Cyprus Fines Banque SBA €750,000 Over Anti-Money-Laundering Failures
Regulator's penalty follows 2023 inspection, as banks face growing pressure to prove their controls work.
On 13-Oct-2026, Cyprus's central bank confirmed it has fined Banque SBA Cyprus €750,000 for failing to meet anti-money-laundering and counter-terrorist-financing (AML/CFT) requirements.
"The Central Bank of Cyprus said the penalty followed an inspection of the bank carried out in 2023, and the decision was taken on 29 September. The regulator found that the bank had not complied with specific provisions of Cyprus's money-laundering law and with the central bank's directive to lenders on preventing money laundering and terrorist financing."
How the Fine Was Imposed
The central bank acted under section 59(6) of the Prevention and Suppression of Money Laundering Activities Law of 2007, which empowers the regulator to impose administrative measures and sanctions when a supervised firm breaches statutory provisions or related directives.
The regulator noted that the decision followed administrative-law procedures, including giving the bank an opportunity to explain its position before a final determination was reached. Notably, the central bank's announcement did not set out in detail what the failings were, nor did it suggest that the bank had been used to launder specific sums of money. In previous Cypriot cases, such as a 2016 penalty on Hellenic Bank, the regulator has stressed that a fine of this kind is not, in itself, a finding that criminal proceeds passed through a bank.
A Familiar Pattern: The Latency of Supervisory Audits
The Banque SBA penalty is the latest in a series of AML fines imposed by the Cypriot regulator. Earlier cases include a €277,000 fine on Bank of Cyprus, which related to the period 2008 to 2015 and followed an audit in 2020.
- Supervisory Latency: The fine arrived years after the 2023 inspection that prompted it, proving that compliance data and audit trails must remain verifiable long after the event.
- Procedural and Control Compliance: The penalty turned on whether the bank could prove it had met specific regulatory requirements, rather than an isolated, high-profile scandal.
- High Evidentiary Standard: Regulators increasingly assess firms on contemporaneous proof of customer assessment, alert review, and risk tier assignments.
Why It Matters Beyond Cyprus
Compliance specialists emphasize that such enforcement cases show how far regulators now expect institutions to go in proving their controls work, not simply possessing written policies. Inspectors routinely demand evidence of how customers were assessed, how risk ratings were assigned, how transaction monitoring alerts were handled, and how decisions were recorded. That is remarkably difficult for institutions relying on scattered tools, spreadsheets, and manual reviews.
Where SecuroQ Fits In: An Auditable FinCrime Intelligence Layer
Regulatory technology firm SecuroQ, which works with banks, fintechs, payment firms, crypto platforms and wealth managers, is designed to tackle exactly this fragmentation. The platform brings customer, risk, transaction and investigation information together into a single 'intelligence layer', replacing disparate tools with a unified, auditable record.
- Customer Due Diligence (CDD): Automated entity resolution and multi-jurisdiction identity checks to establish beneficial ownership and customer authenticity.
- Continuous Risk Scoring: Dynamic, behaviour-based ratings so risk tiers reflect actual client transactional conduct rather than static onboarding data.
- Explainable Transaction Monitoring: Real-time detection of suspicious activity with alerts that carry clear reasoning that analysts and auditors can follow.
- Investigation Case Assembly: Fast consolidation of counterparty signals and audit packages ready for supervisory examination.
- End-to-End Audit Trails: Full immutable logging of analyst decisions, overrides, and model configurations so they can be traced from start to finish.
SecuroQ stresses that its artificial intelligence is built as decision support, ensuring human compliance officers remain responsible for final determinations. The firm also offers a 'Financial Crime Health Check'—a diagnostic review of a firm's compliance controls to identify gaps 'before the regulator asks'.
Technology cannot replace strong governance or an engaged board. But the Cyprus case is a reminder that supervisors judge firms on verifiable evidence, sometimes years after the event. For banks and regulated institutions, being able to show your workings has become as critical as having the controls in the first place.
"Sources: Central Bank of Cyprus Official Announcements; SecuroQ (securoq.com)."
Prove Your Compliance Controls Before Supervisory Audits
Discover how SecuroQ's Explainable Monitoring and unified audit trail give institutions instant proof of compliance for regulatory inspections.