AML Compliance in Rwanda : Regulations, FIC Requirements, and UBO Rules

Rwanda is one of the fastest-digitizing financial ecosystems in East Africa. Mobile money, digital banking, and cross-border fintech activity are expanding quickly, and regulatory oversight has kept pace. VOVE ID helps institutions structure onboarding and compliance documentation to match that pace.

This guide covers AML obligations for regulated entities in Rwanda. For the underlying compliance framework, see our AML Requirements Explained 2026.

Rwanda's AML Regulatory Framework

• Law No. 001/2025 (22 January 2025) on the prevention and punishment of money laundering, terrorist financing, and proliferation financing — the current national law, replacing Law No. 028/2023.
• FIC (Financial Intelligence Centre): Rwanda's national financial intelligence unit, receiving STRs and analyzing financial intelligence.
• National Bank of Rwanda (BNR): sector supervisor for licensed financial institutions and payment services.

Rwanda is not on the FATF grey list as of the 19 June 2026 statement, and the framework broadly aligns with FATF standards.

For customer due diligence requirements for individuals, see our KYC guide for Rwanda. For business verification and beneficial ownership requirements, see our KYB guide for Rwanda.

Core AML Obligations

Risk-based AML programs: internal risk assessments covering customers, products, delivery channels, and geographic exposure.

Customer Due Diligence: identity verification, beneficial-ownership identification, understanding relationship purpose, and ongoing monitoring — with Enhanced Due Diligence for higher-risk customers.

Suspicious Transaction Reporting: STRs submitted to FIC within 24 hours of suspicion forming — one of the tighter reporting windows in the region. Threshold reports (cash and wire transactions above set FRW amounts) are filed within 2 working days.

Record-keeping: at least 10 years after the transaction, relationship termination, or occasional transaction.

Internal AML controls: a designated compliance officer, written policies, employee training, and independent compliance audits (at least annually).

Beneficial Ownership and Transparency

Beneficial-ownership verification is an increasingly central focus of Rwanda's AML framework. FIC Guidelines No. 002/2025 set out the operative cascade — natural persons holding more than 25% of shares or at least 25% of voting rights, control by other means, and a senior-management fallback only as a last resort. Complex ownership structures or incomplete documentation should trigger Enhanced Due Diligence.

AML Risk Areas in Rwanda's Expanding Financial Sector

• Mobile money and digital payment platforms, growing rapidly.
• Cross-border remittances and regional fintech expansion.
• Shell company misuse and opaque ownership structures.
• Cross-border transaction layering and trade-based money laundering.

Regulators expect institutions to demonstrate clear onboarding procedures, risk classification, and monitoring controls to mitigate these risks — not just maintain a policy document.

Operationalizing AML Compliance

For many institutions, the real challenge isn't the regulation itself but implementing it consistently. Manual onboarding processes tend to produce fragmented documentation and inconsistent due diligence, which becomes a real problem during regulatory audits.

How VOVE ID Supports AML Compliance in Rwanda

VOVE ID helps institutions:

• Standardize onboarding documentation for identity and beneficial-ownership records.
• Screen against sanctions and PEP lists.
• Maintain audit-ready, retrievable records aligned with the 10-year retention rule.

For the complete, sourced requirement-by-requirement checklist, see VOVE ID's Rwanda compliance checklist.

Conclusion

AML compliance in Rwanda runs on real operational discipline: a 24-hour STR clock, a beneficial-ownership cascade that goes beyond a simple percentage check, and supervisors who expect demonstrated effectiveness over documented policy. Institutions that build for that from the start are the ones that scale confidently as Rwanda's fintech sector keeps growing.

This article is intended for general informational purposes only and does not constitute legal, financial, or regulatory advice. KYC/KYB/AML requirements may vary depending on jurisdiction, industry, and specific business circumstances. For up-to-date and binding compliance obligations, readers should refer to the relevant regulatory authorities or consult qualified professionals.