3 Nov 2026 · fim-2026-11-01
Lead Signal
Sri Lanka is in the final stretch of its third APG/FATF-style mutual evaluation, with an on-site visit by international assessors that began in mid-October 2026 and was scheduled to run into the first week of November. Central Bank of Sri Lanka Governor Weerasinghe has publicly expressed confidence that the country will avoid a third grey-listing, pointing to a run of 2026 legislative reforms: amendments to the Banking Act, beneficial-ownership provisions added to the Companies Act, and amendments to the Financial Transactions Reporting Act (FTRA), the Prevention of Money Laundering Act, and the Convention on the Suppression of Terrorist Financing Act. The reform programme is real and substantial, but it remains a credible attempt rather than a proven outcome, and the Financial Intelligence Unit of Sri Lanka has itself identified the gap that could still matter most: beneficial ownership is, by its own account, the only FATF recommendation on which the country is currently rated non-compliant.
That combination, a demonstrable legislative push set against one acknowledged and specific shortfall, is the defining architecture of this cycle. The FTRA (Amendment) Act, No. 17 of 2026, certified 4 August 2026, is the clearest structural move: for the first time, it draws Virtual Asset Service Providers inside the FTRA's definition of a financial business, extending reporting-institution obligations, risk-based customer due diligence duties, and FIU-SL's own supervisory powers to that sector. The timing, legislated and certified ahead of the on-site assessment, signals an attempt to close a recognised gap before assessors conclude their work rather than after.
Other Developments
Beneficial ownership flagged as the sole outstanding gap. The Director General of FIU-SL stated publicly that beneficial-ownership transparency remains the only FATF recommendation on which Sri Lanka is rated non-compliant, and used that statement to urge private-sector entities to move ahead with implementing the beneficial-ownership regime newly inserted into the Companies Act, ahead of the mutual evaluation's conclusion. This is a self-identified weakness rather than an external finding, which gives it particular weight: the regulator responsible for the country's FATF standing is naming its own residual exposure in public, on the record, while assessors are still in the country.
Virtual asset providers brought inside the AML perimeter. The FTRA Amendment Act's extension of the financial business definition to Virtual Asset Service Providers is a first-time structural change, not an incremental update. It sits alongside the Central Bank's standing position, reaffirmed in the same legislative context, that cryptocurrency is not legal tender in Sri Lanka and that no domestic exchange holds a licence. The combination is coherent: a jurisdiction that has not opened a licensing gateway for crypto exchanges is nonetheless bringing VASP activity within reporting, customer due diligence, and FIU-SL oversight, closing an AML gap for the sector without, on current evidence, opening a corresponding commercial pathway.
On-site assessment nearing its procedural close. The evaluation visit that began in mid-October was scheduled to run two weeks, placing its conclusion in the first week of November 2026. What assessors found during the visit itself is not yet public; what is public is the Governor's confidence and the Finance Intelligence Unit's own framing of where the residual risk sits. A mutual evaluation report and the determination of grey-list status are not immediate outputs of the on-site visit; those follow a later plenary process, and no finding on that outcome exists yet.
Cross-Monitor Connections
The beneficial-ownership gap identified by FIU-SL has an obvious connection to corporate-transparency work tracked elsewhere: a jurisdiction rated non-compliant on beneficial ownership is, by definition, one where opaque corporate structures remain harder to pierce, a condition relevant to any monitor tracking state capture, conflict finance, or extractive-sector integrity through corporate vehicles. Sri Lanka's position does not currently carry a specific conflict-finance or extractive-industry finding, but the structural condition, an unresolved beneficial-ownership gap sitting inside an active mutual evaluation, is the kind of enabling condition those monitors would want on their own radar once country-specific findings exist. Similarly, the VASP classification change is a technology-and-architecture development with obvious relevance to any monitor tracking digital-asset infrastructure risk across South Asia: a jurisdiction imposing AML obligations on VASPs while declining to open a licensing or legal-tender pathway for them is choosing a particular enablement posture, worth watching for firms assessing counterparty risk through Sri Lankan channels.
Outlook
The near-term marker is procedural: the on-site visit concludes, assessors compile findings, and a mutual evaluation report is expected to be brought to the Asia/Pacific Group on Money Laundering's Annual General Meeting, provisionally expected around mid-2027, with wide uncertainty around that date. Whether Sri Lanka avoids a third grey-listing will turn heavily on how assessors weigh the beneficial-ownership gap against the volume of legislative reform completed in 2026, including the FTRA, PMLA, and CSTFA amendments and the new Companies Act provisions. The Governor's public confidence should be read as the government's own assessment of its position, not as a finding from the assessors themselves, and the two have not yet been reconciled in anything public. For firms with Sri Lankan exposure, the practical marker to watch is whether private-sector implementation of the Companies Act beneficial-ownership regime visibly accelerates in the period following the on-site visit, since FIU-SL has made clear that is the one lever it believes is still within the country's control before the evaluation outcome is fixed.
25 Oct 2026 · fim-2026-10-25
Lead Signal
Sri Lanka enters its third Financial Action Task Force (FATF) mutual evaluation cycle with a live discrepancy between official and institutional accounts of timing. The Governor of the Central Bank of Sri Lanka has publicly stated that an on-site evaluation by international assessors commenced in mid-October 2026 and is scheduled to run approximately two weeks, framed around confidence that the country will avoid a third grey-listing. The FATF calendar itself, however, lists a possible on-site period beginning 1 November 2026 for the Asia/Pacific Group (APG) assessment of Sri Lanka, whose last evaluation dates to October 2015. The gap between a domestic officials press account and the international standard-setters own scheduling record could not be resolved, and the finding is treated as uncertain pending primary confirmation. The architectural significance is independent of the exact date: a mutual evaluation outcome, once published, becomes the reference point against which the countrys beneficial-ownership gaps, virtual-asset perimeter, and AML/CTF enforcement posture will be judged for the following several years, and the pre-evaluation positioning visible here, legislative amendment, public reassurance, sector briefings, is itself the structural story.
Other Developments
Virtual asset legislative drafting continues incrementally. A concept paper for a dedicated Virtual Asset Service Provider (VASP) framework was sent to the Legal Draftsmans Department on 24 September 2026, following the Cabinet of Ministers approval on 27 July 2026 of a policy framework naming the Securities and Exchange Commission as lead regulator, with the Central Bank, the Financial Intelligence Unit and the Inland Revenue Department holding joint oversight roles. No VASP-specific statute yet exists, and the matter remains probable rather than confirmed as a completed legislative step.
The existing AML reporting perimeter has already absorbed virtual asset activity ahead of dedicated VASP legislation. The Financial Transactions Reporting (Amendment) Act, No. 17 of 2026, acting through the Central Banks Financial Intelligence Unit under powers in section 19(1) and 19(2) of the original 2006 Act, classifies virtual asset service providers as financial businesses, bringing them within AML reporting obligations as of 4 August 2026. This creates a structurally notable sequencing: reporting duties attach before a licensing regime exists, so VASPs operating in Sri Lanka are now obliged entities under the reporting Act while no dedicated authorisation pathway has yet been enacted. The full primary text of the amendment was not independently verified, and the finding rests on a Central Bank notice cross-referenced with a secondary summary, so it is carried as uncertain.
Gambling-sector AML regulation remains stalled. First-phase gambling regulations, including AML requirements intended to be imposed via a section 19 ministerial order, have slipped past a June and then an October 2026 target with no confirmed issuance. Sector officials describe the domestic gambling market as substantially reliant on crypto and informal payment rails, which sharpens the AML stakes of continued delay, but the regulatory response has not yet materialised.
Cross-Monitor Connections
The virtual-asset regulatory sequencing in Sri Lanka, reporting obligations preceding a licensing perimeter, intersects directly with the crypto-asset and financial-innovation tracking the world-payments and crypto monitors maintain for emerging-market VASP regimes, where the same policy-before-statute pattern recurs. The gambling sectors described reliance on crypto and informal payment rails for a market still awaiting its first AML-specific regulation is a payments-architecture question as much as an AML one, and is relevant to any tracking of informal and crypto-adjacent payment rail exposure in South Asia.
Outlook
The immediate marker to watch is the resolution of the on-site evaluation timing question itself: if the plenary outcome of the third mutual evaluation is published as scheduled, Sri Lankas beneficial-ownership and virtual-asset gaps identified under Recommendation 24 and Recommendation 15 will be tested directly against the FATF standard, with grey-listing a live but unresolved question. The sequencing visible in the virtual asset space, reporting duties ahead of licensing, will likely need to be followed by the dedicated VASP statute reaching enactment before the perimeter is considered structurally complete; the concept paper remains with the Legal Draftsmans Department and has not yet become a Bill. These developments are illustrative of a jurisdiction building compliance architecture under external evaluation pressure rather than domestic enforcement pressure, a pattern worth tracking as the evaluation outcome approaches.
18 Oct 2026 · fim-2026-10-18
Lead Signal
Sri Lanka's Central Bank Governor Dr Nandalal Weerasinghe has expressed confidence that the country will avoid a third placement on the FATF grey list, as the outcome of its APG-coordinated mutual evaluation nears. This public statement of optimism is set against a backdrop of structural legislative reform moving in parallel: a beneficial ownership regime in force since 30 March 2026, and a virtual-asset-service-provider regulatory framework progressing from Cabinet-level policy approval toward drafted legislation. The architecture being assembled, rather than any single enforcement action, is the signal worth foregrounding this cycle.
Other Developments
A virtual-asset regulatory perimeter is taking shape from a standing start. Cabinet approved a policy framework on 27 July 2026 designating the Securities and Exchange Commission of Sri Lanka as lead regulator for virtual assets and VASPs, working with the Central Bank's Financial Intelligence Unit and the Inland Revenue Department. The Ministry of Digital Economy's VASP concept paper progressed to the Legal Draftsman's Department on 24 September 2026, with the first phase of coverage limited to licensed exchanges and custodians. Reporting from 12 October 2026 confirms that VASPs are expected to face mandatory registration, know-your-customer and suspicious-transaction-reporting duties once the framework is enacted, explicitly timed ahead of the AML/CFT mutual evaluation outcome.
The beneficial ownership regime continues unchanged. The Companies (Beneficial Ownership) Regulations No. 01 of 2026, made under the Companies (Amendment) Act No. 12 of 2025, have been in force since 30 March 2026, with no change identified this cycle. This regime forms part of the broader legislative base that underlies the Governor's expressed confidence regarding the mutual evaluation outcome.
Cross-Monitor Connections
The VASP framework's progression is a direct point of connection to the world-payments and crypto monitors, both of which are tracking the same Cabinet decision and drafting milestone from their own regulatory-perimeter and licensing-status perspectives respectively. The underlying evidentiary record, the SEC's designation and the September drafting milestone, is shared across all three monitors; what differs is the lens each applies to it.
Outlook
The period ahead of the APG-coordinated mutual evaluation outcome is the operative window to watch. The VASP legislation is expected to clear the Legal Draftsman's Department and reach Parliament around the first quarter of 2027, though this timing carries meaningful uncertainty given the drafting stage has not yet concluded. Whether the evaluation outcome itself validates the Governor's stated confidence, and whether the first-phase VASP framework, once enacted, extends registration and reporting duties beyond licensed exchanges and custodians, are the two developments most likely to move this jurisdiction's risk posture in the coming cycles.
11 Oct 2026 · fim-2026-10-11
Lead Signal
Sri Lanka's anti-money-laundering architecture moved decisively this period. Parliament passed and the Speaker certified the Prevention of Money Laundering (Amendment) Act, No. 16 of 2026, alongside the companion Financial Transactions Reporting (Amendment) Act, No. 17 of 2026 and the Convention on the Suppression of Terrorist Financing (Amendment) Act, No. 18 of 2026, on 4 August 2026. The Act No. 16 package inserts a new section 12A permitting pre-judicial asset freezes of up to 14 working days, extendable to three years by court order, and adds beneficial-ownership and virtual-asset provisions into the Prevention of Money Laundering Act. This is the most significant AML/CFT legislative expansion in the standing regime, arriving ahead of Sri Lanka's delayed third FATF/APG mutual evaluation. The underlying Gazette text of the three Acts was not independently retrieved this period, so clause-level mechanics beyond section 12A rest on press commentary from Onlanka News and EconomyNext rather than primary legislative text, a gap worth noting before treating any downstream clause as settled.
Other Developments
Beneficial-ownership regime operationalised. The Companies (Beneficial Ownership) Regulations, No. 01 of 2026, implementing new Sections 130A to 130J of the Companies Act No. 7 of 2007, came into operation on 30 March 2026. A beneficial owner is defined as a natural person owning or controlling 10 percent or more of a company, directly, indirectly, or through effective control. Two independent legal-commentary sources corroborate the Gazette number, date and commencement date, though no Tier-1 Gazette text was independently retrieved this period.
FIU enforcement disclosure. The Financial Intelligence Unit at the Central Bank of Sri Lanka disclosed Rs.14.6 million in administrative penalties against 11 institutions, 7 financial institutions and 4 DNFBPs, for Financial Transactions Reporting Act breaches spanning October 2025 to March 2026. The disclosure includes a Rs.2 million fine against Cargills Bank PLC for failing to report 18 electronic fund transfers, and a finding that one finance company maintained relationships with UN-designated entities, a sanctions-screening failure surfaced through routine enforcement reporting rather than a standalone sanctions-architecture development.
E-money fit-and-proper declarations required. A Central Bank of Sri Lanka Payments and Settlements Department circular, Circular No. 03 of 2026, requires licensed operators of mobile-phone-based e-money systems to obtain declarations from their Board of Directors and Senior Management in terms of FATF Recommendation 26, covering fit-and-proper supervision. This circular was retrieved directly from CBSL's own circular index.
Crypto remains outside the regulatory perimeter. Cryptocurrency continues to sit outside Sri Lanka's regulatory and AML framework entirely; the Central Bank maintains that the rupee is the only legal tender and that cryptocurrency is unregulated. This is a standing position rather than a new development, but it bears directly on the gambling-sector financial-flow risk surfaced elsewhere in reporting, where unlicensed operators are understood to settle funds in crypto to avoid the formal banking system.
Cross-Monitor Connections
The crypto-settlement pattern associated with unlicensed gambling operators connects directly to Advennt's gambling-regulatory tracking of enforcement against unlicensed offshore operators in Sri Lanka, where the absence of a crypto-AML perimeter is the mechanism that allows settlement to bypass the formal banking system entirely. The new beneficial-ownership register under the Companies (Amendment) Act No. 12 of 2025 and its implementing regulations also bears on World Payments Monitor coverage of non-bank payment-institution licensing, since the same Companies Act registration status now carries beneficial-ownership disclosure obligations for payment-sector entities incorporated in Sri Lanka.
Outlook
The clause-level mechanics of the PMLA/FTRA/CSTFA amendment package, including the precise scope of the new section 12A asset-freezing power and its interaction with existing judicial-authorisation safeguards, remain to be confirmed against the Gazette text itself. Civil-society commentary has already raised concerns about the FIU's expanded rule-making authority and the extension of police-issued freezing orders without judicial supervision, a tension that will likely surface again as the third FATF/APG mutual evaluation, expected in the fourth quarter of 2026, proceeds and tests the regime's practical implementation against the legislative expansion just certified.
4 Oct 2026 · fim-2026-10-04
Lead Signal
Sri Lanka's Parliament passed the Second and Third Readings of the Prevention of Money Laundering (Amendment) Bill together with the companion Financial Transactions Reporting (Amendment) Bill by a special majority of 154 to 2 on 9 July 2026. The reforms add proliferation financing to the scope of the Financial Transactions Reporting Act, extend asset-freezing periods from an initial seven days to fourteen working days with court extension available up to three years, insert beneficial-ownership and virtual-asset provisions into the Prevention of Money Laundering Act, and mandate suspicious transaction reports within two working days. The legislative package is best read as a FATF-evaluation-driven reform: Sri Lanka's third FATF/APG mutual evaluation technical-compliance submission was due 31 March 2026, and the amendments land squarely on the gaps that kind of exercise tends to surface, particularly around reporting speed and the breadth of preventive measures applied to obliged entities.
The architecture-over-incident reading is that this is a structural expansion of the AML/CTF perimeter rather than a single enforcement episode, and it arrives alongside a second, complementary signal: the Financial Intelligence Unit at the Central Bank of Sri Lanka disclosed Rs.14.6 million in administrative penalties against eleven institutions, seven financial institutions and four designated non-financial businesses and professions, for breaches of the Financial Transactions Reporting Act spanning October 2025 to March 2026. Cargills Bank PLC was fined Rs.2 million for failing to report eighteen electronic fund transfers, and one finance company was found to have maintained relationships with three UN-designated individuals, a screening failure that speaks directly to the sanctions-implementation weaknesses a mutual evaluation would be expected to test.
Other Developments
Virtual-asset framework continues to develop without statutory footing. Sri Lanka's government VASP Sub-Committee held its fifth meeting on 10 August 2026, receiving technical assistance from UK HM Treasury officials on FATF Recommendation 15 compliance. The Securities and Exchange Commission has been recommended as the lead VASP regulator, but no VASP Act has been enacted or gazetted. The persistence of this gap, now five committee meetings deep with external technical assistance but no legislative output, is itself a finding: the absence of enacted law in a jurisdiction actively engaging with FATF technical standards is a different risk posture than simple regulatory silence, and it is the kind of enablement-by-delay that a purely enforcement-volume view of AML/CTF risk would miss.
Civil-society commentary flags overreach risk tied to grey-list anxiety. Reporting from Daily FT, dated 18 September 2026, raises concern that the scale and speed of the legislative response, including expanded executive asset-freezing and surveillance powers introduced without prior judicial authorisation, may reflect a defensive posture driven by fear of FATF grey-listing rather than calibrated policy design. This is a genuine three-pillar tension: provisions aimed at strengthening AML and CTF compliance can, if drafted under evaluation-driven time pressure, create due-process gaps that generate their own governance risk.
Cross-Monitor Connections
The virtual-asset regulatory gap identified in the Crypto, Digital Assets, and Financial Innovation domain connects directly to the crypto monitor's own tracking of Sri Lanka's unregulated-gap status: the absence of a VASP Act and the absence of any CBSL-authorised licensing category for exchange, custody or advisory activity are two sides of the same structural finding, one read through an AML/CFT lens and the other through a market-access lens. The beneficial-ownership provisions newly inserted into the Prevention of Money Laundering Act by the July 2026 amendments also intersect with the standing Beneficial Ownership (Companies) Amendment Act, No. 12 of 2025 framework, though that intersection is not itself a change this cycle. No world-payments or advennt-relevant developments were identified in this cycle's substrate for Sri Lanka.
Outlook
The outcome of Sri Lanka's third FATF/APG mutual evaluation remains unpublished as of this cycle, and the on-site assessment and plenary result are not confirmed in open sources. The legislative amendments passed in July 2026 and the enforcement disclosures made in that same month should be read as the government's visible remediation posture ahead of that outcome, not as its conclusion. Whether the VASP Sub-Committee process converts into an enacted statute, and whether the expanded executive powers draw further civil-society or judicial scrutiny, are the two threads most likely to carry forward as scheduled into subsequent cycles.
28 Sep 2026 · fim-2026-09-28
Lead Signal
Sri Lanka certified a coordinated three-Act AML/CFT legislative package on 4 August 2026, comprising amendments to the Prevention of Money Laundering Act (No.16 of 2026), the Financial Transactions Reporting Act (No.17 of 2026), and the Convention on the Suppression of Terrorist Financing Act (No.18 of 2026). The package broadens predicate offences, permits non-conviction-based proceedings, extends transaction-suspension orders from seven to fourteen working days, creates a National Committee on AML/CFT, and, for the first time in Sri Lankan law, classifies virtual asset service providers as financial businesses subject to AML/CFT obligations. Officials have been explicit that the reform's central policy driver is avoidance of a repeat FATF grey-listing, following the country's 2017-2019 listing experience, ahead of a third APG/FATF Mutual Evaluation that commenced around March 2026 under FATF's revised effectiveness-weighted methodology, with the Mutual Evaluation Report expected for APG plenary adoption around July 2027. This places Sri Lanka's reform architecture squarely in the compliance-driven category: the package tests not just legal transposition but implementation effectiveness, and the country's own officials have said as much.
Other Developments
A beneficial-ownership register became operational on 30 March 2026. The Companies (Amendment) Act, No.12 of 2025 (ss.130A-130J) and its accompanying Companies (Beneficial Ownership) Regulations No.01 of 2026 define beneficial ownership at a 10% threshold, abolish bearer shares outright, and require a register accessible to the Attorney-General, the Financial Intelligence Unit, Customs, and the Inland Revenue Department. This closes a longstanding corporate-opacity gap that prior FATF and APG assessments had flagged, and the confidence in this development is high, corroborated by both the primary Act text and independent professional-services reporting.
Virtual asset service providers entered the AML perimeter without a licensing regime to match. The Financial Transactions Reporting (Amendment) Act, No.17 of 2026 classifies VASPs as financial businesses subject to AML/CFT obligations, the first Sri Lankan statute to name VASPs at all. No prudential licensing or supervisory authorisation regime accompanies this classification. Separately, the Sri Lanka Cabinet approved drafting a dedicated VASP licensing law, with the Securities and Exchange Commission recommended as lead regulator working alongside the Central Bank, the Financial Intelligence Unit and the Inland Revenue Department. FATF Recommendation 15/Travel Rule technical assistance was delivered to Sri Lanka's VASP Sub-Committee in August 2026, signalling this is an active drafting priority rather than a dormant proposal, though the licensing law itself remains at the Cabinet-approval and drafting stage with no gazetted text yet available.
Cross-Monitor Connections
The VASP AML-recognition development is a direct nexus point with the crypto-focused monitor: the same Financial Transactions Reporting Act amendment that this brief treats as an AML architecture change is, from a digital-assets lens, the first-ever statutory touchpoint for virtual assets in Sri Lankan law, and the same Cabinet-approved licensing drafting process and Travel Rule technical assistance recur there as the central pending-framework story. The beneficial-ownership register development also intersects with payments-infrastructure monitoring to the extent that corporate transparency underpins counterparty due diligence for payment-services licensing, though no direct payments-infrastructure claim was surfaced this cycle to substantiate that link further.
Outlook
The determinative event to watch is the third APG/FATF Mutual Evaluation, with a report expected for APG plenary adoption around July 2027. Because the evaluation applies FATF's revised effectiveness-weighted methodology, the 2025-2026 legislative package's legal existence will not by itself avoid a grey-list outcome; implementation effectiveness, including whether the beneficial-ownership register is genuinely used and whether VASP AML obligations translate into supervised practice, will be tested directly. A second item to watch is whether the Cabinet-approved VASP licensing law is enacted before the Mutual Evaluation concludes, which would close the current gap between AML recognition and prudential supervision of virtual asset businesses.
14 Sep 2026 · fim-2026-08-21
Lead Signal
The most consequential financial-integrity development in Sri Lanka this cycle is structural rather than punitive: the Companies (Amendment) Act No. 12 of 2025 and the Companies (Beneficial Ownership) Regulation No. 1 of 2026 came into force on 30 March 2026, introducing a 10% beneficial-ownership disclosure threshold and an effective-control test administered through a dedicated Registrar of Companies portal, covering Sri Lankan-registered companies including offshore and overseas-registered entities. This is a High-confidence, Tier-1-sourced change that materially narrows a corporate-opacity gap long flagged in prior FATF and APG evaluations, and it lands directly ahead of the third APG and FATF mutual evaluation of Sri Lanka, which formally commenced in March 2026 under the FATF revised effectiveness-focused methodology, with an on-site visit scheduled for October 2026 and mutual evaluation report adoption expected at the APG AGM in July 2027. Officials frame avoiding a third grey-listing as an existential compliance priority, and the timing of the beneficial-ownership regime commencement -- barely six months before the on-site visit -- reads as a deliberate architecture-first response ahead of assessment rather than an enforcement action responding to a specific incident.
Other Developments
A proposed virtual-asset framework moves toward the drafting stage. The Deputy Minister of Digital Economy presented the apex AML body of Sri Lanka with a first virtual-asset regulatory framework proposal in February 2026, intended to license and supervise virtual-asset service providers and introduce travel-rule-equivalent information-sharing requirements. Sri Lanka remains rated only partially compliant with FATF Recommendation 15 because no VASP is currently licensed or supervised, and this Assessed-confidence development represents a shift from a wholly unregulated posture toward a proposed governance structure, though no licensing regime is yet operative. A parallel Cabinet-approved measure from June 2026 would require public officials to declare cryptocurrency and blockchain holdings, an anti-corruption and transparency signal that sits alongside the VASP proposal. This measure also carries an anti-corruption dimension that cross-references to the WDM state-capture monitor remit, insofar as undisclosed digital-asset holdings by public officials raise a transparency question distinct from the AML/CFT licensing question proper.
The 2024/25 National Risk Assessment reframes the threat profile of Sri Lanka. The NRA rates drug trafficking as High risk and fraud and trade-based money laundering as Medium-High, reflecting the continuing function of Sri Lanka as an Indian Ocean narcotics transshipment corridor linking Golden Crescent and Golden Triangle routes. These findings feed a new National AML/CFT/CPF Policy for 2026-2030. This is Assessed-confidence, secondary-sourced reporting of what is understood to be a primary NRA document not directly retrieved this cycle.
The Colombo Port City Special Economic Zone is flagged, at Low confidence, as a possible enabler-jurisdiction risk vector. Displaced Philippine Offshore Gaming Operator networks are reportedly relocating toward Sri Lanka, including the Port City SEZ, whose distinct legal framework is raised by regional analysts as a potential structuring loophole for online-gambling-linked financial flows. This rests on a single Tier-3 source and has not yet been corroborated by a Tier-1 or Tier-2 source; it is a watch-list signal, not an established finding.
Cross-Monitor Connections
The Colombo Port City SEZ enabler-jurisdiction signal connects directly to the gambling-sector enforcement activity tracked by the advennt monitor this cycle, where Sri Lankan telecommunications authorities ordered large-scale blocking of unlicensed offshore gambling platforms; the financial-integrity reading of that same underlying development is the laundering-structuring risk posed by displaced operator networks relocating into a distinct-legal-framework SEZ, rather than the licensing-enforcement question itself. The proposed virtual-asset framework and the FATF Recommendation 15 partial-compliance rating also intersect with coverage by the world-payments monitor of the domestic payments infrastructure buildout in Sri Lanka, insofar as any future VASP licensing regime will need to interoperate with the Central Bank-supervised payment-systems perimeter. Architecture-over-incident framing is warranted here: the beneficial-ownership regime and the pending mutual evaluation are structural developments that outweigh any single enforcement action in analytical significance this cycle, and CTF and CPF signal remains comparatively under-represented against the AML-heavy corpus, consistent with the general observation that AML enforcement volume structurally crowds out CTF and CPF visibility.
Outlook
The immediate horizon item is the APG on-site visit scheduled for October 2026, with the mutual evaluation report expected for adoption at the APG AGM in July 2027; the durability of the beneficial-ownership regime and its practical enforcement, including phased transition deadlines and portal uptake, will be a central input to that assessment. The progression of the proposed virtual-asset framework from proposal to drafting stage is the second horizon item to watch, given the continuing partial-compliance rating of Sri Lanka under FATF Recommendation 15. The Colombo Port City SEZ signal remains the least-corroborated item in this cycle corpus and warrants a dedicated primary-source search before it can be upgraded from a Low-confidence watch item to an assessed finding.