Sri Lanka AML/CFT Reforms 2026: Compliance Guide for Businesses Ahead of Mutual Evaluation

Sri Lanka is preparing for one of the most critical financial evaluations in its history. The country's third Mutual Evaluation on Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT) is underway, and for businesses operating here—whether you're an exporter, financial services provider, or large corporation—understanding what's changing matters. This evaluation will determine whether Sri Lanka maintains its international financial credibility or faces consequences like grey listing that could cripple your business operations.

If you've been following the news, you'll know that President Anura Kumara Dissanayake has made AML/CFT reforms a national priority, instructing authorities to clear roadblocks and accelerate implementation^[1]. This isn't just bureaucratic reshuffling—it's a signal that compliance is no longer optional. We'll walk you through what's happening, why it matters for your business, and what you need to do right now.

What Is the 2026 Mutual Evaluation and Why Should You Care?

The Mutual Evaluation is a comprehensive assessment of Sri Lanka's financial integrity framework, coordinated by the Asia/Pacific Group on Money Laundering (APG)^[1]. Think of it as a health check for our entire financial system. The last evaluation in 2014-2015 didn't go well—Sri Lanka was grey listed internationally in 2017, which damaged our reputation and made it harder for businesses to access international markets^[1].

This time, the stakes are equally high. If we fail, the consequences are severe: increased cross-border transaction costs, reduced investor confidence, and significantly higher borrowing rates for both the government and private sector^[2]. For exporters, this means delays in international payments. For importers, it means higher costs. For financial institutions, it means stricter scrutiny and compliance burdens.

The good news? The current government is providing strong political leadership to restore credibility^[1]. The Financial Intelligence Unit (FIU), established within the Central Bank of Sri Lanka, is now leading a coordinated national effort involving around 25 government institutions^[1]. This level of coordination hasn't been seen before, and it's creating a genuine opportunity for reform.

The Key Areas Being Evaluated

The evaluation assesses Sri Lanka against the FATF's 40 Recommendations and eleven immediate outcomes^[2]. In our last evaluation (2021), we were deemed Compliant for only 7 recommendations and Largely Compliant for 25^[3]. That's the baseline we're working from. The 2026 evaluation will measure not just whether laws exist on paper, but whether they're actually working to prevent financial crimes^[2].

Here are the critical areas being strengthened:

• Legislative reforms: The government is amending core legislation related to financial transactions and prevention of illicit activities^[2]. This includes closing gaps identified in previous reports.
• Suspicious transaction reporting: The analysis and dissemination of suspicious transaction reports has been expanded to improve detection of potential crimes^[2].
• Institutional capacity: Staff across government agencies are being trained in the latest techniques for identifying financial misconduct^[2].
• Human resources: The President has instructed immediate steps to address staff shortages, including exploring the rehiring of experienced retired officers on one-year contracts^[1].
• Operational continuity: Key officers are no longer being rotated out of critical positions during the evaluation process^[1].

What Businesses Need to Know About Compliance

Enhanced Due Diligence Requirements

If your business handles international transactions, you'll face stricter customer due diligence requirements. Financial institutions are now required to conduct more thorough checks on who they're dealing with and where money is coming from. This means longer processing times for international transfers, but it's non-negotiable.

For exporters and importers, this translates to:

• More detailed documentation of transactions
• Clearer proof of the legitimate business purpose behind international payments
• Enhanced verification of your trading partners
• Cooperation with financial institutions that may request additional information

Reporting Obligations

Businesses in certain sectors—financial services, real estate, gems and jewellery, import-export—have obligations to report suspicious activities^[2]. If you notice transactions that don't match the customer's profile or business, you need to report them. This isn't optional, and it's not about being a "snitch"—it's about protecting your own business from being used for money laundering.

Record Keeping

The strengthened FIU framework requires better record-keeping practices^[2]. Keep detailed records of your transactions, customer information, and the business rationale behind major payments. In the event of an audit or investigation, these records are your protection.

How the Strengthened FIU Framework Affects You

The Financial Intelligence Unit is now the central hub for AML/CFT coordination in Sri Lanka^[1]. The FIU receives suspicious transaction reports from banks and other financial institutions, analyses them, and disseminates findings to relevant authorities. This means:

• Faster identification of suspicious patterns in financial flows
• Better coordination between law enforcement and financial regulators
• More targeted enforcement actions against actual criminals, not legitimate businesses

For honest businesses, this is actually good news. A stronger FIU means the system can distinguish between legitimate commercial activity and actual financial crimes. The current effort to strengthen the FIU includes capacity-building programs and better mechanisms to track departmental progress^[2].

What's Changing in 2026: Timeline and Expectations

We're already in the thick of the evaluation process. Here's what you need to expect:

• Immediate focus (February-June 2026): Authorities are clearing administrative and legal roadblocks^[1]. New legislation is being expedited, and institutional gaps are being addressed.
• Stakeholder engagement: The Operational Committee on AML/CFT, appointed by the President, is monitoring progress across all 25 government institutions involved^[1].
• Technical assistance: Sri Lanka is receiving support from international partners, including the EU Global Facility and the former Executive Secretary of the APG^[1].
• Private sector coordination: Banks and other financial institutions are being aligned with international expectations^[2].

The evaluation itself will assess whether our systems are genuinely effective at preventing financial crimes, not just whether we have policies on the books^[2].

Practical Steps Your Business Should Take Now

For Financial Institutions

• Review and strengthen your customer due diligence procedures
• Invest in staff training on AML/CFT requirements
• Implement or upgrade your transaction monitoring systems
• Ensure your suspicious transaction reporting is timely and thorough
• Conduct internal audits of your AML/CFT compliance

For Exporters and Importers

• Maintain clear documentation of all international transactions
• Work closely with your bank to provide any additional information they request
• Keep records of your trading partners and business relationships
• Expect longer processing times for international transfers—plan accordingly
• Be prepared to explain the business purpose behind any unusual transactions

For Large Corporations and Conglomerates

• Conduct a comprehensive AML/CFT compliance audit
• Review your group-wide policies and ensure consistency across subsidiaries
• Train your finance and compliance teams on current requirements
• Establish clear escalation procedures for suspicious transactions
• Consider engaging external compliance consultants if needed

Frequently Asked Questions

What happens if Sri Lanka fails the 2026 evaluation?

Grey listing by the FATF would follow, resulting in increased scrutiny of all international transactions, higher costs for cross-border payments, reduced investor confidence, and difficulty accessing international credit markets^[2]. This would be devastating for both businesses and the government.

Will the evaluation delay my international payments?

Possibly, yes—at least temporarily. Enhanced due diligence means financial institutions will take longer to process international transactions. However, this is a one-time adjustment as systems are strengthened. Legitimate businesses with clear documentation shouldn't face major delays once the evaluation is complete.

Do I need to hire a compliance officer?

If you're a financial institution or a large corporation handling significant international transactions, yes—a dedicated compliance officer or team is now essential. Smaller businesses should at least designate someone responsible for AML/CFT compliance and ensure they're properly trained.

What if my bank asks for more information about my transactions?

Cooperate fully and provide clear documentation. Your bank isn't being difficult—they're meeting regulatory requirements. The faster you respond with detailed information, the faster your transaction gets processed.

Are there penalties for non-compliance?

Yes. Businesses and financial institutions that don't comply with AML/CFT requirements face significant penalties, including fines, licence revocation, and criminal prosecution in serious cases. Compliance isn't optional.

Where can I get more information about AML/CFT requirements?

The Central Bank of Sri Lanka publishes guidance on AML/CFT requirements. The Financial Intelligence Unit also provides resources. Additionally, professional associations in your sector often provide training and guidance.

Moving Forward: What Success Looks Like

A successful 2026 evaluation means Sri Lanka demonstrates a higher level of technical compliance and functional resistance to financial crimes^[2]. For businesses, this means:

• Clearer, more consistent regulatory expectations
• Faster international transactions once systems stabilise
• Better protection against being inadvertently used for money laundering
• Restored international confidence in our financial system
• Lower costs for international business operations in the medium term

The current government's commitment to this process is genuine. President Dissanayake's instruction to clear roadblocks, address staffing issues, and halt officer rotations signals that this isn't just another bureaucratic exercise^[1]. For the first time since the 2014-2015 evaluation, we have the political will to make real changes.

Your role is simple: ensure your business is compliant now, cooperate with financial institutions and regulators, maintain clear documentation, and report any suspicious activities. If you're in financial services, investing in compliance infrastructure isn't optional—it's essential. If you're an exporter or importer, build extra time into your international payment schedules and maintain transparent records.

The 2026 Mutual Evaluation is a turning point for Sri Lanka's financial integrity. By taking compliance seriously now, you're not just protecting your business—you're contributing to the restoration of our country's international credibility.

Sources & References

1. Governance: Authorities to expedite AML/CFT reforms — The Morning
2. Sri Lanka Governor Warns of Devastating 2026 Financial Integrity — FinCrime Central
3. Sri Lanka AML CFT Activities — Global AML/CFT
4. Policy Agenda 2026 and Beyond — Central Bank of Sri Lanka
5. Sri Lanka braces for 2026 AML/CFT Mutual Evaluation — Daily FT