Services/FICA Compliance
FIC compliance guide

FICA Compliance: how to get FIC compliant

A practical South African guide for businesses that need to move from concern to a working compliance file: FIC registration, RMCP, CDD, AML/PEP, sanctions, reporting triggers and the VerifyNow reports that support each step.

Important distinction

VerifyNow gives you verification reports and audit evidence. Your RMCP, accountable-institution status, customer risk rating and reporting decisions determine whether your business is compliant.

See the KYC Bundle
Step-by-step

What FICA compliance usually requires

Not every business is an accountable institution, and not every customer needs the same checks. Use the official FIC guidance and your RMCP to decide the final control set.

01

Confirm accountable-institution status

Check whether your business and workflow are listed in Schedule 1 of the FIC Act or otherwise regulated. If yes, you need a formal FICA programme, not only identity reports.

02

Register and assign responsibility

Accountable institutions must register with the FIC on goAML, appoint responsible people and make sure reporting duties can be performed.

03

Document your RMCP

The RMCP sets out how your business identifies customers, verifies information, applies risk ratings, keeps records, screens risk and reports suspicious activity.

04

Run CDD and keep report evidence

Identify and verify natural persons, companies, directors or representatives before onboarding or transacting. Higher-risk customers need enhanced due diligence.

05

Screen and monitor risk

Screen for targeted financial sanctions, PEP and AML risk where your RMCP requires it, then review hits before deciding whether to proceed or report.

06

Report where required

FICA reporting is separate from verification. Suspicious and unusual activity, cash-threshold events and other reportable matters are submitted to the FIC through goAML where applicable.

Report mapping

Which check supports which FICA step

Natural-person CDD

You need to identify and verify a South African individual.

Evidence it gives you

Verified identity fields, Home Affairs photo and transaction reference.

Stronger onboarding file

You want one report combining identity confirmation and supporting trace context.

VerifyNow check

KYC Bundle

Evidence it gives you

Home Affairs ID + Photo with Consumer Trace Lite fields where available.

Remote person assurance

A customer signs up remotely or you need to bind a person to the ID record.

VerifyNow check

Face Match

Evidence it gives you

Selfie-to-reference match result and confidence score.

Company or representative CDD

The customer is a company, supplier, agency, developer or business counterparty.

Evidence it gives you

Company registration status, details and director context.

Bank account control

Deposits, refunds, debit orders, payouts or settlements are part of the workflow.

Evidence it gives you

Account-found, account-open, ID/company match and account capability indicators.

AML, PEP and sanctions risk

Your RMCP, customer risk rating or transaction facts require screening or EDD.

Evidence it gives you

Sanctions, PEP, watchlist and adverse-risk matches for review.

Document evidence

A passport, ID document, licence or uploaded file is part of the customer file.

VerifyNow check

Document Verification

Evidence it gives you

Document authentication, OCR and tamper signals where supported.

Sample reports

See the reports that support your file

These are sample reports from the same report surfaces users see in the dashboard. They show the evidence a reviewer can attach to a CDD, KYB, bank-verification or AML/PEP review.

KYC Bundle Report

Consumer ID: 9710225015088

Date:

Time:

Verification SuccessReal time results from official sources
SUCCESS

Home Affairs ID Photo

Identity Photo:
User's ID
ID Number:9710225015088
First Names:SIYABONGA
Surname:NDOSI
Gender:Male
Date of Birth:1997-10-22
Age:28
Citizenship:South African
Country of Birth:Gauteng
Country of Birth:ZA
ID Book Issued Date:2015-11-20
ID Card Indicator:Yes
ID Card Indicator:Yes
ID Sequence Number:1
ID Blocked:No
Match Status:Matched
Match Status:Matched
Hanis ID Match:Matched
Deceased Status:Alive
Marital Status:Single

Consumer Trace Lite

ID Number:9710225015088
ID Number:9710225015088
Surname:NDOSI
First Names:SIYABONGA
D O B:1997-10-22
Marital Status:Single
Deceased Status:Alive
Cell Number:+27 82 555 1847
Email Address:sample.person@example.co.za
Address Line1:42 Oxford Road
Address Line2:Rosebank
Postal Code:2196

Powered by VerifyNow

This report is confidential and intended for authorized use only. The user has confirmed a lawful basis for this lookup. Fraud-prevention reports are restricted to fraud detection and fraud prevention; reports containing Home Affairs photo or biometric information must be handled as special personal information under POPIA.

By industry

Start with your sector

Industry pages translate the same FICA and fraud-prevention controls into the reports each team usually needs.

FAQ

FICA compliance questions

Does running VerifyNow reports make my business FIC compliant?+

No. Reports are evidence for your CDD, AML/PEP, bank-verification or KYB file. FICA compliance also requires accountable-institution registration where applicable, an RMCP, risk ratings, record keeping, monitoring and reporting decisions.

When should I use the KYC Bundle?+

Use the KYC Bundle when you need a stronger onboarding record in one result. It combines Home Affairs ID + Photo with Consumer Trace Lite context where available, which is useful for CDD and fraud-prevention workflows.

Is AML/PEP screening always required?+

Targeted financial sanctions and PEP-related obligations are part of FICA risk controls for accountable institutions. The exact timing and depth of screening should follow your RMCP, customer risk rating and current FIC guidance.

Where do I file suspicious transaction reports?+

FIC reports are filed through goAML where a reporting duty is triggered. VerifyNow helps with verification evidence, but it does not file suspicious activity, cash threshold or other statutory reports on your behalf.

Build your first CDD file

Use the toolkit to define the workflow, then run the checks that match your customer, entity and risk profile.