September marked a period of intense operational focus across the continent, anchored by International Identity Day (16 September). Following summer regulatory directives, African governments and financial intelligence units focused on expanding biometric registry coverage, codifying beneficial ownership enforcement, and finalizing supervisory frameworks for cross-border digital transactions.

The core throughline: identity registries are moving from standalone compliance databases toward fully integrated, cross-border digital public ecosystems.

Harmonized Virtual Assets Framework & NIMC Registry Milestones

• Harmonized VASP Framework Progress: Following the mid-year Executive Order on Virtual Assets Coordination, regulatory working groups led by the Central Bank of Nigeria (CBN) and the SEC advanced the harmonized implementation framework. The framework establishes unified licensing standards and obligates virtual asset platforms to integrate direct NIN verification and Travel Rule data-sharing mechanisms for crypto transactions.
• NIMC RCA Integration: Following the operational transfer of Public Key Infrastructure (PKI) duties to NIMC, September saw financial institutions begin updating e-signature and digital certificate validation protocols to align with NIMC as the Root Certification Authority.
• Identity Database Scale: NIMC reinforced its focus on full national enrollment target strategies ahead of Q4, as NIN validation remains the mandatory foundation for all bank account, mobile money, and digital wallet onboarding.

🇰🇪 Kenya

ESAAMLG Alignment & Final VASP Rulemaking Ahead of November Target

• VASP Compliance Preparation: Following senior-level government briefings, regulatory authorities refined licensing procedures, capital adequacy tiers, and AML reporting rules under the Virtual Asset Service Providers Act. Firms serving Kenyan users have begun operational preparations ahead of the target November compliance deadline.
• Maisha Namba Integration & Registry Health: The Ministry of Interior expanded the integration of Maisha Namba across digital public platforms (eCitizen, KRA, SHA), reinforcing the digital ID as a primary data source for direct API verification in private fintech onboarding.
• FATF Grey-List Exit Workstream: Cross-agency enforcement bodies (FRC, DCI, EACC, KRA) finalized reporting datasets under the FATF Immediate Outcomes framework in preparation for upcoming plenary reviews.

🇿🇦 South Africa

Post-Directive 11 Supervisory Reviews & Digital ID Framework Advancement

• Directive 11 Compliance Follow-Ups: Following the 31 July deadline for accountable institutions to submit their 2026 Risk and Compliance Returns, the Financial Intelligence Centre (FIC) initiated targeted compliance reviews and supervisory follow-ups for non-filing or high-risk entity portfolios.
• Cross-Border Cash Enforcement: Audits and operational reviews were rolled out across institutions handling physical foreign currency and bearer negotiable instruments to verify compliance with newly effective FIC Act Sections 30, 54, and 55.
• Retail Smart ID Rollout Expansion: Home Affairs and participating retail banks continued expanding physical branch coverage for Smart ID issuance, building out the foundational ID dataset required for future digital credential frameworks.

🇷🇼 🌍 Rwanda & Eastern Africa

ESAAMLG Annual Meetings & Beneficial Ownership Directives

• ESAAMLG Annual Summit (31 August – 5 September): Regional financial intelligence units and anti-money laundering authorities convened in Kigali under the theme "From Technical Compliance to Demonstrable Outcomes." Discussions centered on harmonizing cross-border Beneficial Ownership (UBO) registries and enforcing real-time PEP/sanctions screening standards across the Eastern and Southern Africa region.
• Regional KYB Harmonization: Regional regulators highlighted stricter UBO (Ultimate Beneficial Owner) verification rules, pushing fintechs and banks toward direct-registry cross-checking rather than relying on self-declared corporate documentation.

🇬🇭 Ghana

Bank of Ghana VASP Guidelines Consultation

• VASP Directive Stakeholder Engagement: Following initial industry webinars, the Bank of Ghana’s Virtual Assets Department continued stakeholder consultations to finalize directives under Act 1154. The guidelines establish clear division of oversight between the Bank of Ghana (payment rails, stablecoins) and the SEC (exchanges, custody, token issuance).
• Ghana Card Verification: Ghana Card verification remains strictly enforced as the sole legal identifier for all bank account and mobile wallet onboarding across the country.

🇨🇩 🌍 DR Congo & Central Africa

Cross-Border Settlement & FATF Action Plan Execution

• Stablecoin Settlement Monitoring: Compliance teams continued evaluating risk parameters following the launch of live blockchain-settled mobile money corridors (Visa Pay / M-PESA Africa / Onafriq). Focus remains centered on wallet-tier limit verification and automated transaction monitoring over decentralized settlement layers.
• FATF Grey-List Progress: DRC authorities advanced priority actions under their FATF mutual evaluation plan, focusing on registry upgrades and high-risk corridor transaction screening.

🌍 Continental & Global

International Identity Day (16 September) & Regional Momentum

• 16 September (International Identity Day): Identity authorities across Africa marked the day with redoubled commitments toward inclusive, interoperable digital identity ecosystems. The overarching consensus among identity registrars and central banks is the shift from standalone identity databases to unified Digital Public Ecosystems (DPEs).
• 🇨🇮 Côte d'Ivoire: Preparations advanced for the upcoming FATF October Plenary, where the country's on-site evaluation results regarding grey-list exit will be formally considered.

💡 Why It Matters for KYC

September developments demonstrate that regulatory authorities are prioritizing direct registry accuracy and continuous monitoring over one-time onboarding checks. With VASP deadlines approaching in East and West Africa and national identity bases expanding their API-driven trust layers, verification providers must ensure their pipelines support liveness matching, real-time registry queries, and automated UBO validation.