Financial Crime Risk Governance in 2026: Key Insights from FCRMC’s Q2 Newsletter

This article is adapted from FCRMC’s Q2 2026 newsletter and highlights key financial crime risk developments, regulatory themes and Board-level priorities across South Africa and Namibia.

Financial crime risk remains a priority governance issue for Boards, executive management and senior control functions in 2026. Across South Africa and Namibia, regulatory expectations continue to move beyond policy alignment toward demonstrable effectiveness.

Supervisors increasingly expect institutions to show that financial crime risk frameworks are risk-based, operationally embedded, actively governed and supported by clear evidence.

From documentation to demonstrable effectiveness

The core issue for many institutions is no longer whether policies, RMCPs, AMLCPs and related frameworks exist. The more important question is whether those frameworks are properly implemented, governed and evidenced.

Boards and executive teams should be asking whether financial crime controls are understood by the business, supported by reliable data, subject to meaningful oversight and capable of withstanding regulatory or assurance scrutiny.

Current client engagement themes

Recent client-facing discussions indicate increased focus on:

  • financial crime business risk assessments;
  • RMCP and AMLCP reviews;
  • beneficial ownership controls;
  • sanctions and watchlist screening;
  • suspicious and unusual transaction reporting;
  • Board and senior management training;
  • inspection readiness;
  • governance and operating model design;
  • payment, fintech and digital financial services risk.

For payment facilitators, fintechs and platform-based businesses, the convergence of fraud, AML, sanctions and technology risk remains a particular area of concern. Boards should ensure that controls are proportionate to the institution’s business model, growth strategy and risk exposure.

South Africa: sustainability after grey-list exit

South Africa’s removal from FATF increased monitoring should not be interpreted as a reduction in regulatory expectations. Rather, it marks a transition into a sustainability phase. Institutions should expect continued supervisory focus on RMCP effectiveness, beneficial ownership verification, sanctions controls, suspicious transaction reporting, data quality, Board accountability and evidence of implementation.

The practical expectation is clear: institutions must be able to prove that financial crime controls are working.

Namibia: continued increased monitoring

Namibia remains subject to FATF increased monitoring and continues to strengthen its AML/CFT/CPF framework. Institutions with Namibian operations or exposure should continue to monitor national risk assessment developments, beneficial ownership transparency requirements, PEP/PIP and sanctions screening expectations, supervisory inspections, sector-specific guidance and enforcement activity.

Groups operating across both South Africa and Namibia should ensure that group standards are harmonised while still responding to jurisdiction-specific regulatory expectations.

Financial crime trends requiring Board attention

Five areas require particular attention:

  1. Beneficial ownership risk
    Complex ownership structures, nominee arrangements, trusts and layered entities continue to be used to obscure control and ownership.
  2. Sanctions and screening weaknesses
    Institutions should ensure appropriate list coverage, timely screening, documented match handling, escalation procedures and oversight of false positives and true matches.
  3. Fraud and AML convergence
    Fraud, money laundering and digital payment abuse are increasingly interconnected. These risks should not be managed in disconnected silos.
  4. DNFBP and professional enabler risk
    Property transactions, trusts, company structures and professional services remain vulnerable to misuse.
  5. Third-party and technology dependency
    Financial crime controls increasingly depend on technology providers, outsourced service providers and data platforms. Boards should oversee vendor risk, system resilience, data integrity and continuity arrangements.

Board priorities for Q3 2026

Boards and executive management should consider whether they have:

  • reviewed the adequacy and effectiveness of RMCPs, AMLCPs and financial crime frameworks;
  • confirmed that beneficial ownership, sanctions and screening controls are properly implemented and evidenced;
  • assessed whether Board reporting provides meaningful insight into financial crime risk exposure and control performance;
  • ensured that financial crime training is role-specific and includes Board and senior management accountability;
  • reviewed inspection readiness, including evidence packs, remediation tracking and control documentation;
  • evaluated financial crime risk in digital payments, fintech, platform, merchant and third-party environments;
  • confirmed that financial crime governance is embedded across business, compliance, risk, legal, technology and internal audit.

How FCRMC supports institutions

FCRMC continues to strengthen its advisory, assurance and training capabilities through the development of its Independent Expert Comfort Review framework, enhanced quality assurance processes and the continued expansion of the FCRMC Training Academy.

These initiatives support institutions with independent reviews, financial crime risk assessments, RMCP and AMLCP enhancement, Board training, inspection readiness, governance design and practical implementation support.

Financial crime risk is now firmly an enterprise governance issue. Boards and executive management are expected to demonstrate informed oversight, active challenge and sustained accountability.

For further discussion on the themes covered in FCRMC’s Q2 2026 newsletter, including Board training, inspection readiness, RMCP and AMLCP enhancement or financial crime programme effectiveness, please contact FCRMC.