For any organisation moving money, signing contracts, or opening accounts tied to Iraq and the Kurdistan Region, due diligence is no longer a box-ticking exercise — it is a condition of doing business. Correspondent banks, and increasingly the Central Bank of Iraq (CBI) itself, expect counterparties to demonstrate a clear picture of who they are dealing with, where funds originate, and what risks sit behind a transaction. This is what practitioners commonly refer to as CBI due diligence: the enhanced scrutiny applied to entities and transactions that touch Iraq’s banking system, including Baghdad, Basra, and the Kurdistan Region.
Why CBI Due Diligence Has Become Harder to Avoid
Since the introduction of the CBI’s electronic platform for foreign currency transfers, banks operating across Iraq — from Baghdad and Basra to Erbil and Sulaymaniyah — have faced tighter documentation requirements before international transfers are approved. For companies and financial institutions with exposure to Iraq, Syria, and the wider region, this means due diligence has to go well beyond a standard KYC form. It requires verified, on-the-ground information about corporate structures, beneficial ownership, and the political and security environment a counterparty actually operates in.
Stakeholder Mapping: The Foundation of Credible Due Diligence
A due diligence report is only as strong as the stakeholder mapping behind it. In practice, this means identifying and assessing the individuals, tribal and community actors, government officials, security forces, and commercial partners connected to a given entity or project — and understanding how they relate to one another. In the Kurdistan Region and across federal Iraq, these relationships often sit outside formal corporate registers, which is why desk-based research alone is rarely sufficient.
Effective stakeholder mapping typically covers:
Corporate and beneficial ownership structures, including any politically exposed persons (PEPs) connected to the entity.
Local political and tribal dynamics that could affect a project’s stability or a counterparty’s standing.
Security actors with influence over the area of operation, from official forces to informal armed groups.
Community relationships and any history of grievance, dispute, or local opposition.
Prior business conduct, litigation history, and reputational red flags.
Iraq, Syria, Baghdad, and Basra: Why Geography Matters
Due diligence requirements differ significantly depending on whether an entity is based in the Kurdistan Region, federal Iraq, or has cross-border exposure to Syria. Baghdad and Basra carry their own regulatory and security considerations distinct from Erbil or Duhok, and sanctions exposure tied to Syrian-linked networks has become a particular focus for banks reviewing Iraqi transactions. A credible due diligence process has to be geographically specific — generic country-level risk ratings are not enough to satisfy a compliance officer reviewing a transaction tied to a specific city, block, or governorate.
How Carduchi Approaches Due Diligence in the Region
Carduchi is a London-based consultancy with an on-the-ground presence across Iraq and the Kurdistan Region. Our due diligence assignments combine primary research — direct engagement with local sources, officials, and community contacts — with structured stakeholder mapping and political risk analysis, so clients can satisfy correspondent banks, the CBI’s own requirements, and internal compliance standards with confidence.
If your organisation needs a due diligence assessment or stakeholder mapping exercise covering Iraq, the Kurdistan Region, Baghdad, Basra, or cross-border exposure to Syria, see our Due Diligence service, or contact us to discuss your specific requirements.