Switzerland Corporate Criminal Liability 2026: Practical Guide for Banks, Asset Managers and Executives

Last updated: May 4, 2026

Switzerland corporate criminal liability 2026 presents a materially different risk landscape from the one compliance teams navigated even twelve months ago. Early‑2026 rulings from the Federal Criminal Court (Bundesstrafgericht) have sharpened the legal test for attributing criminal conduct to corporate entities, while expanded AML enforcement and a proposed new legislative framework signal that prosecutors and regulators intend to use every tool at their disposal. For in‑house counsel, compliance officers and C‑suite executives at Swiss banks and asset managers, the central question is now unavoidable: should suspected conduct be treated as a corporate criminal exposure requiring immediate legal remediation? This guide provides the practical playbook, from understanding the tightened liability test to running an internal investigation and responding to cross‑border requests.

• Key takeaway 1. The 2026 Federal Criminal Court rulings demand a closer proximate causal link between organisational failures and the offence, raising the evidentiary bar for both prosecutors and defendants.
• Key takeaway 2. Corporate criminal liability does not transfer by merger, a principle confirmed in April 2026, creating both opportunities and risks for restructuring entities.
• Key takeaway 3. The proposed NUFG framework would abolish criminal liability for negligence in certain corporate contexts, but until it is enacted, the existing regime applies in full.

What Changed in Switzerland Corporate Criminal Liability 2026, Rulings and Enforcement Trends

Summary: Early‑2026 Federal Criminal Court decisions and regulatory enforcement actions have refined the standards for corporate criminal liability in Switzerland, making compliance program design and incident response more consequential than ever.

Switzerland introduced corporate criminal liability on 1 October 2003, making it a comparatively late adopter among developed economies. For many years the regime, anchored in the Swiss Criminal Code, was regarded as largely under‑used. That perception changed decisively in the first half of 2026. The Federal Criminal Court issued rulings that clarified how criminal conduct is attributed to corporate entities, particularly regarding the causal link between an organisation’s internal shortcomings and the underlying offence. Separately, the Federal Council’s proposed Neue Unternehmensverantwortungsgesetz (NUFG) framework entered public consultation, with commentary from leading firms noting that criminal liability for negligence would be abolished under the draft text, a significant potential policy shift.

At the same time, FINMA signalled heightened scrutiny of white‑collar crime in Switzerland through expanded AML enforcement actions targeting banks and asset managers. Switzerland’s ratification of the Council of Europe’s Criminal Law Convention on Corruption and its additional protocol, alongside OECD anti‑bribery commitments, continues to provide the international framework within which domestic enforcement operates.

Key 2026 Court Decisions and Regulatory Developments, Timeline

Industry observers expect the NUFG consultation process to generate significant corporate lobbying and counter‑lobbying throughout the remainder of 2026, with the likely practical effect that compliance teams must continue operating under the current, stricter framework until any legislative change is enacted.

The Corporate Liability Test 2026, Legal Standard Explained

Summary: Swiss corporate criminal liability rests on a demonstrable link between an offence committed within a company and the company’s failure to organise itself to prevent it. The 2026 rulings have tightened every element of this test.

Under Swiss law, a company can be held criminally liable where an offence is committed in the exercise of commercial activities that conform with the company’s purposes, and where the offence cannot be attributed to a specific individual due to the company’s lack of organisation. This is often described as a “subsidiary” model of corporate criminal liability, the company’s liability arises from its organisational deficit, not from a simple agency theory.

The core elements of the test are: (1) an offence was committed within the scope of the company’s business activities; (2) the offence could have been prevented had the company been properly organised, including adequate supervision, training, and internal controls; and (3) the company’s organisational failure is causally connected to the offence.

The 2026 Federal Criminal Court rulings have refined each of these elements. Courts now demand a more granular analysis of the causal chain between organisational shortcomings and the criminal act. Where a company can demonstrate that specific oversight practices existed and were operational, even if imperfect, the standard for establishing the requisite organisational deficit has become harder for prosecutors to meet. Conversely, companies with demonstrably hollow compliance programs face a lower threshold for attribution.

Comparison: Pre‑2026 vs Post‑2026 Corporate Liability Test

Attributing Acts in Corporate Groups, Parent and Subsidiary Issues

In corporate groups, criminal liability can only be attributed to the group company in which the offence was committed. The parent company is, in principle, not liable for offences committed within a subsidiary, unless the parent itself had direct organisational responsibility for the function in question. The 2026 rulings reinforce this entity‑specific approach, requiring prosecutors to establish a concrete transactional link rather than relying on general group oversight structures. For multinational groups operating through Switzerland, this means that compliance programs must be designed and documented at the individual entity level, not merely at group headquarters.

Practical Exposures for Financial Institutions, Banks and Asset Managers

Summary: Swiss banks and asset managers face criminal exposure across multiple operational touchpoints, from client onboarding failures to sanctions screening gaps. Both corporate entities and individual executives can be prosecuted.

Can Swiss companies and their executives be criminally prosecuted for AML and financial crime? The answer is unequivocally yes. Swiss criminal law applies to both the corporate entity and the natural persons who act on its behalf. An executive who personally authorises, directs, or knowingly fails to prevent a criminal act faces individual prosecution alongside any corporate proceedings. The 2026 enforcement environment makes this dual‑track exposure a practical reality, not a theoretical risk.

Banks, Retail and Investment

For banks, the highest‑risk operational activities generating corporate criminal exposure in 2026 include:

• KYC/Client onboarding. Deficient identity verification, failure to establish beneficial ownership, or accepting politically exposed persons without enhanced due diligence.
• Sanctions screening. Incomplete or outdated screening lists, manual overrides without documented justification, and failure to re‑screen existing clients against updated sanctions lists.
• Suspicious transaction reporting. Delayed or non‑filing of suspicious activity reports (SARs) with MROS (Money Laundering Reporting Office Switzerland).
• AML monitoring. Inadequate transaction monitoring thresholds, failure to investigate flagged transactions, and over‑reliance on automated systems without human review.
• Incentive and bonus structures. Compensation models that reward relationship managers for bringing in high‑risk assets without corresponding compliance checkpoints.
• Third‑party agents and introducers. Insufficient due diligence on intermediaries who source client relationships, particularly in high‑risk jurisdictions.

Asset Manager Criminal Liability, Specific Risks

Asset managers face a parallel but distinct set of exposures. Because many Swiss asset managers operate with leaner compliance teams than banks, organisational deficits are often easier for prosecutors to establish. Consider a typical risk scenario: an asset manager accepts a mandate from a foreign fund structure without conducting independent verification of the underlying investors. Transaction patterns subsequently suggest layering, a common money laundering technique. The asset manager’s compliance function flags the activity but the risk committee overrides the flag without documentation. In this scenario, both the corporate entity and the individuals involved in the override decision face criminal exposure under AML enforcement in Switzerland.

Red Flags Table, AML Exposures by Entity Type

Immediate Response and Internal Investigation Playbook, Step by Step

Summary: When a potential corporate criminal exposure is identified, the first 72 hours determine the quality of the company’s legal position. This playbook provides the timed response framework that Swiss banks and asset managers should follow.

What immediate compliance and investigation steps should institutions take after a suspected offence? The answer depends on speed, preservation, and privilege. The following timeline reflects best practice under the Switzerland corporate criminal liability 2026 framework.

0–24 Hours: Preserve and Contain

• Implement a litigation hold. Issue a written preservation notice to all custodians of potentially relevant electronically stored information (ESI), including email, messaging platforms, shared drives, and physical records.
• Isolate key custodians. Identify the individuals closest to the suspected conduct. Do not conduct interviews at this stage, focus on preserving their data and restricting access to sensitive systems if warranted.
• Secure physical evidence. Lock down relevant files, access logs, and surveillance footage.
• Notify the General Counsel or Chief Compliance Officer. Establish a single reporting line for all incident‑related communications.

24–72 Hours: Convene and Assess

• Assemble the response team. Include General Counsel, external white‑collar counsel, head of compliance, head of IT/information security, and a board liaison.
• Engage external counsel. Early engagement preserves attorney‑client privilege over the investigation and ensures advice is independent of internal pressures.
• Assess self‑reporting thresholds. Determine whether the suspected conduct triggers mandatory reporting obligations to FINMA, MROS, or foreign regulators.
• Prepare an initial fact summary. Document what is known, what is suspected, and what gaps exist, this becomes the basis for the investigation plan.

72 Hours to 2 Weeks: Investigate and Decide

• Launch forensic review. Engage forensic accountants or digital forensics specialists as directed by external counsel.
• Develop the interview plan. Identify witnesses, sequence interviews strategically, and ensure all interviews are conducted under privilege.
• Build the privilege log. Maintain a contemporaneous log of all privileged communications and work product.
• Make the regulator engagement decision. Based on preliminary findings, decide whether proactive engagement with FINMA or prosecutors is strategically advantageous.

2–8 Weeks: Remediate and Report

• Develop a remedial action plan. Address identified organisational deficits, the very deficits that ground corporate criminal liability in Switzerland.
• Prepare for external reporting. If the evidence warrants, prepare MROS filings, regulator notifications, or responses to incoming MLAT requests.
• Brief the board. Provide a formal written update to the board of directors, documenting the investigation’s scope, findings, and recommended actions.

Sample Preservation Notice, Key Language

A preservation notice should include: (1) a clear statement that a legal matter has arisen requiring document preservation; (2) a description of the categories of information to be preserved, including emails, instant messages, calendar entries, electronic and physical files, and voicemail; (3) an instruction to suspend all routine document destruction, recycling, or deletion protocols for the specified categories; and (4) a named contact for questions.

Communications, Dos and Don’ts

Cross‑Border Investigations and Mutual Legal Assistance in Switzerland

Summary: Swiss companies increasingly face multi‑jurisdictional criminal investigations. Understanding the mutual legal assistance (MLAT) process and the decision points around voluntary disclosure is critical to managing cross‑border risk.

Switzerland maintains a well‑developed network of mutual legal assistance treaties, and Swiss authorities routinely cooperate with foreign counterparts, including the US Department of Justice (DOJ), the UK Serious Fraud Office, and EU member state prosecutors. When a cross‑border investigation touches a Swiss entity, the first signal is often an incoming MLAT request seeking documents, witness testimony, or asset freezes.

The MLAT process in Switzerland is administered by the Federal Office of Justice (FOJ). Expected timelines vary but a straightforward request typically takes six to twelve months from receipt to execution. Complex or contested requests can take considerably longer, particularly where the targeted company challenges the request before the Federal Criminal Court.

Decision Tree: Voluntary Disclosure vs Contested Response

The decision whether to negotiate voluntary disclosure or to contest an MLAT request is one of the most consequential choices a company faces in cross‑border investigations in Switzerland. Key factors include:

• Strength of the foreign authority’s case. If the evidence is likely to be obtained regardless, cooperation may yield credit or reduced sanctions.
• Exposure in multiple jurisdictions. Voluntary disclosure in one jurisdiction can trigger obligations or expectations in others.
• Privilege considerations. Disclosure of privileged materials in one jurisdiction may waive privilege globally, a risk that must be assessed jurisdiction by jurisdiction.
• Regulatory consequences. FINMA’s expectations regarding cooperation must be balanced against the company’s defence strategy.

Practical Checklist for Responding to Foreign Requests

• Immediately engage Swiss external counsel with MLAT experience.
• Identify and preserve all documents potentially responsive to the request.
• Assess whether any responsive documents are protected by banking secrecy, data protection, or attorney‑client privilege under Swiss law.
• Evaluate whether the request meets the dual criminality requirement.
• Consider whether to challenge the scope or proportionality of the request before the Federal Criminal Court.
• Coordinate defence strategy across all implicated jurisdictions to avoid inconsistent positions.

Remedies, Sanctions and Likely Outcomes Under Switzerland Corporate Criminal Liability 2026

Summary: Penalties for corporate criminal offences in Switzerland range from monetary fines to confiscation orders, with significant collateral consequences for licences, reputation, and individual executives.

Swiss law provides for a range of sanctions against corporate offenders. The penalties depend on the nature of the offence, the size of the company, and the degree of organisational deficit demonstrated.

Penalties Table, Offence Category, Corporate Sanction and Executive Exposure

Beyond the direct criminal sanctions, companies convicted or under investigation face significant collateral consequences. FINMA may impose licence conditions, require changes to senior management, or, in extreme cases, revoke the licence altogether. Reputational damage can trigger client withdrawals, loss of correspondent banking relationships, and reduced access to capital markets. Early indications suggest that Swiss prosecutors are increasingly willing to seek confiscation orders targeting the proceeds of crime within the corporate entity, making financial exposure potentially far greater than the headline fine.

Negotiation levers available to companies include: implementing a comprehensive remedial program before sentencing; agreeing to an independent compliance monitor; and demonstrating genuine cooperation with the investigation, including voluntary disclosure of relevant evidence.

Risk Mitigation and Compliance Program Checklist for Switzerland Corporate Criminal Liability 2026

Summary: Boards and C‑suite executives must ensure that compliance programs are not merely documented but demonstrably operational, the 2026 attribution test rewards substance over form.

The following checklist is designed for board‑level reporting and annual compliance program review. Each item directly addresses an element of the corporate liability test as clarified by the 2026 rulings:

• Board‑level compliance oversight. Ensure the board receives quarterly compliance reports with quantified risk metrics, not just narrative summaries.
• Dedicated compliance function. The compliance team must have direct reporting access to the board and sufficient budget, headcount, and authority to operate independently.
• KYC/AML program minimums. Implement risk‑based client due diligence with documented escalation thresholds for high‑risk clients, PEPs, and complex structures.
• Transaction monitoring. Calibrate automated monitoring systems with institution‑specific thresholds; document all tuning decisions and periodic reviews.
• Third‑party risk management. Conduct due diligence on all intermediaries, introducers, and agents; include anti‑corruption and AML representations in contracts.
• Training and awareness. Deliver role‑specific compliance training at least annually, with documented attendance and comprehension testing.
• Incident response governance. Maintain a written incident response plan that assigns roles, timelines, and decision authority, and test it through annual tabletop exercises.
• Record‑keeping and audit trail. Ensure all compliance decisions, overrides, and escalations are documented in a searchable, tamper‑evident system.
• Internal audit. Commission an independent compliance audit at least annually, with findings reported directly to the board audit committee.
• Whistleblower mechanism. Operate a confidential reporting channel with documented investigation procedures and non‑retaliation protections.

Conclusion and Recommended Next Steps

The Switzerland corporate criminal liability 2026 landscape demands that regulated financial institutions and their executives move beyond passive compliance and adopt a proactive, evidence‑based approach to organisational integrity. The tightened attribution test means that functioning compliance programs now provide a genuine defence, but hollow or poorly documented programs create greater exposure than ever before.

Three immediate actions for every Swiss bank and asset manager:

1. Audit your compliance program against the 2026 attribution test. Map each element of the test to your existing controls and identify documented gaps.
2. Stress‑test your incident response plan. Run a tabletop exercise simulating a corporate criminal investigation, including cross‑border MLAT and regulator engagement scenarios.
3. Engage specialist external counsel. Before an incident occurs, establish a relationship with experienced white‑collar defence practitioners who understand both Swiss criminal procedure and cross‑border cooperation dynamics.

This article is published for informational purposes only and does not constitute legal advice. Readers facing specific compliance questions or investigations should seek independent legal counsel qualified in the relevant jurisdiction.

Sources

1. ICLG, Business Crime Laws and Regulations (Switzerland)
2. Lexology, Strategy and Defence in Corporate Criminal Liability
3. Chambers Practice Guides, Anti‑Corruption 2026 (Switzerland)
4. Bär & Karrer, Proposed New Framework (NUFG) Briefing
5. Swiss Federal Department of Foreign Affairs (EDA), Corruption
6. Schellenberg Wittmer, No Transfer of Corporate Criminal Liability by Merger
7. Kellerhals Carrard, Anti‑Corruption 2026
8. Borel Barbey, Legislative and Regulatory Updates for 2026
9. CMS, Corporate Criminal Liability Legal Update 2026