Identify every member
Verify each member's identity at registration, including members who join by app or through an agent.
Financial services / SACCOs
Deposit-taking SACCOs and the larger non-withdrawable deposit-taking SACCOs are licensed and supervised by SASRA. They are reporting institutions for anti-money-laundering purposes, and digital channels mean more members now join without visiting a branch.
At a glance
Primary regulator
Sacco Societies Regulatory Authority (SASRA)
Who this covers
Deposit-taking (FOSA) SACCOs and SASRA-regulated non-withdrawable deposit-taking SACCOs, including their mobile and digital lending channels.
Regulations that apply
Licensing, governance, prudential and reporting requirements for SASRA-regulated SACCOs.
SACCOs are reporting institutions: member due diligence, suspicious-transaction reports to the FRC and record keeping, with SASRA supervising AML compliance for the SACCOs it regulates.
SASRA's expectations for member risk assessment, beneficial ownership of group and corporate members, and screening of officials.
Lawful processing and retention of members' identification data, including data shared with guarantors and credit bureaus.
What you have to do
Verify each member's identity at registration, including members who join by app or through an agent.
Identify the people who own or control chamas, companies and other group members.
Check board members, management and members against sanctions and PEP lists.
Report suspicious transactions to the FRC and keep the evidence behind every member decision.
Fraud to watch for
Impersonated members
Fraudsters using a member's ID to withdraw deposits or take loans in their name.
Ghost members and guarantors
Fictitious members created to guarantee or draw loans.
Forged supporting documents
Altered payslips, letters and IDs submitted with loan applications.
How Sentinel helps
Related reading
Why increased monitoring raises the bar for customer due diligence at banks, SACCOs, PSPs and fintechs, and what a defensible onboarding record looks like.
Read the article 23 October 2026 · 4 min readFace-swap video and replay attacks are now cheap. What institutions should expect from liveness and document checks, and why the record matters as much as the result.
Read the articleGeneral information, not legal advice. Last reviewed October 2026. Requirements change, so confirm the current position with the regulator or your counsel before relying on it.