Cyprus FATF Ratings: Technical and Effectiveness Scores

FATF and Cyprus: Why the Global AML Watchdog Matters for Foreign OwnersCopy link to section

If you are weighing where to base a holding company or investment vehicle, the anti-money-laundering standing of the jurisdiction shapes how easily your entity will open bank accounts and pass counterparty checks. On the topic of FATF in Cyprus, the headline is reassuring: the country sits outside every adverse list, and it is rated compliant or largely compliant on 38 of the 40 FATF Recommendations. Cyprus is not a direct member of the Financial Action Task Force; its standards arrive through MONEYVAL, the Council of Europe's regional assessment body, and through EU anti-money-laundering law that the country must implement as a member state.

This matters chiefly to non-resident owners, advisers, and investors using Cyprus structures, because the same standards that keep the country off the grey list also impose registration and due-diligence duties on you. The sections below explain how FATF rules reach Cyprus, how the country has scored, what supervisors and registers you will deal with, and what all of it means in practice. You can verify the country's standing on the MONEYVAL Cyprus page.

What the Financial Action Task Force Does and How Its Standards Reach CyprusCopy link to section

The FATF Recommendations are the internationally endorsed standards against money laundering, terrorist financing, and the financing of proliferation. They press countries to increase transparency, identify illicit flows, and act against criminal abuse of the financial system. Each member is reviewed on a recurring basis to gauge how well those standards are put into practice.

Cyprus is not assessed by the FATF directly. Two channels carry the standards instead: MONEYVAL, a FATF-Style Regional Body that conducts the country's peer reviews, and the EU's AML Directives, which turn FATF principles into binding law the country must transpose.

Beyond the FATF Standards themselves, MONEYVAL also tests compliance with the international conventions behind them and with the relevant EU legislation. That dual benchmark is stricter than the FATF baseline alone.

For a foreign owner, the practical point is the country's list status. Cyprus does not appear on the FATF grey list (Jurisdictions Under Increased Monitoring) or black list (High-Risk Jurisdictions Subject to a Call for Action), and as an EU member state it is not on the EU's list of non-cooperative third countries.

Cyprus

Company Incorporation in Cyprus

Set up your company in Cyprus with Expanship handling registration end to end.

Learn more

The 40 Recommendations and Cyprus's Path to AlignmentCopy link to section

The 40 Recommendations form the shared framework every country is expected to meet. They run from AML/CFT policy and coordination through preventive measures for banks and non-financial businesses, beneficial ownership transparency, the powers of competent authorities, and international cooperation.

Within that set, MONEYVAL watches six core indicators most closely for Cyprus: R.3, R.5, R.6, R.10, R.11, and R.20, often called the "big six." All six sit at the largely compliant or compliant level.

The country's fifth-round Mutual Evaluation Report was adopted in December 2019, and the results placed it in enhanced follow-up. By the 4th Enhanced Follow-Up Report in June 2025, it was rated compliant or largely compliant on 38 of the 40 Recommendations, with none rated non-compliant.

Two legislative steps drove much of that progress. The country transposed the EU's Fifth AML Directive in 2021 and amended its AML law again across 2023 and 2024 with stronger enforcement and penalties. A further shift is scheduled: the EU AML Regulation adopted in 2024 takes effect in July 2027, setting a single EU-wide arrangement for beneficial ownership and compliance duties.

Cyprus and MONEYVAL: The Regional Body Conducting the Mutual EvaluationCopy link to section

MONEYVAL is a monitoring body of the Council of Europe that assesses how well its members counter money laundering, terrorist financing, and the financing of weapons proliferation, and how effectively those measures work in practice. The country is a member, and MONEYVAL conducts its evaluations.

The body covers 33 states and territories and issues recommendations for improving each national AML/CFT system. Its peer-review method follows the FATF model, but it tests members against a wider standard that also takes in EU legislation.

The national delegation is led by MOKAS, the Unit for Combating Money Laundering. MONEYVAL's secretariat sits within the Council of Europe in Strasbourg.

The sixth round of evaluations applies the revised 2012 FATF Recommendations together with the updated 2022 FATF Methodology, which assess both technical compliance and effectiveness. A joint FATF–MONEYVAL Plenary was held on 12 and 13 June 2025.

Cyprus

Ongoing Compliance in Cyprus

Keep your Cyprus entity compliant with filings, returns, and statutory obligations.

Learn more

Cyprus's Mutual Evaluation History and Headline ResultsCopy link to section

The fifth-round on-site visit ran from 13 to 24 May 2019, and the resulting report was adopted that December. Because of the findings, the country entered enhanced follow-up, a more intensive track than ordinary monitoring.

Following the 4th report, MONEYVAL decided the country would no longer be subject to the fifth-round follow-up process. The next on-site visit, for the sixth-round evaluation, is scheduled for October 2028.

As an international financial centre, the country is exposed mainly to external money-laundering threats, where non-residents may attempt to move criminal proceeds through it. The sectors most exposed were found to be banking, then Administrative Service Providers (the local term for trust and company service providers), and real estate.

MONEYVAL concluded that the country understands its money-laundering and terrorist-financing risks to a large extent, though its grasp of terrorist-financing risk was judged less complete.

Technical Compliance Ratings Across the FATF RecommendationsCopy link to section

Technical compliance measures whether the laws and rules on the books match each Recommendation. As at the 4th Enhanced Follow-Up Report of 18 June 2025, the country's position is the strongest in its evaluation history.

Several upgrades brought the country to this level. Recommendation 13 on correspondent banking moved up to largely compliant after amendments applied uniform due-diligence requirements to all cross-border correspondent relationships, whatever the jurisdiction. Recommendation 15 on virtual assets and their service providers was re-rated from partially compliant to largely compliant in the December 2023 report.

The one rating that still sits at partially compliant is Recommendation 8 on non-profit organisations, held back by moderate deficiencies in risk assessment and regulatory measures. The other partially compliant item carried earlier, R.13, was lifted in the most recent report.

Cyprus

Cyprus Incorporation Pricing

See transparent pricing to incorporate and maintain a company in Cyprus.

View pricing

Effectiveness Ratings: How Cyprus Performs on the Eleven Immediate OutcomesCopy link to section

Technical compliance is only half of an assessment. The eleven Immediate Outcomes test whether the system actually works, scored High, Substantial, Moderate, or Low. They span risk understanding, international cooperation, supervision, preventive measures, transparency of legal persons, financial intelligence, ML investigation and prosecution, confiscation, TF investigation, TF sanctions, and proliferation-financing sanctions.

These outcome scores were fixed in the December 2019 report and are not revisited in follow-up work; the enhanced follow-up reports re-rate only technical compliance. Effectiveness will next be reassessed in the sixth-round evaluation tied to the October 2028 on-site visit.

The 2019 findings carried both strengths and shortcomings. Domestic cooperation between competent authorities was good, and the banking sector grew more effective at mitigating risk on the back of sounder supervision by the Central Bank of Cyprus.

On the other side, MONEYVAL urged a more aggressive approach to laundering of proceeds generated abroad, calling for more proactive freezing and confiscation of foreign proceeds. The understanding of terrorist-financing risk was noted as less developed than that of money-laundering risk. For the per-outcome scores, consult the full 2019 evaluation report.

The Cyprus AML/CFT Framework: Key Laws, Supervisors and the Beneficial Ownership RegimeCopy link to section

The governing statute is the Prevention and Suppression of Money Laundering and Terrorist Financing Law of 2007 (Law 188(I)/2007), as amended. It transposes the EU directives, with Law 61(I)/2021 bringing in the Fifth AML Directive and tightening ultimate beneficial ownership rules; further amendments took effect on 6 December 2024.

Supervision is shared across several bodies, each covering a sector you may touch as a foreign owner.

• The Central Bank of Cyprus oversees financial institutions and enforces AML rules.
• The Cyprus Securities and Exchange Commission (CySEC) supervises investment firms and issues binding directives.
• The Institute of Certified Public Accountants of Cyprus (ICPAC) supervises the accounting profession.
• The Real Estate Registry Board supervises estate agents.
• The Tax Commissioner supervises traders in goods who handle cash payments of €10,000 or more.
• MOKAS receives Suspicious Transaction Reports from obliged entities.

Two recent supervisory measures sharpen these duties. In May 2025 the Central Bank issued a new AML/CFT Directive, in force from 2 June 2025, which strengthens board and compliance-officer mandates, bars full outsourcing of the compliance function, and allows proportional risk-based reviews. In August 2024 CySEC published a directive updating customer identification, electronic verification, and adverse-media monitoring.

Beneficial ownership

Every company, partnership, and European Public Limited Company must register its beneficial owners with the Department of the Registrar of Companies and Intellectual Property. A beneficial owner is an individual who directly or indirectly owns or controls more than 25% of shares or voting rights, or otherwise controls the entity.

The Central Register of UBOs was created in 2021, with banks and regulators reaching ownership data through the Registrar's ARIADNI e-portal, finalised in 2024. A separate Central Trust Register for Cyprus-registered trusts and similar arrangements is maintained by CySEC through its CyTBOR system.

Timing and penalties are specific. The first UBO filing is due within 90 days of incorporation, and any later change must be filed within 45 days; each year between 1 October and 31 December, entities re-confirm that the register holds current information. Under the December 2024 amendments, breaches draw a fine of €100 per infringement plus €50 per day of continued default, capped at €5,000. Listed companies subject to equivalent EU or international transparency rules are exempt from UBO disclosure.

Follow-Up Reporting and Areas Flagged for ImprovementCopy link to section

Four enhanced follow-up reports were issued between December 2021 and June 2025, and the most recent closed out the fifth-round process. Progress was steady, but a few items remain on the watch list.

The standing deficiency is Recommendation 8 on non-profit organisations, still partially compliant. The sub-gaps identified include failure to pinpoint NPOs vulnerable to terrorist-financing abuse, limited sector outreach and reassessment, weak risk-sensitive supervision, gaps in applicable sanctions, and the absence of a clear information-sharing mechanism with competent authorities.

Service-provider weaknesses also drew comment. Trust and corporate service providers were found to lack a uniform grasp of sanctions-evasion risk, and some may struggle to see the real individuals behind complex structures, which was flagged as a significant vulnerability.

Two further points carried over from the 2019 review. The real estate sector's risk had risen on the back of the former Cyprus Investment Programme, prompting calls for a dedicated risk assessment and stronger supervision, and investigators were noted to lack powers to intercept communication content across all relevant predicate offences.

What FATF Alignment Means in Practice for a Non-Resident Company OwnerCopy link to section

For a foreign owner, the country's standing translates into a set of concrete duties and one clear advantage.

• No list penalty. With 38 of 40 Recommendations at compliant or largely compliant and zero non-compliant ratings, your entity faces no FATF-driven country-level enhanced due diligence.

• Mandatory UBO registration. Non-resident owners are not exempt; the first filing is due within 90 days of incorporation, changes within 45 days, and missed filings draw fines up to €5,000.

• Due diligence on your advisers. Lawyers, accountants, and Administrative Service Providers acting for you must identify the ultimate controller, monitor transactions, and document full customer due diligence.

• STR reporting. Obliged entities must report suspicious activity to MOKAS whenever they suspect funds relate to money laundering or terrorist financing, with no minimum threshold.

• Annual re-confirmation. Between 1 October and 31 December each year, the company re-confirms its register entry; non-resident directors share responsibility for any penalty.

Account opening reflects this tighter posture. Banks have applied stringent checks since 2014, and a corporate account for a holding structure can take two to six weeks depending on how complex the ownership chain is and which jurisdictions it spans.

Two forward-looking items belong on your planning horizon. The EU AML Regulation adopted in 2024 enters into force in July 2027 with harmonised beneficial-ownership requirements, and the sixth-round on-site visit in October 2028 will test effectiveness more closely, which may bring further supervisory tightening beforehand. Against that, the country signed several memoranda of understanding with the United States in 2024 to deepen cooperation on AML and sanctions evasion.

ConclusionCopy link to section

For a non-resident owner, Cyprus offers a clean AML standing with no grey-list or black-list exposure, paired with real compliance obligations you must meet from incorporation onward. The work concentrates in beneficial-ownership registration, annual re-confirmation, and the due diligence your local advisers are bound to perform. Build those steps into your setup and ongoing administration, and keep the July 2027 EU Regulation and the October 2028 evaluation in view as the framework continues to tighten.

How Expanship Can Help Your Business in CyprusCopy link to section

Expanship supports foreign owners in meeting the AML and beneficial-ownership duties that flow from the country's FATF-aligned regime, from preparing UBO filings within the 90-day window to managing the annual re-confirmation and the due diligence your structure requires. The same team handles the wider needs of a foreign-owned entity across its life cycle.

• Company formation and structuring
• Registered agent and registered office
• Tax registration and return filing
• Ongoing compliance and UBO register management
• Accounting and bookkeeping
• Introductions to local banks

To discuss your structure and obligations, contact Expanship Cyprus.

Frequently Asked QuestionsCopy link to section