Mali: How Decree No. 2026-0152 Changes NGO Audit, Reporting & Compliance

Associations audit mali requirements changed decisively when Decree No. 2026-0152/PT-RM, the “2026 Decree on Associations”, introduced a levy on specified categories of association and foundation resources, stronger reporting duties, and expanded verification and oversight powers over civil-society organisations. For treasurers, in-house counsel, external auditors and donor compliance officers, the decree converts long-standing good-practice habits into enforceable obligations with new audit triggers. This guide maps the decree’s obligations to auditor procedures, provides levy accounting and journal-entry templates, sets out a donor verification checklist, and gives a step-by-step action plan for meeting the new AML/CFT expectations. Read it as a practice note: the aim is to tell you what to do now, not to summarise policy debate.

The levy rate, thresholds, forms and deadlines described below should always be confirmed against the official text of the decree and any implementing ministry notices before you act.

Decision framework, choose one:

• Choose “Comply & Reassure” (A) when the association receives grant or donation flows above donor thresholds, wants to keep donor access, or has already been contacted by authorities. Record the levy immediately, notify donors, update accounting, appoint an auditor for an agreed-upon-procedures (AUP) or statutory engagement, and run AML/CFT checks.
• Choose “Regularise & Negotiate” (B) when the association discovers prior non-compliance but lacks liquidity to cover the levy. Prepare corrective journal entries, open written dialogue with the responsible ministry or registry, and present a repayment plan supported by an auditor-attested remediation report.

What Decree No. 2026-0152/PT-RM requires (quick annotated summary)

The 2026 Decree on Associations reshapes the compliance landscape for associations, foundations and foreign NGOs operating in Mali. Its core thrust is financial transparency backed by enforceable oversight. Where previous practice relied on general NGO law and donor-specific audit clauses, the decree now fixes statutory obligations that auditors may need to test and that regulators can verify directly. The practical effect for anyone handling an associations audit mali engagement is that the auditor’s scope may expand beyond revenue recognition and fund restrictions into levy verification, remittance evidence and AML/CFT controls.

The decree imposes the following categories of obligation. Each item below should be read against the official decree article numbers, which should be cited verbatim in your internal compliance file after you have confirmed them against the published text:

• Registration and registry maintenance. Associations and foundations must be registered and must keep registry information current, including governance and, where applicable, beneficial-ownership details.
• Enhanced reporting. Periodic financial and activity reporting to the responsible ministry or registry, using the forms and timelines specified in the decree or implementing notices.
• The levy on resources. A levy on specified categories of receipts, which must be calculated, recorded and remitted, with evidence retained for inspection. Confirm the applicable rate and scope against the decree text.
• Oversight and verification powers. Expanded authority for the relevant ministry and financial-intelligence bodies to conduct verification visits and request documents.
• AML/CFT alignment. Stronger beneficial-ownership identification, donor due diligence and suspicious-transaction reporting obligations linked to Mali’s national framework, which the country has continued to strengthen following its progress on international AML/CFT standards.

Who is in scope

Scope is the first question every practitioner must answer before accepting an engagement. The decree applies across several organisational categories, and the precise definitions in the decree text govern:

• Associations, membership-based organisations registered under Malian law.
• Foundations, endowment or purpose-based entities holding dedicated assets.
• Foreign NGOs, internationally headquartered organisations operating in Mali under agreement.
• Special projects, donor-funded project vehicles whose receipts may fall within the levy base.

Because the levy attaches to specified classes of funding rather than to organisational form alone, an ngo audit mali assessment must begin by classifying every income stream against the decree’s resource definitions. This classification determines both the levy base and the reporting obligation.

The levy: accounting, recognition and reporting for associations audit mali

The levy on specified association resources is among the most significant operational changes introduced by the decree, and it is where auditors may spend most of their additional effort. The levy must be calculated on specified receipts, recorded in the accounts, remitted to the designated authority, and supported by remittance evidence that an auditor can vouch. Getting the accounting treatment right from the first affected receipt avoids costly restatements and protects donor relationships. Confirm the current rate, described in public analyses of the decree as 10% on certain association and foundation resources, directly against the published decree before applying it.

The key judgement is whether the levy is recognised as an expense of the association or as a withholding that reduces the net resource available to the organisation’s purposes. In most practical cases the levy is recognised as a liability (levy payable) at the point the in-scope receipt is recognised, with a corresponding expense or a reduction in the usable fund balance depending on the enforcement rules and donor terms. Where donor-restricted funds are involved, treat the levy carefully: in some cases the levy may apply before restricted allocation, which should be disclosed to the donor to avoid breaching restriction terms.

Sample journal entries (with narrative)

The following illustrative entries assume an in-scope grant receipt of XOF 10,000,000 subject to a 10% levy (adjust the rate to the confirmed statutory figure). Validate the chart-of-accounts codes against local norms before posting.

• On recognising the in-scope receipt: Debit Bank XOF 10,000,000; Credit Grant income (or restricted fund) XOF 10,000,000, to record the gross receipt.
• On recognising the levy obligation: Debit Levy expense (or restricted-fund charge) XOF 1,000,000; Credit Levy payable XOF 1,000,000, to record the statutory levy as a liability.
• On remitting the levy to the authority: Debit Levy payable XOF 1,000,000; Credit Bank XOF 1,000,000, to clear the liability on payment and generate the remittance receipt auditors will inspect.

These entries give a clean audit trail: the gross receipt, the liability crystallised at recognition, and the remittance supported by a bank movement and an official receipt. Auditors performing an associations audit mali review will recompute the levy base, test the calculation on a sample, and vouch each remittance to the payable account and the bank statement.

Reporting timeline and where to declare the levy

Associations must declare and remit the levy to the designated office within the timelines fixed by the decree and any ministry procedural notice. Auditors should obtain and retain the following evidence as part of the reporting file: the declarative form submitted to the ministry or registry, the official remittance receipt, the bank statement showing payment, and reconciliation of the levy payable account for the period. Where the decree or a ministry notice specifies filing deadlines, record the exact dates in the working papers and test for late filing, which may trigger administrative sanctions.

Audit triggers, scope and ONECCA / auditor obligations

A central question for every organisation is whether audited financial statements are now mandatory. The decree expands reporting and may create new audit triggers through registration conditions and reporting thresholds, and donors increasingly require audited accounts or agreed-upon procedures as a condition of continued funding. The practical answer is that more associations are likely to need an audit or a formal assurance engagement than did before, either because the decree triggers it directly or because donors demand it in response to the new environment. Confirm the specific triggers in the decree text, since general audit obligations for commercial entities in Mali continue to be governed primarily by the OHADA Uniform Act on commercial companies and economic interest groups.

Auditors accepting an ngo audit mali engagement must also observe their professional obligations under the national body for accountants and auditors, the Ordre National des Experts-Comptables et des Comptables Agréés du Mali (ONECCA-Mali). Those obligations govern independence, professional conduct and reporting standards, and they interact with the decree’s verification powers. Where the professional body publishes guidance specific to the decree, it should be cited and followed in the engagement file.

Engagement acceptance checklist

Before accepting an associations audit mali engagement, complete the following acceptance procedures and document the conclusions:

• Know-your-client (KYC). Identify the association’s governing body, principal officers and beneficial owners, and verify registration status.
• AML/CFT risk assessment. Assess the risk profile of donors, funding geographies and transaction types before signing.
• Independence and conflicts. Confirm independence under applicable professional rules and screen for conflicts across related engagements.
• Scope definition. Agree in writing whether the engagement is a statutory audit, a limited-scope assurance or an AUP, and define levy-verification scope explicitly.
• Documentary access. Confirm the association will provide registry filings, bank access, donor agreements and remittance receipts.

Expanded audit procedures to verify levy and restricted funds

The decree may expand the audit programme in two specific directions: levy verification and restricted-fund testing. For the levy, the auditor recomputes the levy base from in-scope receipts, recalculates the charge on a representative sample, inspects remittance receipts, and reconciles the levy payable account to the general ledger and bank records. For restricted funds, the auditor tests that the levy was applied consistently with donor terms, that restricted allocations were not understated by levy deductions, and that disclosures to donors were made where the levy affected restricted balances. These procedures are a practical part of any credible associations audit mali engagement where the levy applies.

AML/CFT implications and auditor procedures

The decree tightens the link between association funding and Mali’s national AML/CFT framework. International commentary, including analysis published by civil-society and FATF-focused platforms, frames associations as a sector requiring proportionate but real controls against money-laundering and terrorist-financing abuse. For practitioners, AML/CFT NGO compliance mali now means concrete procedures embedded in both the association’s internal controls and the auditor’s work programme, not a box-ticking exercise.

Associations should undertake beneficial-owner identification, donor KYC, ongoing transaction monitoring, and suspicious-transaction reporting to Mali’s financial-intelligence unit, CENTIF-Mali (Cellule Nationale de Traitement des Informations Financières), where thresholds or red flags are met. Auditors should test the design and operation of these controls and remain alert to indicators that may trigger their own reporting responsibilities. Confirm reporting obligations, thresholds and protections against current CENTIF-Mali guidance and the applicable WAEMU/UEMOA AML/CFT legislation transposed into Malian law.

Sample auditor work programme (procedures and evidence matrix)

An effective AML-aware work programme pairs each procedure with the evidence it relies on:

• Donor due diligence review. Evidence: donor KYC files, incorporation documents, beneficial-ownership declarations.
• Transaction testing. Evidence: bank statements, bank confirmations, supporting invoices and donor correspondence.
• Beneficial-ownership verification. Evidence: registry extracts, board minutes, declarations of controlling persons.
• Source-of-funds testing. Evidence: grant agreements, disbursement schedules, cross-border transfer records.
• Controls walkthrough. Evidence: AML policy documents, monitoring logs, exception reports and escalation records.

This matrix allows an associations audit mali engagement to demonstrate that AML/CFT testing was both performed and evidenced, which matters when a verification visit later tests the robustness of the association’s controls.

When to file a suspicious transaction report and auditor protections

Where testing reveals transactions that lack a plausible economic or charitable rationale, involve unexplained cross-border flows, or match recognised red-flag patterns, the association, and, in defined circumstances, the auditor, must consider filing a suspicious transaction report with CENTIF-Mali. The precise reporting channel, form and timeline should be confirmed against current CENTIF-Mali or Ministry of Finance guidance and recorded in the file. Practitioners should document the basis for any decision to report or not to report, because reporting made in good faith generally attracts legal protection under the applicable AML/CFT legislation, and a contemporaneous record of the reasoning protects the auditor if the decision is later reviewed.

Donor reporting and verification: what donors should request and what auditors should provide

Donors are a primary driver of compliance behaviour, and the decree gives them clear reasons to strengthen their verification requirements. Donor reporting and verification mali now extends beyond standard audited financial statements to explicit assurance over levy calculation and remittance. Donors should build these requirements into grant agreements, and auditors should be ready to deliver them through limited-scope assurance or agreed-upon procedures.

The practical effect is that donors can no longer assume a general-purpose audit covers levy compliance. They should request specific certification that the levy was correctly calculated, recorded and remitted, and they should secure the right to inspect levy-related documents. This protects both the donor’s funds and the association’s continued eligibility.

Sample AUP terms and limited-scope assurance language for donor use

Donors and associations can incorporate the following terms, marked here as draft language for counsel review:

• Levy certification clause. The association shall procure an agreed-upon-procedures report confirming the calculation and remittance of the statutory levy on in-scope receipts for the reporting period.
• Document retention clause. The association shall retain levy declarations, remittance receipts and supporting bank records and make them available for inspection.
• Verification right. The donor or its appointed auditor may perform agreed-upon procedures over levy-related documents on reasonable notice.
• AML/CFT representation. The association represents that it maintains beneficial-ownership records, donor KYC and transaction monitoring consistent with applicable requirements.

For auditors, a limited-scope assurance engagement over the levy, distinct from a full statutory audit, often gives donors the comfort they need at proportionate cost, and it slots neatly into the broader associations audit mali framework.

Practical compliance checklist for associations and auditors, eight-step action plan

The following eight-step plan converts the decree into immediate action. Treat it as the operational core of any associations audit mali response.

1. Confirm registration. Verify the association’s registry status and update governance and beneficial-ownership records.
2. Classify income streams. Map every receipt against the decree’s resource definitions to establish the levy base.
3. Update accounting policies. Add the levy payable, levy expense and reconciliation controls to the chart of accounts.
4. Calculate and remit the levy. Compute the charge at the confirmed statutory rate, remit to the designated office, and retain remittance evidence.
5. Appoint or confirm an auditor. Engage a registered expert-comptable / commissaire aux comptes for a statutory audit, limited-scope assurance or AUP as required.
6. Strengthen AML/CFT controls. Implement beneficial-owner identification, donor KYC and transaction monitoring, and define reporting escalation to CENTIF-Mali.
7. Notify donors. Inform donors of levy treatment affecting restricted funds and agree verification clauses.
8. Prepare for verification visits. Assemble a document pack of filings, receipts, bank records and policies ready for inspection.

Apply the decision framework in checklist form: where the association is well-funded and donor-facing, run the full “Comply & Reassure” path; where liquidity is tight or prior non-compliance surfaces, run “Regularise & Negotiate” with an auditor-attested remediation report and a written approach to the registry.

Enforcement, penalties and appeals

The decree pairs expanded obligations with expanded enforcement. The likely practical effect is more frequent verification visits and a greater willingness to apply administrative sanctions for non-compliance, particularly non-payment of the levy or failure to file required reports. Possible consequences may include fines, registration restrictions and, in serious cases, measures affecting the association’s ability to receive funds. Because the precise penalty schedule is governed by the decree and implementing notices, every enforcement claim in your file should be tied to the relevant article number after you have verified it against the published text.

Practical steps after receiving a notice or verification visit

If an association receives a verification notice, the response in the first days is decisive:

• Acknowledge promptly and in writing. Confirm receipt and request the scope and legal basis of the verification.
• Assemble the document pack. Produce registry filings, levy declarations, remittance receipts, bank records and AML/CFT policies.
• Engage the auditor. Commission a limited-scope review or remediation report to demonstrate good-faith compliance.
• Open dialogue on any shortfall. Where a levy shortfall exists, propose a corrective journal plan and a written repayment schedule rather than waiting for sanction.
• Preserve appeal rights. Record deadlines and follow the administrative route to contest or regularise any adverse finding.

A disciplined, documented response usually produces a better outcome than silence, and it strengthens the association’s position in any subsequent associations audit mali review or donor inquiry.

Conclusion and resources

The 2026 Decree on Associations turns financial transparency into enforceable obligation, and the practical burden of proof now falls on associations, their auditors and their donors. A sound associations audit mali response is not complicated, but it must be prompt: classify income against the levy base, record and remit the levy with full evidence at the confirmed statutory rate, appoint a registered auditor, strengthen AML/CFT controls, and agree verification clauses with donors. Use the decision framework to choose between the “Comply & Reassure” and “Regularise & Negotiate” paths, and keep every procedural step tied to the decree’s article numbers once you have verified them against the official text. For organisations that act now, the decree is a manageable compliance exercise; for those that wait, it is an enforcement risk. To move quickly, consult a Mali audit specialist and review the related guidance on statutory audit requirements in Mali, the auditor removal procedure in Mali, and the Audit & Assurance Mali practice area.

Sources

1. FATF Platform, Analysis: Mali’s New Decree on Associations
2. ICNL, Seven Things to Know About Mali’s Decree No. 2026-0152/PT-RM
3. Global Law Experts, Statutory Audit Requirements Mali