financial, or regulatory advice. KYC/KYB/AML requirements may vary depending on jurisdiction, industry, and specific business circumstances. For up-to-date and binding compliance obligations, readers should refer to the relevant regulatory authorities or consult qualified professionals.