The Complete Guide to KYC Compliance in Guernsey

Guernsey’s international financial sector faces cross-border financial crime risks. KYC helps regulated businesses verify customers, identify beneficial owners and detect money laundering, terrorist financing and sanctions risks. Effective kyc compliance guernsey practices are therefore central to meeting broader Guernsey AML requirements.

Guernsey’s main money laundering risks stem from foreign criminality, including bribery, corruption, fraud and tax evasion. MONEYVAL’s 2025 assessment praised its risk understanding and beneficial ownership framework while identifying areas for improvement in supervision and implementation.

This guide covers Guernsey KYC requirements, including identity verification, due diligence, risk assessment, screening, monitoring, recordkeeping and reporting. It also explains how digital KYC tools support faster, more consistent compliance and how businesses can apply kyc guernsey processes throughout the customer lifecycle.

What Is KYC Compliance in Guernsey?

KYC compliance in Guernsey is the risk-based process of identifying and verifying customers, understanding their relationship purpose, confirming beneficial ownership where relevant, and assessing AML/CFT/CPF risks. It extends beyond a one-time ID check to include KYB, sanctions and PEP screening, CDD, EDD, ongoing monitoring, recordkeeping and suspicious activity reporting.

A well-designed kyc compliance guernsey programme should connect customer identification with the wider Guernsey AML requirements that apply to the business. This helps firms apply kyc guernsey checks consistently while ensuring that higher-risk customers receive appropriate enhanced scrutiny.

Who Regulates KYC and AML Compliance in Guernsey?

The Guernsey Financial Services Commission (GFSC) is the principal regulator overseeing KYC compliance in Guernsey. It supervises relevant financial services businesses and prescribed businesses under the Bailiwick’s AML/CFT/CPF framework.

Through its Handbook on Countering Financial Crime, the GFSC sets expectations for risk-based customer due diligence (CDD), beneficial ownership checks, identity verification, PEP and sanctions screening, enhanced due diligence (EDD), ongoing customer monitoring, suspicious activity reporting, employee screening and training, recordkeeping, governance and internal compliance controls. These expectations form an important part of the Guernsey AML requirements that regulated businesses must understand and implement.

Businesses must be able to demonstrate not only that KYC checks were completed, but also that customer risks were properly assessed, documented, reviewed and managed throughout the relationship. In practice, this means kyc guernsey procedures should be supported by clear policies, reliable evidence and ongoing oversight.

Key KYC and AML Laws in Guernsey

Guernsey's KYC requirements form part of its wider AML/CFT/CPF framework, supported by key laws, regulations and GFSC guidance. Together, these rules provide the foundation for kyc compliance guernsey obligations across relevant financial services and prescribed businesses.

Understanding these rules helps regulated businesses meet customer due diligence, beneficial ownership, sanctions screening and suspicious activity reporting obligations while applying Guernsey AML requirements in a risk-based way.

The GFSC expressly identifies the Proceeds of Crime Law, Disclosure Law, beneficial ownership legislation and other instruments as part of the Bailiwick's relevant financial crime enactments. These sources should be considered when developing or reviewing kyc guernsey controls and broader kyc compliance guernsey frameworks.

A Step-by-Step KYC Process for Guernsey Businesses

A clear, risk-based KYC process helps Guernsey businesses meet customer due diligence, AML and CFT requirements while reducing financial crime risks. Effective kyc compliance guernsey procedures should align with the firm's wider AML/CFT/CPF framework and applicable GFSC expectations.

The following steps outline how to verify customers, assess risk, apply enhanced due diligence where necessary and maintain ongoing KYC compliance in Guernsey.

Step 1: Collect and Record Customer Information

Gather the customer's full legal name, date of birth, residential address, nationality, occupation or business details, and other information relevant to the relationship. The information collected should reflect the customer's circumstances, the services requested, and the firm's risk-based KYC requirements.

Record the information accurately in the customer file and document any missing details or inconsistencies. Complete customer identification before or during the establishment of the relationship, subject to any limited exceptions permitted under Guernsey's AML/CFT/CPF framework. This initial information forms the foundation of a compliant kyc guernsey onboarding process.

Step 2: Verify the Customer's Identity

Confirm the customer's identity using reliable and independent documents, electronic verification tools, or trusted data sources. Common evidence may include a passport, national identity card, driving licence where appropriate, or reliable electronic identity data.

Verification should establish that the identity information provided is genuine and belongs to the customer. Guernsey businesses should retain evidence of the checks performed and apply additional verification measures where the customer or relationship presents higher KYC or AML risk. These controls support both kyc compliance guernsey obligations and broader guernsey aml requirements.

Step 3: Identify Beneficial Owners and Controllers

For companies, trusts, partnerships, and other legal structures, identify the natural persons who ultimately own, control, or act on behalf of the customer. This may include beneficial owners, directors, trustees, settlors, protectors, authorised representatives, or other persons exercising effective control.

Understand the ownership and control structure and take reasonable measures to verify the relevant individuals. If the structure is complex, opaque, or linked to higher-risk jurisdictions, apply enhanced due diligence and obtain further information about beneficial ownership. Identifying these individuals is a central part of kyc guernsey and Guernsey AML requirements.

Step 4: Establish the Purpose and Expected Nature of the Relationship

Establish why the customer wants the product or service, what activity is expected, which jurisdictions may be involved, and how the relationship will be funded. Consider the customer's occupation or business, expected transaction volumes, counterparties, geographic exposure, and anticipated source of funds.

Use this information to support the customer risk assessment and determine whether standard CDD or enhanced due diligence is appropriate. The expected profile should also provide a baseline for ongoing monitoring and help identify unusual activity during the relationship. A clear expected profile helps firms demonstrate effective kyc compliance guernsey in practice.

Step 5: Screen Customers and Connected Parties for AML Risks

Screen the customer, beneficial owners, controllers, and other relevant parties for sanctions, PEP status, watchlist exposure, and appropriate adverse information. Guernsey AML compliance requires firms to identify potential financial crime risks before establishing a relationship and throughout the customer lifecycle. These checks should form part of the firm's wider guernsey aml requirements and not be treated as a standalone identity check.

Sanctions screening and PEP screening should be refreshed when lists, ownership details, or customer circumstances change. Adverse media and other risk indicators can support a proportionate customer risk assessment, particularly where the relationship involves complex structures, higher-risk jurisdictions, or unusual activity.

Step 6: Assess the Customer's Overall Financial Crime Risk

Assess customer, geographic, product, service, delivery-channel, ownership, and transaction risks to determine the appropriate level of due diligence. A Guernsey customer risk assessment should be evidence-based rather than relying only on a generic low-, medium-, or high-risk label.

Consider the customer's business activities, expected transactions, source of funds, source of wealth, jurisdictions, beneficial ownership structure, and exposure to PEP or sanctions risks. The assessment should be documented, regularly reviewed, and updated when material information changes. This risk-based approach is essential to meeting kyc compliance guernsey expectations without applying controls mechanically.

Step 7: Apply Appropriate CDD or EDD Measures

Apply standard customer due diligence for ordinary-risk relationships, including identity verification, beneficial owner checks, understanding the purpose of the relationship, and relevant AML screening. CDD requirements in Guernsey should be proportionate to the customer's circumstances and assessed risk. Firms should ensure that their kyc guernsey procedures are consistent with applicable guernsey aml requirements.

Where higher risks are identified, apply enhanced due diligence by obtaining additional information, investigating source of funds or source of wealth, seeking appropriate senior management approval, and increasing monitoring. EDD may be necessary for PEP relationships, complex ownership structures, higher-risk jurisdictions, or unexplained activity.

Step 8: Approve, Monitor, and Periodically Review the Relationship

Document the onboarding decision, including the checks completed, risk rating, CDD or EDD measures applied, and reasons for approval or escalation. Guernsey KYC compliance requires firms to maintain an audit trail that demonstrates how customer and financial crime risks were assessed.

Monitor customer activity, sanctions and PEP screening results, ownership changes, and relevant adverse information throughout the relationship. Update customer information when circumstances change, review higher-risk relationships more frequently, escalate suspicious activity where necessary, and retain appropriate KYC records. Ongoing review is a core element of kyc compliance guernsey and helps firms respond to changing guernsey aml requirements.

Can Guernsey Businesses Use Digital KYC?

Yes. Guernsey businesses can use digital KYC tools for remote onboarding and risk-based AML/CFT/CPF compliance. These may include electronic identity verification, document authentication, facial matching, liveness checks, digital signatures, sanctions and PEP screening, adverse media checks, and risk scoring.

Digital tools can support kyc guernsey processes by helping firms collect, verify, screen, and monitor customer information more consistently. They may also help businesses apply guernsey aml requirements across larger customer volumes, provided the controls remain proportionate and properly governed.

The GFSC updated its Handbook in May 2026 to clarify the responsible use of technology, including electronic verification and digital signatures. However, firms remain responsible for their compliance. They must oversee providers, manage false positives, document decisions, apply human review where needed, and ensure digital KYC is proportionate to customer risk. Using technology does not transfer responsibility for kyc compliance guernsey away from the regulated business.

Common KYC Compliance Failures to Avoid

Even well-established businesses can face KYC compliance failures when customer checks, risk assessments, or monitoring processes are incomplete or outdated.

Understanding these common weaknesses can help Guernsey businesses strengthen their AML controls, improve customer due diligence, and meet GFSC KYC requirements. It can also help firms identify gaps in their kyc compliance guernsey framework and broader guernsey aml requirements.

Missing beneficial owners - Failing to identify and verify a company, trust or other legal structure’s ultimate owners or controllers creates a significant CDD gap. Guernsey businesses should understand and maintain accurate beneficial ownership information as part of their kyc guernsey procedures.

Weak customer risk assessments - A customer risk assessment should consider customer, geographic, product, service and delivery-channel risks. Document the reasons for each risk rating to support appropriate CDD and identify potential money laundering or terrorist financing indicators. A documented assessment also helps demonstrate that kyc compliance guernsey controls are risk-based.

Incorrect PEP classification - Incorrectly identifying or classifying a politically exposed person can result in inadequate due diligence. Firms should assess PEPs and relevant family members or close associates, obtain source of funds and wealth information where required, secure senior management approval, and apply ongoing monitoring. These measures are important elements of both kyc guernsey and guernsey aml requirements.

Insufficient SOF/SOW evidence - Source of funds shows where transaction money came from; source of wealth shows how the customer built their overall wealth. For higher-risk relationships, Guernsey businesses should verify and document both. This evidence may be particularly important when applying enhanced due diligence under the firm's kyc compliance guernsey framework.

Failure to review adverse information - Credible adverse media can reveal fraud, corruption, tax crime, sanctions evasion or money laundering risks. Firms should assess it, update the customer’s risk rating where necessary and document any decision to continue or escalate the relationship. Effective kyc guernsey monitoring should ensure that relevant information is not overlooked after onboarding.

Treating jurisdiction risk mechanically - A connection to a higher-risk jurisdiction does not automatically make a customer high risk. Guernsey firms should consider the connection alongside the customer's activities, ownership, funds, wealth and transaction patterns before applying enhanced due diligence. This approach supports proportionate kyc compliance guernsey and avoids applying guernsey aml requirements without considering the full customer profile.

What MONEYVAL's Review Means for Guernsey Businesses

MONEYVAL's February 2025 evaluation recognised Guernsey's strong understanding of money laundering and terrorist financing risks, effective targeted financial sanctions and comprehensive beneficial ownership framework.

However, it also highlighted areas requiring continued improvement, including supervisory effectiveness, risk mitigation for complex corporate and trust structures, and the quality and consistency of suspicious activity reporting.

For Guernsey businesses, the message is clear: maintaining a passport copy is not enough. Firms should demonstrate effective, risk-based customer due diligence, enhanced due diligence where appropriate, ongoing monitoring, sanctions screening, accurate ownership checks and timely escalation of suspicious activity. These controls are central to effective KYC compliance in Guernsey and help businesses meet broader Guernsey AML requirements.

Bottom Line

KYC compliance in Guernsey extends beyond a one-time identity check. It forms part of the Bailiwick’s risk-based AML/CFT/CPF framework, requiring businesses to verify customers and beneficial owners, assess risk, conduct CDD or EDD, screen for sanctions and PEPs, monitor relationships, maintain records and report concerns. 

Effective KYC Guernsey processes should be proportionate, documented and continuously reviewed. Digital KYC technology can streamline these processes, while Binderr Services helps businesses manage verification, screening, risk assessment and ongoing compliance efficiently.

FAQs - KYC Compliance in Guernsey