Bank-to-VASP onboarding: what to verify before you open the account

Three ways to see it

1. 1

   VASP onboarding is enhanced due diligence by default. The April 2026 SBP circular and PVARA guidance both classify VASPs as a higher-risk customer category. That label is not a stigma; it is an instruction about how thorough you must be. Standard CDD asks who the customer is. Enhanced CDD asks how the customer earns money, where the money came from, who controls the entity in practice, what their flow profile looks like over time, and what would have to be true for the relationship to remain low-risk a year from now. The bank that approaches a VASP with standard CDD will fail its first SBP inspection.

2. 2

   There are eleven documents in the onboarding pack. PVARA licence original and certified copy. Memorandum and Articles of Association. SECP incorporation certificate. NTN and STRN. Latest audited financials, signed by an ICAP-licensed firm. Capital deposit certificate from your own bank's treasury, dated within 30 days. Beneficial ownership declaration, traced to natural persons, with CNICs and source-of-wealth annexures. PVARA fit-and-proper letters for every named senior officer. AML policy document with version control, approved by the VASP's board. Business continuity and key-management plan covering custody if applicable. Insurance certificates including cyber and crime cover sized to the activity class. Anything missing should be requested in writing, with a deadline, and tracked.

3. 3

   Way one to think about onboarding: it is the moment you negotiate the audit trail. Whatever document you let slide today is the document that will be missing during a regulator inspection two years from now. You will not remember why you waived it. The compliance file must be self-explanatory to a future inspector who has never met any of you. Write the rationale for every exception. 'Audited financials older than nine months accepted because the entity has not yet operated for a full fiscal year, and the SECP-stamped opening balance sheet plus board-approved monthly accounts substitute.' That sentence on file is what saves you.

The why-tree

Try this with Claude

AI-edge prompt: 'You are a senior bank compliance reviewer. I will give you eleven onboarding documents for a hypothetical VASP. For each document tell me: is it present, is it current, does the data on it reconcile with the others, and what is the single highest-priority follow-up question. End with a recommend or refuse decision and the three sentences I should put in the file to support it.' Then paste documents and read the answer adversarially.