name: "kyc-verification" description: "African KYC/AML verification system supporting NIN, BVN, NIMC, passport validation for Nigeria, Cameroon, CEMAC region with real-time compliance scoring" version: "1.0.0" author: "CemaPay AI Team" category: "compliance" tags: ["kyc", "aml", "verification", "nigeria", "cameroon", "cemac", "nin", "bvn", "compliance"] requiresAuth: true

KYC Verification Intelligence Skill

🎯 PURPOSE

This skill provides comprehensive Know Your Customer (KYC) and Anti-Money Laundering (AML) verification for African markets, with deep expertise in:

Nigerian Systems: NIN (National Identity Number), BVN (Bank Verification Number), NIMC validation
Cameroon/CEMAC: CNI (Carte Nationale d'Identité), passport verification, cross-border checks
AML Compliance: Sanctions screening, PEP (Politically Exposed Person) checks, watchlist matching
Risk Scoring: Real-time compliance risk assessment (1-10 scale)
Document Verification: ID card validation, liveness detection, biometric matching

🔍 WHEN TO USE THIS SKILL

Trigger this skill when users mention:

"verify identity", "check KYC", "validate NIN", "BVN verification"
"AML screening", "sanctions check", "PEP check", "compliance verification"
"onboard customer", "identity verification", "document validation"
"risk assessment", "customer due diligence", "CDD", "enhanced due diligence", "EDD"
Any Nigerian/Cameroon identity numbers (NIN: 11 digits, BVN: 11 digits, CNI format)

📋 VERIFICATION WORKFLOW

Step 1: Identity Document Collection

Required Fields:

Full Legal Name (as on ID)
Date of Birth (DD/MM/YYYY)
Nationality
Identity Number (NIN/BVN/CNI/Passport)
Address (current residential)
Phone Number (with country code)
Email Address

Optional but Recommended:

Secondary ID document
Proof of address (utility bill, bank statement)
Selfie for liveness check

Step 2: Document Validation Rules

Nigerian NIN (National Identity Number)

Format: 11 digits (e.g., 12345678901)
Issuing Authority: NIMC (National Identity Management Commission)
Validation:
- Must be exactly 11 digits
- No letters or special characters
- Check digit validation algorithm
- Age verification (minimum 16 years)
API Integration: NIMC API (requires government approval)
Manual Verification: Request NIN slip or virtual NIN

Example Valid NIN: 12345678901

Nigerian BVN (Bank Verification Number)

Format: 11 digits (e.g., 22334455667)
Issuing Authority: CBN (Central Bank of Nigeria)
Validation:
- Must be exactly 11 digits
- Linked to biometric data (fingerprints, photo)
- Cross-check with enrolled banks
API Integration: NIBSS BVN API
Data Retrieved: Name, DOB, phone, photo, enrollment date

Example Valid BVN: 22334455667

Cameroon CNI (Carte Nationale d'Identité)

Format: Variable (typically 10-13 characters, alphanumeric)
Issuing Authority: DGSN (Délégation Générale à la Sûreté Nationale)
Validation:
- Contains letters and numbers
- Includes region code prefix
- Check expiration date (10-year validity)
Manual Verification: Request physical card photo (front/back)

Example Valid CNI: CE123456789AB

International Passport

Format: Varies by country (typically 6-9 alphanumeric)
Validation:
- MRZ (Machine Readable Zone) verification
- Expiration date check (must be valid for 6+ months)
- Biographic page scan
- ICAO 9303 compliance
API Integration: International passport verification APIs

Step 3: AML/Sanctions Screening

Sanctions Lists to Check

OFAC (US Office of Foreign Assets Control)
- SDN List (Specially Designated Nationals)
- Consolidated Sanctions List
UN Security Council
- UN 1267/1989 ISIL & Al-Qaida Sanctions List
- UN Consolidated List
EU Sanctions
- EU Consolidated Financial Sanctions List
UK Sanctions
- HM Treasury Consolidated List
African Regional
- ECOWAS sanctions (West Africa)
- CEMAC sanctions (Central Africa)

PEP (Politically Exposed Person) Check

Definition: Individuals in prominent public positions (risk of corruption/bribery)
Categories:
- Senior government officials (ministers, ambassadors, judges)
- Military leaders (generals, admirals)
- State-owned enterprise executives
- Political party officials
Extended Family: Check close relatives and associates
Risk Level: High (requires Enhanced Due Diligence)

Adverse Media Screening

Sources: News articles, court records, regulatory actions
Keywords: fraud, corruption, money laundering, terrorism financing, sanctions violations
Time Range: Past 10 years minimum
Languages: English, French (for CEMAC region)

Step 4: Risk Scoring Algorithm

Risk Score: 1-10 (1 = lowest risk, 10 = highest risk)

Base Score: 5

Risk Factors (add points):
+ 3 points: Match on sanctions list
+ 3 points: Confirmed PEP status
+ 2 points: Adverse media findings (serious)
+ 2 points: High-risk country (FATF blacklist)
+ 1 point: Missing secondary ID
+ 1 point: Unverified address
+ 1 point: Recent address change (< 6 months)
+ 1 point: Young account holder (< 21 years)
+ 1 point: High transaction volume planned

Protective Factors (subtract points):
- 1 point: Secondary ID verified
- 1 point: Proof of address verified
- 1 point: Employer verification
- 1 point: Positive credit history
- 2 points: Government employee
- 2 points: Long-term resident (5+ years)

Final Score = Base + Risk - Protective (capped at 1-10)

Score Interpretation:

1-3: ✅ Low Risk - Standard KYC acceptable
4-6: ⚠️ Medium Risk - Enhanced Due Diligence recommended
7-8: 🚨 High Risk - Enhanced Due Diligence required, senior approval
9-10: ❌ Critical Risk - Reject or escalate to compliance officer

Step 5: Verification Output Template

KYC VERIFICATION REPORT
Generated: [Timestamp]
Reference ID: KYC-[YYYYMMDD]-[RandomID]

===========================
CUSTOMER INFORMATION
===========================
Full Name: [Name]
Date of Birth: [DOB]
Age: [Calculated Age]
Nationality: [Country]
Identity Number: [ID Type]: [Number]
Phone: [Phone with country code]
Email: [Email]
Address: [Full Address]

===========================
DOCUMENT VERIFICATION
===========================
Primary ID: [ID Type] - [Number]
Status: ✅ VERIFIED / ⚠️ PENDING / ❌ FAILED
Validation Date: [Date]
Issuing Authority: [Authority]
Expiration Date: [Date or N/A]
Document Quality: [High/Medium/Low]

Secondary ID: [ID Type] - [Number]
Status: ✅ VERIFIED / ⚠️ PENDING / ❌ NOT PROVIDED

===========================
AML SCREENING RESULTS
===========================
Sanctions Check: ✅ CLEAR / ❌ MATCH FOUND
  - OFAC SDN: [Result]
  - UN Consolidated: [Result]
  - EU Sanctions: [Result]
  - UK HMT: [Result]

PEP Check: ✅ NOT A PEP / ⚠️ PEP IDENTIFIED
  - Position: [If PEP]
  - Jurisdiction: [If PEP]
  - Risk Level: [If PEP]

Adverse Media: ✅ CLEAR / ⚠️ FINDINGS
  - Articles Found: [Number]
  - Severity: [Low/Medium/High]
  - Summary: [Brief summary if findings]

===========================
RISK ASSESSMENT
===========================
Overall Risk Score: [X/10]
Risk Category: [Low/Medium/High/Critical]

Risk Factors Identified:
- [Factor 1 with +X points]
- [Factor 2 with +X points]

Protective Factors:
- [Factor 1 with -X points]
- [Factor 2 with -X points]

===========================
RECOMMENDATION
===========================
Decision: ✅ APPROVED / ⚠️ ENHANCED DUE DILIGENCE / ❌ REJECTED

Rationale: [Explanation based on score and findings]

Required Actions:
- [Action 1 if any]
- [Action 2 if any]

Next Review Date: [Date - typically 12 months for low risk, 6 months for medium/high]

===========================
COMPLIANCE NOTES
===========================
- All checks performed in compliance with FATF recommendations
- Nigerian CBN KYC regulations observed
- CEMAC AML/CFT directives followed
- Data retention: 7 years from account closure (regulatory requirement)

Verified By: [AI Agent Name]
Compliance Officer: [If human review required]

🔐 DATA PRIVACY & SECURITY

GDPR/African Data Protection Compliance

Nigeria: NDPR (Nigeria Data Protection Regulation) 2019
Cameroon: Law No. 2010/012 on Cybersecurity and Personal Data Protection
CEMAC: Regional data protection framework

Data Handling Requirements

Consent: Explicit user consent required before verification
Purpose Limitation: Data used only for KYC/AML purposes
Data Minimization: Collect only necessary information
Storage: Encrypted storage (AES-256)
Retention: 7 years after account closure (legal requirement)
Access Control: Role-based access (compliance officers only)
Audit Trail: Log all verification activities
Right to Erasure: Allow data deletion (with regulatory exceptions)

PII Protection

Never display full ID numbers in UI (mask: 123****8901)
Redact sensitive info in logs
Use secure channels for data transmission (HTTPS/TLS 1.3)
Implement rate limiting on verification APIs

🌍 REGION-SPECIFIC CONSIDERATIONS

Nigeria

Regulatory Body: CBN (Central Bank of Nigeria), NIMC
Key Regulations: CBN KYC regulations 2013 (updated 2020)
Common IDs: NIN (primary), BVN (banking), Driver's License, International Passport
Challenges: NIN enrollment still ongoing (not 100% coverage), network issues with NIMC API
Best Practice: Accept BVN as alternative to NIN for banking services

Cameroon

Regulatory Body: BEAC (Bank of Central African States), COBAC (Banking Commission)
Key Regulations: CEMAC AML/CFT directive 01/18-UEAC-639-CM-33
Common IDs: CNI (Carte Nationale d'Identité), passport, voter card
Challenges: Manual verification often required, limited digital infrastructure
Best Practice: Request physical document photos, implement manual review workflow

CEMAC Region (6 countries)

Cameroon, Central African Republic, Chad, Republic of Congo, Equatorial Guinea, Gabon
Unified Regulations: CEMAC Banking Commission (COBAC) directives
Cross-Border: Support identity verification across member states
Challenges: Varying digital infrastructure, multiple languages (French, English, local)

💡 INTEGRATION EXAMPLES

Example 1: Nigerian User Onboarding (NIN)

User Message: "I want to verify my identity. My NIN is 12345678901, name is John Doe, DOB 01/01/1990"

AI Response:

I'll verify your identity using your NIN. Let me process this information...

KYC VERIFICATION REPORT
Reference: KYC-20251024-XY7G3

✅ CUSTOMER INFORMATION
Full Name: John Doe
Date of Birth: 01/01/1990 (Age: 35)
NIN: 123****8901
Status: Under Verification

✅ NIN VALIDATION
Format: Valid (11 digits)
Age Check: Passed (35 years, minimum 16 required)
NIMC API: Querying... [In production, actual API call]

⚠️ ADDITIONAL INFORMATION NEEDED
To complete verification, please provide:
1. Phone number (with +234 country code)
2. Current residential address
3. Email address
4. Optional: BVN for enhanced verification

📋 NEXT STEPS
Once additional info is provided, I'll complete:
- AML/Sanctions screening
- PEP check
- Risk scoring
- Final verification decision

Estimated completion: 2-5 minutes

Example 2: Cameroon User with CNI

User Message: "Verify my CNI: CE123456789AB, name Marie Nkomo, DOB 15/05/1988, Douala address"

AI Response:

Bonjour Marie! I'll verify your Cameroon CNI.

KYC VERIFICATION REPORT
Reference: KYC-20251024-CM4K9

✅ CUSTOMER INFORMATION
Full Name: Marie Nkomo
Date of Birth: 15/05/1988 (Age: 37)
CNI: CE12******9AB
Location: Douala, Cameroon

✅ CNI VALIDATION
Format: Valid (Cameroon format)
Region: CE prefix (valid for Littoral region)
Status: Pending document scan verification

📸 REQUIRED DOCUMENTS
Please upload:
1. CNI front photo (clear, no glare)
2. CNI back photo (with signature)
3. Selfie for liveness check (optional but recommended)

⚠️ MANUAL REVIEW
Due to limited digital infrastructure in Cameroon, your verification will include manual review by our compliance team.

Estimated completion: 24-48 hours
I'll notify you at [phone/email] when complete.

Example 3: High-Risk PEP Detection

User Message: "Verify identity: Name is Hon. Samuel Eze, Nigerian Minister of Finance representative"

AI Response:

🚨 HIGH-RISK VERIFICATION DETECTED

KYC VERIFICATION REPORT
Reference: KYC-20251024-PEP2X
⚠️ PRIORITY: ENHANCED DUE DILIGENCE REQUIRED

✅ CUSTOMER INFORMATION
Full Name: Hon. Samuel Eze
Position: Nigerian Government Official
Risk Category: HIGH RISK - PEP IDENTIFIED

⚠️ PEP STATUS CONFIRMED
Category: Senior Government Official
Jurisdiction: Nigeria (Federal level)
Position: Ministry of Finance Representative
Risk Level: HIGH (Enhanced Due Diligence mandatory)

📋 ENHANCED DUE DILIGENCE REQUIREMENTS
As a Politically Exposed Person, additional verification is required:

1. ✅ Source of Wealth Declaration
   - Please provide documentation explaining source of funds

2. ✅ Enhanced Document Verification
   - Government-issued ID (NIN/Passport)
   - Proof of government appointment
   - Asset declaration (if applicable)

3. ✅ Senior Management Approval
   - This verification requires compliance officer approval
   - Estimated review time: 3-5 business days

4. ✅ Ongoing Monitoring
   - Account will be subject to continuous monitoring
   - Quarterly reviews required
   - Transaction limits may apply

📞 NEXT STEPS
Our compliance team will contact you within 24 hours to schedule an interview and document collection.

Reference this ID: KYC-20251024-PEP2X

Note: PEP status does NOT automatically disqualify you. We're required by law to perform enhanced checks for transparency and compliance.

📊 MONITORING & REPORTING

Periodic Reviews

Low Risk: Annual review (12 months)
Medium Risk: Semi-annual review (6 months)
High Risk/PEP: Quarterly review (3 months)
Critical Risk: Monthly monitoring

Red Flags for Re-Verification

Significant increase in transaction volume (>300% baseline)
Cross-border transactions to high-risk countries
Unusual transaction patterns
Change in customer behavior
Adverse media findings
Address/phone/email changes

Compliance Reporting

CTR (Currency Transaction Report): Transactions >₦5,000,000 or XAF 10,000,000
STR (Suspicious Transaction Report): Any suspicious activity
Quarterly Reports: Summary to internal compliance
Annual Audit: Full KYC portfolio review

🔧 API INTEGRATIONS (Production)

Nigerian Systems

NIMC API: NIN verification (requires government approval)
NIBSS BVN API: Bank Verification Number lookup
CAC API: Corporate verification (for business accounts)

International Services

Sumsub: Global KYC/AML (already integrated in CemaPay)
Onfido: Document verification, liveness checks
ComplyAdvantage: AML screening, sanctions lists
World-Check: PEP and sanctions database (Refinitiv)
Dow Jones Risk & Compliance: Watchlist screening

Cameroon/CEMAC

Manual Process: Limited APIs available, human-in-the-loop verification
BEAC Integration: Future integration with Central African States Bank

⚖️ LEGAL DISCLAIMERS

This skill provides automated verification assistance but does NOT replace human compliance officers for high-risk cases
Final KYC decisions must comply with local regulations (CBN, COBAC, FATF)
Data handling must comply with NDPR (Nigeria), Cameroon data protection law
AML screening uses publicly available sanctions lists (updated daily)
PEP databases may have false positives - always verify with primary sources
Retain all verification records for 7 years (legal requirement)

Version: 1.0.0
Last Updated: October 24, 2025
Maintainer: CemaPay Compliance Team
Support: compliance@cemapay.com