Pakistan's Award-Winning AML CFT Platform

Relax, and Let Us
Handle Compliance

Enterprise Features. Startup Pricing.

90M
Screenings run
every month
Every 3 hrs
SRO and notification
refresh, 09:00 to 21:00
Since Year 2000
Domestic PEP
historical records

Deployed by Pakistan's leading institutions

CDCPMEXHG MarketsStandard Capital SecuritiesAdamjee InsuranceAdamjee LifeAskari LifePostal LifeBankIslamiSadaPayBARQQuwatSahulatPayPayVayDigitt+
PVARA sandbox and NOC applicants

Applying to PVARA? We run your AML CFT with you.

Platform. Operations. People. You keep control. We do the heavy lifting.

TechnologyScreening, KYC, risk and monitoring. Hosted in Pakistan.
OperationsDaily reviews. CDD and EDD. STR case files.
StaffTrained analysts. A senior practitioner beside your Compliance Officer.
Platform

Four modules. One customer view.

A screening hit moves the risk score. The risk score shapes monitoring. Nothing falls between systems.

Sanctions, PEP and Adverse Media Screening

Local lists we research ourselves. Global lists from the source. Father's name, date of birth and CNIC cut false hits.

Screening in detail

KYC and Identity Verification

Read the CNIC. Prove the person is live. Match the face. One session, by SDK or API.

KYC in detail

Customer Risk Scoring

Your factors. Your weights. Mapped to Pakistan's NRA. Every score explained.

Risk scoring in detail

Transaction Monitoring

137 rules built for local typologies. Alerts ranked by risk. Every case on record.

Monitoring in detail
Compliance Data

Pakistan's risk lives in Pakistan's data.

Global vendors stop at UN and OFAC. Pakistani examiners start at NACTA, Schedule IV and local PEPs. We cover both.

  • Domestic sanctions and watchlists
    UNSC, NACTA, SROs, FIA Redbooks, police lists, proscribed associates
  • NADRA CNIC status lists
    Blocked, cancelled and cleared CNICs, matched by number
  • Domestic PEPs in nine categories
    Federal cabinet to union council, with family and associates
  • Reputational risk and adverse media
    Ten newspapers, NAB, FIA and courts. Checked by analysts.
  • Global sanctions
    UN, OFAC, EU, UK, UAE, INTERPOL, World Bank and more
Data sourceRefresh
SROs and government notificationsEvery 3 hours, 09:00 to 21:00
UN Security Council listEvery 24 hours
NACTA Schedule I and IVEvery 24 hours
OFAC, UK, EU and UAE listsEvery 24 hours
FIA Redbooks and provincial listsAs published
NADRA CNIC status listsOn release
Reputational risk databaseWeekly
Domestic PEPs and dependentsFortnightly
State-owned enterprisesFortnightly
How It Operates

Start in the browser. Automate when ready.

Portal, API and batch. One client ID.

Mode 01 · No IT needed

Portal

Screen, review and export. No IT needed.

IndividualEntityCase reviewReports
Mode 02 · Fully automated

API

Every customer screened at the point of onboarding.

Real-timeKYC SDKOngoing screening
Mode 03 · Hybrid

Batch

Screen your whole book. Re-screen only what changed.

Bulk filesScheduled runsDelta screening
Who It Serves

Built for every regulated sector.

Brokers and capital markets

Client screening for securities and commodities brokers.

Insurance and Takaful

Policyholders and beneficiaries, at issue and at claim.

Banks and microfinance banks

Branch and digital onboarding at scale.

EMIs, PSPs and fintechs

API-first KYC and screening for app onboarding.

NBFCs, Modarabas and MFIs

Right-sized compliance for lending and investment.

Virtual asset service providers

AML CFT for exchanges, brokers, custodians and issuers.

VASP compliance
Security and Hosting

Your data never leaves Pakistan.

We are a regulated institution too. We guard your data the way our regulator expects us to guard ours.

Hosted in Pakistan

On FPM's own cloud. Not abroad.

Minimum data

11 of 13 CNIC digits is enough. No financials. No phone. No address.

Five-year records

Every screening and decision, ready for inspection.

Reviewed every release

Manual security review before every build ships.

Your VAPT, our fix

Findings closed at no cost, by criticality.

Full audit trail

Every action. Every user. Every timestamp.

Questions

Questions we hear first.

Which lists does FPM AML-CHECK screen against?

Domestic: UN Security Council consolidated list, NACTA Schedule I and IV, federal and provincial SROs and notifications, FIA Redbooks, Punjab and Sindh Police red books and absconder lists, relatives and associates of proscribed persons, and NADRA CNIC status lists. Global: UN, OFAC, BIS, EU, UK OFSI, Canada, Australia DFAT, Switzerland SECO, UAE, INTERPOL Red Notices and World Bank debarment. Global PEPs and adverse media are available as an optional Acuris Risk Intelligence subscription.

How often is the data updated?

SROs and government notifications every 3 hours from 09:00 to 21:00. UN, NACTA, OFAC, UK, EU and UAE lists every 24 hours. Domestic PEPs and state-owned enterprises fortnightly. The reputational risk database weekly. FIA Redbooks, provincial lists and NADRA status lists as they are published.

Where is our data hosted?

FPM AML-CHECK runs as SaaS on FPM's own cloud facility in Pakistan. Screening records are retained for five years.

Do we need IT integration to start?

No. Your compliance team can screen through the web portal from day one. The API and batch modes are there when you are ready to automate.

Can our developers test the API before a sales call?

Yes. The sandbox credentials and endpoints are published on the Integration page. No sign-up is needed.

Do you support VASPs applying to PVARA?

Yes. FPM AML-CHECK covers the customer side of VASP compliance. For sandbox and NOC applicants we also co-source the full AML CFT function: technology, operations and trained staff.

See it on your own customers.

Book a demo. Or open the sandbox today.