---

name: "kyc-verification" description: "African KYC/AML verification system supporting NIN, BVN, NIMC, passport validation for Nigeria, Cameroon, CEMAC region with real-time compliance scoring" version: "1.0.0" author: "CemaPay AI Team" category: "compliance" tags: ["kyc", "aml", "verification", "nigeria", "cameroon", "cemac", "nin", "bvn", "compliance"] requiresAuth: true

KYC Verification Intelligence Skill

🎯 PURPOSE

This skill provides comprehensive Know Your Customer (KYC) and Anti-Money Laundering (AML) verification for African markets, with deep expertise in:

• Nigerian Systems: NIN (National Identity Number), BVN (Bank Verification Number), NIMC validation
• Cameroon/CEMAC: CNI (Carte Nationale d'Identité), passport verification, cross-border checks
• AML Compliance: Sanctions screening, PEP (Politically Exposed Person) checks, watchlist matching
• Risk Scoring: Real-time compliance risk assessment (1-10 scale)
• Document Verification: ID card validation, liveness detection, biometric matching

🔍 WHEN TO USE THIS SKILL

Trigger this skill when users mention:

• "verify identity", "check KYC", "validate NIN", "BVN verification"
• "AML screening", "sanctions check", "PEP check", "compliance verification"
• "onboard customer", "identity verification", "document validation"
• "risk assessment", "customer due diligence", "CDD", "enhanced due diligence", "EDD"
• Any Nigerian/Cameroon identity numbers (NIN: 11 digits, BVN: 11 digits, CNI format)

📋 VERIFICATION WORKFLOW

Step 1: Identity Document Collection

Required Fields:

• Full Legal Name (as on ID)
• Date of Birth (DD/MM/YYYY)
• Nationality
• Identity Number (NIN/BVN/CNI/Passport)
• Address (current residential)
• Phone Number (with country code)
• Email Address

Optional but Recommended:

• Secondary ID document
• Proof of address (utility bill, bank statement)
• Selfie for liveness check

Step 2: Document Validation Rules

Nigerian NIN (National Identity Number)

• Format: 11 digits (e.g., 12345678901)
• Issuing Authority: NIMC (National Identity Management Commission)
• Validation:
  • Must be exactly 11 digits
  • No letters or special characters
  • Check digit validation algorithm
  • Age verification (minimum 16 years)
• API Integration: NIMC API (requires government approval)
• Manual Verification: Request NIN slip or virtual NIN

Example Valid NIN: 12345678901

Nigerian BVN (Bank Verification Number)

• Format: 11 digits (e.g., 22334455667)
• Issuing Authority: CBN (Central Bank of Nigeria)
• Validation:
  • Must be exactly 11 digits
  • Linked to biometric data (fingerprints, photo)
  • Cross-check with enrolled banks
• API Integration: NIBSS BVN API
• Data Retrieved: Name, DOB, phone, photo, enrollment date

Example Valid BVN: 22334455667

Cameroon CNI (Carte Nationale d'Identité)

• Format: Variable (typically 10-13 characters, alphanumeric)
• Issuing Authority: DGSN (Délégation Générale à la Sûreté Nationale)
• Validation:
  • Contains letters and numbers
  • Includes region code prefix
  • Check expiration date (10-year validity)
• Manual Verification: Request physical card photo (front/back)

Example Valid CNI: CE123456789AB

International Passport

• Format: Varies by country (typically 6-9 alphanumeric)
• Validation:
  • MRZ (Machine Readable Zone) verification
  • Expiration date check (must be valid for 6+ months)
  • Biographic page scan
  • ICAO 9303 compliance
• API Integration: International passport verification APIs

Step 3: AML/Sanctions Screening

Sanctions Lists to Check

1. OFAC (US Office of Foreign Assets Control)

   • SDN List (Specially Designated Nationals)
   • Consolidated Sanctions List

2. UN Security Council

   • UN 1267/1989 ISIL & Al-Qaida Sanctions List
   • UN Consolidated List

3. EU Sanctions

   • EU Consolidated Financial Sanctions List

4. UK Sanctions

   • HM Treasury Consolidated List

5. African Regional

   • ECOWAS sanctions (West Africa)
   • CEMAC sanctions (Central Africa)

PEP (Politically Exposed Person) Check

• Definition: Individuals in prominent public positions (risk of corruption/bribery)
• Categories:
  • Senior government officials (ministers, ambassadors, judges)
  • Military leaders (generals, admirals)
  • State-owned enterprise executives
  • Political party officials
• Extended Family: Check close relatives and associates
• Risk Level: High (requires Enhanced Due Diligence)

Adverse Media Screening

• Sources: News articles, court records, regulatory actions
• Keywords: fraud, corruption, money laundering, terrorism financing, sanctions violations
• Time Range: Past 10 years minimum
• Languages: English, French (for CEMAC region)

Step 4: Risk Scoring Algorithm

Risk Score: 1-10 (1 = lowest risk, 10 = highest risk)

CopyBase Score: 5

Risk Factors (add points):
+ 3 points: Match on sanctions list
+ 3 points: Confirmed PEP status
+ 2 points: Adverse media findings (serious)
+ 2 points: High-risk country (FATF blacklist)
+ 1 point: Missing secondary ID
+ 1 point: Unverified address
+ 1 point: Recent address change (< 6 months)
+ 1 point: Young account holder (< 21 years)
+ 1 point: High transaction volume planned

Protective Factors (subtract points):
- 1 point: Secondary ID verified
- 1 point: Proof of address verified
- 1 point: Employer verification
- 1 point: Positive credit history
- 2 points: Government employee
- 2 points: Long-term resident (5+ years)

Final Score = Base + Risk - Protective (capped at 1-10)

Score Interpretation:

• 1-3: ✅ Low Risk - Standard KYC acceptable
• 4-6: ⚠️ Medium Risk - Enhanced Due Diligence recommended
• 7-8: 🚨 High Risk - Enhanced Due Diligence required, senior approval
• 9-10: ❌ Critical Risk - Reject or escalate to compliance officer

Step 5: Verification Output Template

CopyKYC VERIFICATION REPORT
Generated: [Timestamp]
Reference ID: KYC-[YYYYMMDD]-[RandomID]

===========================
CUSTOMER INFORMATION
===========================
Full Name: [Name]
Date of Birth: [DOB]
Age: [Calculated Age]
Nationality: [Country]
Identity Number: [ID Type]: [Number]
Phone: [Phone with country code]
Email: [Email]
Address: [Full Address]

===========================
DOCUMENT VERIFICATION
===========================
Primary ID: [ID Type] - [Number]
Status: ✅ VERIFIED / ⚠️ PENDING / ❌ FAILED
Validation Date: [Date]
Issuing Authority: [Authority]
Expiration Date: [Date or N/A]
Document Quality: [High/Medium/Low]

Secondary ID: [ID Type] - [Number]
Status: ✅ VERIFIED / ⚠️ PENDING / ❌ NOT PROVIDED

===========================
AML SCREENING RESULTS
===========================
Sanctions Check: ✅ CLEAR / ❌ MATCH FOUND
  - OFAC SDN: [Result]
  - UN Consolidated: [Result]
  - EU Sanctions: [Result]
  - UK HMT: [Result]

PEP Check: ✅ NOT A PEP / ⚠️ PEP IDENTIFIED
  - Position: [If PEP]
  - Jurisdiction: [If PEP]
  - Risk Level: [If PEP]

Adverse Media: ✅ CLEAR / ⚠️ FINDINGS
  - Articles Found: [Number]
  - Severity: [Low/Medium/High]
  - Summary: [Brief summary if findings]

===========================
RISK ASSESSMENT
===========================
Overall Risk Score: [X/10]
Risk Category: [Low/Medium/High/Critical]

Risk Factors Identified:
- [Factor 1 with +X points]
- [Factor 2 with +X points]

Protective Factors:
- [Factor 1 with -X points]
- [Factor 2 with -X points]

===========================
RECOMMENDATION
===========================
Decision: ✅ APPROVED / ⚠️ ENHANCED DUE DILIGENCE / ❌ REJECTED

Rationale: [Explanation based on score and findings]

Required Actions:
- [Action 1 if any]
- [Action 2 if any]

Next Review Date: [Date - typically 12 months for low risk, 6 months for medium/high]

===========================
COMPLIANCE NOTES
===========================
- All checks performed in compliance with FATF recommendations
- Nigerian CBN KYC regulations observed
- CEMAC AML/CFT directives followed
- Data retention: 7 years from account closure (regulatory requirement)

Verified By: [AI Agent Name]
Compliance Officer: [If human review required]

🔐 DATA PRIVACY & SECURITY

GDPR/African Data Protection Compliance

• Nigeria: NDPR (Nigeria Data Protection Regulation) 2019
• Cameroon: Law No. 2010/012 on Cybersecurity and Personal Data Protection
• CEMAC: Regional data protection framework

Data Handling Requirements

1. Consent: Explicit user consent required before verification
2. Purpose Limitation: Data used only for KYC/AML purposes
3. Data Minimization: Collect only necessary information
4. Storage: Encrypted storage (AES-256)
5. Retention: 7 years after account closure (legal requirement)
6. Access Control: Role-based access (compliance officers only)
7. Audit Trail: Log all verification activities
8. Right to Erasure: Allow data deletion (with regulatory exceptions)

PII Protection

• Never display full ID numbers in UI (mask: 123****8901)
• Redact sensitive info in logs
• Use secure channels for data transmission (HTTPS/TLS 1.3)
• Implement rate limiting on verification APIs

🌍 REGION-SPECIFIC CONSIDERATIONS

Nigeria

• Regulatory Body: CBN (Central Bank of Nigeria), NIMC
• Key Regulations: CBN KYC regulations 2013 (updated 2020)
• Common IDs: NIN (primary), BVN (banking), Driver's License, International Passport
• Challenges: NIN enrollment still ongoing (not 100% coverage), network issues with NIMC API
• Best Practice: Accept BVN as alternative to NIN for banking services

Cameroon

• Regulatory Body: BEAC (Bank of Central African States), COBAC (Banking Commission)
• Key Regulations: CEMAC AML/CFT directive 01/18-UEAC-639-CM-33
• Common IDs: CNI (Carte Nationale d'Identité), passport, voter card
• Challenges: Manual verification often required, limited digital infrastructure
• Best Practice: Request physical document photos, implement manual review workflow

CEMAC Region (6 countries)

• Cameroon, Central African Republic, Chad, Republic of Congo, Equatorial Guinea, Gabon
• Unified Regulations: CEMAC Banking Commission (COBAC) directives
• Cross-Border: Support identity verification across member states
• Challenges: Varying digital infrastructure, multiple languages (French, English, local)

💡 INTEGRATION EXAMPLES

Example 1: Nigerian User Onboarding (NIN)

User Message: "I want to verify my identity. My NIN is 12345678901, name is John Doe, DOB 01/01/1990"

AI Response:

CopyI'll verify your identity using your NIN. Let me process this information...

KYC VERIFICATION REPORT
Reference: KYC-20251024-XY7G3

✅ CUSTOMER INFORMATION
Full Name: John Doe
Date of Birth: 01/01/1990 (Age: 35)
NIN: 123****8901
Status: Under Verification

✅ NIN VALIDATION
Format: Valid (11 digits)
Age Check: Passed (35 years, minimum 16 required)
NIMC API: Querying... [In production, actual API call]

⚠️ ADDITIONAL INFORMATION NEEDED
To complete verification, please provide:
1. Phone number (with +234 country code)
2. Current residential address
3. Email address
4. Optional: BVN for enhanced verification

📋 NEXT STEPS
Once additional info is provided, I'll complete:
- AML/Sanctions screening
- PEP check
- Risk scoring
- Final verification decision

Estimated completion: 2-5 minutes

Example 2: Cameroon User with CNI

User Message: "Verify my CNI: CE123456789AB, name Marie Nkomo, DOB 15/05/1988, Douala address"

AI Response:

CopyBonjour Marie! I'll verify your Cameroon CNI.

KYC VERIFICATION REPORT
Reference: KYC-20251024-CM4K9

✅ CUSTOMER INFORMATION
Full Name: Marie Nkomo
Date of Birth: 15/05/1988 (Age: 37)
CNI: CE12******9AB
Location: Douala, Cameroon

✅ CNI VALIDATION
Format: Valid (Cameroon format)
Region: CE prefix (valid for Littoral region)
Status: Pending document scan verification

📸 REQUIRED DOCUMENTS
Please upload:
1. CNI front photo (clear, no glare)
2. CNI back photo (with signature)
3. Selfie for liveness check (optional but recommended)

⚠️ MANUAL REVIEW
Due to limited digital infrastructure in Cameroon, your verification will include manual review by our compliance team.

Estimated completion: 24-48 hours
I'll notify you at [phone/email] when complete.

Example 3: High-Risk PEP Detection

User Message: "Verify identity: Name is Hon. Samuel Eze, Nigerian Minister of Finance representative"

AI Response:

Copy🚨 HIGH-RISK VERIFICATION DETECTED

KYC VERIFICATION REPORT
Reference: KYC-20251024-PEP2X
⚠️ PRIORITY: ENHANCED DUE DILIGENCE REQUIRED

✅ CUSTOMER INFORMATION
Full Name: Hon. Samuel Eze
Position: Nigerian Government Official
Risk Category: HIGH RISK - PEP IDENTIFIED

⚠️ PEP STATUS CONFIRMED
Category: Senior Government Official
Jurisdiction: Nigeria (Federal level)
Position: Ministry of Finance Representative
Risk Level: HIGH (Enhanced Due Diligence mandatory)

📋 ENHANCED DUE DILIGENCE REQUIREMENTS
As a Politically Exposed Person, additional verification is required:

1. ✅ Source of Wealth Declaration
   - Please provide documentation explaining source of funds

2. ✅ Enhanced Document Verification
   - Government-issued ID (NIN/Passport)
   - Proof of government appointment
   - Asset declaration (if applicable)

3. ✅ Senior Management Approval
   - This verification requires compliance officer approval
   - Estimated review time: 3-5 business days

4. ✅ Ongoing Monitoring
   - Account will be subject to continuous monitoring
   - Quarterly reviews required
   - Transaction limits may apply

📞 NEXT STEPS
Our compliance team will contact you within 24 hours to schedule an interview and document collection.

Reference this ID: KYC-20251024-PEP2X

Note: PEP status does NOT automatically disqualify you. We're required by law to perform enhanced checks for transparency and compliance.

📊 MONITORING & REPORTING

Periodic Reviews

• Low Risk: Annual review (12 months)
• Medium Risk: Semi-annual review (6 months)
• High Risk/PEP: Quarterly review (3 months)
• Critical Risk: Monthly monitoring

Red Flags for Re-Verification

• Significant increase in transaction volume (>300% baseline)
• Cross-border transactions to high-risk countries
• Unusual transaction patterns
• Change in customer behavior
• Adverse media findings
• Address/phone/email changes

Compliance Reporting

• CTR (Currency Transaction Report): Transactions >₦5,000,000 or XAF 10,000,000
• STR (Suspicious Transaction Report): Any suspicious activity
• Quarterly Reports: Summary to internal compliance
• Annual Audit: Full KYC portfolio review

🔧 API INTEGRATIONS (Production)

Nigerian Systems

• NIMC API: NIN verification (requires government approval)
• NIBSS BVN API: Bank Verification Number lookup
• CAC API: Corporate verification (for business accounts)

International Services

• Sumsub: Global KYC/AML (already integrated in CemaPay)
• Onfido: Document verification, liveness checks
• ComplyAdvantage: AML screening, sanctions lists
• World-Check: PEP and sanctions database (Refinitiv)
• Dow Jones Risk & Compliance: Watchlist screening

Cameroon/CEMAC

• Manual Process: Limited APIs available, human-in-the-loop verification
• BEAC Integration: Future integration with Central African States Bank

⚖️ LEGAL DISCLAIMERS

• This skill provides automated verification assistance but does NOT replace human compliance officers for high-risk cases
• Final KYC decisions must comply with local regulations (CBN, COBAC, FATF)
• Data handling must comply with NDPR (Nigeria), Cameroon data protection law
• AML screening uses publicly available sanctions lists (updated daily)
• PEP databases may have false positives - always verify with primary sources
• Retain all verification records for 7 years (legal requirement)

---

Version: 1.0.0
Last Updated: October 24, 2025
Maintainer: CemaPay Compliance Team
Support: compliance@cemapay.com