FIC Compliance in South Africa for Conveyancers & Estate Agents (2026), Steps, Documents & Reporting

FIC compliance south africa has moved sharply up the agenda for property professionals following the Financial Intelligence Centre’s recent public warning directed specifically at law firms and estate agents. Conveyancers, estate agents, in-house counsel and practice managers are now under pressure to demonstrate functioning anti-money-laundering programmes, up-to-date client due diligence, verified beneficial ownership records and a working suspicious transaction reporting process. This guide converts the technical regulatory material into a practice-ready, step-by-step procedure: who must register, what documents you must collect, how long each step takes, what it costs, and how to file a suspicious transaction report when the need arises.

It is written for practitioners who need to act, not simply read, and it reflects the statutory framework under the Financial Intelligence Centre Act 38 of 2001 and FIC guidance. This is general guidance and not a substitute for tailored legal advice.

1. Overview: Why FIC compliance matters for property professionals

Property transactions move large sums of money, often through legal and agency intermediaries, which makes conveyancing firms and estate agencies attractive conduits for laundering the proceeds of crime. The Financial Intelligence Centre Act 38 of 2001 (the FIC Act) designates certain property-sector businesses as accountable institutions, imposing legal duties to identify clients, keep records, assess risk and report suspicious activity. Robust FIC compliance south africa is therefore not an administrative nicety, it is a statutory obligation enforced by the regulator, with direct consequences for practices that fail to perform.

1.1 FIC’s role and enforcement focus in 2026

The Financial Intelligence Centre supervises accountable institutions, issues guidance notes, maintains the registration portal and publishes public warnings and enforcement notices. The FIC has publicly urged law firms and estate agents to submit their risk and compliance returns and to register where required, signalling heightened scrutiny of whether these businesses have registered, conducted risk assessments, and can produce evidence of a functioning AML programme. This follows South Africa’s grey-listing by the Financial Action Task Force and the strengthened obligations introduced by amendments to the FIC Act. The practical effect, industry observers expect, is more requests for registration confirmation, more inspections, and closer examination of client due diligence and suspicious transaction reporting trails.

1.2 Consequences of non-compliance

Non-compliance under the FIC Act exposes a practice to both administrative and criminal consequences. Administrative sanctions can include directives, remedial orders and administrative penalties imposed by the supervisory body. Criminal liability can arise for failures such as not reporting suspicious transactions or not keeping required records. Beyond the statutory exposure, there is serious reputational risk: being named in an enforcement notice damages client trust, referral relationships and professional standing. For attorneys, there is the added dimension of professional conduct obligations overseen by the Legal Practice Council.

2. Eligibility, who is an accountable institution and what transactions are covered

Before building a compliance programme, determine whether your business is an accountable institution under the FIC Act. The classification turns on the nature of the services you provide, not merely your professional title. Accountable institutions are listed in Schedule 1 to the FIC Act, which was expanded by recent amendments.

2.1 Conveyancers

Attorneys and the firms they practise within typically fall within the accountable-institution net where they carry on business of the kind described in Schedule 1, including handling the transfer of immovable property, administering trust funds and facilitating the movement of purchase monies. Acts that may trigger obligations include receiving funds into trust, attending to transfer and bond registration, and acting on behalf of purchasers or sellers who are companies or trusts. Where these activities are performed, conveyancer FIC obligations attach and registration, CDD and reporting duties follow.

2.2 Estate agents

Persons carrying on the business of a property practitioner (estate-agency services) as contemplated in Schedule 1 are also treated as accountable institutions. Agency activities that may create obligations include marketing and negotiating the sale or lease of property, holding deposits, and introducing buyers and sellers. Estate agents FIC compliance therefore requires the same core disciplines, identification, verification, record-keeping and reporting, applied to the agency’s role in the deal. Note that property practitioners are also regulated by the Property Practitioners Regulatory Authority under the Property Practitioners Act 22 of 2019.

2.3 When a firm or individual practitioner must register

Registration obligations apply to the business that supplies the service. A conveyancing firm performing conveyancing work generally registers as the accountable institution; a sole practitioner performing the same work registers in their own right. Property practitioners register where they supply estate-agency services as contemplated in Schedule 1. If you are uncertain whether a particular structure requires registration, treat the default position as registration required and verify against FIC guidance rather than risk operating unregistered.

3. Step-by-step compliance process

The following is the core procedure for building and operating a compliant AML programme. Assign a responsible owner to each step, set internal deadlines, and keep documentary evidence of completion, the FIC will expect to see that evidence on request. The steps run from registration through to ongoing review.

1. Register as an accountable institution with the FIC. The practice principal or practice manager collects the business and responsible-person details and completes the online registration through the FIC’s registration and reporting portal (goAML). Registration establishes your institution on the FIC’s register and enables you to file reports.
2. Appoint a compliance officer. The FIC Act requires accountable institutions to appoint a person with the authority to ensure compliance, oversee the AML programme, receive internal suspicion reports, and file reports with the FIC. Provide the compliance officer’s contact details to the FIC and ensure the role is genuinely resourced rather than a nominal appointment.
3. Develop and adopt a Risk Management and Compliance Programme (RMCP). The FIC Act requires accountable institutions to develop, document, maintain and implement an RMCP. It should set out your risk-based approach, CDD procedures, EDD triggers, record-keeping protocols, internal reporting lines and training schedule, with reference to FIC guidance notes. The compliance officer drafts it, optionally with an external consultant, and the principals formally approve it.
4. Implement client due diligence (CDD) procedures. Build standard onboarding steps for identification and verification, beneficial ownership checks and risk-scoring, applied to every new client and transaction.
5. Establish record-keeping protocols and secure retention. Decide where and how CDD and transaction records are stored, who can access them, and how retention periods are enforced, whether in physical files or a secure electronic file store.
6. Identify suspicious transactions and file STRs. Train staff to recognise indicators, route internal suspicion to the compliance officer, and file an STR with the FIC when suspicion is formed, without alerting the client.
7. Train staff, test and obtain independent audit or compliance review. Provide initial and refresher training, test understanding, and arrange periodic independent review of the programme’s effectiveness.
8. Conduct periodic review and respond to FIC requests. Keep the risk assessment and RMCP current, and have a process to respond promptly and completely to any FIC query, directive or inspection.

3.1 Differentiating standard CDD and enhanced due diligence (EDD)

Standard CDD applies to ordinary-risk clients and transactions: verify identity, confirm address, identify beneficial owners where the client is an entity, and record a risk rating. Enhanced due diligence (EDD) applies where risk is elevated, for example, politically exposed persons (described in the FIC Act as prominent persons), high-value or cross-border funds, opaque ownership structures, or cash-intensive sources. EDD requires additional scrutiny: deeper verification, source-of-funds and source-of-wealth evidence, senior sign-off and closer ongoing monitoring. Client due diligence conveyancers perform should always be proportionate to the assessed risk, and the file should record why a given level was applied.

3.2 FIC compliance south africa: the Step / Who / Duration timeline

Treat per-transaction obligations as immediate: CDD must be completed before the business relationship or transaction proceeds, and an STR must be filed as soon as reasonably practicable after suspicion is formed rather than at the end of the matter. The programme-build steps are one-off (with periodic review), while the per-transaction steps recur for every deal.

4. Required documents, per-transaction and ongoing

The table below sets out the documents to collect and retain. Records may be kept physically or electronically, provided they are secure, retrievable and complete. Follow the FIC Act and FIC guidance on retention periods, generally at least five years from the date the business relationship ends or the transaction is concluded, and ensure your filing system can demonstrate that the retention clock is being observed.

5. Timeline & deadlines, actions and statutory timeframes

Timing discipline is central to effective FIC compliance south africa. Some obligations are one-off set-up tasks; others are strictly time-sensitive on a per-transaction basis. The most urgent is the suspicious transaction report: once an employee or the compliance officer forms a suspicion, the report must be made as soon as reasonably practicable rather than deferred to the end of the matter. Delay is itself a compliance failure and can attract liability. Certain reports, such as cash threshold reports, carry their own statutory filing periods.

Client due diligence must be completed before you proceed with the transaction, you should not register a transfer or release trust funds for a client whose identity and, where relevant, beneficial ownership you have not verified. Beneficial ownership checks on companies and trusts can take several business days where CIPC searches, trust-deed review and signatory verification are required, so build that lead time into your conveyancing timetable rather than leaving it to the eve of lodgement.

When the FIC requests information, directives or evidence of your programme, respond within the period it specifies. Retain CDD and transaction records for the full statutory retention period, generally at least five years, and ensure that records remain retrievable for that entire period even after a client file would otherwise be closed. Set a diarised date for your risk assessment review, RMCP refresh, staff training and independent compliance review so these recurring duties do not slip.

6. Costs and fees

Budgeting for FIC compliance south africa involves several distinct cost categories. Registration with the FIC itself carries no statutory fee. The real spend is in implementation: drafting the RMCP, appointing or outsourcing the compliance function, training staff, building secure record-keeping, and commissioning independent review. The figures below are indicative estimates only, obtain quotes calibrated to your firm’s size and risk profile.

Obtain written quotations tailored to your practice rather than relying on generic figures, as market rates change over time and differ substantially between providers.

7. What changed recently, FIC public warning and enforcement trends

A defining development is the FIC’s public warning urging law firms and estate agents to meet their obligations, including submitting risk and compliance returns. The message is unambiguous: the regulator expects accountable institutions in the property sector to be registered, to have documented and implemented an RMCP, and to be able to produce evidence of a functioning AML programme on demand. This heightened focus follows amendments to the FIC Act and South Africa’s grey-listing by the Financial Action Task Force, which prompted a national drive to strengthen AML supervision. For firms that treated FIC obligations as a box-ticking formality, this marks a shift to active supervision.

The practical implications are clear. Expect the FIC to request confirmation of registration, to interrogate the quality of risk assessments, and to look for a demonstrable CDD and STR trail rather than paper policies that are never applied. There are indications of heightened scrutiny of suspicious transaction reporting in particular, both the volume and the quality of reports filed by conveyancers and estate agents.

The immediate priority list for any property practice is short and urgent: confirm you are registered; appoint and resource a compliance officer; complete or refresh your risk assessment and RMCP; verify that CDD is actually being performed and recorded on live matters; and confirm that staff know when and how to escalate a suspicion. Addressing these now is the most effective way to mitigate registration and filing risk under the current enforcement lens.

8. Common pitfalls & how to avoid them

Most compliance failures in property practices are not exotic, they are predictable gaps that recur across firms. The following are the most frequent, each with its corrective action.

• Incomplete CDD. Proceeding to transfer or releasing funds before identity and verification are finished. Correct this by making completed CDD a mandatory gate in your file-opening and lodgement workflow, supported by a standard CDD checklist.
• Weak beneficial ownership verification. Accepting a client’s say-so for company or trust ownership. Obtain beneficial ownership information and corroborate it with CIPC records, trust deeds and signatory verification.
• Failing to file STRs. Spotting a red flag but not reporting it, or reporting late. Build a clear internal escalation route to the compliance officer and treat prompt filing on suspicion as non-negotiable.
• Poor record retention. Closing files and losing the ability to retrieve records within the statutory period. Use a retention-aware filing system, physical or electronic, that preserves records for the full required term.
• Staff unaware of EDD triggers. Front-line staff treating high-risk clients as routine. Train staff on EDD triggers, prominent persons, cross-border funds, opaque structures, and refresh that training regularly.
• Improperly delegating the compliance role. Appointing a compliance officer in name only, without authority or resources. Appoint a senior person, document their mandate, and ensure they genuinely receive and act on internal reports.

9. Quick guide: How to make a Suspicious Transaction Report (STR)

A suspicious transaction report conveyancer or estate agent must file is one of the most time-sensitive duties in the whole programme. The following mini-procedure summarises when to file, what to include, and how to handle the matter internally. STRs are filed through the FIC’s online reporting system.

9.1 When to file

File where you know or suspect, or ought reasonably to have known or suspected, that a transaction or series of transactions involves the proceeds of unlawful activity, money laundering or terrorist financing, among the other reporting triggers set out in the FIC Act. Common property-sector indicators include an unexplained source of funds, purchase prices that do not match the parties’ profiles, rapid resale, third parties settling the purchase price with no apparent connection, reluctance to provide identity or ownership information, and the use of opaque corporate or trust structures to obscure who really benefits.

9.2 What to include in an STR

An effective STR identifies the parties, describes the transaction, sets out the grounds for suspicion clearly and factually, and attaches or references supporting documents. Use clear headings, parties, transaction details, grounds for suspicion, supporting documents, and reporter details. The following is suggested sample wording, adapt to the facts of your matter and have it signed off by the compliance officer:

“Suggested sample wording, adapt to facts and sign-off by the compliance officer: The reporting institution acts as conveyancer in the transfer of [property]. The purchaser, [entity/individual], tendered the purchase price of [amount] from [source], which is inconsistent with the information provided during onboarding. Requests for source-of-funds documentation were met with reluctance and incomplete responses. On these grounds the institution has formed a suspicion that the transaction may involve the proceeds of unlawful activity and submits this report accordingly.”

9.3 Internal handling

Do not inform the client that a report has been or may be made, tipping off undermines the investigation and is an offence under the FIC Act. Route the suspicion to the compliance officer through your internal reporting line, keep the STR narrative and internal notes in a secure file separate from the general matter file, and preserve any applicable legal privilege. Where the interaction between reporting duties and professional privilege is unclear, obtain advice before acting; the Legal Practice Council provides guidance for attorneys navigating that tension.

Conclusion

FIC compliance south africa is no longer a background obligation for property professionals, the regulator’s recent public warning has placed conveyancers and estate agents squarely within its enforcement focus. The path to a defensible position is methodical: confirm registration, appoint and resource a compliance officer, adopt and implement a working RMCP, embed CDD and beneficial ownership checks into every matter, keep records for the full retention period, and file STRs promptly on suspicion. Treat the step-by-step procedure, document checklist and timeline in this guide as a practical blueprint, adapt the sample wording to your own matters under compliance-officer sign-off, and where the interaction between reporting duties and professional privilege is uncertain, obtain tailored legal advice.

Acting now is the most effective way to meet your obligations and mitigate enforcement risk. This article is general guidance and not a substitute for legal advice on your specific circumstances.

Sources

1. Financial Intelligence Centre (FIC), official site
2. South African Government, legislation (Financial Intelligence Centre Act 38 of 2001)
3. Government Printing Works, South African Government Gazette
4. Legal Practice Council (LPC)
5. Property Practitioners Regulatory Authority (PPRA)
6. South African Reserve Bank (SARB)
7. National Prosecuting Authority (NPA)