Anti-money laundering compliance is often assumed to be a concern only for banks. In Bahrain it reaches further than that. A range of businesses outside the financial sector carry real obligations, and the cost of getting them wrong, in penalties and in reputation, is high.

This guide sets out the framework, who it applies to, and what a compliant business needs to have in place.

Bahrain’s anti-money laundering regime is built on Decree-Law No. 4 of 2001 on the prohibition and combating of money laundering and terrorism financing. It criminalises money laundering and provides the legal basis for the obligations that follow.

Two bodies sit at the centre of supervision:

  • The Central Bank of Bahrain (CBB) supervises licensed financial institutions. The detailed requirements sit in Volume 6 of the CBB Rulebook, covering customer due diligence, record keeping, reporting, and internal controls.
  • The Ministry of Industry and Commerce (MOIC) supervises designated non-financial businesses and professions, and has a dedicated anti-money laundering function.

Suspicious activity is reported to the Financial Intelligence Directorate (FID), which acts as Bahrain’s financial intelligence unit, receiving and analysing reports.

Who has AML obligations

The obligations apply to financial institutions, and also to a category known as designated non-financial businesses and professions (DNFBPs). In Bahrain, the DNFBPs currently covered include:

  • Audit and accountancy firms
  • Legal practice and advocacy
  • Real estate businesses, including buying, selling, and leasing

If your business sits in one of these areas, AML compliance is not optional, and it is supervised. Businesses being set up in these sectors should build the requirements in from the start rather than retrofitting them later.

What you must have in place

A compliant AML programme in Bahrain rests on a consistent set of building blocks:

  • A risk-based approach, assessing where your business is exposed and applying stronger controls where the risk is higher
  • Customer due diligence (CDD), verifying who your customers are before you act for them
  • Record keeping of customer identification and transaction data for at least five years
  • A designated compliance officer responsible for the programme and for reporting
  • A process for filing suspicious transaction reports with the FID
  • Staff training so the people doing the work can recognise and escalate red flags
  • Written policies and internal controls that are actually followed, not just filed

Customer due diligence in practice

Customer due diligence is the part most businesses interact with day to day. At its core it means identifying and verifying your customer before you establish a business relationship, using reliable documents, and understanding the nature of what they do.

For higher-risk customers, such as politically exposed persons or clients connected to high-risk jurisdictions, enhanced due diligence applies, including a closer look at the source of funds. Where a customer is a company, that extends to understanding the beneficial owners behind it.

Due diligence is not a one-time gate at onboarding. Relationships need ongoing monitoring, so that activity which does not fit what you know about the customer is noticed and questioned.

Suspicious transaction reporting

Where a business knows or suspects that funds are linked to crime, it is required to report to the FID. The obligation to report, and to do so without alerting the customer, is a defining feature of the regime. A compliance officer who can recognise when a report is required, and file it correctly, is central to meeting it.

Why it gets attention

Bahrain is assessed against international standards through its membership of the regional financial action task force framework, and it takes supervision seriously. For a business, weak AML controls are not just a regulatory risk. They are a commercial one, affecting banking relationships, counterparties, and reputation.

The businesses that handle this well treat AML as a standing part of how they operate, with clear procedures, a named owner, and records that stand up to scrutiny.

SRR Consultants supports AML compliance for businesses in Bahrain, from policy and procedure design to customer due diligence frameworks and ongoing monitoring. If you want to confirm your obligations or put a programme in place, get in touch.

This article is general information, not legal or compliance advice. AML obligations depend on your specific activity and circumstances and should be confirmed for your business.