Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

South Africa ZA

Domains (D1–D6)
2
Sources
10
Role actions
8
Horizon <90d
3
Jurisdiction profile
Largely CompliantTier BRisk: DecreasingMixed

South Africa's AML/CFT regime rests on the FIC Act, supervised by the FIC, Prudential Authority and FSCA, with crypto-asset service providers licensed as accountable institutions since 2022 and Travel Rule obligations live since April 2025.

MoreFollowing a February 2023 grey-listing over 22 action-plan items, FATF removed South Africa from increased monitoring in October 2025 after an on-site verification; EU and UK high-risk-third-country listings followed suit by December 2025.

Key deficiencies
  • Low volume of standalone/complex money-laundering prosecutions (corruption, narcotics, tax) relative to fraud-predicate self-laundering cases
  • Constrained real-time access to accurate beneficial-ownership information for proactive PF-asset identification
  • Slow cross-border asset recovery from state-capture-era capital flight routed via UAE, India and Bermuda
  • Untested AML/CFT supervisory enforcement capacity against the rapidly expanded licensed crypto-asset service provider population
Recent developments (18m)
  • FATF removed South Africa from the Jurisdictions Under Increased Monitoring list on 24 October 2025 following an on-site assessment
  • European Commission delisted South Africa from the EU high-risk third-country list via Delegated Regulation (EU) 2026/83 on 4 December 2025
  • UK's FATF-referential high-risk-third-country mechanism automatically ceased applying enhanced due diligence to South Africa following the October 2025 FATF delisting
  • FIC's Travel Rule (Directive 9, issued November 2024) came into effect for crypto-asset service providers in April 2025
  • FSCA issued a comprehensive request for information to its over 240 licensed CASPs in October 2025 to deepen supervisory understanding
  • National Treasury opened public comment (January 2026) on a bill amending the FIC Act, Companies Act, Trust Property Control Act and NPO Act to broaden FIC powers
  • Special Investigating Unit proclamation authorized a fresh probe into Gupta-linked Eskom coal/IT/security contracts spanning March 2006-August 2024
  • A state-radio presenter and four men were charged in December 2025 with contravening laws against assisting foreign military forces, amid continued scrutiny of South Africa-Russia military logistics ties
Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

South Africa's post-grey-list remediation architecture continued to accrete structural weight this cycle, with the clearest movement sitting in the still-uncompleted General Laws (AML/CTF) Amendment Bill (B15-2026). The National Assembly's Standing Committee on Finance completed clause-by-clause deliberations on the omnibus Bill on 23 September 2026, without formally adopting it. The Bill amends FICA, the Companies Act, the NPO Act, the FSR Act, and the Close Corporations Act, and is explicitly framed as preparation for South Africa's FATF Mutual Evaluation Round Five. Among its proposed changes are an extension of AML/CTF record-retention obligations from five to seven years and new lifestyle-audit powers for the Financial Intelligence Centre, alongside strengthened CIPC beneficial-ownership enforcement authority. None of this is yet law; the Bill remains at committee stage.

Running in parallel, and already operative, is FIC Directive 10 of 2026, which took effect on its Government Gazette publication date of 31 July 2026. The Directive requires Schedule 1 accountable institutions with multi-location operations, including gambling institutions and crypto-asset service providers, to disclose head-office, branch, and subsidiary geographic particulars. Already-registered institutions face a hard compliance deadline of 29 October 2026 to update their particulars.

Other Developments

Draft Directive 12 of 2026, published by the Financial Intelligence Centre for consultation, would require specified accountable institutions, including gambling institutions and crypto-asset service providers, to submit their Risk Management and Compliance Programme to the FIC annually via the goAML platform. This would convert the RMCP from an internally-held governance document into an FIC-submitted filing, a structural tightening of supervisory visibility rather than a change to the underlying risk-based obligation itself. The instrument remains at draft stage.

FATF Mutual Evaluation Round Five scheduling has come into clearer view, with secondary commentary pointing to a possible on-site assessment in February 2027 and plenary discussion later that year. This evaluation round is understood to test whether South Africa's post-grey-list measures are producing outcomes, not merely whether they exist on the statute book, a materially higher bar than the technical-compliance test the country cleared on its October 2025 grey-list exit.

FSCA enforcement volume rose sharply in the 2025/26 reporting period, with the Financial Sector Conduct Authority's Regulatory Actions Report recording penalties totalling R2.8 billion imposed on 76 individuals and entities, a significant increase on the prior reporting period. The figure is an aggregate total rather than an individually-sourced case record.

Cross-Monitor Connections

The geographic-disclosure requirement under Directive 10 and the prospective RMCP-submission duty under Draft Directive 12 both name crypto-asset service providers explicitly among affected accountable institutions, a point of direct relevance to crypto-monitor coverage of South Africa's CASP registration regime, though that analysis sits outside this monitor's remit this cycle. The FATF Mutual Evaluation Round Five timeline is also a standing cross-pillar reference point: its outcome-testing emphasis bears on how durable South Africa's beneficial-ownership and AML/CTF architecture proves under external scrutiny, independent of whether B15-2026 has been enacted by the time assessors arrive.

Outlook

The near-term calendar is dominated by the 29 October 2026 compliance deadline under Directive 10, a concrete and already-binding date against which affected institutions, including gambling operators and crypto-asset service providers, must complete geographic-particulars updates. Beyond that, the trajectory depends on how quickly B15-2026 moves from completed committee review to formal adoption, and on whether Draft Directive 12 is finalised in a form that confirms the RMCP annual-submission duty. Both instruments are explicitly positioned as readiness measures for the FATF Mutual Evaluation Round Five, with a possible on-site assessment as scheduled for February 2027 and plenary discussion later that year. Whether South Africa's October 2025 grey-list exit converts into a durable clean evaluation outcome will turn less on the existence of these instruments than on demonstrated enforcement and supervisory follow-through between now and the on-site assessment.

weekly_brief_draft · JID ZA
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership and Corporate Transparency

Beneficial Ownership and Corporate Transparency

Continue reading

South Africa sits outside the EU AML Package's direct supervisory perimeter: the three-instrument architecture of the AML Regulation (AMLR, Reg (EU) 2024/1624, directly applicable), the sixth AML Directive (6AMLD, transposed per EU Member State), and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority, with its shift from purely national supervision toward a hybrid EU-level regime, is a structural global backdrop for beneficial-ownership reform worldwide rather than a direct constraint on South African practice. The directly relevant development for South Africa this cycle sits in domestic legislation: the General Laws (AML/CTF) Amendment Bill (B15-2026), which completed clause-by-clause committee review in the National Assembly's Standing Committee on Finance on 23 September 2026 without yet being formally adopted.

B15-2026 is an omnibus instrument touching FICA, the Companies Act, the NPO Act, the FSR Act, and the Close Corporations Act. Its most structurally significant beneficial-ownership element is a proposed strengthening of the Companies and Intellectual Property Commission's enforcement powers over beneficial-ownership discrepancies and reporting. This would tighten the register-accuracy layer that sits underneath South Africa's existing beneficial-ownership disclosure framework, addressing a gap that FATF and domestic commentary have repeatedly identified as a residual weakness following the country's October 2025 grey-list exit. The Bill would also extend AML/CTF record-retention obligations from five to seven years and grant the Financial Intelligence Centre new lifestyle-audit powers, both framed explicitly as readiness measures for the FATF Mutual Evaluation Round Five rather than as freestanding reforms.

The significance of B15-2026 remaining at committee stage, rather than having moved to adoption, is itself a signal worth stating plainly: South Africa's beneficial-ownership enforcement architecture is mid-transition, with the enhanced CIPC powers not yet in force. Globally, the EU AML Package sets the structural direction for how beneficial-ownership supervision is organised, moving from fragmented national registers toward a more centrally-supervised model; in South Africa, the directly relevant development is this domestic legislative tightening of CIPC's own enforcement reach, pursued independently of the EU architecture and calibrated instead to FATF's effectiveness-testing standard.

Outlook

The path from completed committee review to formal adoption is the variable to watch. Enactment would hand CIPC materially stronger tools against beneficial-ownership discrepancies ahead of the FATF Mutual Evaluation Round Five, for which a possible on-site assessment is scheduled for February 2027 with plenary discussion later that year. Assessors will be testing whether South Africa's beneficial-ownership measures produce outcomes, not merely whether CIPC holds the power to pursue them, so the practical test will be enforcement volume and register-accuracy improvement in the months following any enactment, not the enactment date itself.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Not covered

Crypto / Digital Assets / Financial Innovation is not yet covered for this jurisdiction in this report.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

AML/CTF Regime

Continue reading

Three distinct instruments are moving at once inside South Africa's AML/CTF regime, each at a different stage of the legislative and regulatory pipeline. The most immediate in practical terms is FIC Directive 10 of 2026, which took effect on its Government Gazette publication date of 31 July 2026. The Directive requires Schedule 1 accountable institutions with multi-location operations, including gambling institutions and crypto-asset service providers, to disclose head-office, branch, and subsidiary geographic particulars on registration. Already-registered institutions must update their particulars by 29 October 2026, a hard deadline now close at hand. This is a structural expansion of what the FIC collects at the point of registration, closing a gap in which multi-branch and multi-subsidiary accountable institutions previously faced no requirement to disclose this level of geographic granularity.

Second, Draft Directive 12 of 2026, retrieved directly from the FIC's own site, proposes that specified accountable institutions, including gambling institutions and crypto-asset service providers, submit their Risk Management and Compliance Programme to the FIC annually via the goAML platform. This would move the RMCP from a document an institution holds internally for its own governance purposes to one it must actively file with the regulator, a meaningful supervisory-visibility upgrade. The instrument remains at consultation stage, and the specific submission deadlines reported secondhand in commentary have not been independently confirmed against the FIC's own draft text, so that detail should be treated as provisional.

Third, and least advanced, is the General Laws (AML/CTF) Amendment Bill (B15-2026), which completed clause-by-clause committee review on 23 September 2026 without formal adoption. Among its provisions are an extension of record-retention obligations from five to seven years, aligned with FATF Recommendation 11 on record-keeping, and new FIC lifestyle-audit powers subject to a newly tightened legal test. All three instruments are explicitly positioned, in the sourcing available this cycle, as readiness measures for South Africa's FATF Mutual Evaluation Round Five, for which a possible on-site assessment is scheduled for February 2027 with plenary discussion later that year.

Against this legislative and regulatory activity sits a separate signal of enforcement intensity: the Financial Sector Conduct Authority's 2025/26 Regulatory Actions Report recorded penalties totalling R2.8 billion imposed on 76 individuals and entities, a significant increase on the prior reporting period. While the FSCA's conduct mandate is broader than AML/CTF specifically, the scale of the increase is relevant context for how the South African financial sector's supervisory posture is hardening generally, alongside the FIC-specific instruments above.

Outlook

The 29 October 2026 deadline under Directive 10 is the first concrete test of how smoothly affected institutions, including crypto-asset service providers and gambling operators, absorb the new geographic-disclosure requirement. Beyond that date, attention shifts to whether Draft Directive 12 is finalised in a form that confirms annual RMCP submission via goAML, and whether B15-2026 moves from completed committee review to enactment in time to be cited as an achievement ahead of the FATF on-site assessment, as scheduled for February 2027. The FATF evaluation will test outcomes rather than the mere existence of these instruments, meaning the regime's credibility rests on demonstrated enforcement follow-through over the coming months, not solely on the pace of legislative and directive-making activity.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
In Force29 Oct 2026 · ±quarter

FIC Directive 10 of 2026 geographic-location registration deadline

Already-registered accountable institutions must update registration with head-office/branch/subsidiary geographic particulars by 29 October 2026.
Consultation2026-Q4 · ±quarter

Draft Directive 12 of 2026 - annual RMCP submission via goAML

Specified accountable institutions, including gambling institutions and CASPs, would submit their RMCP to the FIC annually via goAML.
Proposed2027-H1 · ±half_year

General Laws (AML/CTF) Amendment Bill (B15-2026)

On enactment: FIC gains lifestyle-audit powers, AML record retention extends from 5 to 7 years, FIC information-sharing powers broaden, and CIPC beneficial-ownership enforcement strengthens.
3 dated · 3 pending date · baseline fim-2026-07-05
Role action cards
MLRO

FIC Directive 10's geographic-disclosure update deadline of 29 October 2026 is imminent for multi-location accountable institutions.

Institutions with branch or subsidiary structures, including gambling and crypto-asset operators, face a concrete and already-binding filing deadline. Draft Directive 12 would add an annual RMCP-submission duty via goAML if finalised, converting an internal document into a regulator-facing filing.

2 evidence refs
Compliance

B15-2026 completed committee review on 23 September 2026 without formal adoption, leaving record-retention and lifestyle-audit changes still pending.

Compliance functions should note the Bill is not yet law: the proposed extension of record retention from five to seven years and new FIC lifestyle-audit powers do not yet apply, but are positioned as near-term FATF-readiness measures.

2 evidence refs
Legal

FATF Mutual Evaluation Round Five scheduling points to a possible on-site assessment in February 2027.

The evaluation is understood to test whether South Africa's post-grey-list measures produce outcomes, not merely whether they exist, raising the bar relative to the October 2025 grey-list exit.

1 evidence refs
Board

FSCA's 2025/26 Regulatory Actions Report recorded R2.8 billion in penalties across 76 individuals and entities, a significant year-on-year increase.

The scale of the increase signals a hardening supervisory posture across the South African financial sector, relevant to institutional risk appetite and governance oversight at board level.

1 evidence refs
CTO

Crypto-asset service providers are explicitly named as affected accountable institutions under both Directive 10 and Draft Directive 12.

Technical and platform teams supporting CASP registration should anticipate both the already-binding geographic-disclosure update and the prospective annual RMCP-submission filing via goAML.

2 evidence refs
Risk

Three AML/CTF instruments are moving concurrently at different stages, compounding near-term regulatory-change exposure.

Directive 10 is in force, Draft Directive 12 is at consultation, and B15-2026 is post-committee-review but not adopted; risk functions should track all three as a single compounding readiness programme tied to the FATF Mutual Evaluation Round Five.

4 evidence refs
Operations

The 29 October 2026 compliance deadline under Directive 10 requires operational completion of geographic-particulars updates.

Registration-update workflows for already-registered accountable institutions should be complete ahead of the deadline; no equivalent operational deadline yet applies to Draft Directive 12, which remains at consultation stage.

1 evidence refs
Audit

FSCA's R2.8 billion penalty total across 76 individuals and entities provides a new benchmark for control-testing scope.

The scale of the year-on-year increase is relevant to assessing whether current control-testing coverage anticipates a sector-wide tightening of enforcement activity.

1 evidence refs
Decision lens
MLRO

FIC Directive 10's geographic-disclosure update deadline of 29 October 2026 is imminent for multi-location accountable institutions.

Compliance

B15-2026 completed committee review on 23 September 2026 without formal adoption, leaving record-retention and lifestyle-audit changes still pending.

Legal

FATF Mutual Evaluation Round Five scheduling points to a possible on-site assessment in February 2027.

Board

FSCA's 2025/26 Regulatory Actions Report recorded R2.8 billion in penalties across 76 individuals and entities, a significant year-on-year increase.

CTO

Crypto-asset service providers are explicitly named as affected accountable institutions under both Directive 10 and Draft Directive 12.

Risk

Three AML/CTF instruments are moving concurrently at different stages, compounding near-term regulatory-change exposure.

Operations

The 29 October 2026 compliance deadline under Directive 10 requires operational completion of geographic-particulars updates.

Audit

FSCA's R2.8 billion penalty total across 76 individuals and entities provides a new benchmark for control-testing scope.

Shared evidence: 4 refs
Scenario sketches

Illustrative pathway: AMLA supervisory transition reshaping cross-border evasion routing

As an illustrative orientation only, the gradual shift of supervisory weight under the AMLA Regulation (Reg (EU) 2024/1620) from purely national AML authorities toward a hybrid EU-level direct/indirect-supervision model, operating alongside the directly-applicable AMLR (Reg 2024/1624) and per-state 6AMLD transposition, could over time alter where cross-border obliged entities perceive supervisory attention as concentrated. One illustrative possibility is that entities seeking the path of least supervisory friction could reassess which EU Member State regulators retain the most discretion during the transition period, a structural dynamic rather than an observed behaviour. This is architecture-over-incident illustration, not a prediction about any named entity or jurisdiction, and it is not drawn from South Africa-specific evidence this cycle.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_change
T2 · EU AML Package / AMLAno_changeSouth Africa is an autonomous jurisdiction not bound by AMLR/6AMLD/AMLA.
T3 · FATF Grey ListwatchSouth Africa exited the FATF grey list October 2025; next Mutual Evaluation Round Five is imminent, with possible on-site assessment February 2027 and plenary later in 2027, now testing effectiveness rather than technical compliance.
T4 · Beneficial-Ownership Register StatuswatchB15-2026 proposes stronger CIPC enforcement powers over beneficial-ownership discrepancies and reporting; still at committee stage.
T5 · Crypto & Digital-Asset Integrityno_changeNo new ZA crypto-AML development beyond the standing FICA/CASP accountable-institution regime and the May 2026 Joint Communication.
T6 · Sanctions Regime Divergenceno_change
Registers

Enforcement actions

  • President Ramaphosa authorized an SIU probe into nine Eskom contracts (coal/diesel procurement, IT services, security, forensic services) linked to Gupta-owned Tegeta and associated firms, covering irregular/wasteful expenditure of over R2.3 billion from March 2006 to August 2024. 1 Nov 2025
  • FSCA issued a comprehensive request for information to its over 240 licensed CASPs to deepen its understanding of the sector's landscape, in support of effective regulatory development, consumer protection and market integrity. 1 Oct 2025
  • A state-radio presenter and four men were charged with contravening South African laws against assisting foreign military forces, amid continued scrutiny of Russia-linked military logistics facilitation. 1 Dec 2025
  • FATF credited South Africa's AML/CFT supervisors with demonstrating that all supervisors apply effective, proportionate and dissuasive sanctions for non-compliance, and with a sustained increase in prosecutions/confiscations, as part of the action-plan completion verified at the October 2025 Plenary. 24 Oct 2025

Sanctions changes

  • The European Commission adopted Delegated Regulation (EU) 2026/83 on 4 December 2025, removing South Africa (alongside Burkina Faso, Mali, Mozambique, Nigeria and Tanzania) from the EU list of high-risk third countries under Article 9 of AMLD IV, following its FATF delisting. 4 Dec 2025
  • Following removal of Schedule 3ZA from the UK Money Laundering Regulations in 2024, the UK's high-risk-third-country designation is defined by direct reference to FATF's current lists; South Africa's removal from FATF's Jurisdictions Under Increased Monitoring on 24 October 2025 automatically lifted its UK HRTC status without a separate statutory instrument. 24 Oct 2025
  • The European Commission adopted Delegated Regulation (EU) 2026/46 on 3 December 2025 adding Russia to the EU AML high-risk third-country list, a development bearing on South African financial institutions maintaining Russia-linked correspondent or trade-finance relationships. 3 Dec 2025

Regulatory horizon (register)

  • National Treasury AML/CFT Amendment Bill enactment
  • Next FATF Plenary follow-up review of South Africa
  • SARB/FSCA stablecoin and tokenized-money framework development

Active schemes

  • [HIGH] State-capture shell-company layering to UAE/India/Bermuda
  • [HIGH] Southern African gold/precious-metals TBML corridor to Dubai
  • Crypto-asset licensing perimeter and cross-border stablecoin corridors
  • Alleged South Africa-Russia military-logistics facilitation network
Sources
  1. FATF / ESAAMLG (Mutual Evaluation Report of South Africa)
  2. Financial Action Task Force
  3. European Commission (DG FISMA)
  4. HM Treasury
  5. OCCRP
  6. ICIJ (Swazi Secrets)
  7. Bloomberg
  8. Chainalysis
  9. TRM Labs
  10. FATF / ESAAMLG (Follow-Up Report)
Coverage gaps
ML cases relating to fraud form the bulk of prosecutions, wi…
ML cases relating to fraud form the bulk of prosecutions, with fewer standalone ML prosecutions for serious corruption, narcotics or tax offences, and non-custodial sentencing remains common for convicted natural persons.
Authorities' ability to proactively identify and detect prol…
Authorities' ability to proactively identify and detect proliferation-financing-related assets is constrained by limited timely access to accurate beneficial-ownership information on legal persons and arrangements.
Cross-border recovery of state-capture-era assets moved to t…
Cross-border recovery of state-capture-era assets moved to the UAE, India and Bermuda continues to be hampered by delayed mutual-legal-assistance responses from destination jurisdictions and use of shell-company litigation abroad to block confiscation.
No publicly confirmed FSCA/FIC enforcement penalty specifica…
No publicly confirmed FSCA/FIC enforcement penalty specifically targeting AML/CFT breaches by a licensed crypto-asset service provider has surfaced in the review window, despite the licensed CASP population exceeding 240 entities and an active October 2025 supervisory RFI.

Evidence

Confidence-tiered claims

Completed clause-by-clause committee review by the National Assembly's Standing Committee on Finance on 23 September 2026; not yet formally adopted. SRC-fim-ZA-002
Probable · 1 source
AML record retention would be extended from 5 to 7 years under B15-2026, still at committee stage. SRC-fim-ZA-002
Probable · 1 source
Requires Schedule 1 accountable institutions with multi-location operations, including gambling institutions and crypto-asset service providers, to disclose head-office/branch/subsidiary geographic particulars; already-registered institutions must update by 29 October 2026. SRC-fim-ZA-003
Confirmed · 1 source
Would require specified accountable institutions, including gambling institutions and crypto-asset service providers, to submit their Risk Management and Compliance Programme to the FIC annually via goAML. SRC-fim-ZA-004
Probable · 1 source
Possible on-site assessment in February 2027, plenary discussion later in 2027; FATF will assess whether mandated measures are producing outcomes, not merely whether they exist. SRC-fim-ZA-005
Probable · 1 source
FSCA's 2025/2026 Regulatory Actions Report records penalties totalling R2.8 billion imposed on 76 individuals and entities, a significant increase on the prior reporting period. SRC-fim-ZA-006
Probable · 1 source