Key Takeaways
- Foreign-owned businesses that fall within scope must apply customer due diligence and KYC measures to keep the company compliant in St. Kitts and Nevis.
- Regulated entities are overseen by the FSRC and the Financial Intelligence Unit, which set expectations for monitoring, reporting and record retention.
- Risk-based due diligence allows enhanced or simplified checks depending on the relationship, while suspicious activity must be reported by a compliance officer.
- Breaches of AML and KYC duties can lead to enforcement and penalties, making the registered agent and ongoing monitoring central to staying compliant.
AML and KYC Compliance in St. Kitts and Nevis: An Overview
AML/KYC in St. Kitts and Nevis is a live, enforceable regime: the federation requires regulated businesses to identify their customers, verify beneficial owners, monitor relationships, and report suspicious activity. The principal authority is the Proceeds of Crime Act, Cap. 4.28, supported by anti-money-laundering and counter-terrorist-financing regulations made in 2011 and supervised by the Financial Services Regulatory Commission and the Financial Intelligence Unit. You can review the regulator's own statement of these duties on the FSRC AML page.
The obligations bite on licensed financial-services providers, trust and corporate service providers, virtual asset firms, and similar regulated entities. This article explains how the framework works, who it captures, what documents and procedures apply, and where the penalties lie. It is written for a non-resident owner of a St. Kitts or Nevis company, whose direct contact with these rules usually runs through a locally licensed registered agent rather than the owner personally.
The Legal Framework Governing AML and KYC in St. Kitts and Nevis
The backbone of the system is the Proceeds of Crime Act, Cap. 4.28. It creates the criminal offence of money laundering, reaching any person who knows, or ought reasonably to have known, that money or property derived directly or indirectly from criminal activity.
The Anti-Terrorism Act, Cap. 4.02 sits alongside it, criminalising terrorism and giving effect to the suppression of terrorist financing. Together these two statutes define the conduct the regime is designed to catch.
The operational detail comes from subsidiary regulations made in 2011: the Anti-Money Laundering Regulations, the Anti-Terrorism (Prevention of Terrorist Financing) Regulations, and the Financial Services (Implementation of Industry Standards) Regulations. These set out the practical customer-identification, record-keeping, and reporting duties that regulated businesses must follow.
The framework has been under active revision. On 8 November 2024 the National Assembly passed amendment bills strengthening both the Commission and the Financial Intelligence Unit, part of a series of measures aligning the federation with international standards ahead of its next mutual evaluation; the government's own account of those changes is published by SKNIS.
As a member of the Caribbean Financial Action Task Force, the country was assessed in a 2022 Mutual Evaluation. Progress on the technical-compliance deficiencies identified there has been recorded, which tells a foreign owner the enforcement environment is tightening rather than loosening.
The AML and counter-financing legislation covers both St. Kitts and Nevis, but each island organises its own financial structure and registry administration. Your obligations are the same; the branch you deal with depends on where the entity is formed.
Nevis Company Incorporation in St. Kitts and Nevis
Set up your company in St. Kitts and Nevis with Expanship handling registration end to end.
The Supervisor and Regulatory Authorities: FSRC and the Financial Intelligence Unit
Supervision rests with the Financial Services Regulatory Commission (FSRC), the regulator for financial services and anti-money-laundering across the federation. It monitors compliance with the Proceeds of Crime Act, the Anti-Terrorism Act, and the related codes and guidelines, and it also operates the Companies, Trusts, Foundations, Limited Partnerships and NGO registries.
The Commission runs two branches: a St. Kitts branch in Basseterre and a Nevis branch in Charlestown. On-site examinations of regulated entities are conducted under section 4(2)(g) of the Financial Services Regulatory Commission Act, Cap. 21.10, to confirm that AML/CFT rules are being followed and that the entity is soundly managed.
The Financial Intelligence Unit (FIU) is the separate authority that receives, collects, and analyses suspicious-transaction reports, operating under the Financial Intelligence Unit Act, Cap. 21.09. It maintains a money-laundering detection database, investigates, and shares intelligence with domestic enforcement bodies and international counterparts.
Enforcement on the ground draws in several agencies. The FIU, the White Collar Crime Unit, the Royal St. Christopher and Nevis Police Force, and the Customs and Excise Department all play a part, with prosecution handled by the Office of the Director of Public Prosecutions.
Both branches apply a Risk-Based Supervision Framework, first adopted in May 2015 and revised in June 2017, which governs how off-site and on-site reviews are scoped. Each branch maintains its own portal: the St. Kitts branch at www.fsrc.kn and the Nevis branch at www.nevisfsrc.com.
Who Is Caught: Regulated Businesses and Their AML Obligations
The legislation applies to all Regulated Businesses on both islands. Categories licensed by the Commission include international banks, trust companies, trust and corporate service providers, insurers, money services businesses, credit unions, securities dealers, and virtual asset service providers.
Virtual assets are treated as a regulated activity under the Proceeds of Crime Act, so virtual asset service providers carry full AML and CFT duties. Under section 9A of the Virtual Asset Act, a VASP must put written AML/CFT policies in place, appoint a compliance officer, and submit a risk assessment to the Commission.
No entity may carry on banking, insurance, fund management, money services, corporate services, or other finance-related activity without first holding the relevant licence. Operating without it is prohibited.
Here is the point that matters most to a foreign investor: as a non-resident owner of a St. Kitts or Nevis company, you are not yourself a "regulated business" under this framework. Your registered agent, a licensed trust or corporate service provider, is, and that agent must perform AML and KYC on you as its client.
Nevis Ongoing Compliance in St. Kitts and Nevis
Keep your St. Kitts and Nevis entity compliant with filings, returns, and statutory obligations.
Customer Due Diligence and KYC Requirements
Every regulated entity must identify, verify, obtain, maintain, and monitor information on its customers and on the beneficial owners of legal persons and arrangements. The beneficial owner must be identified before any business relationship is established, not afterwards.
The regulations define a beneficial owner or controller as the person who ultimately owns or controls a customer, or on whose behalf a transaction runs, including through indirect ownership and control. Companies whose shares trade on a regulated market are excluded from that definition.
In practice, a registered agent will ask for a standard pack of documents at incorporation:
- A certified copy of a valid passport or national identity card
- Proof of residential address dated within three months, such as a utility bill or bank statement
- A completed and signed personal information form
- A reference letter from a bank or professional confirming standing
- For corporate shareholders, a certified certificate of incorporation and constitutional documents
A corporate shareholder triggers a full set of corporate due-diligence documents in addition to KYC on the individuals behind it. FSRC examiners later inspect these client files, including citizenship-by-investment applications, to confirm that beneficial-owner records are adequate and kept current. The registry side of recording beneficial owners is a related but distinct obligation, summarised on the FSRC beneficial ownership page.
Enhanced and Simplified Due Diligence: Risk-Based Application
The regulations require a risk-based approach, and the Commission's supervision framework checks whether an entity has genuine procedures to grade that risk. Higher-risk relationships call for enhanced measures; lower-risk ones may justify lighter handling.
Enhanced Due Diligence is expected where the risk is elevated. Recognised triggers include politically exposed persons, clients connected to high-risk countries, complex or unusual transaction structures, and unclear beneficial-ownership chains.
In those cases the agent goes further: detailed verification of source of funds, and screening against international sanctions lists and adverse-media databases. For a virtual asset firm, the risk assessment under section 9A must address client profiles, transaction types, and geographic exposure.
Simplified Due Diligence is less clearly codified in public guidance. The general principle is that lighter checks may apply to lower-risk counterparties, such as regulated financial institutions in equivalent jurisdictions, and the express exclusion of listed companies from the beneficial-owner definition points to that same logic; a foreign owner should not assume simplified treatment applies without the agent confirming it.
Nevis St. Kitts and Nevis Incorporation Pricing
See transparent pricing to incorporate and maintain a company in St. Kitts and Nevis.
Ongoing Monitoring of Business Relationships
KYC is not a one-time exercise. Beneficial owners are subject to ongoing monitoring so that identity and ownership information stays accurate over the life of the relationship.
Examiners review the whole monitoring apparatus during an on-site visit: written policies, internal controls, training schedules, suspicious-transaction reporting, and record-keeping systems. The outcome shapes how closely the entity is watched next, with sound operators reviewed less often than those carrying weaknesses.
Regulated entities are expected to run transaction and sanctions screening as a standing process. The Commission circulates the UN Security Council 1267, 1591, and 1988 sanctions lists, and entities are expected to screen against them in real time rather than periodically.
For a foreign owner, the practical consequence is simple. Any change in your ownership, address, or circumstances should be reported to your registered agent promptly, because the agent is obliged to keep your file current and will be examined on it.
AML Record-Keeping and Retention Requirements
Records sit at the centre of every examination, and the agent must produce them on demand. The files that must be available include KYC and CDD documents, ongoing-monitoring records, training schedules, suspicious-transaction reports, and evidence of how records are retained and kept.
On the retention period, the published guidance is not uniform. Some practitioners cite a five-year minimum for financial records, others a six-year figure tied to registry and revenue obligations, and the exact AML/KYC retention period is not pinned to a single confirmed section; the conservative course is to retain for the longer period and to confirm the precise rule with your agent.
| Item | Position |
|---|---|
| Who holds the records | The registered agent, on behalf of the company |
| Minimum retention | At least five years cited; six years referenced for related obligations |
| Location | May be kept outside the federation; no confirmed domicile requirement |
| Access | Must be available to the FSRC and FIU on demand |
| TCSP audited accounts | Filed within 3 months of financial year-end (FSRC Act, sections 35–37) |
Wherever the records are physically stored, they have to be retrievable quickly when the regulator or the FIU asks. That accessibility requirement, not the storage location, is what governs in practice.
Suspicious Activity Reporting and the Role of the Compliance Officer
Every regulated business must report suspicious transactions to the Financial Intelligence Unit. Failing to report a suspicion of money laundering is itself an offence under the Proceeds of Crime Act.
The report is directed to the FIU under the Financial Intelligence Unit Act, Cap. 21.09. A specific public form name was not identified, so the current submission format should be confirmed with the FIU directly.
Tipping off is treated seriously. A person who knows or suspects an AML investigation is under way and discloses that fact in a way likely to prejudice it commits an offence, carrying a fine not exceeding EC$100,000 and imprisonment.
Regulated entities are expected to appoint a compliance officer; for virtual asset firms this is mandatory under section 9A of the Virtual Asset Act, and it is a standard expectation more broadly. Staff training is part of the package, and examiners review training schedules as a matter of routine.
The Role of the Registered Agent in AML and KYC Compliance
For a non-resident owner, the registered agent is the centre of gravity of the whole regime. Every St. Kitts or Nevis company must appoint a locally licensed agent at formation and keep one in place at all times, whether the entity is formed under the federal Companies Act, the Nevis Business Corporation Ordinance, or the Nevis LLC Ordinance.
The agent is a licensed professional authorised by the Commission to represent companies in statutory matters. It must satisfy AML and CFT rules, perform due diligence, and maintain beneficial-owner records.
Crucially, the agent collects and verifies due-diligence documents before filing any incorporation application. No clean KYC pack, no filing.
Trust and corporate service providers, the category that includes registered agents, are themselves subject to AML/CFT compliance audits under the FSRC Act and the 2011 regulations. The agent, not you, is the regulated party that faces the Commission and the FIU directly.
That division of responsibility comes with a duty on your side. You must give your agent accurate, current KYC and beneficial-ownership information, because if you do not, both you and the agent are exposed.
Penalties and Enforcement for AML and KYC Breaches
The criminal penalties under the Proceeds of Crime Act are substantial. The headline figures relevant to AML compliance are set out below.
| Offence | Maximum penalty |
|---|---|
| Falsifying, concealing, or destroying documents relevant to an investigation | Fine not exceeding EC$250,000 and imprisonment |
| Tipping off (prejudicial disclosure of an investigation) | Fine not exceeding EC$100,000 and imprisonment |
| Failing to report suspicion of money laundering | Offence under POCA; specific monetary penalty not confirmed |
Beyond the courts, the Commission holds a graded set of administrative powers under the FSRC Act, Cap. 21.10. These run from direction letters through licence suspension and revocation to civil monetary penalties and referral to the Director of Public Prosecutions.
There is a built-in escalation mechanism. An entity that fails an examination faces more frequent and more intensive supervision afterwards, so deficiencies compound rather than fade.
A 2014 external assessment found civil penalties were applied unevenly and did not reach every financial sector. The 2024 amendments are aimed squarely at closing those gaps, which reinforces the direction of travel toward firmer enforcement.
Conclusion
The weight of AML and KYC compliance in this federation falls on your registered agent, not on you directly, but that does not make it remote. Your obligation is concrete and ongoing: supply complete, truthful, up-to-date identity and beneficial-ownership information, and respond promptly when the agent asks for more, because the criminal and administrative consequences of a failure reach both sides of the relationship.
The sensible next step is to confirm exactly what your agent holds on file and how long it is retained, then keep that record current as your ownership or circumstances change.
How Expanship Can Help Your Business in St. Kitts and Nevis
Expanship acts as your licensed point of contact for AML and KYC matters in St. Kitts and Nevis, collecting and verifying due-diligence documents, maintaining beneficial-owner records, and keeping your file ready for FSRC examination, while also handling the wider compliance needs of a foreign-owned entity across both islands.
- Company incorporation in St. Kitts and Nevis
- Registered agent and registered office services
- Ongoing compliance and statutory filing management
- Accounting and bookkeeping support
- Economic-substance and beneficial-ownership assistance
- Introductions to banking partners
To set up or review your AML and KYC arrangements, contact Expanship St. Kitts and Nevis.
Frequently Asked Questions
You are not classified as a regulated business yourself, so you do not file AML reports directly. Your registered agent, a licensed trust or corporate service provider, carries those duties and performs KYC on you as its client, which means your role is to provide accurate information on request.
Expect a certified passport or national ID, proof of residential address dated within three months, a signed personal information form, and a banking or professional reference. Corporate shareholders also require a certified certificate of incorporation and constitutional documents, plus KYC on the individuals behind the company.
The Financial Services Regulatory Commission supervises financial services and AML/CFT compliance across both islands and runs on-site examinations under the FSRC Act, Cap. 21.10. The Financial Intelligence Unit, operating under Cap. 21.09, receives and analyses suspicious-transaction reports and works with enforcement bodies.
Financial records are cited as being kept for at least five years, with a six-year figure appearing in some registry-related guidance, and the precise AML retention period is not pinned to a single confirmed provision. Retaining for the longer period and confirming the exact rule with your agent is the prudent approach.
Falsifying, concealing, or destroying documents relevant to an investigation carries a fine of up to EC$250,000 and imprisonment, while tipping off carries a fine of up to EC$100,000 and imprisonment. The Commission can also impose administrative measures ranging from direction letters and civil penalties to licence revocation and criminal referral.
Yes. Virtual assets are a regulated activity under the Proceeds of Crime Act, and under section 9A of the Virtual Asset Act a virtual asset service provider must adopt written AML/CFT policies, appoint a compliance officer, and file a risk assessment with the Commission.
Legal Disclaimer
The information provided in this article is for general informational purposes only and does not constitute legal, tax, or professional advice. While we strive to ensure the accuracy and timeliness of the content, laws and regulations are subject to change, and the application of laws can vary widely based on specific facts and circumstances.
Readers should not act upon this information without seeking professional counsel tailored to their individual situation. Expanship and its authors disclaim any liability for actions taken or not taken based on the content of this article.
For specific advice regarding your business setup, compliance requirements, or any legal matters, please consult with qualified legal and tax professionals in the relevant jurisdiction.
