AML Compliance Software
AML compliance software is the workspace where a compliance team turns customer data and transactions into risk ratings, screening decisions, alerts, cases and regulator filings. This hub gathers Creodata's writing on each of those parts, with a Kenyan lens: customer risk assessment and the risk-based approach under POCAMLA, sanctions and PEP screening and what to do with a name match, transaction-monitoring rules and the alert backlog they create, case management with four-eyes review, reporting to the Financial Reporting Centre, and the audit trail an examiner expects to find.
The articles are written for MLROs, heads of risk, procurement teams and the IT staff who support them at banks, SACCOs, microfinance institutions, fintechs and digital lenders in Kenya and across East Africa. Choosing a vendor? Start with the buyer's guide to AML compliance software in Kenya and the vendor RFP checklist. Designing the programme? Start with the complete AML platform guide; the goAML hub covers the reporting obligation itself.
AML software tools & resources
- Start here: AML Compliance Software in Kenya, a Buyer's Guide
- AML Vendor RFP Checklist (free scoring template)
- AML Software for SACCOs in Kenya
- Transaction Monitoring Software in Kenya
- Sanctions and PEP Screening in Kenya
- AML Compliance for Fintechs and Digital Lenders in Kenya
- AML Compliance Software in Uganda: Buyer's Guide
- AML Compliance Software in Tanzania: Buyer's Guide
- AML Compliance Software in Zambia: Buyer's Guide
- AML Compliance Software in Nigeria: Buyer's Guide
- The MLPPA 2022 Explained
- AML Compliance Software in Ghana: Buyer's Guide
- FICA Compliance and AML Software in South Africa: Buyer's Guide
- FICA Explained
- AML Compliance Software in the UAE: Buyer's Guide
- The Complete AML Platform Guide
- Creodata AML Compliance Software
- goAML Reporting Platform
- AML/CFT Compliance Advisory in Kenya
- The Complete goAML Reporting Guide
AML Compliance Software in Rwanda: A Buyer's Guide for Banks, Microfinance, Payment Firms and DNFBPs (2026)
How to choose AML compliance software in Rwanda under Law N° 001/2025 and the FIC's 2026 Regulations: goAML reporting, the 24-hour STR rule, the five-hour sanctions screening clock, the BNR's monitoring expectations, provider types, evaluation criteria, cost drivers and red flags.
Rwanda's Anti-Money Laundering Law N° 001/2025 Explained: Reporting Persons, Duties, the FIC and Penalties (2026)
A plain-English guide to Rwanda's Law N° 001/2025 on money laundering, terrorist financing and proliferation financing, with the FIC's 2026 Regulations: reporting persons, due diligence, reporting, targeted financial sanctions, offences and penalties, who enforces, and what changed from the 2023 law.
Zambia's Financial Intelligence Centre Act, 2010 Explained: The FIC Act, the PPMLA and the Bank of Zambia's AML Directives
A plain-English guide to Zambia's Financial Intelligence Centre Act, 2010 as amended in 2016 and 2020, the Prohibition and Prevention of Money Laundering Act, 2001 and the Bank of Zambia's AML directives: who is covered, the duties, the FIC's powers and the penalties.
Tanzania's Anti-Money Laundering Act, Cap. 423, and the Anti-Money Laundering Regulations, 2022 Explained
A plain-English guide to Tanzania's Anti-Money Laundering Act, Cap. 423 R.E. 2023, and the Anti-Money Laundering Regulations, 2022 (GN No. 397): the offence and penalties, reporting persons, due diligence, records, STRs, the FIU, supervisors, sanctions and the 2025 and pending 2026 amendments.
AML for Corporate Service Providers, Accountants and Auditors in the UAE: DNFBP Duties, UBO Rules, goAML and Fines (2026)
When UAE corporate service providers, accountants and audit firms are DNFBPs, who supervises them, the 2024 NRA ratings, CDD without a value threshold, the 25% beneficial-ownership rules and nominee disclosures, compliance officers and goAML, red flags, sanctions screening and the fines MoET has imposed.
AML for Virtual Asset Service Providers in the UAE: VARA's AML Rulebook, the Travel Rule, goAML and Fines (2026)
What UAE virtual asset service providers must do on AML in 2026: who regulates them (VARA, the CMA, the CBUAE, ADGM and DIFC), the 2025 federal law, the UAE Virtual Assets Travel Rule and its AED 3,500 daily aggregate, VARA's AML rulebook, goAML and sanctions reporting, the risk picture and VARA's fines.
Uganda's Anti-Money Laundering Act (Cap. 118) Explained: Offences, Accountable Persons, the FIA and Penalties (2026)
A plain-English guide to Uganda's Anti-Money Laundering Act, 2013 (now Cap. 118) and its Regulations: the money laundering offence and penalties, who is an accountable person, due diligence, reporting and record-keeping, the FIA's powers, supervision and administrative fines, and the 2017, 2022, 2023 and 2025 changes.
FICA Requirements for Banks in South Africa: Reports, Directive 5, the Prudential Authority and Its Fines (2026)
What South African banks must do under the FIC Act: the four regulatory reports including IFTRs above R19,999.99, Directive 5's 48-hour and 15-day clocks, wire transfers, the RMCP and the board, what Prudential Authority inspections find, and every PA sanction on a bank from 2022 to 2026.
FIC Act Compliance for Life Insurers in South Africa: Beneficiaries, Reporting and Prudential Authority Sanctions (2026)
Which insurers the FIC Act covers (life insurance business, not non-life or reinsurance), registering with the FIC, the Prudential Authority's risk returns, beneficiary due diligence under ID1/2022 and PCC 48, STRs, CTRs and terrorist property reports, sanctions screening, the 2025 sector risk assessment and every PA sanction on a life insurer.
AML for Exchange Houses in the UAE: CBUAE Rules, Wire Transfers, Fines and goAML Reporting (2026)
What UAE exchange houses must do on AML in 2026: the CBUAE's Exchange Business Regulation and Standards, the CID, CDD and EDD tiers, the AED 3,500 wire-transfer rule, screening and freezing, goAML reporting, the compliance officer, the 2025 fines and licence revocations, and registered hawala providers.
Digital Lenders in Nigeria: FCCPC Registration Under the DEON Regulations, and Your AML Duties (2026)
What Nigerian digital lenders and loan apps must do under the FCCPC's DEON Regulations 2025 and Guidelines: registration, fees, the AML items in the application, conduct and data rules, the 2026 court case, and where the MLPPA, the CBN and the NFIU come in.
UAE Federal Decree-Law No. 10 of 2025 Explained: The New AML Law and What It Requires
A plain-English guide to the UAE's Federal Decree by Law No. 10 of 2025 on anti-money laundering and countering terrorist and proliferation financing, and its executive regulations: who it covers, the offences and penalties, the FIU's powers, reporting, targeted financial sanctions, compliance officers and administrative fines.
Ghana's Anti-Money Laundering Act, 2020 (Act 1044) Explained: What Accountable Institutions Must Do
A plain-English guide to Ghana's Anti-Money Laundering Act, 2020 (Act 1044): the money laundering offence and its penalties, the Financial Intelligence Centre, who the Act covers, customer due diligence and PEPs, 24-hour STRs, cash and electronic transfer reports, records, compliance programmes, supervision and administrative penalties.
AML Compliance for Insurers in Nigeria: NAICOM, the MLPPA 2022 and the 2025 Insurance Reform Act (2026)
What Nigerian insurance institutions must do on AML: MLPPA 2022 duties, section 202 of the Nigerian Insurance Industry Reform Act 2025, NAICOM supervision, customer and beneficiary checks, STRs within 24 hours, currency transaction reports, NFIU filing and records.
AML Compliance for Microfinance Banks and Payment Service Providers in Nigeria (2026)
What Nigerian microfinance banks, payment service providers and mobile money operators must do on AML under the MLPPA 2022: customer due diligence and PEPs, 24-hour STRs, ₦5m/₦10m currency transaction reports, US$10,000 foreign transfers, NFIU and RapidAML filing, records and agent-channel risk.
FICA Compliance for Crypto Asset Service Providers in South Africa: Registration, Directive 9 and the Travel Rule (2026)
What South African crypto asset service providers must do under FICA: register with the FIC under Schedule 1 item 22 (and item 12 if FSCA-licensed), apply the Directive 9 travel rule from 30 April 2025, screen counterparties, handle unhosted wallets, and report to the FIC.
AML Compliance Software in Ghana: A Buyer's Guide for Banks, SDIs, Fintechs and DNFBPs (2026)
How to choose AML compliance software in Ghana under Act 1044: FIC goAML reporting, the 24-hour STR and cash transaction report rules, ECTRs, the Ghana Card, provider types, evaluation criteria, cost drivers and red flags.
FICA Explained: What the Financial Intelligence Centre Act Requires of South African Accountable Institutions (2026)
A plain-English guide to South Africa's Financial Intelligence Centre Act, 2001 (FICA): who it covers, registration, customer due diligence and PEPs, records, targeted financial sanctions, the four reports, the RMCP, governance, supervision and penalties.
The Money Laundering (Prevention and Prohibition) Act 2022 Explained: What Nigerian Financial Institutions and DNFBPs Must Do
A plain-English guide to Nigeria's Money Laundering (Prevention and Prohibition) Act 2022: who it covers, the cash limit, customer due diligence and PEPs, STRs within 24 hours, currency transaction reports, foreign transfers, records, compliance programmes, SCUML and penalties.
AML Compliance Software in Nigeria: A Buyer's Guide for Banks, Fintechs and DNFBPs (2026)
How to choose AML compliance software in Nigeria: NFIU goAML and RapidAML reporting, the 24-hour STR and ₦5m/₦10m CTR rules, provider types, evaluation criteria, cost drivers and red flags.
FICA Compliance and AML Software in South Africa: A Buyer's Guide for Accountable Institutions (2026)
How to choose FICA compliance and AML software in South Africa: FIC goAML reporting, the R49,999.99 cash threshold and 15-day STR rules, the RMCP, provider types, evaluation criteria, cost drivers and red flags.
AML Compliance Software in the UAE: A Buyer's Guide for Financial Institutions, VASPs and DNFBPs (2026)
How to choose AML compliance software in the UAE under Federal Decree-Law No. 10 of 2025: goAML reporting to the FIU, DPMSR and REAR reports, targeted financial sanctions, provider types, evaluation criteria, cost drivers and red flags.
AML Compliance for Betting Companies and Casinos in Nigeria: SCUML, STRs and the ₦5m/₦10m Rules (2026)
What Nigerian pools betting companies, online and land-based casinos must do under the MLPPA 2022: SCUML registration and supervision, the casino transaction register, 24-hour STRs, ₦5m and ₦10m reports, PEPs, sanctions and five-year records.
FICA Compliance for Estate Agents in South Africa: goAML Registration, RMCP and FIC Reporting (2026)
What South African estate agents must do under FICA: register with the FIC on goAML within 90 days, keep an RMCP, report cash above R49,999.99 within 3 days and suspicious transactions within 15, screen for sanctions and PEPs, and keep records for five years.
AML for Gold and Jewellery Dealers in the UAE: DPMSR, goAML and the AED 55,000 Rule (2026)
What UAE dealers in precious metals and stones must do under the 2025 AML law: the AED 55,000 cash line, DPMSR reports on goAML, customer ID, STRs without delay, sanctions and five-year records.
AML for Real Estate Brokers in the UAE: REAR Reports, goAML and Virtual Asset Payments (2026)
What UAE real estate brokers and agents must do under the 2025 AML law: when a REAR is due, cash of AED 55,000 or more and virtual asset payments, customer checks, STRs without delay and five-year records.
AML Compliance Software in Zambia: A Buyer's Guide for Banks, Microfinance and Fintechs (2026)
How to choose AML compliance software in Zambia: FIC reporting through goAML, provider types, evaluation criteria, what drives cost, and red flags.
AML Compliance Software in Tanzania: A Buyer's Guide for Banks, SACCOS and Fintechs (2026)
How to choose AML compliance software in Tanzania: goAML reporting to the FIU, the 24-hour STR clock, cash and EFT reports, vendor types, costs and red flags.
AML Compliance Software in Uganda: A Buyer's Guide for Banks, SACCOs and Fintechs (2026)
How to choose AML compliance software in Uganda: FIA and goAML requirements, the types of provider, evaluation criteria, what drives cost, and red flags.
Choosing an AML Software Vendor in Kenya: The RFP Checklist and Free Scoring Template
A 47-point RFP checklist for choosing AML software in Kenya: vendor questions, evidence requests and a free scoring spreadsheet for banks, SACCOs and fintechs.
AML Compliance for Fintechs and Digital Credit Providers in Kenya: The Obligations and How to Automate Them
AML rules for Kenyan payment providers, digital lenders and virtual asset firms: who is covered, what CBK and POCAMLA require, and how to automate compliance.
Sanctions and PEP Screening in Kenya: Which Lists to Screen, the 24-Hour Freeze Rule and the Evidence to Keep
Which sanctions lists Kenyan institutions must screen, the 24-hour freeze and reporting rule, how PEPs are defined under the 2023 Regulations, and what to keep.
Transaction Monitoring Software in Kenya: Channels, Typologies and What the FRC Expects
What transaction monitoring software must do in Kenya: the channels to cover, local typologies, rules versus models, back-testing, and alerts through to STRs.
AML Software for SACCOs in Kenya: What SASRA and POCAMLA Expect, and What to Automate First
What SASRA's 2024 AML guidelines and POCAMLA require of Kenyan SACCOs, the risks in SACCO channels, and a phased plan for choosing and rolling out AML software.
AML Compliance Software in Kenya: A Buyer's Guide for Banks, SACCOs and Fintechs (2026)
How to choose AML compliance software in Kenya: what it must do for FRC reporting, the types of vendor, evaluation criteria, what drives cost, and red flags.
Three Analysts, 900 Alerts a Week: How a Microfinance Lender Broke Its False-Positive Backlog
A microfinance lender drowning in 900 sanctions alerts a week rebuilt AML screening around entity resolution and risk-weighted alerting — not more analysts.
Adverse Media Screening: Catching the Risk Sanctions Lists Miss
Sanctions and PEP lists only show known, designated risk. Adverse media screening surfaces the rest — how negative-news screening works, how to filter for relevance and recency, and where it fits in onboarding, EDD and periodic review.
Audit-Ready AML: Evidence-First Investigations and the Four-Eyes Principle
When an examiner asks you to walk through a single decision, can you? How an append-only audit trail, evidence-first design and the four-eyes principle make every AML decision reconstructable — and inspections far less painful.
AML Case Management: From Alert to Disposition Without Losing the Audit Trail
A walk through the AML case lifecycle — queue assignment, the RFI cycle, SLA management, linked-case investigation, EDD, escalation, and the decision to file or close — built so every step leaves an audit trail.
Why AML Detection Fails Without Data Quality: Ingestion, Mapping, and DQ Rules
No monitoring rule can catch what bad data hides. How disciplined ingestion, field mapping, source certification and data-quality rules give your AML platform the clean, complete data it needs to detect and report accurately.
AML Compliance Platforms: The Complete Guide for Banks, SACCOs & Fintechs (2026)
What a modern AML compliance platform does end to end — customer risk assessment, sanctions and PEP screening, transaction monitoring, case management, entity resolution, explainable AI, data quality, audit trails, and regulatory reporting — the complete 2026 guide for East African institutions.
Keeping Up With AML Regulatory Change: Obligation Registries and Change Notices
AML obligations in East Africa change constantly, and 'we did not know' is not a defence. How an obligation registry, change-notice ingestion and tenant acknowledgement keep your controls aligned to current rules — with evidence you stayed current.
Beneficial Ownership and Entity Resolution: Mapping the Network Behind a Customer
Money launderers hide behind layers of entities. How entity resolution and a beneficial-ownership graph reveal the real network — resolving duplicate records, linking related parties, and surfacing UBO and layering for investigators.
Customer Risk Assessment: Building a Defensible 6-Factor CRA Model
How to build a customer risk assessment model regulators will accept — the six risk factors, configurable weights and bands, periodic review by risk band, and override controls protected by four-eyes approval.
Enhanced Due Diligence (EDD): When to Apply It and What It Requires
When standard CDD is not enough — the triggers for enhanced due diligence, the measures it requires (source of funds and wealth, senior approval, enhanced monitoring), and how to document EDD so it survives an inspection.
Explainable AI in AML: SHAP, Four-Eyes Activation, and the Kill Switch
AI can sharpen AML detection, but only if every decision is explainable and governed. How explainable AI works in compliance — SHAP top-3 reasons, confidence scores, human Accept/Modify/Reject, four-eyes model activation, drift monitoring and a kill switch.
Money Laundering Typologies Every Compliance Team Should Monitor
A field guide to the money laundering and terrorism financing typologies that matter in East Africa — placement, layering and integration, structuring, mobile-money abuse, trade-based laundering and funnel accounts — and how each maps to a monitoring rule.
How to Reduce False Positives in AML Screening Without Missing Real Risk
AML screening commonly drowns teams in false positives. The tuning levers that cut the noise safely — match thresholds, list scoping, secondary identifiers, explainable match reasons, and governed, four-eyes threshold changes with back-testing.
The Risk-Based Approach to AML: Designing a Program FATF and Your FIU Expect
The risk-based approach is the backbone of every credible AML program. How to translate FATF expectations into an enterprise risk assessment and proportionate controls that connect customer risk, screening, monitoring, case management and reporting.
Sanctions and PEP Screening Explained: Lists, Matching, and Decisions
A practical guide to sanctions and PEP screening — the lists involved, how fuzzy and multi-script name matching works, why every hit needs an explainable reason, and how to run a defensible false-positive workflow at onboarding and on an ongoing basis.
Transaction Monitoring in AML: How Rule-Based and Behavioural Detection Work
How AML transaction monitoring works end to end — rule-based versus behavioural detection, batch and streaming evaluation, typology-aligned rule packs, back-testing and tuning, and how alerts feed case management.
Watchlist Management in AML: Keeping Sanctions and PEP Lists Current and Auditable
Screening is only as good as the lists behind it. How watchlist management works — provider sync, manual uploads, versioning, and freshness and coverage dashboards that prove your lists were current when you screened.