What Changed in African KYC in October 2026

October marked one of the most consequential turning points of 2026 for African KYC and AML compliance, anchored by historic outcomes at the FATF Plenary in Paris. Alongside high-profile grey-list exits for two key markets, Ivory Coast and DR Congo, the month was defined by critical risk-reporting deadlines and the final operational sprint toward comprehensive VASP licensing frameworks.

The core throughline: transparent beneficial ownership registries and verifiable supervisory controls are unlocking grey-list exits, while geographic risk reporting and automated Travel Rule enforcement become mandatory at scale.

🇨🇮 🌍 Côte d’Ivoire

Official FATF Grey-List Delisting

• Delisting Confirmed at October Plenary: Following the completion of its agreed action plan and an on-site verification visit, the FATF officially removed Côte d'Ivoire from its list of jurisdictions under increased monitoring (the grey list). Assessors verified marked improvements in ultimate beneficial ownership (UBO) transparency and risk-based supervision across designated non-financial businesses and professions (DNFBPs).
• Onboarding Impact: Global financial institutions and regional identity providers can recalibrate automated risk matrices: relationships and corporate entities based in Côte d'Ivoire no longer trigger mandatory Enhanced Due Diligence (EDD) purely due to jurisdiction listing.

🇨🇩 🌍 DR Congo

Reforms Validated & Exit from FATF Increased Monitoring

• Landmark Grey-List Exit: Concurrently with West African developments, the Democratic Republic of the Congo was formally removed from the FATF grey list at the late-October Paris Plenary. The FATF confirmed the completion of action plan items regarding financial intelligence capabilities, registry access, and supervisory capacity.
• Cross-Border Corridor Stability: The delisting provides an immediate de-risking buffer for cross-border payment corridors and stablecoin settlement pilots operating in the DRC, easing correspondent banking frictions while establishing firmer expectations for wallet-tier transaction monitoring.

🇿🇦 South Africa

Directive 10 Geographic Filing Deadline & Directive 12 Monitoring

• Directive 10 Deadline: The 90-day transition window for registered Accountable Institutions to disclose detailed geographic particulars on the Financial Intelligence Centre's (FIC) GoAML platform closed. Institutions must ensure that the physical addresses and locations of all head offices, branches, and operating subsidiaries are completely up to date.
• Directive 12 & Guidance Note 7B Enforcement: The FIC progressed oversight around the annual submission of Risk Management and Compliance Programmes (RMCPs). Under updated guidance (Guidance Note 7B), supervisory bodies are focusing on proliferation financing controls, agent networks, and verifiable business risk assessments.

🇰🇪 Kenya

Final VASP Countdown Ahead of November Statutory Deadline

• Closing the Transition Window: VASPs operating in Kenya reached the final stages of the one-year transition period under Section 47 of the Virtual Asset Service Providers Act, 2025 (enforcing statutory compliance by early November). The dual supervisory framework, țsplitting issuance and stablecoin rails under the Central Bank of Kenya (CBK) and trading platforms under the Capital Markets Authority (CMA)—mandates rigorous customer onboarding, Travel Rule integration, and local governance.
• FATF Grey-List Status: Kenya remains listed on the FATF grey list, maintaining regulatory and political momentum to enforce strict KYC, beneficial ownership verification, and VASP supervisory controls.

🇳🇬 Nigeria

Harmonized VASP Directives & Root CA Integration

• NIN Verification on Digital Asset Rails: Following the Executive Order on Virtual Assets Coordination, technical working groups across the CBN, SEC, and NFIU moved forward with operational rules requiring all authorized digital asset platforms to integrate direct National Identification Number (NIN) validation via NIMC APIs.
• National PKI Operational Rollout: Commercial banks and payment switches advanced the integration of digital certificates under NIMC's apex role as the Root Certification Authority, unifying identity records and cryptographic signatures within the same institutional framework.

🇬🇭 Ghana

VASP Regulatory Directive Finalization

• BoG Digital Asset Guidelines: The Bank of Ghana consolidated stakeholder feedback on directives under the Virtual Asset Service Providers Act (Act 1154), establishing clear baseline compliance standards for stablecoin payments and virtual asset rails.
• Ghana Card Exclusivity: Enforcement of Ghana Card verification remains firm as the exclusive foundational identifier across all banking and mobile wallet onboarding tiers.

💡 Why It Matters for KYC

October’s developments demonstrate that investing in accessible, transparent identity and beneficial ownership infrastructure yields concrete results. The grey-list exits for Côte d'Ivoire and DR Congo reduce the friction of blanket EDD mandates for regional fintechs and payment corridors. At the same time, South Africa’s granular reporting mandates and Kenya’s firm VASP deadline confirm that identity verification has moved far beyond a one-off document check, it is now deeply integrated with physical geolocation, continuous transaction monitoring, and verifiable entity ownership.