Dutch conduct and complaints — Kifid and the AFM framework
Dutch conduct supervision splits across DNB and the AFM, with the Klachteninstituut Financiële Dienstverlening — Kifid — as the centralised dispute-resolution body for retail customers. The architecture is unusually clean by EU standards: prudential and conduct supervision are divided by function rather than by sector, complaints escalate through one well-known ADR channel, and structured complaint data flows back to the supervisors on a regular cycle. For a fintech entering the Netherlands, the trap is not complexity — it is underestimating how visible your complaint handling becomes. This piece walks through who supervises what, how the Kifid process runs step by step, what gets reported, and two worked cases showing the machinery in motion.
1. Who supervises conduct in the Netherlands
- DNB — De Nederlandsche Bank: prudential supervisor, and the reporting counterpart for credit institutions, EMIs and PIs, including their complaint-data returns
- AFM — Autoriteit Financiële Markten: the conduct supervisor for financial markets — investment firms, CASPs, asset managers, advisers, insurance distributors, and conduct rules generally
- Kifid — the independent alternative-dispute-resolution body for retail-customer complaints across the financial sector
- ACM — Autoriteit Consument & Markt: the cross-sector competition and consumer-protection authority, engaged where financial services touch general consumer law
The “twin peaks” split means most firms face at least two supervisors on conduct-adjacent matters, plus Kifid as the customer-facing dispute channel. Coordination between the authorities runs through bilateral arrangements; from the firm’s side, each relationship has to be serviced separately.
2. Legal basis
- Wet op het financieel toezicht (Wft) — the framework statute carrying the substantive conduct rules
- Besluit Gedragstoezicht financiële ondernemingen Wft (BGfo) — the implementing decree on conduct of business, including complaint-handling requirements
- AFM policy notices and DNB guidance — the operational layer
- Kifid’s own regulations — the procedural rules of the ADR scheme
- Wet financiële markten BES — the parallel regime for the Caribbean Netherlands
3. The Kifid, step by step
The procedural shape is fixed and sequential:
- The customer must complain to the firm first — Kifid rejects premature filings
- The firm responds through its internal complaints procedure, typically within six weeks
- If unsatisfied, the customer escalates to Kifid, which investigates and may attempt mediation before deciding
- Kifid issues a decision — binding on the firm where the firm has pre-committed to compliance, which most authorised firms have
- Decisions can go to Kifid’s appeals commission
- Kifid publishes statistics annually; firms with high adverse-decision counts are visible to supervisors and to the market
4. Worked example — a blocked account complaint at an EMI
Facts: an EMI passporting into the Netherlands blocks a Dutch retail customer’s account during a fraud review. The customer complains in writing, receives a templated reply after eight weeks, and escalates to Kifid claiming €1,200 in missed payments and fees.
What comes back: Kifid first checks admissibility — the customer did complain to the firm first, so the case is in. The eight-week silence is the firm’s first problem: the internal procedure promised a response within six weeks, and Kifid weighs how the firm handled the complaint, not just the underlying block. If the firm cannot evidence a documented, proportionate reason for the block and for the delay, the decision — binding if the firm has pre-committed — can include compensation.
What the practitioner does: the complaints officer builds the response file from the case-management system: the fraud alert, the review steps, the communications log. Going forward, the firm hard-codes the response deadline into the workflow tool and treats every Kifid escalation as a data point in the conduct dashboard, because patterns in Kifid outcomes feed supervisory perception.
5. Complaints reporting to the supervisors
Complaint handling is not only customer-facing; structured data flows to the authorities:
- DNB — for credit institutions, EMIs and PIs, through the Digitaal Loket Rapportages channel
- AFM — for investment firms, CASPs and asset managers, through the AFM’s own portals
- Kifid — separate statistics on cases handled, outcomes and firm-level patterns
Typical fields per complaint: customer category, product, channel of receipt, date received, date resolved, outcome, whether it escalated to Kifid, and remediation paid. Submission is generally annual, which lulls firms into treating it as a year-end scramble — the firms that pass inspections cleanly are the ones whose case-management system produces the return as a by-product.
6. Worked example — the reconciliation gap
Facts: an investment firm files its annual conduct return to the AFM showing 41 complaints. During an inspection, the supervisor samples the customer-service mailbox and finds a further 15 expressions of dissatisfaction that were resolved informally by front-line staff and never logged.
What the rule says: the supervisory submission must reconcile with the firm’s internal records, and the internal records must capture what the conduct framework treats as a complaint — which is defined by substance, not by whether the customer used the word “complaint”. Unlogged complaints are a finding on two levels: data quality in the return, and a complaints procedure that is not actually operating.
What the practitioner does: the compliance officer widens the intake definition, trains front-line staff to log every expression of dissatisfaction, and adds a periodic sample of raw customer contacts against the complaints log. The corrected picture is disclosed proactively rather than waiting for the follow-up letter — supervisors consistently treat self-identification better than discovery.
7. Conduct supervision beyond complaints
Both supervisors collect and test conduct outcomes past the complaints ledger: suitability and appropriateness sampling, best-execution analysis, review of marketing communications, fee-transparency checks (do advertised and actual charges match), and the AFM’s recurring thematic focus on customers in vulnerable circumstances. The ACM adds a consumer-protection overlay on advertising practices, contractual fairness and distance selling, with its own independent sanctioning powers — a firm can be entirely clean with the AFM and still attract ACM attention on a marketing campaign.
8. Cadence and channel
| Reporter | Channel | Frequency |
|---|---|---|
| Credit institutions, EMIs, PIs | DNB DLR | Annual |
| Investment firms, CASPs, asset managers | AFM portals | Annual |
| All participating firms | Kifid case responses | Ad hoc, per complaint |
| All (consumer-law overlay) | ACM enforcement, no routine return | Ad hoc |
9. FAQ
Is a Kifid decision binding?
Where the firm has pre-committed to compliance — as most authorised Dutch firms have — yes. Without that commitment, the decision is a recommendation and the customer can litigate in court instead.
Can a customer go directly to Kifid?
No. The customer must complain to the firm first and give it the chance to respond; Kifid rejects premature filings.
I’m passporting in — do I report to DNB or my home supervisor?
For Dutch-customer complaints you typically report under the Dutch framework to DNB or the AFM alongside home-state reporting, and Kifid participation requirements may apply to your Dutch retail business. Check both streams — they do not cancel each other out.
How do the AFM and ACM divide consumer protection?
The AFM owns financial-sector conduct rules; the ACM owns general consumer law across all sectors. They overlap on advertising, contractual fairness and distance selling, and coordinate bilaterally — but each can act independently.
How does the Dutch regime compare to peer jurisdictions?
Substantively similar to the Spanish DCMR, the French ACPR / AMF framework and the Italian ABF. The Dutch specificity is the maturity and visibility of the Kifid channel.
What changes under PSD3 / PSR?
The PSR proposal codifies fraud-liability allocation and open-banking rules that touch conduct territory. The Dutch framework will absorb them once adopted — track the PSD3 file.
10. What to do, today
- Complaints officer: build the case-management system around the structured fields the supervisory return needs — the annual submission should be an export, not a project.
- Compliance: reconcile the supervisory return against the internal case log every cycle, and sample raw customer contacts for unlogged complaints before an inspector does.
- MLRO / conduct lead: track Kifid escalations and outcomes as a separate metric — adverse-decision patterns are visible to supervisors.
- Ops: hard-code the internal response deadline into the workflow tool; missed response windows are the most common self-inflicted Kifid loss.
- COO: watch the PSD3 / PSR file for fraud-allocation rules that will reshape the complaint categories you report.
Related: EMI licence in the Netherlands · Conduct reporting Spain · Conduct reporting Italy · Payment Accounts Directive — fees and switching
