D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
AML/CFT Act 2009 (extended 2018 to all DNFBP sectors) with three supervisors — RBNZ, FMA, DIA — and NZ Police FIU (NZPFIU).
Sanctions is not yet covered for this jurisdiction in this report.
Globally, the EU AML Package, comprising the AML Regulation (Reg (EU) 2024/1624, directly applicable across Member States), the sixth AML Directive (6AMLD, transposed per Member State), and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority, sets the structural direction for beneficial-ownership transparency internationally, shifting supervision from purely national authorities toward a hybrid EU-level regime through AMLA's direct and indirect supervision perimeter. New Zealand sits outside this package's direct perimeter, as it is not an EU or EEA jurisdiction; the directly relevant developments for New Zealand's own beneficial-ownership posture are domestic.
On 20 December 2025, New Zealand's Associate Police Minister unveiled a TSOC strategy renewing the Government's commitment to implement a beneficial-ownership register for companies and limited partnerships, to be overseen by the Ministry of Business, Innovation and Employment. This is a recommitment rather than a new proposal, and its implementation profile is notably unhurried: it is a Priority 2 action within a five-year timeframe, which means the register could plausibly slip to 2027 or beyond rather than being delivered in the near term. In the absence of the register, New Zealand continues to rely on Companies Office shareholder disclosure, a mechanism that can list nominee shareholders or trusts rather than the natural-person beneficial owners a register is designed to surface, leaving a persistent transparency gap between what is disclosed and who ultimately controls a corporate structure.
The durable backdrop against which this cycle's New Zealand-specific signal should be read is therefore twofold: internationally, the EU's move toward AMLA-anchored hybrid supervision represents a structural tightening of beneficial-ownership expectations; domestically, New Zealand's own register remains a stated but unimplemented commitment, with the gap between commitment and delivery itself a form of standing exposure for corporate-structure opacity that could be exploited by illicit actors seeking a jurisdiction where nominee arrangements are not pierced by a public register.
The test for New Zealand's beneficial-ownership trajectory is whether the Priority 2, five-year-horizon TSOC commitment converts into a Cabinet paper or Bill within the next several reporting cycles, or continues to be recommitted without material implementation progress. No primary Cabinet paper or Bill text was available this cycle, so this sub-brief's signal rests on NGO and press reporting of the Ministerial announcement rather than the underlying instrument itself.
Enabler Jurisdictions is not yet covered for this jurisdiction in this report.
Conflict Finance is not yet covered for this jurisdiction in this report.
In New Zealand, the directly relevant digital-asset development this cycle is the formal capture of crypto-asset service providers within the AML/CFT supervisory perimeter. FMA guidance confirms that crypto-asset service providers offering a 'financial service' are captured as 'financial institutions' under the AML/CFT Act, and from 1 July 2026 the Department of Internal Affairs became the sole AML/CFT supervisor for those reporting entities, the same date on which DIA's broader consolidation as sole AML/CFT supervisor for all reporting-entity sectors took effect. This means New Zealand CASPs no longer sit in a supervisory grey zone between financial-services regulators; they are folded into the same consolidated supervisory architecture as banks, non-bank lenders and other financial institutions.
Globally, structural developments such as the OECD's Crypto-Asset Reporting Framework and evolving FATF virtual-asset guidance form contextual backdrop to how jurisdictions approach digital-asset AML/CFT supervision, but the New Zealand-specific finding this cycle is squarely about domestic supervisory consolidation rather than about international standard-setting. The practical effect for CASPs operating in or into New Zealand is that DIA is now the single point of AML/CFT supervisory contact and enforcement authority, replacing what had previously been ambiguity as to whether a given CASP's activities fell within RBNZ, FMA or DIA's respective remits under the prior tri-supervision model.
This consolidation is structural rather than incident-driven: no CASP-specific enforcement action was identified this cycle, and the significance of the development lies in the clarified and unified supervisory perimeter itself, consistent with an architecture-over-incident reading of the New Zealand digital-asset AML/CFT landscape.
Whether DIA's consolidated supervisory role produces a distinct CASP-specific supervisory approach, such as sector-specific guidance or risk assessments, or whether CASPs are supervised under the same generic reporting-entity framework as other sectors, is the practical question to watch. The absence of any CASP-specific enforcement action this cycle should be read as a function of the consolidation being newly effective from 1 July 2026, not as an indication of enforcement inactivity going forward.
Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.
New Zealand's AML/CFT regime underwent two structural amendments this cycle. First, the AML/CFT (Supervisor, Levy, and Other Matters) Amendment Act 2026 took effect 1 July 2026, consolidating the Department of Internal Affairs as sole AML/CFT supervisor for all reporting entities and replacing the prior tri-supervision model split across the Reserve Bank of New Zealand, the Financial Markets Authority and DIA. The Act grants DIA new rule-making, investigation and censure powers, introduces an industry levy on the sector it supervises, and mandates a National Strategy, representing a governance overhaul of New Zealand's AML/CFT supervisory design rather than an incremental adjustment to an existing model.
Second, the AML/CFT Amendment Act 2026 came into force 19 May 2026, introducing a new 'money or value transfer service' definition and moving Source of Wealth and Source of Funds verification from an automatic-trigger standard to a risk-based one. This is a definitional and verification-standard change with practical compliance implications: reporting entities no longer apply SoW/SoF verification uniformly on an automatic basis but instead calibrate verification intensity to assessed risk, a shift that reduces blanket compliance burden while placing greater emphasis on the quality of each entity's own risk assessment.
New Zealand's FATF standing remains stable and unchanged through both amendments: the jurisdiction is not on the FATF grey list, and its 3rd enhanced follow-up report, following the 2021 Mutual Evaluation, records compliance on 9 Recommendations and large compliance on 25 of the 40 FATF Recommendations, with 6 partially compliant. The domestic amendments this cycle are consistent with continued alignment toward, rather than departure from, that standing FATF assessment.
The Government has signalled intent to introduce a further Bill amending the AML/CFT Act within the current parliamentary term, with a broad expectation the process may extend into early 2027; the specific scope of that further amendment was not detailed this cycle. Whether DIA's newly consolidated censure and investigation powers translate into visible enforcement activity, and how reporting entities adapt to risk-based SoW/SoF verification in practice, are the near-term indicators to watch for whether this cycle's structural changes deliver a materially different supervisory experience.
Commercial Activity is not yet covered for this jurisdiction in this report.
Reporting entities now answer to a single supervisor with new censure and investigation powers, and must recalibrate Source of Wealth/Source of Funds verification workflows away from automatic triggers toward a documented risk-based methodology.
Compliance functions across all reporting-entity sectors, including CASPs newly confirmed as captured 'financial institutions', now report to DIA alone rather than navigating RBNZ/FMA/DIA overlap, and policy frameworks for SoW/SoF verification need updating to reflect the risk-based standard.
No material change for this persona this cycle
The governance overhaul, including a new industry levy, new censure powers and a mandatory National Strategy, represents a material shift in the institution's regulatory-relationship structure in New Zealand, warranting board awareness even absent any specific enforcement event.
Any digital-asset infrastructure serving New Zealand customers should assume AML/CFT reporting-entity obligations apply if the service qualifies as a 'financial service', with DIA as the single supervisory point of contact from 1 July 2026.
Corporate-structure opacity risk in New Zealand persists despite a December 2025 government recommitment to a register, since implementation is a five-year-horizon Priority 2 action that could slip past 2027.
Operational transaction-monitoring and onboarding workflows built around automatic SoW/SoF triggers need to transition to risk-based decisioning logic to remain compliant with the amended standard.
Internal audit should confirm that control-testing scope has been updated to reflect the single-supervisor model, the new censure/investigation powers, and the risk-based SoW/SoF verification standard now in force, rather than testing against the retired tri-supervision framework.
DIA became New Zealand's sole AML/CFT supervisor from 1 July 2026, and SoW/SoF verification moved to a risk-based standard from 19 May 2026.
A single consolidated supervisor and a new risk-based verification standard both took effect this cycle, alongside formal AML/CFT capture of crypto-asset service providers.
No material change this cycle.
New Zealand's AML/CFT supervisory architecture was structurally overhauled this cycle, consolidating power in a single regulator.
Crypto-asset service providers were formally confirmed as captured 'financial institutions' under New Zealand's AML/CFT Act, now supervised solely by DIA.
New Zealand remains without a public beneficial-ownership register, and BO/transparency risk continues via nominee-listing Companies Office disclosure.
SoW/SoF verification moved from an automatic-trigger standard to a risk-based one from 19 May 2026.
DIA's consolidation as sole AML/CFT supervisor changes the audit-trail and control-testing scope for New Zealand reporting entities.
Illustrative orientation only: as the AMLA Regulation (Reg (EU) 2024/1620) moves the EU from purely national AML supervision toward AMLA direct and indirect supervision of cross-border obliged entities, alongside the directly-applicable AMLR (Reg 2024/1624) and per-state 6AMLD transposition, one illustrative pathway is that evasion typologies currently concentrated in weaker national-supervisor jurisdictions could migrate toward non-EEA jurisdictions such as New Zealand that sit outside the AMLA perimeter, testing whether domestic consolidations like New Zealand's own DIA sole-supervisor model provide comparable resilience. This is a structural, architecture-over-incident sketch, not a prediction of any specific evasion event.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | No material change found in UN Panel / OFAC / OFSI channels or Russian sanctions-evasion architecture affecting NZ this cycle. |
| T2 · EU AML Package / AMLA | no_change | No NZ-specific interaction with AMLR/6AMLD/AMLA identified this cycle; NZ is outside the EEA and not directly bound. |
| T3 · FATF Grey List | stable | New Zealand is not on the FATF grey list; 3rd enhanced follow-up report shows compliant on 9 and largely compliant on 25 of 40 Recommendations, partially compliant on 6. |
| T4 · Beneficial-Ownership Register Status | watch | NZ still has no public BO register; a December 2025 TSOC strategy renews commitment to implement one for companies and limited partnerships within a five-year window (Priority 2 action). |
| T5 · Crypto & Digital-Asset Integrity | material_change | FMA issued its first stablecoin designation notice (ECDD Holdings' NZDD, in force 11 March 2026) declaring the token not a 'financial product'; CARF reporting obligations take effect 1 April 2026. |
| T6 · Sanctions Regime Divergence | no_change | No NZ-specific sanctions-divergence developments identified this cycle. |