Qatar: the 24-hour clock on a suspicious transaction
Most AML regimes give you a reporting window measured in days. Qatar measures it in hours: an STR must reach the Qatar Financial Information Unit within 24 hours of the institution determining that a transaction is suspicious.
Most AML regimes give you a reporting window measured in days. Qatar measures it in hours: an STR must reach the Qatar Financial Information Unit within 24 hours of the institution determining that a transaction is suspicious.
That deadline is the single most consequential design constraint on a Qatari compliance function, and it is routinely underestimated — because the clock does not start when the alert fires. It starts when you decide. Which means every hour your review queue sits idle before someone forms a view is an hour you have not spent, and every hour after the decision is an hour of the twenty-four.
What that does to your operating model
A 24-hour rule forces three things that a 30-day rule never does:
- A named decision-maker who is always covered. Weekends, Eid, annual leave. The determination is a person’s judgment, and the person has to exist every day.
- A pre-drafted report. You cannot compose a narrative from scratch, get it reviewed and file it inside a day if the case file is a folder of screenshots. The narrative has to be accumulating while the case is open.
- An escalation path that skips layers. Any approval chain longer than two steps will breach the deadline the first time someone is on a flight.
Qatar is not currently on the FATF grey list, and non-compliance penalties can reach QR 100 million. The combination is deliberate: a clean listing status maintained by a regime that leaves very little room for a slow answer.
Who supervises what
| Body | Scope |
|---|---|
| QFIU | The FIU, under the Ministry of Interior — receives, analyses and disseminates STRs; Egmont member |
| Qatar Central Bank | Financial institutions — binding AML/CFT circulars, including e-KYC implementation rules |
| QFCRA | Firms licensed inside the Qatar Financial Centre — QFC AML/CFT Rules 2019 |
| NAMLC | National AML/CFT strategy and cross-authority coordination, under Article 29 of Law No. 20 |
| MOCI | DNFBPs outside the QFC — auditors, dealers in precious metals and stones, TCSPs |
The QFC split is the one that catches firms out. A business licensed inside the Centre answers to the QFCRA and the QFC AML/CFT Rules 2019; a business outside it answers to the QCB or MOCI. Same country, different rulebook, different examiner.
The underlying statute — Law No. 20, amended by Law No. 18 of 2025 — sits above both, and the QCB’s AML/CFT instructions were last substantially updated in 2022.
Three things worth doing this week
- Time your own pipeline. Take the last ten STRs you filed and measure the gap between determination and submission. If you cannot measure it, that is the finding.
- Check the coverage roster for the next public holiday. Not who is on call — who is authorised to make the determination.
- Confirm which rulebook you are under. If you operate both inside and outside the QFC, confirm that your policy says so explicitly rather than averaging the two.
Twenty-four hours is not a stretch target. It is the rule. Build the process backwards from it.
Sources
This article draws on the following sources. Follow the links for the original text.
AML beginner compliance financial-crime jurisdiction-briefing know-your-regulator qatar