Swiss AML and KYC Requirements for Companies: A Practical Guide

Swiss AML compliance is often described as an obstacle. It is more accurately described as a well-defined legal architecture, with precise obligations assigned to precise categories of actor. This article explains who is obligated to do what, under which law, and what it means concretely for a Swiss company — from beneficial owner registration to domiciliation compliance.

For the practical document checklist — what to prepare for bank or fiduciary KYC — see the companion article: KYC Requirements for a Swiss Company.

The Swiss AML Framework — Three Layers

Swiss AML law operates across three distinct legal sources, each with a different scope and enforcer:

1. AMLA — Federal Act on Combating Money Laundering and Terrorist Financing (Geldwäschereigesetz / GwG). The foundational federal statute, in force since 1998, substantially amended in 2016 to align with FATF Recommendations and again in 2023 (mandatory beneficial owner register for listed companies). AMLA defines who is a “financial intermediary,” what customer due diligence (CDD) obligations they carry, and what must be reported to the Money Laundering Reporting Office Switzerland (MROS).

2. FINMA ordinances and circulars. FINMA (the Swiss Financial Market Supervisory Authority) issues sector-specific implementing regulations for the financial intermediaries it supervises directly — banks, fund managers, securities firms, and FINMA-supervised fiduciaries. These go beyond the AMLA minimum and include risk-classification requirements, transaction monitoring rules, and enhanced diligence triggers.

3. Swiss Code of Obligations (CO) — corporate law obligations. Separate from AMLA, the CO imposes direct obligations on Swiss companies: the shareholder register (Art. 686 CO for AG, Art. 790 CO for GmbH), the beneficial owner declaration (Art. 697j CO for AG, Art. 790a CO for GmbH), and the beneficial owner register maintained by the company itself (Art. 697l CO). These are commercial law requirements, not AML law — but they feed into the KYC process that banks and fiduciaries conduct.

Who Is an “Obligated Party” Under Swiss AML Law

AMLA does not apply equally to all Swiss entities. It distinguishes sharply between two categories:

Financial intermediaries (intermédiaires financiers / Finanzintermediäre). These are entities whose business involves managing, transferring, or holding assets on behalf of others — banks, asset managers, fiduciaries, lawyers and notaries in certain activities, and domiciliation service providers (Art. 119 AMLA). They carry the full weight of AMLA obligations: customer identification, beneficial owner identification, ongoing transaction monitoring, record-keeping for 10 years, and mandatory reporting to MROS.

Ordinary operating companies. A standard Swiss GmbH or AG that conducts commercial operations — consulting, trading, holding investments — is not directly subject to AMLA. It is not required to conduct CDD on its own clients in the AMLA sense. However, it is subject to the CO beneficial owner obligations described above, and it will be subject to KYC requirements imposed by its banks and fiduciaries as a condition of service.

The practical consequence: your Swiss company does not do AML compliance — your domiciliation provider, bank, and fiduciary do it, on you.

The Role of the Domiciliation Provider — Art. 119 AMLA

What Art. 119 Requires

Art. 119 AMLA classifies domiciliation service providers as financial intermediaries. A “domiciliation service” for AMLA purposes means providing a company with a registered address and related services (mail handling, representation) as a business activity — which is exactly what a virtual office provider does.

As a financial intermediary under Art. 119, a compliant domiciliation provider must:

• Verify the identity of all clients (including beneficial owners) before establishing the relationship
• Identify the beneficial owner (UBO) of the company and verify their identity
• Assess the purpose and nature of the business relationship
• Monitor the relationship on an ongoing basis for unusual activity
• Maintain all identification records for at least 10 years
• File a suspicious activity report with MROS if there are grounds for suspicion of money laundering or terrorist financing

Domiciliation providers that are not KYC-compliant expose their clients to risk: banks will refuse to accept a domiciliation certificate from a non-compliant provider, and the company may be required to change its domicile.

Why This Matters for Your Company

When a KYC-compliant domiciliation provider issues a signed domiciliation certificate, it signals to the bank that a regulated financial intermediary has already verified the client’s identity and beneficial ownership. Swiss banks treat this as meaningful — not as a rubber stamp, but as a first-layer verification by a licensed professional.

This is why the fiduciary-signed domiciliation certificate is specifically requested during bank account opening. The bank is not simply confirming the company’s address — it is confirming that the company’s address is held by a regulated fiduciary intermediary that has already conducted CDD.

Beneficial Owner (UBO) Obligations for Swiss Companies

The CO imposes direct beneficial owner obligations on Swiss companies, independent of AMLA. These apply regardless of whether the company is a financial intermediary:

Declaration obligation (Art. 697j CO for AG, Art. 790a CO for GmbH): Any shareholder who acquires 25% or more of the voting rights (AG) or share capital (GmbH) must declare the beneficial owner — the natural person who ultimately owns or controls those shares — to the company within 30 days of acquisition. If the shareholder is itself a company, the chain must be traced to the natural person(s) at the top.

Beneficial owner register (Art. 697l CO): The company must maintain a register of all declared beneficial owners, kept for 10 years. This register is not public — it is not filed with the commercial register. However, it must be made available to the company’s bank and fiduciary on request, and to Swiss authorities in the context of a legal proceeding or investigation.

2023 reform — listed companies: The 2023 reform introduced a requirement for listed Swiss AG to declare their beneficial owners to the commercial register (public register). For non-listed AG and GmbH — which covers the vast majority of Swiss companies — the internal register under Art. 697l CO remains the required mechanism. No public filing is required.

What Banks Verify — and Why They Run Their Own Process

Swiss banks are FINMA-supervised financial intermediaries. They carry their own AMLA obligations independently of any CDD already conducted by the company’s fiduciary or domiciliation provider. This is why opening a Swiss business account triggers its own separate KYC process — the bank cannot and does not simply rely on what others have done.

Banks apply a risk-based approach mandated by Art. 6 AMLA and FINMA Circular 2016/7 (Video and Online Identification). All clients are initially classified, and the level of due diligence scales with the risk:

	Standard Due Diligence	Enhanced Due Diligence (Art. 6 para. 2 AMLA)
Triggers	Normal business relationships	PEPs, high-risk countries (FATF grey/black list), complex structures, high-value transactions, unusual patterns
Additional requirements	Standard document checklist	Source of wealth declaration, senior management approval, face-to-face or video identification, reference letters
Timeline	48 hours to 2 weeks	2–8 weeks or more, depending on complexity
Ongoing monitoring	Annual review	More frequent review, transaction alerts

Enhanced due diligence does not mean rejection. Many fully legitimate companies — including holdings, crypto-related businesses, and companies with shareholders from FATF-monitored jurisdictions — are accepted by Swiss banks after an enhanced process. The key is providing complete, coherent documentation upfront.

FATF, Grey Lists, and Practical Impact

Switzerland is a member of the Financial Action Task Force (FATF) and integrates its recommendations directly into AMLA and FINMA regulations. The FATF maintains two country lists that directly affect Swiss banking relationships:

Grey list (jurisdictions under increased monitoring): Countries that have committed to address strategic deficiencies but have not yet fully done so. Shareholders or beneficial owners with citizenship or residence in grey-listed countries trigger enhanced due diligence at Swiss banks — additional documentation is required, and review time increases. As of 2025, examples include certain countries in the Middle East, Africa, and Asia. The FATF list updates periodically.

Black list (high-risk jurisdictions subject to call for action): Countries with significant AML/CFT deficiencies where FATF calls on members to apply countermeasures. Swiss banks typically decline to open accounts for companies with beneficial owners from black-listed jurisdictions. As of 2025, this list is limited (North Korea, Iran, Myanmar).

Connecting either list to your company does not automatically result in refusal — but it does require a fully prepared dossier and a bank willing to apply enhanced diligence. Not all Swiss banks will.

Related: KYC Requirements for a Swiss Company — Document Checklist | How to Open a Swiss Bank Account for Your Company | Virtual Office Zug: Complete Guide | Can a Foreigner Open a Swiss Company? | Swiss Company Domiciliation

Frequently Asked Questions

Is a Swiss GmbH required to register with FINMA?
No. An ordinary commercial GmbH or AG is not a FINMA-regulated entity and does not register with FINMA. FINMA regulation applies to financial intermediaries — banks, asset managers, insurance companies, payment service providers, and similar. A standard operating or holding company is regulated by the commercial register and cantonal tax authority, not FINMA.

What is MROS and when must suspicious activity be reported?
MROS is the Money Laundering Reporting Office Switzerland, the Swiss FIU (Financial Intelligence Unit) operating under the Federal Office of Police. Reporting to MROS is mandatory for financial intermediaries (banks, fiduciaries, domiciliation providers) when they have reasonable grounds to suspect that assets involved in a business relationship are connected to money laundering or terrorist financing, or originate from a criminal offence. Ordinary companies are not directly required to report to MROS — their reporting obligation runs through their bank or fiduciary.

Does Swiss AML law apply to crypto or digital asset companies?
Yes. Virtual asset service providers (VASPs) operating in Switzerland — exchanges, wallet providers, token issuers — are classified as financial intermediaries under AMLA and subject to FINMA oversight. A Swiss company that merely holds crypto as a treasury asset or investment is not a VASP and is not directly subject to AMLA for that activity. However, its bank will apply enhanced due diligence to any crypto-related activity and may decline the relationship.

What triggers “enhanced due diligence” at a Swiss bank?
The main triggers under Art. 6 para. 2 AMLA and FINMA Circular 2016/7 include: politically exposed persons (PEPs) as shareholders or beneficial owners; shareholders or beneficial owners from FATF grey or black listed countries; complex or opaque corporate structures; business activities classified as higher risk (crypto, arms, adult content, gambling); unusually large or complex transactions relative to the declared business purpose; and lack of clear economic rationale for the Swiss domicile.

How long must a Swiss company keep KYC and UBO records?
The beneficial owner register under Art. 697l CO must be kept for 10 years after the relationship ends (i.e., after the shareholder exits or the company dissolves). Banks and fiduciaries, as regulated financial intermediaries, must keep their own CDD records for 10 years from the end of the business relationship. These retention periods are separate — both run concurrently but independently.

{
“@context”: “https://schema.org”,
“@type”: “FAQPage”,
“mainEntity”: [
{“@type”: “Question”,”name”: “Is a Swiss GmbH required to register with FINMA?”,”acceptedAnswer”: {“@type”: “Answer”,”text”: “No. An ordinary commercial GmbH or AG is not a FINMA-regulated entity. FINMA regulation applies to financial intermediaries — banks, asset managers, insurance companies, and similar. A standard operating or holding company is regulated by the commercial register and cantonal tax authority, not FINMA.”}},
{“@type”: “Question”,”name”: “What is MROS and when must suspicious activity be reported?”,”acceptedAnswer”: {“@type”: “Answer”,”text”: “MROS is the Money Laundering Reporting Office Switzerland, the Swiss Financial Intelligence Unit. Reporting is mandatory for financial intermediaries when they have reasonable grounds to suspect assets are connected to money laundering. Ordinary companies report through their bank or fiduciary.”}},
{“@type”: “Question”,”name”: “Does Swiss AML law apply to crypto or digital asset companies?”,”acceptedAnswer”: {“@type”: “Answer”,”text”: “Virtual asset service providers operating in Switzerland are financial intermediaries under AMLA and subject to FINMA oversight. A company that merely holds crypto as a treasury asset is not a VASP, but its bank will apply enhanced due diligence to crypto-related activity.”}},
{“@type”: “Question”,”name”: “What triggers enhanced due diligence at a Swiss bank?”,”acceptedAnswer”: {“@type”: “Answer”,”text”: “Main triggers include: PEPs as shareholders or beneficial owners; shareholders from FATF grey/black listed countries; complex corporate structures; higher-risk business activities (crypto, gambling); unusually large transactions; and lack of clear economic rationale for the Swiss domicile.”}},
{“@type”: “Question”,”name”: “How long must a Swiss company keep KYC and UBO records?”,”acceptedAnswer”: {“@type”: “Answer”,”text”: “The beneficial owner register under Art. 697l CO must be kept for 10 years after the relationship ends. Banks and fiduciaries must keep their own CDD records for 10 years from the end of the business relationship. Both retention periods run independently.”}}
]
}