Kazakhstan runs two banking perimeters, and the one you sit in decides who supervises you. Onshore the ARDFM licenses banks and financial institutions; inside the Astana International Financial Centre the AFSA runs a separate banking regime; and the AFM sits behind both as the national financial-intelligence authority. Whichever perimeter you fall under, the obligation behind the licence is the same in shape: a named compliance officer, a written AML/CFT programme, a documented risk assessment, risk-based customer due diligence, ongoing sanctions and PEP screening, transaction monitoring, and suspicious-transaction reporting to the AFM.