KYC Requirements for Financial Advisors in South Africa

Know Your Customer (KYC) is one of the most fundamental obligations for any financial services professional in South Africa. It is not merely a box-ticking exercise but a critical process that protects you, your clients, and the broader financial system from abuse. For financial advisors, understanding and correctly implementing KYC requirements is essential for regulatory compliance, client trust, and business sustainability.

This guide provides a detailed, practical overview of KYC obligations as they apply to financial advisors in South Africa, grounded in the requirements of the Financial Intelligence Centre Act (FICA) and supporting regulations.

What Is KYC and Why Does It Matter?

Know Your Customer refers to the processes and procedures that financial institutions and service providers use to identify, verify, and understand their clients. The purpose of KYC is threefold:

1. Prevent financial crime: KYC is a frontline defence against money laundering, terrorist financing, fraud, and other illicit activities.
2. Ensure regulatory compliance: South African law requires financial services providers to perform KYC on every client. Failure to do so carries severe penalties.
3. Protect business relationships: Knowing your client thoroughly allows you to provide appropriate advice, manage risk, and build lasting professional relationships.

KYC is not a once-off activity. It is an ongoing obligation that spans the entire duration of the business relationship with a client.

The Legal Framework for KYC in South Africa

KYC requirements in South Africa are primarily governed by:

• The Financial Intelligence Centre Act (FICA), Act 38 of 2001, as amended
• FICA Regulations and exemptions
• FIC Guidance Notes providing practical implementation guidance
• The FAIS Act and General Code of Conduct, which impose additional client information obligations on financial advisors

The Financial Intelligence Centre (FIC) is the primary regulatory body overseeing KYC compliance, while the FSCA supervises compliance within the context of the FAIS Act.

Customer Identification and Verification

The first step in the KYC process is to identify your client and then verify that identity using reliable, independent sources.

Identifying Natural Persons

When your client is an individual, you must obtain the following information:

• Full names (as they appear on official identification)
• Surname
• Date of birth
• South African identity number (or passport number for foreign nationals)
• Residential address (not a postal or business address)
• Contact details (telephone number and/or email address)
• Tax identification number (where applicable)
• Source of income or funds (particularly for higher-risk clients)

Identifying Legal Persons

When your client is a legal entity, the requirements are more extensive. You must identify:

For companies:

• Registered name and trading name (if different)
• Registration number
• Registered address and principal place of business
• Beneficial owners (natural persons who ultimately own or control 25% or more of the entity)
• Directors and authorised signatories
• Nature of business activities

For trusts:

• Name of the trust
• Trust number (Master's reference)
• Details of the founder, trustees, and beneficiaries
• The trust deed
• Authorised persons who can act on behalf of the trust

For partnerships:

• Names and details of all partners
• Partnership agreement
• Nature of business activities

For close corporations:

• Name and registration number
• Members' details
• Registered address

Verification Documents

Collecting information is only the first step. You must verify the identity using acceptable documentation:

Client Type	Required Verification
SA Citizen	Original or certified copy of South African ID document or smart ID card
Foreign National	Valid passport (and work/residence permit where applicable)
Company	CIPC registration documents, memorandum of incorporation
Trust	Letters of authority from the Master of the High Court, trust deed
Close Corporation	CK1 or CK2 documents from CIPC

Important: You must verify identity from the original document or a certified copy. Photocopies without certification are not acceptable. Many institutions now also accept electronic verification through approved databases and services, which can streamline the process.

Address Verification

The client's residential address must also be verified. Acceptable documents include:

• Utility bills (not older than three months)
• Bank statements (not older than three months)
• Municipal rates and taxes statements
• Lease agreements
• Official correspondence from a government department

If a client does not have a conventional residential address, you must still take reasonable steps to establish their location and document your efforts.

Enhanced Due Diligence (EDD)

Standard KYC procedures are sufficient for most clients. However, certain situations require enhanced due diligence, which involves more rigorous identification, verification, and monitoring measures.

When Is EDD Required?

Enhanced due diligence must be applied in the following circumstances:

• Politically exposed persons (PEPs): Clients who hold or have recently held prominent public positions
• High-risk clients: Clients identified as presenting elevated money laundering or terrorist financing risks based on your risk assessment
• Complex or unusual transactions: Transactions that appear to have no clear economic or lawful purpose
• Non-face-to-face relationships: Where the client is not physically present during the identification process
• Clients from high-risk jurisdictions: Countries identified by the FATF or FIC as having inadequate AML/CTF controls
• Correspondent banking relationships and other high-risk business types

What Does EDD Involve?

Enhanced due diligence goes beyond standard procedures and may include:

• Obtaining additional identification information and more detailed background checks
• Verifying identity through multiple independent sources
• Establishing the source of wealth and source of funds for transactions
• Obtaining senior management approval before establishing or continuing the business relationship
• Conducting more frequent and intensive monitoring of transactions and activities
• Applying stricter transaction limits or conditions

Politically Exposed Persons (PEPs)

Politically exposed persons represent one of the highest-risk client categories and require special attention in your KYC processes.

Who Is a PEP?

A PEP is a natural person who holds or has held a prominent public function, including:

• Heads of state or government
• Senior politicians and members of parliament
• Senior judicial officials
• Senior military officers
• Senior executives of state-owned enterprises
• Senior political party officials
• Immediate family members of the above
• Close associates of the above

The definition applies to both domestic PEPs (South African) and foreign PEPs. Under FICA, domestic PEPs are also subject to enhanced due diligence, bringing South Africa into line with international standards.

PEP-Specific Requirements

When dealing with a PEP, you must:

1. Identify the client as a PEP through screening processes (manual or automated)
2. Obtain senior management approval to establish or continue the relationship
3. Establish the source of wealth and source of funds
4. Conduct enhanced ongoing monitoring throughout the relationship
5. Document all decisions and the rationale behind them

PEP status does not automatically mean that a client poses a risk. However, the potential for corruption and misuse of public funds means that enhanced vigilance is required.

Ongoing Monitoring

KYC is not a once-off exercise conducted at the start of a business relationship. Ongoing monitoring is a continuous obligation that requires you to:

• Keep client information up to date: Periodically review and refresh CDD information to ensure it remains current and accurate.
• Monitor transactions: Watch for transactions that are inconsistent with the client's known profile, financial position, or business activities.
• Reassess risk: Review the client's risk rating whenever there is a material change in their circumstances or activities.
• Screen for sanctions and PEP status: Regularly check clients against updated sanctions lists and PEP databases.
• Document your monitoring activities: Maintain records of all monitoring conducted and any actions taken as a result.

Triggers for Updated KYC

Certain events should prompt an immediate review and update of client information:

• The client requests a significant new product or service
• There is a material change in the client's circumstances (e.g., change of address, employment, or business activities)
• A suspicious transaction is identified
• There are regulatory changes affecting KYC requirements
• The client has not been reviewed within the institution's prescribed review cycle

Practical Implementation for Financial Advisors

Implementing KYC effectively requires a systematic approach. Here are practical steps tailored for financial advisors:

1. Establish Clear Procedures

Document your KYC procedures in writing. This should cover every step from initial client contact through to ongoing monitoring. Having a written procedure ensures consistency and provides evidence of compliance.

2. Use Standardised Forms and Checklists

Create or adopt standardised client onboarding forms that capture all required KYC information. Use checklists to ensure no verification steps are missed. Many FSPs provide templates that can be customised to your practice.

3. Leverage Technology

Use digital verification tools and databases to streamline the identification and verification process. Automated PEP and sanctions screening tools can significantly reduce the manual effort required and improve accuracy.

4. Train Continuously

Stay up to date with KYC requirements and ensure that any staff members involved in client-facing activities are properly trained. FICA requirements evolve over time, and ongoing training is essential.

5. Document Everything

Maintain comprehensive records of all KYC activities, decisions, and communications. If a regulator or auditor reviews your files, thorough documentation demonstrates compliance and professionalism.

6. Apply the Risk-Based Approach

Not all clients present the same level of risk. Use a risk-based approach to allocate your KYC resources effectively. Apply enhanced measures where risks are higher and streamline processes where risks are lower, in line with your documented risk assessment.

Common KYC Challenges and Solutions

Challenge	Solution
Client reluctant to provide information	Explain the legal requirement clearly and reassure them about data confidentiality
Difficulty verifying residential address	Accept alternative verification methods such as affidavits or utility accounts in a household member's name
Identifying beneficial owners of complex structures	Request organigrams, trace ownership chains, and consult public registries
Keeping records up to date	Implement periodic review cycles and use technology to flag overdue reviews
PEP screening accuracy	Use reputable commercial screening databases and supplement with manual checks

How Regulatory Exams Can Help

KYC is a significant topic in the RE5 regulatory examination and a daily reality in financial advisory practice. The Regulatory Exams app equips you with the knowledge and confidence to handle both.

Here is how the app supports your learning:

• Practice Exams: Test your KYC knowledge with realistic exam questions covering customer identification, verification, EDD, PEPs, and ongoing monitoring. Practice under exam conditions to build both knowledge and confidence.
• Custom Quiz Builder: Focus your study on specific KYC topics. Build quizzes on PEP requirements, address verification, beneficial ownership, or any other area where you need extra practice.
• Analytics Dashboard: Track your performance on KYC-related questions. See your progress over time and identify exactly when you are ready for the exam.
• Weak Areas Analysis: The app pinpoints KYC sub-topics where your scores are lagging. Instead of re-reading entire chapters, focus your revision on the specific areas flagged by the analysis.
• Bookmarking: Save complex KYC scenario questions for repeated review. These are often the most valuable questions for deepening your understanding.
• Leaderboards: Compare your KYC knowledge with other candidates preparing for the RE5 exam.

Select the plan that works for you:

• Free: Get started with a selection of practice questions at no cost.
• Pro Simulator (R99 / 30 days): A once-off payment, no subscription, with unlimited access to the question bank, the analytics dashboard, the custom quiz builder, and advanced analytics with the QC heatmap.
• 1 Year Mastery (R299 once-off): Everything in Pro Simulator plus the complete Interactive Study Course — all 11 chapters of the RE5 syllabus with knowledge checks and a final exam — with a full year of access.

KYC compliance protects your clients, your licence, and your reputation. Start with Regulatory Exams today and master the KYC requirements that underpin professional financial services practice.

Sign up free at regulatoryexams.co.za and practise the KYC questions right now. Work through identification, verification, EDD, and PEP scenarios under exam conditions, let the weak-area report show you what to revise, and walk in ready — free to start, no card required.