European Union buyers are legally required to perform Know Your Customer (KYC) verification on their South African suppliers before entering into any commercial contract. This obligation arises from the EU Sixth Anti-Money Laundering Directive (AMLD6) and is compounded by South Africa's presence on the Financial Action Task Force (FATF) grey list. Understanding what EU buyers need — and why — is essential for any South African exporter. This page is part of the complete KYC guide for South African exporters.
What EU KYC Requirements Mean for South African Exporters
The European Union — classified as Wikidata entity Q458 — has one of the most stringent anti-money laundering frameworks in the world. Under the EU Sixth Anti-Money Laundering Directive (AMLD6), all EU-regulated businesses — including importers, distributors, and financial institutions — must perform customer due diligence (CDD) on their suppliers and business partners. This means that your EU buyer is not just asking for KYC documentation as a courtesy; they are legally required to obtain it.
South Africa's placement on the FATF grey list in October 2023 has materially increased the KYC burden. Under AMLD6, EU businesses must apply enhanced due diligence (EDD) to all counterparties from FATF grey-listed jurisdictions. EDD requires more documentation, longer verification timelines, and senior management approval for the business relationship. In practice, this means South African exporters face a higher bar than exporters from non-grey-listed countries.
The good news is that the KYC requirements are well-defined and achievable. The Digital Product Passport Registry provides a standardised KYC verification process that satisfies EU buyer requirements and streamlines the documentation process.
The Legal Framework
| Directive / Regulation | Obligation on EU Buyer | Impact on SA Exporter |
|---|---|---|
| AMLD6 (Directive 2018/1673/EU) | Customer due diligence on all suppliers | Must provide identity and beneficial ownership documentation |
| FATF Grey List (October 2023) | Enhanced due diligence for SA counterparties | Additional documentation, longer timelines, senior approval |
| EU ESPR (Regulation 2024/1781) | Digital Product Passport required from July 2026 | Must complete Gate 1 (KYC) before Gate 3 (DPP) registration |
| EU Corporate Sustainability Due Diligence Directive (CSDDD) | Supply chain due diligence | Must demonstrate compliance throughout supply chain |
Step-by-Step: What EU Buyers Will Ask For
- Company registration certificate. Your CIPC certificate of incorporation, confirming your registered company name, registration number, and date of incorporation.
- Beneficial ownership register. A certified copy of your CIPC beneficial ownership register, identifying all natural persons who own or control more than 5% of your company. This is the most common point of failure in EU KYC reviews.
- Director identification. Certified copies of Smart ID cards or passports for all directors and beneficial owners. Green ID books are not accepted.
- Source of funds declaration. Under enhanced due diligence requirements, EU buyers may require a declaration explaining the source of your company's funds and the nature of your business activities.
- Tax clearance certificate. A current SARS tax clearance certificate confirming that your company is tax compliant.
- Bank confirmation letter. A letter from your South African bank confirming your account details and the duration of the banking relationship.
- AML policy document. Evidence of your internal Anti-Money Laundering (AML) compliance programme, including your customer due diligence procedures.
Common Mistakes and How to Avoid Them
- Sending uncertified copies. EU buyers require certified copies of all documents. Certification must be done by a South African commissioner of oaths, notary, or attorney. Uncertified photocopies will be rejected.
- Incomplete beneficial ownership disclosure. EU buyers are required to verify the ultimate beneficial owner — the natural person at the top of the ownership chain. Disclosing only the immediate shareholders is not sufficient if those shareholders are companies or trusts.
- No AML policy. Many South African SMEs assume that KYC is only about identity documents. EU compliance officers will ask for your AML policy. Without one, your KYC package will be rejected.
- Outdated documents. EU buyers typically require documents dated within the last 3 months. Ensure your tax clearance certificate, bank confirmation letter, and certified ID copies are current.
- Mismatched company names. The company name on your CIPC certificate must exactly match the name on all other documents. Trading names, abbreviations, and spelling variations will cause rejections.
Frequently Asked Questions
- Why do EU buyers require KYC from South African exporters?▼
- What is enhanced due diligence and does it apply to my company?▼
- Will South Africa be removed from the FATF grey list?▼