AML & KYC in Switzerland: 2026 Update

AML & KYC in Switzerland is governed by one of the most developed compliance frameworks in Europe, built around the Anti-Money Laundering Act (AMLA) and supervised by a network of federal authorities and self-regulatory organisations. Switzerland';s financial centre status means that regulators apply these rules with rigour, and recent legislative reforms have extended obligations to new sectors and tightened due diligence requirements across the board. This guide explains who is subject to Swiss AML and KYC rules, what those rules require in practice, how supervision works, what recent changes mean for your business, and what penalties apply when obligations are not met.

The AMLA defines a broad category of "financial intermediaries" who bear the primary compliance burden. The list is wider than many foreign founders expect.

Banks, securities firms, fund managers, insurance companies and payment service providers are the obvious examples. But the AMLA also captures lawyers, notaries, accountants and fiduciaries when they carry out financial transactions on behalf of clients - a point that frequently surprises non-Swiss businesses engaging local professional advisers.

Dealers in high-value goods are subject to AML obligations when they accept cash payments above a statutory threshold. Casinos and gaming operators carry their own dedicated compliance regime under the Federal Gaming Act.

Crypto asset service providers - exchanges, custodians and issuers of payment tokens - are treated as financial intermediaries under Swiss law. FINMA, the Swiss Financial Market Supervisory Authority, has issued specific guidance confirming that virtual asset businesses must apply full KYC procedures, including beneficial ownership identification, before onboarding clients.

Foreign companies operating in Switzerland through a branch or providing services into Switzerland on a cross-border basis may also fall within scope, depending on the nature of the activity. A common mistake is assuming that a non-Swiss legal entity is automatically exempt simply because it is not incorporated locally.

KYC in Switzerland is not a single check but a layered process with distinct legal obligations at each stage. The AMLA, together with FINMA';s Anti-Money Laundering Ordinance (AMLO-FINMA), sets out the minimum standards.

Customer identification must be completed before a business relationship is established or a transaction is executed. For natural persons, this means verifying identity using an official document - a passport or national identity card. For legal entities, the financial intermediary must obtain and verify the articles of association, commercial register extract and other formation documents.

Beneficial ownership identification is a separate and equally mandatory step. The financial intermediary must establish who ultimately controls or benefits from the client entity. Where the beneficial owner is a natural person holding more than 25 percent of the shares or voting rights, their identity must be documented. Where no individual meets this threshold, the senior managing official must be identified instead. Switzerland';s beneficial ownership rules align with FATF Recommendation 10 but apply with particular strictness in practice.

Purpose and nature of the business relationship must be documented. Financial intermediaries are required to understand why a client is opening an account or engaging a service, what the expected transaction volume is, and where the funds originate. This is not a box-ticking exercise - FINMA expects intermediaries to maintain living documentation that is updated when circumstances change.

Enhanced due diligence (EDD) applies automatically in higher-risk situations. These include relationships with politically exposed persons (PEPs), clients from high-risk jurisdictions, complex or unusual transaction structures, and situations where the source of funds cannot be readily explained. EDD requires senior management approval, more frequent monitoring and deeper documentation.

Ongoing monitoring is a continuous obligation. Transactions must be screened against the client';s known profile. Unusual patterns must trigger an internal review. Where suspicion of money laundering or terrorist financing arises, the financial intermediary must file a suspicious activity report (SAR) with the Money Laundering Reporting Office Switzerland (MROS) and must not tip off the client.

Switzerland operates a two-tier supervisory model that distinguishes between directly supervised entities and those supervised through self-regulatory organisations (SROs).

FINMA directly supervises banks, securities firms, insurance companies, fund managers and certain fintech licence holders. FINMA conducts on-site inspections, reviews internal audit reports and issues binding supervisory guidance. It has the power to impose remediation orders, revoke licences and refer cases to the Office of the Attorney General for criminal prosecution.

SROs supervise financial intermediaries who are not subject to direct FINMA oversight - typically fiduciaries, asset managers below the FINMA threshold, lawyers acting as financial intermediaries and certain payment service providers. There are several recognised SROs in Switzerland, including the SRO of the Swiss Bar Association and various sector-specific bodies. Membership of an SRO is mandatory for intermediaries in this category; operating without affiliation is a criminal offence under the AMLA.

The Federal Gaming Board supervises casinos and gaming operators under the Federal Gaming Act, applying a parallel but equivalent AML regime.

MROS sits within the fedpol (Federal Office of Police) and acts as Switzerland';s financial intelligence unit. It receives SARs, analyses them and forwards actionable intelligence to cantonal prosecution authorities. MROS publishes annual statistics on SAR volumes and typologies, which provide useful insight into enforcement priorities.

In practice, FINMA has become increasingly assertive in recent years. Enforcement proceedings have resulted in public reprimands, disgorgement of profits and, in serious cases, licence revocations. Foreign-owned Swiss entities are not treated differently from domestically owned ones - the same standards apply.

Switzerland has undertaken a significant revision of its AML framework in response to FATF recommendations and its own mutual evaluation findings. Several changes are already in force; others are in the legislative pipeline.

Extension to advisers and lawyers. The revised AMLA extends due diligence obligations more explicitly to lawyers, notaries and other advisers who assist in the formation of companies, trusts or similar structures, or who manage client assets. This brings Switzerland closer to the EU';s approach under its successive Anti-Money Laundering Directives, though the Swiss model retains certain professional privilege carve-outs.

Transparency register for legal entities. A central transparency register for beneficial ownership information is being introduced. This is one of the most significant structural changes in recent Swiss AML history. Under the planned framework, Swiss legal entities - including companies limited by shares (AG), limited liability companies (GmbH) and foundations - will be required to register their beneficial owners in a central register accessible to competent authorities. The register is not intended to be publicly accessible in the same way as some EU member state registers, but it will be available to FINMA, MROS and law enforcement.

Crypto asset regulation. FINMA has continued to refine its guidance on virtual assets. The Travel Rule - requiring originator and beneficiary information to accompany crypto transfers - is now firmly embedded in Swiss practice, consistent with FATF standards. Crypto businesses must implement technical solutions to transmit this data and must refuse transfers where the counterparty institution cannot comply.

Risk-based approach reinforcement. Recent FINMA guidance has emphasised that a purely procedural approach to KYC is insufficient. Intermediaries are expected to demonstrate genuine risk understanding, not merely document completion. This has practical implications for internal audit functions and for the quality of AML training provided to staff.

If your business operates in Switzerland or is considering entry into the Swiss market, now is a practical moment to review your compliance programme against these updated requirements. For tailored advice on structuring your AML and KYC framework, contact info@vlolawfirm.com. We can help structure the setup correctly the first time.

Swiss AML enforcement operates on two tracks: administrative sanctions imposed by FINMA and criminal sanctions under the AMLA and the Swiss Criminal Code.

On the administrative side, FINMA can issue formal reprimands, order disgorgement of profits derived from non-compliant business, impose restrictions on business activities and, in the most serious cases, revoke a licence entirely. Public reprimands - which FINMA publishes on its website - carry significant reputational consequences in a market where trust is a core business asset.

Criminal liability under the AMLA applies to individuals, not only to institutions. Senior managers and compliance officers who knowingly fail to report suspicious transactions, who assist in money laundering or who operate as a financial intermediary without proper SRO affiliation face fines and, in serious cases, custodial sentences. The Swiss Criminal Code';s money laundering provision (Article 305bis) applies to any person who takes steps to frustrate the identification of the origin, discovery or confiscation of assets that they know or must assume derive from a predicate offence.

Many underestimate the personal exposure that Swiss law creates for compliance officers and directors. Unlike some jurisdictions where corporate liability is the primary enforcement tool, Swiss prosecutors have shown willingness to pursue individuals.

A non-obvious requirement is that the obligation to file a SAR with MROS is accompanied by a mandatory asset freeze. Once a report is filed, the financial intermediary must freeze the assets in question for five working days, during which MROS decides whether to instruct a longer freeze or to release the funds. Failing to freeze assets after filing a SAR is itself a compliance breach.

Practical scenarios illustrate the stakes. A Swiss fiduciary managing structures for foreign clients who fails to update beneficial ownership documentation when a client';s shareholding changes faces both an SRO disciplinary proceeding and potential criminal referral. A crypto exchange that onboards clients without conducting identity verification before the first transaction is in direct breach of FINMA';s licensing conditions and risks an enforcement order that could suspend operations.

A compliant programme in Switzerland is not simply a set of policies - it is an operational system that must function reliably under supervisory scrutiny.

Governance and accountability. Every financial intermediary must designate a responsible person for AML compliance. For FINMA-supervised entities, this is typically a dedicated compliance officer or chief compliance officer. For SRO-supervised intermediaries, the responsible person must be reported to the relevant SRO. The compliance function must have sufficient independence, resources and seniority to escalate concerns to board level.

Risk assessment. The programme must begin with a documented business-wide risk assessment that identifies the money laundering and terrorist financing risks specific to the intermediary';s client base, products, geographies and delivery channels. This assessment must be reviewed regularly and updated when the business model changes.

Policies and procedures. Written policies must cover customer identification, beneficial ownership verification, EDD triggers, transaction monitoring, SAR filing, record retention and staff training. Policies must be approved at senior management level and reviewed at least annually.

Record retention. The AMLA requires financial intermediaries to retain KYC documentation and transaction records for a minimum of ten years after the end of the business relationship. Records must be stored in a form that allows them to be produced promptly to supervisory authorities on request.

Training. Staff who interact with clients or handle transactions must receive regular AML training. FINMA expects training to be risk-based and role-specific, not a generic annual e-learning module. New joiners must be trained before they begin client-facing work.

Technology and transaction monitoring. Larger intermediaries are expected to deploy automated transaction monitoring systems capable of detecting unusual patterns. The system must be calibrated to the intermediary';s specific risk profile - a private bank serving ultra-high-net-worth clients will have different monitoring parameters than a payment processor handling high volumes of small transactions.

In practice, founders and senior managers of newly licensed Swiss entities often underestimate the time and cost required to build a compliant programme from scratch. Engaging specialist legal and compliance advisers early in the process avoids the common mistake of retrofitting compliance onto an already-operating business.

What triggers enhanced due diligence under Swiss AML rules, and how burdensome is it in practice?

Enhanced due diligence is triggered by a defined set of risk factors under the AMLO-FINMA, not by subjective judgment alone. The most common triggers are: the client is a politically exposed person or is closely associated with one; the client or the transaction has a connection to a jurisdiction classified as high-risk; the transaction is unusually large, complex or has no apparent economic purpose; or the source of funds cannot be satisfactorily explained. In practice, EDD requires senior management sign-off before the relationship is accepted or continued, a more detailed source-of-wealth and source-of-funds inquiry, and more frequent ongoing monitoring. For a private bank or asset manager, EDD for a single client relationship can involve several weeks of document gathering and internal review. The process is demanding but manageable with proper procedures in place.

How long does it take to obtain SRO affiliation in Switzerland, and what does it cost?

The timeline for SRO affiliation varies by organisation and by the completeness of the application submitted. A well-prepared application typically takes between two and four months to process. The SRO will review the applicant';s business model, AML policies, governance structure and the background of key persons. Costs include an application fee, annual membership fees and, in most cases, professional fees for preparing the application. Annual membership fees vary by SRO and by the size of the business, but they are generally in the low thousands of Swiss francs per year. Delays most commonly arise from incomplete documentation or from the need to revise AML policies to meet the SRO';s standards.

Does Switzerland';s AML framework apply to holding companies and family offices?

This depends on the activities carried out. A pure holding company that simply holds shares in subsidiaries and does not conduct financial intermediary activities is generally not subject to the AMLA as a financial intermediary. However, if the holding company manages third-party assets, provides investment advice, or carries out transactions on behalf of others, it may fall within scope. Family offices that manage assets for multiple family branches or for unrelated clients are typically treated as financial intermediaries and must affiliate with an SRO. The line between a pure family holding and a regulated family office is not always obvious, and FINMA has taken an expansive view in enforcement proceedings. Legal advice on the specific structure is strongly recommended before assuming that an exemption applies.

Switzerland';s AML and KYC framework is comprehensive, actively enforced and evolving. Recent reforms - particularly around beneficial ownership transparency and the extension of obligations to advisers and crypto businesses - have raised the compliance bar for all market participants. Businesses operating in Switzerland, or planning to do so, must treat AML and KYC as a core operational priority, not a back-office function.

VLO Law Firms advises international clients on AML and KYC matters in Switzerland. We can assist with compliance programme design, SRO affiliation, FINMA licensing support, beneficial ownership analysis and ongoing regulatory monitoring. To request a consultation, contact: info@vlolawfirm.com