Part 2AML/CFT requirements and compliance
Customer due diligence: Enhanced customer due diligence
24Enhanced customer due diligence: verification of identity requirements
A reporting entity must—
- conduct the verification of identity requirements for standard customer due diligence set out in section 16; and
- according to the level of risk involved, take reasonable steps to verify the information obtained under—
- section 15(d); and
- section 23(1)(a); and
- section 15(d); and
- verify any other information prescribed by regulations.
Except as provided in subsection (3), a reporting entity must carry out verification of identity before establishing a business relationship or conducting an occasional transaction or activity.
Verification of identity may be completed after the business relationship has been established if—
- it is essential not to interrupt normal business practice; and
- money laundering and financing of terrorism risks are effectively managed through procedures of transaction limitations and account monitoring or (if the reporting entity is not a financial institution) through other appropriate risk management procedures; and
- verification of identity is completed as soon as is practicable once the business relationship has been established.
Notes
- Section 24(1)(b): replaced, on , by section 11 of the Statutes Amendment Act 2025 (2025 No 74).
- Section 24(2): amended, on , by section 68 of the Anti-Money Laundering and Countering Financing of Terrorism Amendment Act 2017 (2017 No 35).
- Section 24(3)(b): amended, on , by section 16 of the Anti-Money Laundering and Countering Financing of Terrorism Amendment Act 2017 (2017 No 35).


