Zambia ZM

The position of Zambia within the global sanctions architecture is peripheral by structure rather than by the outcome of any single case: the jurisdiction carries no designation under the EU, OFAC, OFSI or UN sanctions regimes, a status unchanged this cycle. That structural absence sits within a shifting regional field that a purely bilateral designation-count metric would miss. The December 2025 update by the European Commission to the EU list of high-risk third countries, given effect through Delegated Regulation (EU) 2026/83, left Zambia unlisted while simultaneously delisting regional neighbours Mozambique, Tanzania and South Africa. Under the three-level sanctions-architecture analysis this monitor applies, scheme, architecture, and strategic consequence, there is no scheme directly implicating Zambia in this delisting round, but the architecture-level effect is a narrowing of the regional high-risk cohort around Zambia, which shifts comparative correspondent-banking and enhanced-due-diligence risk perception for the trade corridors on which Zambia depends for copper exports, without any Zambia-specific action having been taken.

A second architecture-level signal this cycle is the sharp divergence between the sanctions-regime exposure of Zambia and that of its immediate neighbour. Zimbabwe remains subject to an active US Global Magnitsky programme, with re-designations as recently as March 2024, while Zambia carries none of the four major-regime designations. The strategic consequence of this asymmetry, under the F2 filter, is elevated enhanced-due-diligence friction for regional banking corridors that transit through Zambia to or from Zimbabwe: correspondent banks operating across the corridor must reconcile a designated counterpart jurisdiction against an undesignated transit jurisdiction, a friction that is itself a form of architecture even absent any enforcement action against Zambia. The enabler-jurisdiction dimension of sanctions-architecture assessment also applies here in a limited but real sense: Zambia does not function as an enabler of sanctions evasion on evidence available this cycle, but its position astride a regional corridor connecting a non-designated jurisdiction to a jurisdiction under active US Global Magnitsky sanctions means that its own designation-free status does not translate into designation-free risk for banks operating in the corridor.

A third item is a verification gap rather than a substantive finding: non-listing of Zambia under the Money Laundering Regulations High-Risk Third Country framework of the UK was inferred this cycle from historical alignment with FATF and EU lists, rather than independently re-pulled from gov.uk sources. The UK HRTC list is maintained independently of the FATF and EU mechanisms and can diverge from them; this baseline flags the inference as an evidentiary gap requiring direct re-verification next cycle rather than asserting confirmed non-listed status.

For context, Zambia is not identified as a transit or intermediary jurisdiction for the Russian sanctions-evasion architecture tracked elsewhere by this monitor: as a landlocked economy with shallow capital markets and no maritime or insurance nexus, Zambia is structurally peripheral compared to coastal or Gulf and Central Asian intermediary hubs, with residual indirect exposure via Chinese-linked trade financing rather than any direct evasion-routing role.

None of the findings above amounts to a change in the substantive designation status of Zambia. What has changed, or rather what this baseline newly documents, is the surrounding architecture: a regional EU list recalibration that leaves Zambia comparatively more exposed by omission, a persistent designation asymmetry with Zimbabwe that generates corridor-level friction, and an unresolved verification gap in the UK list framework. Each of these is a second-order effect of decisions taken elsewhere rather than a first-order Zambia-specific action, consistent with the peripheral profile of Zambia within the major sanctions-designation architectures generally.

Outlook

The most consequential near-term sanctions-architecture event for Zambia is not a Zambia-specific designation risk but the October 2026 Plenary review by FATF of Increased Monitoring list composition, which will re-test whether the continued absence of Zambia from that list remains warranted given its unresolved technical-compliance gaps. A second item worth tracking is whether the regional recalibration trend of the EU high-risk-third-country mechanism, this cycle delisting Mozambique, Tanzania and South Africa, continues in subsequent review rounds, which would further concentrate comparative-risk attention on jurisdictions, including Zambia, that were not delisted alongside their neighbours. The UK HRTC verification gap should be closed directly against gov.uk sources before the next cycle, since continued reliance on inferred alignment understates the possibility that UK and EU or FATF list treatment of Zambia diverge. None of these are predictions of designation; they are the specific checkpoints against which the next-cycle sanctions-architecture assessment for Zambia should be measured.

Zambia sits entirely outside the AML Package perimeter of the European Union: it is not subject to the directly applicable AML Regulation, is not required to transpose the sixth AML Directive, and falls outside the direct or indirect supervisory reach of the Anti-Money Laundering Authority. The directly relevant beneficial-ownership and corporate-transparency developments for Zambia this cycle are domestic: the trajectory of the beneficial-ownership registry operated by the Patents and Companies Registration Agency, the compliance rate for trust beneficial-ownership disclosure, and the technical-compliance re-ratings of Zambia under the FATF Recommendations most closely tied to transparency, tested through the ESAAMLG Mutual Evaluation and follow-up process.

The registry-level picture is one of incremental, incomplete improvement. Approximately 85 percent of financial-crime investigators in Zambia still lack automated access to PACRA company data as of December 2025, even though the December 2025 UNCAC Conference of States Parties conference-room paper documents a reduction in beneficial-ownership data turnaround times from up to two weeks to under a week. An application programming interface for law-enforcement and FIU access to PACRA data is planned, which would, if delivered, materially reduce the manual-access bottleneck that currently defines investigator experience of the registry. This registry-modernisation initiative is assessed separately, and in RegTech-specific terms, under this baseline D6 sub-brief; here it is read strictly through the beneficial-ownership-transparency lens: whether the disclosure obligations themselves, not merely the technology for accessing disclosed data, are being met.

Trust beneficial-ownership disclosure represents a more structurally embedded gap than the registry-access bottleneck. Trusts in Zambia are legally required to file beneficial-ownership returns only once every five years, and the 2019 Mutual Evaluation Report found this obligation rarely observed in practice even at that infrequent cadence. This combination, an already lengthy statutory filing cycle compounded by weak observed compliance, is a textbook enabler-jurisdiction pattern under the F3 capacity-versus-choice test: currently available evidence does not establish whether the gap reflects supervisory capacity constraints or a deliberate policy choice to leave trust structures less transparent than corporate ones. The customer-typology exposure attached to this gap is concentrated in corporate and high-net-worth trust-structuring relationships, and obliged entities onboarding Zambian trust or layered corporate structures should read the infrequent filing cycle as a standing due-diligence caveat rather than a resolved control.

The ESAAMLG follow-up re-rating this cycle cuts in both directions on the technical-compliance measures most closely tied to transparency and cross-institutional coordination: Recommendation 7, covering proliferation-related targeted financial sanctions, was upgraded to partially compliant, while Recommendations 5 and 2 were downgraded to partially compliant. Zambia remains in enhanced follow-up as a result, meaning the technical-compliance trajectory, not any single re-rating, is the correct analytical unit here.

Globally, the EU AML Package sets the structural direction against which beneficial-ownership regimes worldwide are increasingly measured, even for non-EU jurisdictions such as Zambia. That package now comprises three distinct instruments: the directly applicable AML Regulation, Regulation (EU) 2024/1624; the sixth AML Directive, transposed by each Member State of the EU individually; and the AMLA Regulation, Regulation (EU) 2024/1620, which establishes the Anti-Money Laundering Authority and shifts supervision from a purely national model toward a hybrid EU-level regime in which AMLA directly supervises a defined population of high-risk cross-border obliged entities while indirectly overseeing national supervisors for the remainder. Zambia is not a subject of this architecture in any direct sense, but the durable global shift it represents, from institutional beneficial-ownership recordkeeping toward interconnected, investigator-facing, centrally supervised transparency infrastructure, is the backdrop against which the PACRA modernisation effort of Zambia should be read: a national-scale, lower-resource analogue of the same underlying thesis that automated registry access, not merely registry existence, determines whether beneficial-ownership transparency translates into usable financial-intelligence capability.

Outlook

The PACRA application-programming-interface integration is the single most consequential beneficial-ownership development to track into next cycle, since its completion timeline remains unconfirmed beyond a general 2026-to-2027 expectation window; delivery would directly address the approximately 85 percent manual-access figure that currently defines the registry-access profile of Zambia. The next enhanced follow-up review by ESAAMLG, expected in 2027, will re-test whether the Recommendation 7 upgrade holds and whether the Recommendation 2 and 5 downgrades are addressed, which is a more reliable signal of substantive transparency-regime improvement than any single re-rating taken alone. The trust beneficial-ownership filing gap is unlikely to resolve without a statutory change to the five-year filing cycle itself, an item this baseline flags for continued monitoring rather than near-term resolution. This baseline does not assume delivery of the PACRA interface within the stated window and will re-verify status directly next cycle.

The enabler-jurisdiction risk profile of Zambia centres on institutional exposure rather than deliberate policy design, and the F3 filter four-dimension test, legal framework, enforcement, capacity versus choice, and systemic significance, yields a mixed picture this cycle. On the legal-framework dimension, the underlying AML/CFT statute of Zambia, the Financial Intelligence Centre Act, together with the 2017 Companies Act, provides a reasonably developed baseline architecture. On the enforcement and capacity dimensions, however, three findings converge to depress the effective deterrent value of that architecture.

The first is supervisory: DNFBP AML/CFT supervision had not commenced at the time of the 2019 Mutual Evaluation Report, and subsequent follow-up reporting shows only partial technical-compliance progress rather than confirmed operational supervision. Lawyers, accountants and real-estate agents, the professional-facilitator population most relevant to enabler-jurisdiction analysis generally, therefore remain largely outside effective AML oversight in Zambia, a structural gap rather than an isolated case failure.

The second is institutional-design: both the Financial Intelligence Centre and the Anti-Corruption Commission have presidentially appointed board leadership, an arrangement that creates structural exposure to political interference in high-level corruption cases regardless of the individual officeholders involved. This is not a hypothetical concern this cycle: the entire board of the Anti-Corruption Commission was dissolved by the President in July 2024, following allegations that Commission management was corrupt and inactive on major FIU-flagged suspicious-transaction cases. The underlying capture allegations were not independently resolved in the public reporting reviewed this cycle, and the reconstitution status and outcome of the replacement board remain unverified. A related, lower-confidence episode reinforces the same theme: a former Finance Ministry official reported alleged retaliation in 2025 for raising concerns about misuse of government funds under the stated zero-tolerance anti-graft pledge of the Hichilema administration, with no public government response recorded. Individually these are episodic data points; together, under the F1 state-capture filter, they describe a recurring pattern of institutional vulnerability to executive discretion that the architecture-over-incident principle treats as more significant than either event in isolation, while still stopping short of asserting confirmed capture absent independent prosecutorial-outcome data.

The third is transit-role: Zambia functions as a transit jurisdiction in a regional gold-smuggling corridor, moving gold smuggled from Zimbabwe through South Africa, Zambia and Mozambique toward buyers including hubs in the United Arab Emirates. This role is enabled less by deliberate facilitation than by weak customs verification capacity and limited regional financial-intelligence-unit cooperation, an enforcement-capacity gap rather than a policy choice on current evidence, though the distinction remains analytically unresolved pending further evidence.

The professional-facilitator dimension of enabler-jurisdiction risk also extends beyond the borders of Zambia itself: the copper and cobalt-adjacent transfer-pricing architecture identified in this baseline lists Switzerland and Mauritius, alongside Zambia, as the jurisdictions enabling profit-shifting through offshore trading-hub structures and related-party pricing arrangements. Under jurisdiction-and-actor-agnostic assessment, this monitor treats the enabler roles of Switzerland and Mauritius with the same analytical weight as the capacity gaps of Zambia itself: an enabler jurisdiction is assessed for what its legal and supervisory architecture permits, not solely for what it enforces, and the presence of two well-resourced financial centres among the enabling jurisdictions in this scheme indicates that facilitation here is a function of professional-intermediary structuring choices as much as of any single jurisdiction supervisory capacity.

Taken together, these findings describe an enabler-jurisdiction profile driven primarily by capacity constraints and institutional-design vulnerability rather than by an affirmative policy decision to facilitate illicit finance, though the presidentially appointed leadership structure of the two principal financial-integrity institutions of Zambia is the single most consequential design feature identified this cycle, since it conditions the credibility of enforcement outcomes across every other domain assessed.

Outlook

The clearest near-term test of the enabler-jurisdiction trajectory of Zambia is whether DNFBP supervision moves from partial technical-compliance progress to confirmed operational activity ahead of the next ESAAMLG enhanced follow-up review, expected in 2027. A second test is institutional: whether the reconstituted board of the Anti-Corruption Commission, whose composition and independence remain unverified this cycle, demonstrates functional independence from executive direction in its handling of pending suspicious-transaction referrals. A third is regional: whether financial-intelligence-unit cooperation along the Zimbabwe-Zambia-Mozambique-South Africa gold corridor improves, which would be the most direct available evidence of capacity remediation in the transit-jurisdiction finding. None of these are foregone conclusions; they are the specific evidentiary gaps this baseline has flagged for resolution.

The most systemically significant financial-integrity exposure of Zambia this cycle is extractive-sector illicit financial flows, and the architecture-over-incident principle applies here with unusual clarity: this is a persistent, multi-jurisdictional structure rather than a single enforcement case. Mining multinationals and trading intermediaries structure copper and cobalt-adjacent export contracts through offshore trading hubs in Switzerland and Mauritius, combined with related-party pricing arrangements, to shift taxable profit outside Zambia. The mechanism operates through export contracts and related-party pricing structured to understate export values or overstate deductible costs relative to international commodity benchmark pricing, a red-flag pattern most observable in trade documentation and most relevant to corporate and trade-finance customer relationships. This scheme is sustained by weak beneficial-ownership verification and customs verification capacity within Zambia rather than by any single transaction, and it directly implicates two enabling jurisdictions, Switzerland and Mauritius, alongside the role of Zambia as the target jurisdiction whose mineral-revenue base is being eroded. This finding does not distinguish between the domestic capacity constraints of Zambia and the structuring choices made by intermediaries operating through Switzerland and Mauritius; consistent with jurisdiction-agnostic assessment, both the verification gaps of the target jurisdiction and the permissive trading-hub architecture of the enabling jurisdictions are treated as co-equal structural contributors to the persistence of the scheme.

A second, structurally distinct extractive-industry-adjacent exposure is environmental-crime-linked timber trafficking. A surge in illegal Mukula rosewood harvesting feeds an informal, largely cash-based export trade to Chinese buyers, involving bribery of forestry and customs officials and fraudulent export documentation. Because this trade is conducted substantially in cash and outside the regulated financial sector, conventional suspicious-transaction-report-based detection has limited reach into it, a structural detection gap distinct from, but reinforcing, the customs-verification weaknesses that also enable the copper-sector scheme. Research on money laundering linked to environmental crime frames this pattern as part of a broader continental one, in which cash-intensive, document-fraud-enabled timber and wildlife trades systematically evade the suspicious-transaction-report architecture built around the regulated financial sector, a structural detection blind spot rather than a Zambia-specific failure.

A third, F4-relevant conflict-finance dimension connects Zambia to the regional gold-smuggling corridor already identified under the enabler-jurisdiction filter: gold smuggled from Zimbabwe transits South Africa, Zambia and Mozambique en route to buyers including hubs in the United Arab Emirates. Applying the F4 source-channel-deployment trace, the source is the informal and illicit gold-mining sector of Zimbabwe, the channel is the transit corridor exploiting weak customs verification across Zambia, South Africa and Mozambique, and the deployment point is refining and buyer markets in the United Arab Emirates. This is not, on current evidence, a conflict-finance flow in the narrow armed-conflict-financing sense within Zambia itself, but it sits within the same regional informal-extraction economy that conflict-finance analysis elsewhere in Southern Africa tracks closely, and it is flagged accordingly for cross-reference to SCEM.

The customer-typology and observability profile of these schemes is instructive for obliged entities operating trade-finance and correspondent-banking relationships tied to Zambian mineral exports: the relevant red flags are documentary rather than transactional in the narrow sense, visible chiefly in export-contract pricing terms and customs or CITES documentation rather than in account-level transaction patterns alone, a distinction with direct implications for the design of trade-finance due-diligence controls.

Taken together, these three findings, transfer-pricing erosion of the mineral-revenue base, cash-based timber trafficking, and gold-corridor transit, describe an extractive-industry integrity profile in which the common structural thread is weak verification capacity, in beneficial ownership, in customs documentation, and in cross-border cash and trade-finance monitoring, rather than three unrelated episodes.

Outlook

None of the three extractive-industry findings identified this cycle carry a defined near-term resolution horizon in currently available evidence; all three are structural and are expected to persist absent capacity investment in customs verification, beneficial-ownership verification, and regional financial-intelligence-unit cooperation. The most tractable point of leverage is the beneficial-ownership verification improvement already underway at PACRA, since improved investigator access to company ownership data bears directly on the ability to unwind related-party pricing structures used in the copper-sector scheme. Absent a dedicated customs-verification capacity initiative, the Mukula timber trade and the gold-transit corridor are likely to remain structurally resistant to detection through conventional financial-sector monitoring channels.

The digital-asset regulatory environment of Zambia is defined this cycle by absence rather than by any specific enforcement or licensing action: no dedicated virtual-asset-service-provider licensing regime and no comprehensive crypto-AML or counter-terrorist-financing framework have been published. The Bank of Zambia explored a central bank digital currency in 2022, but that exploration did not proceed into a published regulatory framework covering private virtual-asset activity, leaving Zambia without a domestic VASP-licensing perimeter, a domestic travel-rule requirement, or a domestic crypto-specific suspicious-activity reporting regime as of this baseline.

This regulatory absence is analytically significant in its own right under the enablement-as-signal principle: the absence of a published framework is not neutral, because it coincides with a regional adoption trend that is accelerating rather than static. Vendor analytics show approximately 52 percent year-on-year on-chain value growth across Sub-Saharan Africa between July 2024 and June 2025, a trend attributed to currency volatility and limited banking access, dynamics that are directly present in the kwacha-exposed economy of Zambia. Because this growth figure is vendor-analytics-sourced rather than drawn from a primary regulatory or law-enforcement source, it is treated at Assessed rather than High confidence, consistent with source-tier discipline, but the directional signal is consistent with the broader regional pattern this monitor tracks.

The F3 enabler-jurisdiction capacity-versus-choice question is explicitly unresolved for the crypto-regulatory gap of Zambia: current evidence does not establish whether the absence of a VASP framework reflects a deliberate policy choice, a genuine capacity constraint within the Bank of Zambia and any prospective financial-intelligence-unit crypto-monitoring function, or simply a lower prioritisation relative to other AML/CFT reform priorities already underway, such as the PACRA beneficial-ownership modernisation effort. What can be said with higher confidence is the trajectory: the standing tracker for the crypto and digital-asset integrity of Zambia is assessed as worsening, on the basis that regional adoption growth is outpacing regulatory development rather than the reverse.

Globally, instruments such as the Markets in Crypto-Assets framework of the EU and the virtual-asset standards of FATF set the structural direction for VASP licensing and travel-rule implementation worldwide, and they form the contextual backdrop against which any future Zambian VASP framework would likely be measured or benchmarked. But no MiCA-equivalent instrument, travel-rule requirement, or FATF Recommendation 15 implementation action specific to Zambia was identified in this cycle evidence base, and this baseline does not assert one; the directly relevant fact for the own regulatory perimeter of Zambia remains the absence documented above, not the global standard against which that absence might eventually be measured.

The affected firm-type and customer-typology profile flagged this cycle is narrow but concrete: crypto-asset operators and VASP counterparties transacting with Zambian retail users are the population most directly exposed to the absence of a domestic licensing perimeter, since neither inbound nor outbound Zambian virtual-asset activity currently passes through any jurisdiction-specific registration, travel-rule, or reporting gate. For counterparties elsewhere assessing correspondent or partnership exposure to Zambian-linked virtual-asset flows, this absence functions as a standing due-diligence caveat rather than a resolved control question. This stands in some contrast to the incremental, if incomplete, institutional-modernisation trajectory visible in the beneficial-ownership registry of Zambia this cycle; the two domains illustrate uneven reform prioritisation within the same jurisdiction, corporate-registry transparency advancing modestly while virtual-asset oversight remains, on current evidence, unaddressed.

Outlook

There is no regulatory-horizon item specific to Zambian virtual-asset licensing identified in this cycle evidence base, which is itself a data point: the forward-looking checkpoints available for this domain are regional and comparative rather than jurisdiction-specific, principally whether the on-chain value growth trend of Sub-Saharan Africa continues at a comparable pace and whether that continued growth generates pressure, from FIU capacity concerns or from correspondent-banking counterparties, for the Bank of Zambia to revisit the shelved 2022 central bank digital currency exploration or to publish a dedicated VASP framework. Absent such a trigger, this baseline expects the worsening trajectory assessed this cycle to persist into the next. This is a domain in which the absence of an enforcement record should not be read as an absence of exposure; it is, under the enablement-as-signal principle of this monitor, itself the primary finding to carry forward.

The single RegTech-relevant development identified for Zambia this cycle is the planned application programming interface for law-enforcement and financial-intelligence-unit access to PACRA beneficial-ownership data. This is a modest but concrete signal: a jurisdiction-specific implementation of a broader global thesis that automated, investigator-facing registry access materially improves the practical usability of beneficial-ownership transparency regimes, as against a status quo in which registry data exists in principle but remains difficult to query in practice. As of this baseline, approximately 85 percent of financial-crime investigators in Zambia still rely on manual access to PACRA company data, and the December 2025 UNCAC Conference of States Parties conference-room paper documents that the API initiative is intended to close that gap, alongside the turnaround-time improvements already achieved through non-technological process changes.

This finding sits at the intersection of compliance-technology assessment and beneficial-ownership assessment, and it is worth stating explicitly what distinguishes the D6 reading from the D2 reading of the same underlying fact: D2 treats the PACRA registry as a beneficial-ownership-transparency instrument and asks whether trust and corporate disclosure obligations are being met; D6 treats the same registry as a compliance-technology and active-defence instrument and asks whether the technical architecture of data access itself, independent of the underlying disclosure obligations, is fit for investigator use. On the D6 reading, the answer this cycle is qualified: turnaround-time improvement demonstrates that operational process reform is achievable even before the API is delivered, but the persistence of the 85 percent manual-access figure demonstrates that process reform alone has not yet closed the technology gap.

No other RegTech, SupTech, or active-defence development specific to Zambia was identified in this cycle evidence base; the compliance-technology profile is currently defined by this single initiative and by the technology gap it is designed to close, rather than by an active-defence or transaction-monitoring-technology finding of the kind more commonly assessed in better-resourced jurisdictions. The confidence-tier discipline applies directly here: the API initiative itself is sourced to a T1 institutional-review document and is treated as Assessed rather than High, since implementation has not yet been confirmed and the completion timeline remains unconfirmed beyond a general 2026-to-2027 expectation window.

The affected-firm-type profile for this initiative is broad rather than sector-specific: cross-sector obliged entities relying on PACRA beneficial-ownership data for corporate-customer due diligence, not solely law-enforcement and FIU users, stand to benefit indirectly if API-based access is eventually extended or if faster registry turnaround reduces onboarding friction industry-wide, though the initiative as currently scoped is described as an investigator-facing rather than an industry-facing capability. Placed in comparative context, this single Zambian initiative is a small-scale instance of a pattern this monitor tracks globally: capacity-constrained jurisdictions increasingly treat automated registry interconnection, rather than registry creation alone, as the frontier compliance-technology investment, since registries that exist on paper but require manual retrieval do not deliver the investigative speed that modern financial-crime casework requires. Whether this specific initiative, once delivered, meaningfully narrows the 85 percent manual-access figure, or merely formalises access for a subset of investigators while leaving the broader population reliant on manual retrieval, is a distinction this baseline cannot yet resolve and flags for direct assessment once implementation evidence becomes available.

Outlook

The completion timeline of the PACRA API is the single most important compliance-technology checkpoint for Zambia going into next cycle; delivery within the 2026-to-2027 expectation window would represent a concrete, verifiable improvement in investigator-facing RegTech capability, while continued delay would suggest that the turnaround-time improvements already documented represent the practical ceiling of process reform absent the technology investment. This baseline recommends no assumption of delivery in either direction; the status of the API should be independently re-verified next cycle rather than assumed complete on the basis of this cycle plans-are-underway characterisation.