Sri Lanka FIU AML Overhaul: Banking Prepares for 2026 Global Evaluation

Sri Lanka's banks are racing against the clock to fortify their defences ahead of the 2026 Asia/Pacific Group (APG) Mutual Evaluation, with the Financial Intelligence Unit (FIU) driving a sweeping AML overhaul that's set to reshape how we handle money laundering risks.

Triggered by December 2025 directives from the FIU, this transformation demands LKR 5 billion in investments from major banks like Commercial Bank, HNB, and People's Bank into cutting-edge AI systems.^[1] As everyday Sri Lankans rely on these institutions for remittances, loans, and savings, understanding this shift is crucial—it's not just about global compliance; it's about protecting your hard-earned money from fraud that costs us LKR 2 billion annually.^[1]

Why the 2026 APG Mutual Evaluation Matters to Sri Lanka

The APG Mutual Evaluation, kicking off in March 2026 and running through mid-2027, is Sri Lanka's litmus test for global AML/CFT standards.^[2] As a founding APG member since 1997—and former Co-Chair from 2016-2018—we're under the spotlight to prove our financial system's robustness.^[2] A strong rating could erase past greylisting scars, unlock smoother remittances, and boost investor confidence, while failure risks higher transaction costs and restricted capital access.^[5]

President Anura Kumara Dissanayake has personally overseen preparations, fast-tracking legal reforms and staffing fixes to meet FATF's 40 recommendations.^[5] This high-level push involves 25 government institutions, coordinated by the FIU under the Central Bank of Sri Lanka (CBSL).^[7] We've already hit three major milestones, meeting timelines that position us for success.^[3]

Past Lessons: From Greylisting to Compliance Gains

Our 2015 APG evaluation exposed gaps, leading to greylisting and FIU penalties totalling LKR 51.55 million on banks since 2020 for AML shortcomings.^[2] By 2021's follow-up, we shifted from Non-Compliant to Largely Compliant on all six key banking recommendations.^[2] The 2021 report rated us Compliant on 7 and Largely Compliant on 25 of FATF's 40 Recommendations, though effectiveness remains a work in progress.^[6]

These reforms aren't abstract—they directly tackle threats like drug-related laundering, digital fraud, and trade-based schemes, where banks hold the largest assets and deposits.^[2]

FIU's December 2025 Directives: The Game-Changer

In December 2025, the FIU—operating independently within CBSL—issued comprehensive AML/CFT guidelines, compelling banks to upgrade transaction monitoring.^[1] Key mandates include real-time screening of 98% of 50 million daily records, achieving 92% accuracy in flagging suspicious patterns.^[1] This UK-supported technical assistance focused on turning financial intelligence into evidence (Immediate Outcomes 3 and 4).^[9]

CBSL's 2026 policy agenda highlights 2025 achievements: enhanced stakeholder monitoring, STR analysis, and law amendments for the evaluation.^[4] A fresh National Risk Assessment (NRA) in March 2026 identifies trade-based laundering and real estate as high threats, expanding to 15 modules including tax crimes and proliferation financing (PF).^[8] This informs the updated National Policy on AML/CFT/CPF for 2026-2030.^[8]

Banking Sector's Tech Overhaul in Action

• Commercial Bank, HNB, People's Bank: Deploying AI platforms for pre-jurisdiction flagging, targeting an 8% false positive reduction (benchmark: Singapore's 0.1%).^[1]
• ROI Focus: Compliance yields 20x returns via preserved remittances, unlike Pakistan's greylist woes.^[1]
• Beneficial Ownership: Emulating UAE's 100% registry for transparency.^[1]

These upgrades shield customers from fraud while building trust—vital as banks dominate our financial landscape.^[2]

High-Level Oversight and National Coordination

President Dissanayake's task force delivers final compliance steps within weeks, addressing staffing shortages by re-engaging retirees.^[5] FIU Director Dr. Subhani Keerthirathna confirms we're on track, with the NRA executive summary now public on fiusrilanka.gov.lk.^[3][8]

EU technical aid, including a May 2025 workshop and August Colombo mission, bolsters our edge.^[6] Multi-stakeholder NRA input from public-private experts ensures robust threat-vulnerability ratings.^[8]

Key Risk Areas for Sri Lankan Banks

Risk Category	Threat Level	Banking Actions
Trade-Based Laundering	High	Enhanced due diligence on imports/exports
Real Estate	High	Beneficial ownership verification
Digital Fraud	Medium-High	AI real-time monitoring
Tax Crimes & PF	Emerging	Expanded STR analysis

(Adapted from CBSL/FIU NRA 2024/25)^[8]

Practical Impacts for Sri Lankan Businesses and Families

For remittances-dependent families, compliance preserves USD corridors—greylisting could spike costs.^[1][5] Businesses face fewer delays in trade finance, with banks' investments translating to faster, safer transactions.

Actionable Tips for Bank Customers:

• Verify account security via bank apps; report odd activity immediately to trigger STRs.
• For SMEs: Maintain clear beneficial ownership records to speed loan approvals.
• Monitor IRD-linked transactions—tax crimes are now prioritised.^[8]
• Stay informed: Check fiusrilanka.gov.lk and cbsl.gov.lk for updates.

Banks' LKR 5 billion spend isn't overhead—it's insurance against LKR 2 billion fraud losses, benefiting us all.^[1]

Next Steps: Stay Ahead of the Curve

As 2026 unfolds, engage your bank on their AML upgrades—ask about AI tools and reporting. Businesses, audit compliance now to leverage smoother global trade. Visit fiusrilanka.gov.lk and cbsl.gov.lk regularly. This overhaul secures our financial future: stronger banks mean safer savings for every Sri Lankan family.