Opens in a new tab

Breaking news

Cyprus-Based Firms Propel Surge In Cross-Border Suspicious Activity, Reports CySEC

Heightened Regulatory Measures In Response To Rising Risks

The Cyprus Securities and Exchange Commission (CySEC) has introduced a robust revision of anti-money laundering guidelines, addressing a significant uptick in suspicious transactions and activity reporting identified by the Financial Intelligence Unit, Mokas. Authorities are now enforcing enhanced standards to fortify Cyprus’ defenses against money laundering and terrorist financing in an increasingly complex financial landscape.

Enhanced Reporting And Compliance Framework

In a recent circular, CySEC instructed regulated firms to improve the quality and timeliness of suspicious transaction reports, suspicious activity reports and supporting documentation. Updated requirements also require firms to immediately integrate the new standards into internal compliance procedures and risk management systems. Authorities said the measures are intended to improve oversight capabilities while reinforcing the integrity of Cyprus’ financial sector.

Insights And Strategic Reports From Mokas

Mokas recently published two strategic reports examining emerging risks tied to betting platforms, gambling activity and technology-enabled financial fraud. Particular attention was given to the growing use of money mules and increasingly complex digital payment structures. The reports analyse reporting patterns and identify operational vulnerabilities while providing indicators aimed at strengthening internal monitoring systems.

Cross-Border Activities And Industry-Specific Trends

The surge in suspicious reports was largely driven by fintech firms operating under EU passporting rules from Cyprus, with most reports relating to activities beyond national borders. Submissions from crypto asset service providers exceeded 20,000 entries, reflecting the growing role of digital finance and its associated risks. Traditional financial institutions and professional service providers also continued contributing to reporting volumes, while issues involving deficient documentation and concealed beneficial ownership remained ongoing concerns.

Advancing Enforcement And Technological Innovations

Mokas’ 2025 annual report showed a sharp increase in enforcement activity. Domestic asset freezing orders exceeded €10 million during the year, while combined domestic and international freezing orders surpassed €27 million. Authorities also expanded the use of automation and risk-based analytical systems to improve prioritisation of high-risk cases. Ongoing upgrades include technologies designed to automate report analysis and improve tracking of cryptocurrency-related transactions.

Looking Ahead: A Strategic Roadmap For 2026-2028

CySEC is now preparing to implement a broader three-year strategy focused on strengthening public-private cooperation, improving reporting standards and intensifying oversight across traditional and digital financial sectors. Regulated entities were reminded that compliance with updated requirements, including registration through the goAML system, remains essential for maintaining market integrity and financial system resilience.

Growing financial crime risks linked to digitalisation and cross-border transactions continue to increase pressure on regulators and private institutions to strengthen monitoring and compliance frameworks.

Cyprus Company Registration: Two To Four Days, Unless Security Checks Intervene

Cyprus aims to register companies within two to four working days when applicants submit complete documentation. However, regulatory approvals, sanctions checks, foreign ownership and national security considerations can extend the process or prevent registration.

Energy, Commerce and Industry Minister Michael Damianou outlined the timeframe in a written response to MP Efrem Christou, who asked about company formation procedures and the checks required before approval.

Fast Registration Depends On Complete Documentation

Damianou said authorities seek to process complete applications within two to four working days, regardless of a company’s structural complexity. The timeframe also depends on whether applicants pay an additional fee for expedited processing.

According to the official incorporation requirements, the standard registration fee is €165, rising to €235 for companies without share capital. Expedited processing costs an additional €100.

Applicants must submit an approved company name, a memorandum and articles of association, and forms HE1, HE2 and HE3. Public companies must also provide form HE5.

Regulated Businesses Require Additional Approval

Companies operating in certain sectors must obtain prior clearance from the relevant authorities or professional bodies. These include medical and dental businesses, law firms, insurance and reinsurance companies, and firms supervised by the Cyprus Securities and Exchange Commission.

The Central Bank of Cyprus must also approve company names associated with payment institutions, electronic money and foreign exchange services. Additional restrictions apply to educational institutions using terms such as “university” or “college”, casino operators, broadcasters and wine producers.

Non-profit organisations seeking to register without “Limited” or “Ltd” in their names also require ministerial authorisation.

Sanctions And Foreign Ownership Trigger Extra Checks

Applications involving shareholders, directors or company secretaries subject to EU, UN or US sanctions receive additional scrutiny. Registration can proceed only if the competent sanctions authority does not prohibit it. Damianou noted that US sanctions are considered indirectly but have not been incorporated into Cyprus legislation in the same way as EU and UN restrictions.

Applications involving Turkish interests are also subject to additional review. Under procedures introduced around 20 years ago, the registrar must consult national security services before proceeding with registrations involving Turkish interests or businesses that could threaten the Republic’s security.

Damianou distinguished these cases from applications submitted by Turkish Cypriots, saying there is “no substantial difference” in how their registration documents are examined. Applications may nevertheless be refused if classified information raises concerns about national interests or national security.

Public Servants Face Separate Restrictions

Under Article 65 of the public service law, government employees cannot act as directors, company secretaries or shareholders in private or public companies without prior special permission from the finance minister.

Proposed Law Would Expand Registrar’s Powers

The government is also seeking to strengthen the Registrar of Companies’ authority to address potential security risks. An amendment to the companies law, submitted to Parliament on September 17, would allow the registrar to reject applications, refuse company filings or remove existing businesses from the register on grounds including national security, public order, public interest and the protection of state sovereignty.

The proposal, approved by the Council of Ministers on August 6, remains before the House commerce committee. It would allow authorities to withhold detailed justifications where disclosure could reveal sensitive information, while informing affected companies of the general grounds for decisions.

The bill follows parliamentary discussions about companies controlled by non-EU nationals, particularly those with Turkish ultimate beneficial owners, and possible implications for property ownership through foreign-controlled businesses. Further details are available in the proposed amendment and earlier parliamentary reporting.

Balancing Investment And Oversight

Cyprus is seeking to maintain an efficient company registration process while strengthening checks on ownership, sanctions compliance and potential security risks.

The two-to-four-day target supports the country’s appeal to entrepreneurs and international investors, but the actual timeline depends on the nature of the business, the documentation submitted and any additional regulatory or security reviews required.

Uol
The Future Forbes Realty Global Properties
eCredo
Aretilaw firm

Become a Speaker

Become a Speaker

Become a Partner

Subscribe for our weekly newsletter