Bahamas AML and KYC Obligations: Due Diligence & Reporting

AML and KYC Obligations in the Bahamas: An OverviewCopy link to section

Anti-money laundering and know-your-customer rules in The Bahamas apply to the institutions and service providers that handle customers' money, identity, and assets, not to ordinary trading companies as such. The regime rests on the Financial Transactions Reporting Act, 2018 and the Proceeds of Crime Act, 2018, supervised by a group of financial regulators and the Financial Intelligence Unit. For a foreign owner, the practical effect is indirect but constant: your registered agent, bank, and any licensed provider you use must verify who you are and who ultimately owns and controls your entity.

This article explains what those Bahamian AML and KYC requirements mean for a non-resident business owner, who carries the legal duty, what records must be kept, and what happens when the rules are breached. It is most relevant to foreign investors, beneficial owners, and their advisers maintaining a Bahamian company, trust, or fund through a licensed local provider. The Bahamas has been removed from the FATF list of jurisdictions under increased monitoring, which signals an AML framework that international counterparties take seriously.

The Legal Framework: POCA, the FTRA, and the Anti-Terrorism ActCopy link to section

Two statutes anchor the regime. The Financial Transactions Reporting Act, 2018 (FTRA), in force from 25 May 2018, sets out the duties to verify customers, keep records, and report suspicious transactions; the Proceeds of Crime Act, 2018 (POCA) defines the money-laundering offences in its sections 9 to 11 and gives the courts power to forfeit criminal proceeds.

The FTRA replaced the earlier 2000 Act and added stronger rules on risk assessment, internal controls, oversight of foreign branches, and the handling of correspondent banking. It also prohibits dealings with shell banks and the operation of anonymous accounts, both of which matter to anyone structuring cross-border arrangements through the jurisdiction.

Supporting the primary law is a set of subordinate instruments. The Financial Transactions Reporting Regulations, 2018 (FTRR) fix transaction thresholds and detail customer due diligence; the Financial Intelligence (Transaction Reporting) Regulations, 2001 require training, identification, record-keeping, and the appointment of a reporting officer.

The Anti-Terrorism Act completes the picture by criminalising terrorism and the financing of weapons proliferation, with mandatory reporting duties that reach persons and property both inside and outside the country. The Proceeds of Crime (Amendment) Act (No. 3 of 2022) and the Anti-Terrorism (Amendment) Act, 2022 (No. 4 of 2022), both enacted on 22 April 2022, brought the framework closer to current international standards.

Bahamas

Company Incorporation in Bahamas

Set up your company in Bahamas with Expanship handling registration end to end.

Learn more

Supervisory Authorities and the Financial Intelligence UnitCopy link to section

Oversight is shared rather than concentrated in a single agency. The Group of Financial Services Regulators brings together five bodies: the Central Bank of The Bahamas, the Compliance Commission, the Gaming Board, the Insurance Commission, and the Securities Commission.

Which regulator matters to you depends on the type of provider you deal with.

The Financial Intelligence Unit (FIU) sits apart from the supervisors. It receives Suspicious Transaction Reports and can compel the production of information, the single exception being material covered by legal professional privilege.

The FIU draws its powers from the Financial Intelligence Unit Act, 2000, and issues guidance from time to time. Its work and that of the Compliance Commission are published through their official portals at www.fiubahamas.org.bs and ccb.finance.gov.bs.

Who Counts as a Reporting Entity Under Bahamian AML LawCopy link to section

The duties fall on defined categories of business, not on every company registered locally. The first and broadest category is financial institutions: banks, trust companies, life insurers, co-operative societies, broker-dealers, real estate brokers, superannuation administrators, and lending or investment companies.

A second category covers Designated Non-Financial Businesses and Professions (DNFBPs), supervised by the Compliance Commission. The 2018 regulations extended customer due diligence to this group, which includes real estate agents and dealers in precious metals and stones, among others.

For a foreign owner, the point to absorb is this: your Bahamian company is usually not itself a reporting entity, but the registered agent, bank, and other licensed providers serving it are. Their legal obligations are what generate the identity and ownership questions you will be asked.

Bahamas

Ongoing Compliance in Bahamas

Keep your Bahamas entity compliant with filings, returns, and statutory obligations.

Learn more

Customer Due Diligence and KYC RequirementsCopy link to section

Before any business relationship begins, a reporting entity must verify who its customer is. The FTRA and its regulations follow the risk-based method recommended by the FATF, which lets institutions calibrate the documentation they demand to the risk a customer presents.

For a corporate customer, due diligence reaches beyond the company itself to the natural persons who ultimately own or control it. The Compliance Commission's guidance includes a prescribed Know Your Customer form and a mandatory documents checklist, and providers must also record and confirm the customer's source of wealth.

Verification is not a one-off box-tick. Due diligence must be completed before a relationship is established, before an occasional transaction above the thresholds set in the regulations, whenever earlier identification is in doubt, and whenever a suspicious transaction surfaces.

Where a natural person is concerned, the provider must hold at least two current means of contact. In limited cases a registered agent or other provider may rely on customer checks performed by an eligible introducer, governed by the Compliance Commission's Eligible Introducers guidance of October 2019, though the responsibility for the standard remains with the relying entity.

Enhanced Due Diligence, PEPs, and High-Risk CustomersCopy link to section

Some customers trigger a higher standard. Enhanced due diligence is mandatory for high-risk clients, including Politically Exposed Persons, and the depth of information required scales with the risk.

Senior management, not junior staff, must decide how heightened risks are managed; where they cannot be managed adequately, management must choose whether to keep or end the relationship. The PEP provisions align with FATF Recommendation 12, and the Compliance Commission's CDD guidance sets out the specific procedures in Section 9.3.

For a non-resident, two features of your profile commonly attract extra scrutiny: connections to a high-risk jurisdiction and complex or layered ownership. Foreign buyers and intricate ownership chains are flagged for closer review, so clean, well-documented structures move through onboarding faster.

Bahamas

Bahamas Incorporation Pricing

See transparent pricing to incorporate and maintain a company in Bahamas.

View pricing

The Risk-Based Approach and Risk AssessmentsCopy link to section

The framework expects providers to direct effort where risk is greatest rather than apply uniform checks to everyone. Reporting entities must carry out regular risk assessments to identify their own exposure to money laundering and terrorism financing, and their customer due diligence rules must be proportionate to what those assessments find.

Every licensee and registrant must put internal controls, policies, and procedures in place that match its identified risks. The Compliance Commission supports this with published material, including its overview of submitted policy documents and a Bahamas National AML Strategy 2025 to 2028 issued in December 2024.

DNFBPs submit risk assessments through a dedicated Compliance Commission online portal. For you as an owner, the result is that a provider's questions are not arbitrary; they reflect a documented risk model the provider must defend to its regulator.

Ongoing Monitoring of Business Relationships and TransactionsCopy link to section

Onboarding is the beginning, not the end. Reporting entities must maintain internal controls to detect money laundering and terrorism financing throughout a relationship, monitoring transactions and reporting anything unusual to the FIU.

High-risk customers are reviewed more frequently than others, with the frequency set by risk rather than a fixed calendar. This is why a provider may periodically ask you to refresh identity documents or explain a transaction that departs from your usual pattern.

Wire transfers carry their own rules. The Financial Transaction Reporting (Wire Transfer Regulations), 2018 impose specific requirements on cross-border and domestic transfers, which means payments in and out of your Bahamian entity travel with originator and beneficiary information attached.

AML Record-Keeping Obligations and Retention PeriodsCopy link to section

Records underpin the whole system. The FTRA requires verification and transaction records to be kept for prescribed periods, and the standard retention period under the 2018 Act and its regulations is five years from the end of the business relationship or the completion of the transaction, consistent with FATF Recommendation 11.

What must be retained is wide-ranging.

• Customer identification and verification documents
• Transaction records
• Copies of Suspicious Transaction Reports
• Risk assessment documentation
• Internal policies and procedures

These records must be available to the relevant supervisory authority and the FIU on demand. In practice your registered agent holds the primary file for your entity and its ultimate owners, so keeping your provider supplied with current documents is part of meeting the retention duty.

Suspicious Transaction Reporting to the FIUCopy link to section

When a provider knows, suspects, or has reasonable grounds to suspect that a transaction involves money laundering, terrorist financing, proliferation financing, or a predicate offence, it must report to the FIU. Section 25 of the FTRA, 2018 imposes this duty, and the report must be made as soon as practicable; no fixed number of days applies, but the obligation is prompt.

Reporting is done electronically. Since 1 June 2019 the FIU has operated an eFiling portal through which registered reporting officers submit reports and supporting documents, though facsimile, email, and, in urgent cases, oral reporting remain available under section 25.

Two rules deserve attention from anyone whose affairs might be reported. Appointing a Money Laundering Reporting Officer is mandatory, and "tipping off" the subject of a report is a criminal offence, with protection given to the person who reports.

The Role of the Registered Agent in AML ComplianceCopy link to section

For most foreign-owned structures, the registered agent is the central AML figure. An International Business Company must have a registered agent licensed under the Financial and Corporate Service Providers Act, 2000, overseen by the Inspector of Financial and Corporate Services, a role held by the Securities Commission.

The agent is a reporting entity in its own right, not a postal address. It must perform customer due diligence on the beneficial owners of every entity it serves and hold the primary KYC file, which must be produced to supervisory authorities and the FIU when called for.

Recent guidance sharpens these duties. The Compliance Commission's Identification of Nominees, Directors and Beneficial Owners note of February 2025 speaks directly to what an agent must establish, while its Eligible Introducers guidance defines the narrow circumstances in which an agent may rely on another party's checks. The practical consequence for you is that the quality of your documentation determines how smoothly your agent can act and how exposed you both are to regulatory questions.

Penalties and Consequences for Non-ComplianceCopy link to section

The sanctions are serious and operate on several levels. A financial institution, or its director, officer, or employee, that breaches the FTRA faces, on summary conviction, up to five years' imprisonment, a fine of up to B$500,000, or both.

Administrative penalties run alongside the criminal route. The Compliance Commission's administrative penalties policy, effective 6 February 2019 under section 33(2) of the FTRA, supports fines that range from individuals to companies, and a convicted institution may also be barred from business for a period.

Beyond fines, POCA empowers the courts to confiscate and forfeit assets, and extreme cases can end in licence revocation or closure. The Compliance Commission publishes its approach to enforcement and sanctions, and the reputational fallout of regulatory action often outlasts the financial penalty.

ConclusionCopy link to section

For a non-resident owner, Bahamian AML and KYC rules are felt through the providers around your company rather than as a filing you make yourself. The decisive factor is the strength of your identity and ownership documentation, because it governs how quickly a registered agent or bank can act and how cleanly your structure withstands scrutiny.

Assemble current proof of identity, address, source of wealth, and a clear ownership chart before you onboard, and keep it refreshed. Doing so converts the regime from an obstacle into a routine part of holding a company in a jurisdiction that international counterparties trust.

How Expanship Can Help Your Business in The BahamasCopy link to section

Expanship supports foreign owners through Bahamian AML and KYC requirements by preparing the documentation your registered agent and bank will require, structuring ownership clearly, and keeping your records current for inspection, and we extend that support across the wider needs of a foreign-owned entity in the jurisdiction.

• Company formation and entity setup
• Licensed registered agent and registered office
• Ongoing compliance and filing management
• Accounting and bookkeeping
• Economic substance and beneficial ownership support
• Banking introductions

To discuss your structure and obligations, contact Expanship Bahamas.

Frequently Asked QuestionsCopy link to section