Pillar 03 · AML / CFT Compliance

AML / CFT Compliance in Uzbekistan

AML is an area where what's written and what's practiced aren't the same thing — and the difference only shows with real experience. We work from how compliance is actually practiced in Uzbekistan, and we build programs that work in reality: across your product, your structure, and your operations.

AML/CFT compliance in Uzbekistan
30+
products built legal + AML — programs regulators and banks actually accept.

The basics, plainly

What AML/CFT
means in practice.

Three ideas separate a policy binder from a program that survives licensing, bank onboarding, and inspection.

DefinitionAML/CFT compliance

AML/CFT compliance is the set of controls a financial institution or fintech must run to prevent money laundering and terrorism financing — customer due diligence, transaction monitoring, sanctions and PEP screening, recordkeeping, and reporting to the financial-intelligence unit. In Uzbekistan these duties attach from day one of a financial license, not after launch.

DefinitionThe financial-intelligence unit (FIU)

The financial-intelligence unit (FIU) is the body that receives suspicious-transaction and threshold reports. In Uzbekistan it is the Department for Combating Economic Crimes under the General Prosecutor's Office, and the base law is ЗРУ-660-II. A licensed institution must appoint a compliance officer, adopt internal rules, and report against the law's thresholds.

DistinctionA program, not a binder

Real AML compliance is five things working as one — agreements, policies, structures, people, and products. A set of policies with no compliance officer, no screening that runs, and no monitoring built into the product is a binder, not a program. The parts most firms skip are usually the ones an inspection checks first.

Why us, specifically

Built for how it's
actually enforced.

We understand how AML and sanctions work on the ground — so before you take on a local partner, open with a bank, or onboard a client, we can clear them against real practice.

01 · Operational

Operational, not theoretical.

If you're building a product, we tell you what will actually matter in practice — and shape it so compliance is built in from the start, not bolted on later. The difference shows when the regulator looks past the policy document to whether the program runs.

02 · Program

A program, not a binder.

Real compliance is agreements, policies, structures, people, and products working as one. We build all five — the parts most firms skip are usually the ones that matter.

03 · Grounded

Grounded in real practice.

We understand how AML and sanctions work on the ground — so before you take on a local partner, open with a bank, or onboard a client, we clear them against how things actually get enforced.

What we build
·AML/CFT program ·KYC / KYB / KYP ·Sanctions & PEP screening ·Pre-clearance of partners, banks & counterparties ·Transaction monitoring ·Policies & internal rules ·Compliance officer setup

AML in Uzbekistan runs on one base law — ЗРУ-660-II — and one financial-intelligence unit, the Department for Combating Economic Crimes under the General Prosecutor's Office, which receives the reports every licensed institution must file. The sector regulator (the Central Bank or NAPP, depending on your activity) supervises the program on top of that. Knowing what each one weighs is the difference between a program that passes and one that's returned — and it's why we tie AML work to your licensing path from day one.

A working program is more than its policies. It's a compliance officer who can actually operate, internal rules that match the product, customer due diligence that runs at onboarding, sanctions and PEP screening against the right lists, and transaction monitoring built into the flow. We build all of it to fit the product, not a generic template — because a template is the first thing an inspection sees through. When you're live, the same program feeds your ongoing compliance function.

The work doesn't stop at your own perimeter. Before you take on a local partner, open with a bank, or onboard a major client, the risk you inherit is theirs. We pre-clear counterparties, banks, and partners against how enforcement actually works here — so the exposure surfaces before you commit, not in an audit afterward. That clearance runs alongside market-entry and deal work and your licensing file, so one team owns the sequence.

AML/CFT compliance in Uzbekistan
Compliance that works

From the policy
to the product flow.

Questions, answered

Concrete, not "it depends."

Requirements, regulators, KYC, sanctions, and pre-clearance — answered directly.

All of them, from day one. Every financial license carries AML/CFT duties under the base law ЗРУ-660-II: a compliance officer, internal rules, customer due diligence, sanctions and PEP screening, transaction monitoring, and reporting to the FIU. Regulators increasingly check the program is real and running, not a binder, at licensing and on inspection.
The financial-intelligence unit is the Department for Combating Economic Crimes under the General Prosecutor's Office. You report suspicious transactions and transactions over the law's thresholds, on the timelines ЗРУ-660-II sets. Your sector regulator — Central Bank or NAPP — supervises the wider program on top of that.
Customer due diligence is mandatory: identify and verify every customer, beneficial owner, and where relevant the purpose of the relationship, before or during onboarding. Remote and digital onboarding is recognised in Uzbekistan, subject to the verification and recordkeeping standards the rules require. We build onboarding that's both digital and defensible.
At minimum the UN Security Council lists, plus the lists your business and banking relationships practically require — and PEP status alongside them. The right screening set depends on your markets, your correspondent banks, and your investors. We map the lists your specific operation has to clear and build screening that runs continuously, not once.
Yes. A licensed institution must appoint a compliance officer and adopt internal AML/CFT rules — covering customer due diligence, monitoring, reporting, recordkeeping, and staff training. The rules have to match the actual product, not a template. We set up the function and the documentation so both survive an inspection.
They escalate — administrative fines, licensing consequences from the sector regulator, and, for serious breaches, criminal exposure under the economic-crimes framework the FIU sits within. The bigger practical cost is usually the inspection finding that freezes a launch or a license. We build to clear the inspection, not just the statute.
Yes — counterparty and sanctions clearance grounded in real enforcement practice. Before you take on a partner, open a bank relationship, or onboard a significant client, we screen them against sanctions and PEP exposure and against how things actually get enforced here — so you see the risk you'd be inheriting before you sign, not after.
Yes — across 30+ fintech products, legal and AML, plus 10+ legal and AML due-diligence engagements. We've built the program, sat through how it's examined, and adjusted it to what enforcement actually checks. That's the difference between a binder that lists controls and a program that holds up when someone looks.

No memo. A map.

Send us the operation, product, or counterparty — we'll tell you how it really works in practice before you commit.

You leave knowing what the program needs, what the regulator will test, and what to fix first.

The proof

30+ products
built legal + AML.

30+ products built legal and AML · 10+ legal & AML due-diligence engagements.

30+
Products built legal and AML — plus 10+ legal & AML due-diligence engagements.
Products
30+ built
Due diligence
10+ engagements
Scope
KYC · sanctions · monitoring