Zambia ZM

Zambia is not a party to the EU AML Package and sits outside its supervisory perimeter; the directly relevant beneficial-ownership development this cycle is domestic. In January 2026, the corporate registrar PACRA launched a partnership with Open Ownership and GIZ to digitise Zambia's beneficial-ownership data collection, with the stated goal of building toward a public, economy-wide beneficial-ownership register. Legislative amendments needed to complete the reform have cabinet-in-principle approval and IMF technical support, but remain subject to further consultation before they can be tabled. This is assessed rather than confirmed: the finding rests on a single Tier-2 project-announcement source, and no independent Tier-1 PACRA statement was located this cycle to corroborate the pace or scope of the legislative track.

Standing context: globally, the EU AML Package — comprising the directly applicable AML Regulation (Reg (EU) 2024/1624), the sixth AML Directive transposed per Member State, and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority — is shifting EU-level beneficial-ownership and corporate-transparency supervision from a purely national model toward a hybrid EU-level regime with AMLA holding direct and indirect supervisory reach over cross-border obliged entities. Zambia's reform sits entirely outside that architecture; it is a domestically-driven registry-digitisation project with IMF and NGO technical support, not an AMLA-adjacent development, and the EU architecture is noted here only as durable global backdrop against which Zambia's own, much earlier-stage transparency reform should be read.

Outlook

The next material marker is whether the cabinet-approved legislative amendments clear consultation and reach Parliament. Until that happens, Zambia's beneficial-ownership regime remains a project-stage digitisation effort rather than a statutory public register, and this sub-brief will remain limited-signal until a Tier-1 legislative or PACRA source becomes available.

The directly relevant development for Zambia's digital-asset perimeter this cycle is domestic and specific: the Bank of Zambia has directed all entities and individuals providing virtual or crypto-asset services to Zambian users — whether resident in Zambia or not — to register with the central bank, with registration due by 27 March 2026. From 30 March 2026, Bank of Zambia-regulated financial institutions are prohibited from processing transactions to or from virtual-asset service providers that are not registered with the central bank. This combination — a registration mandate paired with a transaction-blocking backstop enforced through the regulated banking sector rather than through direct sanction of the unregistered provider — is a materially significant new AML/CFT control point for crypto flows touching Zambia, assessed at Assessed confidence on the strength of two independent Tier-3 sources, though no directly retrievable Tier-1 Bank of Zambia press text was located this cycle.

The mandate's reach is extraterritorial in practical effect: because it captures non-resident providers serving Zambian users regardless of physical presence, a virtual-asset business with no Zambian office or incorporation can nonetheless fall within its registration requirement the moment it serves a Zambian user base. That is a meaningfully different enforcement posture from a purely domestic licensing regime, and it means the transaction-blocking backstop functions as the practical enforcement lever — Bank of Zambia-regulated banks and payment institutions become the choke point through which the registration requirement is made to bite.

What the directive does not yet do is establish a full licensing and supervisory framework. Both the registration mandate and the transaction-blocking backstop are explicitly interim, and a fuller regulatory framework is understood to require further consultation before it takes shape. That leaves a genuine gap in the picture — this cycle's assessment cannot characterise what the fuller framework will require of registered providers, or what supervisory powers the Bank of Zambia will exercise once it moves beyond registration.

This directive should also be read against the backdrop of Zambia's broader 2026 financial-sector consolidation. The Banking and Financial Services Act, 2026 brings e-money and fintech oversight under a single Bank of Zambia licensing, reporting and enforcement framework with express AML/CFT/CPF compliance-monitoring provision, and the National Payment System Act, 2026 reforms the payment-service-provider authorisation regime that underpins how value moves through Zambia's formal financial system. Virtual-asset service providers registered under the interim crypto directive do not appear, on this cycle's evidence, to be folded into either of those frameworks yet; whether the eventual fuller crypto framework converges with, or remains parallel to, the broader BFSA/NPSA supervisory architecture is an open structural question rather than a settled one.

Framed against the three-pillar AML/CTF/CPF standard, the directive as evidenced this cycle is squarely AML/registration-facing; no CTF- or CPF-specific provision within the crypto directive was identified, and that pillar gap should be tracked rather than assumed resolved by the registration mandate alone. Equally, the absence — so far — of any reported enforcement action against a non-registering provider is itself worth surfacing explicitly: enablement through non-enforcement in the run-up to the 30 March 2026 blocking deadline would be as analytically significant as an enforcement action would be.

Outlook

The central question carrying into the next cycle is whether the Bank of Zambia's promised fuller regulatory framework begins to take shape following consultation with now-registered providers, or whether the interim registration-and-blocking mechanism becomes the standing regime by default. A second thread worth tracking is whether a Tier-1 Bank of Zambia primary source becomes retrievable, since the current assessment rests entirely on secondary Tier-3 reporting. Until either resolves, Zambia's crypto AML/CFT control point should be read as real but provisional.

Zambia's 2026 legislative calendar delivered two structurally significant instruments bearing on the country's AML/CFT regime. The Banking and Financial Services Act, 2026 (Act No. 9) repeals the 2017 Banking and Financial Services Act and the Money-lenders Act, consolidating banking, microfinance, moneylending and e-money/fintech oversight under a single Bank of Zambia licensing, reporting and enforcement regime, with express provision for monitoring AML/CFT/CPF compliance across the financial service providers now captured within it. The National Payment System Act, 2026 (Act No. 5) repeals and replaces the 2007 National Payment Systems Act, reforming the Bank of Zambia's payment-service-provider authorisation regime. Read together, assessed at Assessed confidence on Tier-1 parliamentary sourcing, these two instruments broaden the population of entities subject to Bank of Zambia AML/CFT/CPF oversight relative to the prior fragmented regime of separate banking, moneylending and payments statutes.

This is architecture, not incident, and it should be read as such: the descriptive baseline of Zambia's AML/CFT regime is not reported as changed this cycle. What has changed is the supervisory perimeter around that baseline: a broader set of financial-service providers, including fintech and e-money issuers previously supervised under a more fragmented set of instruments, now sits within a single Bank of Zambia licensing, reporting and enforcement framework that expressly monitors AML/CFT/CPF compliance.

Applying the three-pillar standard, the evidenced consolidation is presented as an AML-pillar-facing structural reform — the express compliance-monitoring provision is framed generally around financial-service-provider oversight — and no distinct CTF- or CPF-specific provision within the consolidation was separately identified this cycle. That is worth naming explicitly rather than assuming by implication that CTF and CPF oversight strengthened in lockstep with the AML-facing consolidation; three-pillar balance requires treating the absence of a distinct CTF/CPF signal as a gap, not as a null result.

The commencement timeline carries its own uncertainty. The Banking and Financial Services Act, 2026 is expected to reach fuller operational effect around the third quarter of 2026, on a half-year uncertainty band; until that point, the practical scope of the broadened obliged-entity population remains to be demonstrated rather than assumed. The instrument itself is adopted and Tier-1 sourced; its operational bite is not yet.

Outlook

The central marker for the next cycle is the Banking and Financial Services Act's move toward fuller commencement in the third quarter of 2026, and whether Bank of Zambia supervisory guidance begins to specify how the broadened AML/CFT/CPF compliance-monitoring provision will be operationalised across the newly consolidated obliged-entity population. A second thread is whether Bank of Zambia begins issuing consolidated AML/CFT/CPF supervisory guidance specific to the newly captured fintech and e-money population, since the current evidence base establishes the statutory consolidation but not yet its supervisory implementation detail. Whether the twin 2026 statutory overhauls produce visible enforcement activity, or whether the consolidation period passes without reported enforcement action, will itself be an analytically significant signal about how the Bank of Zambia is choosing to operationalise its broadened mandate.