Banking Law and Sharia Non-Compliance Risk Management in Kuwait

1. Introduction

Sharia non-compliance risk is the risk that an Islamic bank, Islamic financing institution, investment product, contract, transaction, or business process fails to comply with the Sharia principles governing Islamic finance.

In Kuwait, this issue is particularly important because Islamic banking forms a significant part of the financial system. Sharia compliance is therefore not merely a matter of religious characterization or product marketing. For regulated Islamic banks, it interacts with banking authorization, governance, risk management, internal controls, disclosure, accounting, contractual enforceability, and Central Bank of Kuwait (CBK) supervision.

The principal banking statute is Law No. 32 of 1968 concerning Currency, the Central Bank of Kuwait and the Organisation of Banking Business, as amended. A particularly important development was Law No. 30 of 2003, which introduced a specific legislative framework for Islamic banks into the banking law.

The basic principle is:

An Islamic financial institution must manage not only conventional credit, liquidity, market and operational risks, but also the risk that its products and operations depart from the Sharia framework under which they were approved and offered.

Jurisdiction: Kuwait

2. Meaning of Sharia Non-Compliance

A transaction can create Sharia non-compliance risk where its structure or implementation conflicts with applicable Islamic-finance principles.

Potential problems include:

• prohibited interest (riba);
• excessive contractual uncertainty (gharar);
• prohibited gambling/speculation (maysir);
• financing prohibited businesses;
• improper sale of assets not owned or possessed where ownership is required;
• incorrect sequencing of Murabaha transactions;
• impermissible guarantees of investment returns;
• failure to observe risk-sharing requirements;
• misuse of agency arrangements;
• improper late-payment treatment; or
• deviation from the institution's approved Sharia structure.

Importantly, a contract may have been correctly designed but incorrectly executed.

That distinction is central to risk management.

3. Example: Murabaha Execution Risk

Suppose an Islamic bank wants to finance equipment costing KWD 100,000.

The intended sequence is:

Supplier → bank purchases equipment → bank acquires ownership → bank sells equipment to customer at disclosed markup → customer pays deferred price.

The transaction may create Sharia concerns if operational staff instead arrange:

Supplier → customer directly acquires asset → bank merely provides KWD 100,000 → customer repays KWD 110,000.

The economic and legal structure may then resemble an interest-bearing loan rather than the approved Murabaha transaction.

Therefore, Sharia compliance requires control over actual transaction execution, not merely correctly drafted template agreements.

4. Kuwaiti Legislative Framework

Law No. 32 of 1968

Kuwait's principal banking legislation provides the institutional foundation for banking regulation and CBK supervision.

Following amendments introduced through Law No. 30 of 2003, Islamic banks became specifically addressed within the banking framework.

The legislation recognizes Islamic banking as banking conducted consistently with Islamic Sharia principles rather than treating it simply as conventional banking with different terminology.

This creates a regulatory basis for specialized governance and supervision.

5. Central Bank of Kuwait

The CBK plays the central prudential role.

Its supervision of Islamic banks exists alongside the institution's own Sharia-governance arrangements.

Accordingly, an Islamic bank cannot argue:

"Our Sharia board approved the product, therefore ordinary banking supervision does not apply."

Sharia compliance and prudential regulation operate together.

An Islamic bank must still manage matters such as:

• capital adequacy;
• liquidity;
• credit risk;
• concentration;
• operational risk;
• governance;
• internal controls;
• related-party transactions;
• AML/CFT; and
• financial reporting.

Sharia non-compliance adds another layer of risk.

6. Sharia Supervisory Governance

An important feature of Islamic financial institutions is independent Sharia oversight.

A Sharia supervisory body or committee examines whether financial products and transactions comply with applicable Islamic principles.

Its functions can include:

• reviewing proposed products;
• approving contractual structures;
• examining documentation;
• issuing Sharia opinions;
• reviewing implementation;
• considering identified breaches; and
• recommending corrective measures.

This body should not simply function as a marketing approval committee.

Effective Sharia governance requires ongoing supervision.

7. Product Approval

Before launching an Islamic financial product, institutions generally need a structured approval process.

For example, a new Ijara financing product should be examined for questions including:

1. Who owns the asset?
2. When does ownership pass?
3. Who bears ownership-related risks?
4. How is rent calculated?
5. Who is responsible for maintenance?
6. What happens following default?
7. Is there a purchase undertaking?
8. Are insurance/Takaful arrangements appropriate?
9. Are penalties treated consistently with the approved structure?
10. Does the documentation accurately reflect the transaction?

Sharia risk management therefore begins before the product reaches customers.

8. Sharia Review and Sharia Audit

These functions should be distinguished.

Sharia review

Examines whether transactions and processes comply with applicable Sharia rulings and approved structures.

Sharia audit

Provides more systematic assurance regarding the effectiveness of the institution's Sharia governance and compliance framework.

An effective framework can examine:

• samples of transactions;
• contract execution;
• asset ownership;
• payment flows;
• product documentation;
• fees;
• default charges;
• income classification; and
• corrective action.

A product approved in theory can therefore still generate non-compliance findings during subsequent review.

9. Internal Controls

Islamic banks require controls capable of preventing operational errors that alter the Sharia character of transactions.

For Murabaha, for example, controls might verify:

Step 1: customer requests financing.

Step 2: bank acquires the relevant commodity or asset.

Step 3: ownership or possession required by the approved structure exists.

Step 4: bank enters the sale with the customer.

Step 5: cost and profit are properly disclosed.

Step 6: payment obligations are recorded.

If employees execute Step 4 before the bank has properly completed the required acquisition stage, Sharia non-compliance risk can arise.

10. Legal Risk and Sharia Risk Are Different

A particularly important distinction is:

Sharia compliance ≠ automatically the same question as contractual enforceability under Kuwaiti law.

A transaction can generate several separate questions:

• Is the contract valid under Kuwaiti civil/commercial law?
• Does it comply with banking regulation?
• Does it comply with the institution's Sharia framework?
• Was it implemented according to its approved structure?
• What contractual remedy follows if something went wrong?

The answers need not always be identical.

Consequently, Islamic banks need coordination among:

• legal;
• compliance;
• risk;
• internal audit;
• product teams; and
• Sharia-control functions.

11. Credit Risk Interaction

Sharia compliance can directly affect credit risk.

Consider Musharakah financing.

If contractual documentation improperly transforms a genuine risk-sharing arrangement into an unconditional guarantee of a predetermined investment return, the institution may encounter both:

• Sharia-compliance concerns; and
• enforceability or recovery uncertainty.

A Sharia defect can therefore create ordinary financial losses.

This explains why Sharia risk should form part of enterprise-wide risk management rather than being isolated in a religious-advisory department.

12. Operational Risk

Many Sharia breaches arise from operational failures rather than deliberate misconduct.

Examples include:

• wrong sequence of contracts;
• use of outdated documentation;
• unauthorized amendments;
• incorrect asset identification;
• premature sale;
• incorrect calculation of profit;
• inappropriate late-payment charges;
• failure to complete agency documentation; and
• inadequate evidence of ownership.

Accordingly:

Sharia non-compliance risk is closely connected to operational risk.

Training and automated controls can therefore be as important as legal drafting.

13. Reputation Risk

Islamic financial institutions depend heavily upon customer confidence that their products genuinely comply with Sharia principles.

A material compliance failure can therefore produce:

Sharia breach
→ customer concern
→ reputational damage
→ withdrawal/loss of business
→ liquidity and profitability consequences.

This makes Sharia non-compliance potentially a financial-stability and prudential issue, rather than merely a theological disagreement.

14. Non-Compliant Income and Purification

An institution may discover that particular income arose from a transaction or component considered Sharia non-compliant.

The appropriate treatment depends upon the governing Sharia determination and applicable institutional/regulatory rules.

Possible consequences can include:

• identifying affected income;
• segregating it;
• preventing recognition as ordinary permissible profit where required;
• directing amounts to approved charitable purposes where applicable;
• correcting accounting treatment;
• notifying appropriate governance bodies; and
• preventing recurrence.

This process is frequently described as purification.

The institution should maintain an auditable record explaining how the affected amount was identified and treated.

15. Islamic Deposit and Investment Accounts

Islamic banking relationships may involve structures materially different from conventional interest-bearing deposits.

Depending on the product, relationships can involve:

• Qard;
• Wakala;
• Mudarabah; or
• other Sharia-compliant structures.

The legal documentation should therefore explain the customer's rights and the bank's obligations accurately.

A significant risk arises if marketing language suggests guaranteed investment performance where the underlying Sharia structure does not permit such an unconditional guarantee.

16. Profit-Sharing Investment Risk

Mudarabah illustrates the issue.

Generally:

• one party provides capital;
• another manages the investment;
• profits are shared according to the agreed ratio;
• losses are treated according to the applicable Sharia structure, subject to issues such as misconduct, negligence or contractual breach.

If the documentation simply guarantees both capital and predetermined profit regardless of investment performance, the arrangement may cease to reflect the intended risk-sharing model.

This creates Sharia, legal, disclosure and reputational risks simultaneously.

17. Ijara Risk

Ijara financing creates different compliance questions.

The bank or financing entity may own an asset and lease its use to the customer.

Important issues can include:

• genuine ownership;
• allocation of ownership-related responsibilities;
• maintenance;
• Takaful/insurance arrangements;
• rental commencement;
• destruction of the asset;
• purchase undertakings; and
• transfer of ownership.

If all ownership risks are contractually shifted to the customer regardless of their legal/Sharia character, the transaction may raise concerns about whether the bank genuinely acted as owner-lessor.

18. Sukuk and Investment Structures

Sharia non-compliance can also affect Sukuk and capital-market products.

Questions may arise concerning:

• underlying assets;
• ownership rights;
• cash-flow structure;
• purchase undertakings;
• guarantees;
• tradability;
• asset backing; and
• distribution mechanisms.

In Kuwait, such structures can potentially involve both banking regulation and Capital Markets Authority regulation, depending upon the issuer, instrument and transaction.

19. AML/CFT Remains Fully Applicable

Sharia compliance does not substitute for financial-crime controls.

An Islamic bank must still satisfy applicable requirements concerning:

• customer due diligence;
• beneficial ownership;
• sanctions screening;
• transaction monitoring;
• suspicious-transaction reporting; and
• record keeping.

A transaction cannot become legally acceptable merely because its contractual form is Sharia compliant.

Thus:

Sharia compliance + regulatory compliance + AML compliance are complementary requirements.

20. Board and Senior Management Responsibility

Sharia governance cannot operate effectively if responsibility is delegated entirely to Sharia scholars.

The board and senior management remain important because they control:

• resources;
• organizational structure;
• internal controls;
• employee incentives;
• technology;
• risk appetite; and
• corrective measures.

A mature governance model therefore resembles:

Board
↓
Senior management
↓
Sharia governance/control function
↓
Business units
↓
Compliance/risk
↓
Internal/Sharia audit
↓
Corrective action

Independence between control and revenue-generating functions is especially important.

21. Case Law

An important caution applies to Kuwait: reported decisions are not commonly indexed under the English expression “Sharia non-compliance risk.” Courts normally resolve concrete disputes concerning Murabaha, Islamic banking contracts, investment arrangements, agency, guarantees and other contractual questions.

For that reason, it is safer to identify the relevant jurisprudential lines rather than invent unverified case numbers.

Case 1 — Kuwait Court of Cassation: Murabaha Transactions

Kuwaiti Court of Cassation jurisprudence concerning Islamic financing has examined the real contractual relationship and agreed obligations rather than deciding disputes solely from the label attached to a transaction.

Principle

Calling an agreement "Murabaha" does not eliminate the need to determine:

• the transaction actually concluded;
• the parties' obligations;
• ownership and sale arrangements;
• the agreed profit; and
• applicable statutory provisions.

Importance

This supports substance-based Sharia risk management. Documentation must correspond with actual execution.

Case 2 — Court of Cassation: Islamic Banks and Applicable Banking Law

Kuwaiti jurisprudence recognizes that Islamic banks operate within Kuwait's statutory banking system.

Principle

Islamic character does not remove a bank from mandatory financial regulation.

Importance

An institution therefore cannot rely solely upon Sharia approval where CBK regulatory requirements also govern the transaction.

Case 3 — Court of Cassation: Contractual Interpretation

A recurring principle in Kuwaiti civil and commercial jurisprudence is that courts determine parties' legal rights through the contract and applicable mandatory law.

Importance

For Islamic banks, poorly drafted documentation creates substantial risk even where the economic concept was originally approved by a Sharia body.

Sharia approval cannot cure defective contractual implementation automatically.

Case 4 — Court of Cassation: Investment and Agency Arrangements

Islamic investment products frequently use agency (Wakala) or partnership/investment structures.

Kuwaiti courts have addressed disputes in which the legal characterization of investment and agency relationships determines liability.

Risk-management lesson

Institutions should clearly establish:

• scope of authority;
• investment mandate;
• remuneration;
• negligence standard;
• termination rights; and
• loss allocation.

Otherwise, disputes can arise over whether the institution was an agent, debtor, investor or guarantor.

Case 5 — Court of Cassation: Guarantees

Guarantees frequently accompany commercial financing.

Kuwaiti courts generally determine liability according to the applicable statutory rules and the terms and scope of the guarantee.

Sharia significance

A guarantee should not be used mechanically to convert an investment-risk structure into what economically functions as a guaranteed fixed-return loan contrary to its approved Sharia model.

Legal and Sharia teams therefore need to review guarantees together.

Case 6 — Court of Cassation: Evidence and Banking Records

Banking disputes often depend upon documentary evidence, account statements and transaction records.

Sharia significance

An Islamic bank should preserve evidence demonstrating each required stage of the transaction.

For Murabaha, records might include:

purchase instruction → supplier documentation → bank acquisition → sale contract → payment schedule.

This documentation can serve both Sharia-audit and litigation purposes.

22. A Practical Non-Compliance Scenario

Assume Islamic Bank A approves a commodity Murabaha product.

The Sharia-approved process requires:

1. customer requests financing;
2. bank purchases commodity;
3. bank acquires required ownership/possession;
4. bank sells commodity to customer;
5. customer owes deferred sale price.

An employee instead executes the customer sale before the bank completes its required purchase stage.

The problem should not simply be hidden by correcting the dates afterward.

A proper response would normally involve:

Detection → investigation → Sharia determination → legal analysis → financial treatment → remediation → control improvement → audit follow-up.

That is the essence of Sharia non-compliance risk management.

23. Three Lines of Defence

A useful governance model is:

First line — Business

Employees executing Islamic transactions must follow approved procedures.

Second line — Risk, compliance and Sharia control

These functions monitor adherence and challenge deviations.

Third line — Independent audit

Internal and Sharia audit independently test whether controls actually work.

Above all three sits board and senior-management oversight.

24. Risk Register

An Islamic bank can maintain a dedicated Sharia risk register.

25. Relationship With International Standards

Kuwaiti Islamic institutions also operate in an international environment in which standards developed by organizations such as the Islamic Financial Services Board (IFSB) and AAOIFI can be influential.

These standards address areas such as:

• Sharia governance;
• capital adequacy;
• risk management;
• accounting;
• auditing;
• disclosure; and
• Islamic financial contracts.

However, international standards should not automatically be treated as Kuwaiti statutory law. Their legal effect depends on whether and how the relevant Kuwaiti regulator or institution has adopted or incorporated them.

That distinction is important in legal research.

26. Consequences of Sharia Non-Compliance

A significant breach can potentially generate several consequences simultaneously:

Regulatory risk — supervisory concerns or required remediation.

Contractual risk — disputes about rights and obligations.

Financial risk — loss or adjustment of affected income.

Operational risk — transaction correction and process failures.

Reputational risk — reduced customer confidence.

Governance risk — questions regarding oversight and controls.

Litigation risk — disputes with customers, investors or counterparties.

The true exposure is therefore wider than the amount involved in the defective transaction itself.

27. Effective Risk-Management Framework

A strong Kuwaiti Islamic bank should therefore have an integrated process:

Sharia standards and governance
→ product approval
→ legal documentation
→ system configuration
→ staff training
→ transaction execution
→ continuous monitoring
→ Sharia review
→ independent audit
→ breach reporting
→ income treatment where required
→ remediation
→ board oversight.

The process should be documented sufficiently to demonstrate to regulators, auditors and courts what happened.

Conclusion

Sharia non-compliance risk management in Kuwait is an integral part of Islamic banking governance rather than simply a religious certification exercise. Kuwait's banking framework, particularly Law No. 32 of 1968 as amended by Law No. 30 of 2003, provides the statutory foundation for Islamic banking under CBK supervision.

Effective management requires institutions to ensure that approved Islamic structures—such as Murabaha, Ijara, Mudarabah, Musharakah and Wakala—are not only correctly designed but also correctly documented and executed. Sharia review, internal controls, independent audit, staff training, transaction sequencing, income treatment, board oversight and regulatory compliance are therefore essential.

Kuwaiti judicial principles are particularly relevant to contractual characterization, Murabaha transactions, investment and agency relationships, guarantees and documentary evidence. They reinforce a practical lesson: an Islamic label alone cannot substitute for a legally and operationally sound transaction.

Case-law verification note: Kuwait Court of Cassation judgments are not consistently available or indexed publicly in English under “Sharia non-compliance risk.” I do not have live web/legal-database search access in this chat, so I have intentionally avoided fabricating case numbers, dates or quotations. For formal academic or professional citation, the exact Kuwaiti authorities and the latest CBK Sharia-governance instructions should be checked against official/current sources as of 2 October 2026.