The verdict in three sentences
At 12,000 sign-ups a month and a 72-hour delay, a Casablanca payment institution loses a large share of applicants before their first transaction. An automated KYC journey, with CNIE ID reading, liveness detection, sanctions screening and a complete audit trail, approves 80 to 85% of applications in under 15 minutes. The remaining 15 to 20% go to human review, so the compliance team can focus on real risk.
The target journey, step by step
The chief compliance officer of a payment institution licensed by Bank Al-Maghrib (mobile wallet, transfers, merchant payments) currently has 14 analysts eyeballing ID photos, searching names in lists by hand and calling customers back when in doubt. For fintech investors and regional operators, this is a familiar picture in North and West Africa. The automated journey breaks down as follows.
| Step | Technique | Target duration | Straight-through rate (2026 order of magnitude) |
|---|---|---|---|
| Phone number and OTP | SMS or WhatsApp | 30 seconds | 98% |
| CNIE front and back capture | OCR and MRZ reading | 1 minute | 92 to 95% |
| Document authenticity check | Photocopy, screen and tampering detection | Seconds | 94% |
| Selfie and liveness | Passive liveness and face match | 1 minute | 90 to 93% |
| Sanctions and PEP screening | UN, national and international lists, PEPs | Seconds | 97% with no hit |
| Risk score and decision | Rules and score, limits per account tier | Instant | 80 to 85% approved untouched |
| Human review of the rest | Analyst console | 5 to 20 minutes per file | 15 to 20% of files |
The regulatory principle remains the risk-based approach: a low-limit account can open with simplified KYC, while a high-limit or merchant profile requires additional documents. Rules and limits are configured with compliance, not hard-coded.
Compliance requirements to build in from day one
Three blocks are non-negotiable. Anti-money laundering: screening at onboarding and on every list update, with traceability of cleared false positives and who cleared them. Personal data protection under Moroccan Law 09-08 and CNDP requirements: declared purpose, retention periods, controlled hosting and transfers. Audit trail: every automated decision keeps images, scores, rule version and timestamp so an inspector can replay the reasoning.
| Option | Indicative 2026 cost | Timeline | Watch-out |
|---|---|---|---|
| International pay-per-check KYC vendor (order of magnitude) | EUR 0.8 to 2 per check, so EUR 10,000 to 24,000 a month at 12,000 files | 1 to 3 months | Hosting outside Morocco, pricing dependency |
| Regional KYC provider | MAD 5 to 12 per file | 2 to 4 months | Uneven liveness coverage |
| Current manual in-house team | 14 analysts, about MAD 1,400,000 a year loaded | Immediate | 72-hour delay, human error |
| Kolonell, medium application | 4,000,000 to 7,000,000 FCFA (EUR 6,100 to 10,670) | 4 months | Journey, analyst console, third-party OCR and liveness integration |
| Kolonell, complex application | 7,000,000 to 15,000,000+ FCFA (EUR 10,670 to 22,870+) | 5 to 6 months | Rules engine, risk score, screening, audit, core system integration |
Per-call costs for third-party engines (OCR, biometrics, lists) and hosting are set in the quote. Application maintenance runs at 35,000, 75,000 or 120,000 FCFA per month (EUR 53, 114 or 183).
Architecture and calendar
The application orchestrates the journey, calls specialised components (OCR, liveness, lists) through APIs, applies the rules and feeds an analyst console with a priority queue, alert reasons and documented decisions. The core banking or wallet system only receives approved customers, with their KYC tier and limits.
Typical calendar: month 1, scoping with compliance and rule mapping; months 2 to 4, journey, console and integrations; month 5, testing on anonymised real files and threshold calibration; month 6, phased go-live at 10%, 50% then 100% of traffic.
Mini case study
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Nadia, chief compliance officer of the Casablanca institution, currently sees 30% drop-off between sign-up and activation, driven by the 72-hour delay.
- Monthly sign-ups: 12,000. If half of the drop-offs are avoidable: 12,000 × 30% × 50% = 1,800 customers recovered per month.
- Average net revenue per active customer in year one: MAD 60 (about EUR 5.50). Gain: 1,800 × 60 × 12 = MAD 1,296,000 a year (about EUR 119,000).
- Analyst workload: with 80% straight-through, files to review drop from 12,000 to 2,400 a month. Onboarding can run with 6 analysts instead of 14, the other 8 moving to transaction monitoring.
- Complex project within the EUR 10,670 to 22,870+ range, plus third-party per-call costs: paid back within a few months from activation gains alone.
FAQ
Is fully remote KYC allowed in Morocco?
Remote onboarding is possible within the framework set by Bank Al-Maghrib, using a risk-based approach and limits matched to the verification level. Tier configuration is validated with your compliance team before any build.
What false rejection rate should we target?
Under 3% on liveness and under 5% on document reading is a realistic 2026 target. Above that, legitimate customers fall into manual review and the delay climbs again.
Where are CNIE images and selfies stored?
Hosting is chosen to meet Law 09-08 and CNDP requirements, preferably in Morocco. Retention periods are configurable and every access is logged.
How are sanctions list updates handled?
Lists reload automatically at least daily, and the existing customer base is rescreened on every update. Alerts reach the console in under an hour.
Can we keep our current biometrics vendor?
Yes. The application orchestrates interchangeable components, which also lets you switch vendors if per-check prices rise.
Let's scope your project. We map your onboarding journey, KYC tiers and obligations, then propose an architecture and a phased go-live calendar. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
