KYC for Fintech in Bangladesh (BFIU and Bangladesh Bank)

Regulatory Framework for KYC in Bangladesh

Few South Asian markets have a digital identity stack as mature as Bangladesh's. A national biometric register, a working financial intelligence unit and a demanding regulatory roadmap have made the country a regional reference for digital financial inclusion. Fintechs that want to operate here must work inside a regime that pairs open digital onboarding with tight anti-money laundering (AML) and counter-terrorism financing (CFT) rules.

The central bank, Bangladesh Bank, sits at the top of the financial system. Inside that structure sits the BFIU (Bangladesh Financial Intelligence Unit). BFIU writes KYC guidelines, takes in suspicious transaction reports and leads the anti-money-laundering effort. It belongs to the Egmont Group and follows FATF standards.

Primary Legal Basis

• Money Laundering Prevention Act (MLPA), 2012: Section 25 obliges every financial institution to gather and verify the customer's full identity before any business relationship begins.
• Anti-Terrorism Act, 2009: Sets screening duties against proscribed lists and the duty to report suspicious activity tied to terrorism.
• Bangladesh Bank Order, 1972 and Banking Companies Act, 1991: The general framework for banking supervision.
• BFIU Master Circulars and Guidelines on Electronic KYC (e-KYC): Operational rules first released in January 2020 and revised in March 2026.

BFIU e-KYC Directive (2026 Update)

BFIU published a revised Guidelines on Electronic Know Your Customer (e-KYC) in March 2026. Digital onboarding now covers a far wider field. Non-bank entities face a hard date: 31 December 2026 as the mandatory implementation deadline.

Covered Entities

These are the entities the directive covers:

• Commercial banks and specialised banks.
• Non-Bank Financial Institutions (NBFIs).
• Insurance companies (life and general).
• Capital market intermediaries (brokers, dealers, asset managers, custodians).
• Mobile Financial Services (MFS) such as bKash, Nagad and Rocket.
• Digital Financial Services (DFS) and other entities licensed by Bangladesh Bank.

Two Tiers of e-KYC

e-KYC falls into two BFIU categories:

1. Simplified e-KYC

Low-risk products sit here, subject to tight caps:

• NBFIs: products up to BDT 10 lakh (≈ EUR 7,500).
• Life insurance: sum assured up to BDT 20 lakh.
• Capital market BO (Beneficial Owner) account deposits: up to BDT 15 lakh.

Automated checks against the NID database, a selfie and a basic face-match are enough. No detailed risk assessment is required.

2. Regular e-KYC

Products above those ceilings, and any customer tagged as high risk, fall here. The process requires:

• Broader socio-economic data plus source of funds.
• Digital risk grading of the customer (low / medium / high).
• Full NID validation plus AML/CFT screening.
• Extra documentation for politically exposed persons (PEPs) and complex transactions.

Verification against the NID (National Identity)

The Election Commission of Bangladesh issues the National Identity Card (NID). That card anchors the entire KYC system. It is a plastic chip card that stores all-finger biometrics, a digital photograph and biographic data.

Key Obligations

• e-KYC only applies to natural persons with a valid NID.
• Verification has to run as a direct query against the Election Commission's NID database.
• Accepted methods: biometric checks via fingerprint or face-match against the official NID photograph.
• Customers can finish the flow through self-onboarding on a smartphone or with an assisted agent.

Because e-KYC lives inside the NID ecosystem, foreign individuals and corporate clients use parallel tracks built on passports, Trade Licenses and physical forms where those apply.

Legal Person Identification

Corporate clients require fintechs to gather:

• Valid Trade License and certificate of incorporation (RJSC).
• TIN (Tax Identification Number) and BIN (Business Identification Number).
• Articles of association and board resolutions.
• Full identification of partners, directors and authorised signatories (each with their NID).
• Identification of the Ultimate Beneficial Owner (UBO) with direct or indirect ownership above 25%.

Enhanced Due Diligence and Risk Grading

Every customer must sit under continuous risk grading from BFIU. Enhanced Due Diligence (EDD) kicks in for high-risk cases such as:

• Domestic and foreign PEPs and their close family members and associates.
• Customers linked to high-risk jurisdictions identified by FATF.
• Transactions unusual in amount, frequency or geographic pattern.
• Opaque or multi-jurisdictional corporate structures.
• Hawala / hundi and informal remittances.

Suspicious Transaction Reporting

Reporting entities must:

• Appoint a Chief Anti-Money Laundering Compliance Officer (CAMLCO) and Deputy CAMLCO.
• File STR (Suspicious Transaction Reports) and SAR (Suspicious Activity Reports) to BFIU without delay.
• Report cash transactions above BDT 10 lakh (CTR).
• Retain KYC and transaction records for a minimum of 5 years after the end of the relationship.

Sanctions for Non-Compliance

Enforcement in Bangladesh is harsh:

• Significant administrative fines imposed by BFIU under MLPA 2012.
• Suspension or revocation of licences.
• Custodial sentences for executives in cases of wilful non-compliance.
• Inclusion in supervised-entity lists with operational restrictions.

Trends and Opportunities for Fintechs

Mobile payments (bKash, Nagad), digital microcredit and open banking make Bangladesh's fintech scene unusually lively. After the 2026 e-KYC update, the directive has:

• Cut onboarding costs sharply by making 100% remote verification possible.
• Opened financial-inclusion models for the unbanked population (around 35% per World Bank data).
• Created new use cases for AI Agents in dynamic risk grading, ongoing monitoring and fraud detection.

Joinble plugs into Bangladesh's digital identity stack. It supports NID verification through face-match, biometric fingerprint capture, automated risk grading and AML/CFT screening that tracks BFIU rules. Our AI Agents help Bangladeshi fintechs hit the 2026 deadline while they scale without extra friction.

Frequently Asked Questions

What is BFIU and what is its role in Bangladesh?

Bangladesh Bank houses the Bangladesh Financial Intelligence Unit, the national financial intelligence unit. The unit publishes KYC and AML/CFT guidelines, takes suspicious transaction reports, works with domestic and international authorities and oversees compliance by reporting entities. Membership of the Egmont Group is part of that role.

Is e-KYC mandatory in Bangladesh?

Yes. Insurers, capital market intermediaries and other non-bank financial institutions must have e-KYC in place by 31 December 2026, the date BFIU fixed as mandatory. Banks and MFS providers have used it since the original 2020 directive.

What is the difference between Simplified and Regular e-KYC?

Low-risk products with monetary caps use Simplified e-KYC (BDT 10 lakh for NBFIs, BDT 20 lakh for life insurance, BDT 15 lakh for BO deposits). Regular e-KYC is required once those limits are crossed or the customer is high risk. It demands full digital risk grading plus EDD for PEPs and complex transactions.

How does NID verification work?

Reporting entities send a query to the NID database run by the Election Commission. A fingerprint or a face-match against the official NID photograph completes the check. Only natural persons with a valid NID can use this path; foreign individuals and legal persons use other processes.

What sanctions does BFIU apply for non-compliance?

MLPA 2012 authorises significant administrative fines, licence suspension or revocation, and custodial sentences for executives who wilfully fail to comply. BFIU also runs on-site supervision programmes and periodic reviews of reporting entities.

How does Joinble help fintechs in Bangladesh?

NID verification, face-match, biometric capture, AI-Agent-driven automated risk grading and AML/CFT screening aligned with BFIU guidelines all sit inside Joinble. Fintechs can hit the 31 December 2026 deadline with a fully digital onboarding experience.