Συμμόρφωση AML/KYC στην Κύπρο

Cyprus firms in regulated sectors — banks, investment firms, corporate service providers, real estate agents, lawyers, auditors — must comply with the Prevention and Suppression of Money Laundering Activities Law (188(I)/2007 as amended). Requirements include customer due diligence, ongoing monitoring, named compliance officer, and Suspicious Activity Report submission to MOKAS (Cyprus FIU).

243 εταιρείες
45 κορυφαία
12 περιοχές κάλυψης

Cyprus AML framework

The Cyprus Prevention and Suppression of Money Laundering Activities Law (188(I)/2007, most recently significantly amended in 2021) transposes EU AML directives (4AMLD, 5AMLD, and 6AMLD) into Cyprus law. The Law is administered by MOKAS (Unit for Combating Money Laundering) with sector-specific supervision by CySEC (investment firms), Central Bank of Cyprus (banks), ICPAC (auditors and accountants), Cyprus Bar Association (lawyers), and CySEC/DROCIP (corporate service providers).

Obligated entities must implement risk-based AML/CFT programmes proportionate to their business.

Customer Due Diligence (CDD)

Obligated entities must perform CDD before establishing a business relationship, executing occasional transactions above thresholds, or when suspicion of ML/TF arises. CDD includes: identification and verification of customer identity, identification and verification of ultimate beneficial owner (UBO), understanding purpose and intended nature of the business relationship, and ongoing monitoring of transactions.

Enhanced Due Diligence (EDD) applies to higher-risk categories including politically exposed persons (PEPs), non-face-to-face relationships, correspondent banking, complex ownership structures, and higher-risk jurisdictions.

MLCO and reporting obligations

Obligated entities must appoint a Money Laundering Compliance Officer (MLCO) at senior management level responsible for AML compliance, staff training, transaction monitoring, and SAR filing. The MLCO must be notified to the relevant supervisor. Suspicious Activity Reports must be filed with MOKAS through the goAML portal without delay when suspicion of ML/TF arises. Tipping off the customer is a criminal offence.

Annual reporting obligations vary by sector, typically including AML questionnaires, transaction volumes, and compliance programme summaries.

Beneficial Ownership Registry

Cyprus maintains a Beneficial Ownership Registry at the Registrar of Companies. Every Cyprus company, partnership, and express trust must submit UBO information (individuals holding >25% of shares or voting rights, or exercising control by other means). Failure to submit accurate UBO information triggers €100 daily fines plus €200 initial penalty. UBO data is accessible to competent authorities and, on legitimate interest basis, to certain third parties under EU rules.

When to engage AML/KYC specialists

AML compliance is a specialist field beyond routine bookkeeping. Engage specialist advisors for: initial AML programme design and MLCO recruitment/support, transaction monitoring system implementation, staff training programmes, response to supervisory audits, remediation of identified deficiencies, and complex customer risk assessments. Some Cyprus firms offer outsourced MLCO services for smaller regulated entities.

Κορυφαίες εταιρείες

1 εταιρείες

Ανεξάρτητες εταιρείες με τεκμηριωμένη εμπειρία σε Συμμόρφωση AML/KYC, ταξινομημένες κατά αξιολόγηση.

Μέλη διεθνών δικτύων

44 εταιρείες

Πού βρίσκονται

12 περιοχές

Οι εταιρείες που προσφέρουν Συμμόρφωση AML/KYC έχουν γραφεία στις παρακάτω περιοχές.

Συχνές ερωτήσεις

Who must comply with Cyprus AML rules?

Obligated entities include banks, investment firms, insurance companies, corporate service providers, trustees, tax advisors, auditors, lawyers (for certain services), real estate agents, dealers in high-value goods (transactions above €10,000 cash), and virtual asset service providers. Individual Cyprus taxpayers not in obligated sectors have no direct AML compliance duties.

What are the penalties for AML non-compliance?

Administrative penalties from sector supervisors range from thousands to hundreds of thousands of euros depending on the violation. Criminal offences under the AML Law can attract imprisonment up to 14 years and unlimited fines. In addition to direct penalties, non-compliance triggers reputational damage and can lead to license withdrawal for regulated firms.

Do I need to identify UBOs for private clients?

Yes, if you are an obligated entity providing services to the client. Every business relationship must include identification of the individual who ultimately owns or controls the customer entity. For high-net-worth clients with complex structures, this requires layer-by-layer analysis until natural person(s) meeting the 25% threshold are identified.

What is a Suspicious Activity Report?

A SAR is a formal report to MOKAS filed through the goAML portal when an obligated entity suspects (or has reasonable grounds to suspect) that transactions or attempted transactions involve money laundering or terrorist financing. No proof is required, just reasonable suspicion. Confidentiality is critical — tipping off the customer that a SAR has been filed is a criminal offence.

Do virtual asset service providers need to be licensed in Cyprus?

Yes. Since 2021, Virtual Asset Service Providers (crypto exchanges, wallet providers, custody services, ICO/token issuance intermediaries) must register with CySEC and comply with full AML/CFT obligations. This includes CDD on customers, transaction monitoring, and SAR filing. Non-registered operation is a criminal offence.

How often should AML programmes be reviewed?

AML programmes should be reviewed at least annually and updated when triggers arise: regulatory changes, new products/services, expansion into new markets/jurisdictions, identified deficiencies, or material customer base changes. Documented reviews with board or senior management sign-off are expected by supervisors.

Σχετικές υπηρεσίες