Prudential Authority imposes administrative sanctions on HBZ Bank Limited

Although the action targets a single institution, the supervisory signal extends across the banking sector: AML/CFT supervisors are increasingly willing to name firms and attach enforceable consequences where financial crime controls are found wanting, rather than resolving matters privately. For compliance and financial crime teams, this underscores that FICA compliance is a live supervisory priority — not a documentation exercise. The core expectations centre on a robust Risk Management and Compliance Programme, demonstrable customer due diligence, accurate record-keeping, timely suspicious transaction reporting, sanctions and PEP screening, and evidence of ongoing staff training and independent testing.

Firms should treat this as a prompt to benchmark their own control frameworks: verify that board-approved policies are actually operating in practice, that transaction monitoring and screening rules are tuned and logged, and that remediation backlogs are tracked to closure with clear ownership. Governance forums should confirm whether delegated oversight of AML/CFT is adequately evidenced, and whether third-party or correspondent relationships carry elevated risk. RegCanary view: enforcement visibility of this kind raises the cost of weak AML controls and rewards firms that can demonstrate provable, auditable compliance.

Institutions operating in or alongside the South African market should anticipate increased supervisory scrutiny, information requests and thematic reviews, and should prepare defensible evidence packs accordingly.