FIRMCY Insights

Insights

Regulator commentary, weekly briefings and country/sanctions analysis from FIRMCY · RSS
AllChange logCountry & sector riskCountry riskFrom FIRMCYPractice notesRegulator commentarySanctions movementsSpotlightWeekly briefing
13 October 2026 · Practice notes

The finding comes first

Simplified due diligence in Cyprus law is a permission, and its condition comes first. A firm may lighten the measures provided it has already satisfied…

13 October 2026 · Practice notes

Up to date is not annual

Cyprus law sets no timetable for a firm's own money laundering risk assessment. It says the assessment is kept up to date. "Annually" is ICPAC's word, and…

8 October 2026 · Practice notes

A doubt reopens the file

Most firms go back to a client's due diligence when something new happens: a new deal, a new owner, a bigger sum. Cyprus law also sends them back when…

8 October 2026 · Practice notes

Senior does not mean board

Cyprus law requires the compliance officer to be senior. It does not require a board seat. Senior, as the Law defines it, means knowing enough about the…

6 October 2026 · Practice notes

Suspicion has no threshold

A one-off job under €15,000 is not, by that fact alone, outside due diligence. In Cyprus law €15,000 is one of several amounts, each tied to a particular…

6 October 2026 · Practice notes

Remote is half the factor

A client you never meet in person is not, by that fact alone, a higher-risk factor under Cyprus law. The factor is a remote relationship or transaction…

18 September 2026 · Practice notes

Telling is not training

Cyprus AML law asks a firm for two different things about what its own staff know, and it is easy to do one of them and count it as both. Telling people…

18 September 2026 · Practice notes

The last item is your staff

Section 58 of the Law lists the things a firm's anti-money-laundering procedures have to cover. Client due diligence is the first item on that list. The…

18 September 2026 · Practice notes

The old product counts too

Bolt a new tool onto a service your firm has sold for ten years, and nothing about that service is new. Cyprus law still wants the money laundering risk…

18 September 2026 · Practice notes

No audit team, still a test

Cyprus AML law asks for an independent internal audit service only when your size and the nature of what you do call for one. It attaches no such…

18 September 2026 · Practice notes

The policy before the score

Ask a firm where its client acceptance policy lives and you usually get a form: the questionnaire a new client fills in on day one. ICPAC's Directive uses…

18 September 2026 · Practice notes

Judged by what it changed

The compliance officer's annual report is not a filing. Under ICPAC's Directive it goes to your own board, it should be used to formulate an action plan…

18 September 2026 · Practice notes

Write down what you do

Your AML manual is a record of what your firm actually does. It is not a statement of what it means to do. ICPAC writes the duty in the past participle…

10 September 2026 · Practice notes

Bad press is not a match

A sanctions hit has two endings. Either the person on your file is the person on the list, or they are not. Bad press has neither ending. It is not…

8 September 2026 · Practice notes

Risk is not the exit trigger

Cyprus law makes you end a client relationship on your own initiative for exactly one reason: you could not finish the customer due diligence. Not that…

8 September 2026 · Practice notes

Would a stranger agree

Cyprus law names the kinds of transaction you have to examine. Nothing tells you what should actually stop one. You set the thresholds. You write the red…

3 September 2026 · Practice notes

Hand it up, say nothing

Most people picture a suspicious transaction report as something you send to MOKAS. In Cyprus you almost certainly do not send it. You report to one named…

3 September 2026 · Practice notes

Three bind, OFAC does not

Three lists bind a firm in Cyprus, and a statute names them: EU restrictive measures, UN Security Council sanctions, and the Republic's own national…

1 September 2026 · Practice notes

Two questions, not one

Where the money came from and how the person came to have it are two different questions. Cyprus law asks both, of the customer and of the beneficial…

1 September 2026 · Practice notes

Keep it, then delete it

Most firms keep client files long after the relationship ends. They treat it as the safe side of the line. Cyprus law does not see it that way. Section 68…

27 August 2026 · Practice notes

Rely on three, own all four

Cyprus law lets you rely on another firm for three of the four due diligence measures: identify the customer, identify the beneficial owner and who…

27 August 2026 · Practice notes

The Law says when, not what

Cyprus law says exactly what enhanced due diligence means in the cases it names, such as a high-risk third country or a politically exposed person. For…

25 August 2026 · Practice notes

Three indicative lists

A compliance officer opening a new file is not asking what risk is, but what they will have to show. The duty sits in L.188(I)/2007, not in a supervisor's…

25 August 2026 · Practice notes

Monitoring is measure four

A compliance officer schedules a periodic review. The Law schedules a measure; the review performs half of it. Section 61(1) of L.188(I)/2007 says the…

Older →

Screen against the current lists in seconds

FIRMCY screens names against all of the lists above — plus a worldwide PEP database and adverse media — with fuzzy matching and an audit-ready report for every check. New organisations get 3 free full assessments, no card required.

Start screening free Free PEP & sanctions check FATF high-risk countries Weekly AML briefing Live on Telegram ↗
© 2026 Ioannou & Sharpe LLC · VAT CY60007091D · Griva Digeni, Limassol Center, Block B, 3rd Floor, Office 304, 3095 Limassol, Cyprus · [email protected]
Not legal advice. FIRMCY publishes this analysis for general informational purposes; verify against the primary sources before acting.