Do I Need to Register My Business with the FIC?
If you run a small or medium business in South Africa, you may have heard the term "FIC registration" and wondered whether it applies to you. The Financial Intelligence Centre (FIC) is the country's anti-money-laundering (AML) authority, and certain categories of business are legally required to register with it, report suspicious transactions, and meet ongoing compliance obligations. This article explains how the FIC defines those categories and what registration involves.
> Disclaimer: This article is general information based on published Financial Intelligence Centre guidance and the Financial Intelligence Centre Act (FICA). It is not legal advice. For your specific situation — including whether your business qualifies as an Accountable Institution — consult a qualified attorney or compliance specialist.
---
What Is the FIC and Why Does It Exist?
The Financial Intelligence Centre was established under the Financial Intelligence Centre Act (FICA) to detect and prevent money laundering, terrorist financing, and related financial crimes. It does this partly by requiring certain businesses — called Accountable Institutions — to collect customer information, monitor transactions, and report suspicious or unusual activity through the FIC's online platform, goAML.
You can read the FIC's own guidance on its obligations framework at fic.gov.za.
---
What Is an Accountable Institution?
This is the central question for most SME owners. An Accountable Institution is a business or professional that falls within Schedule 1 of FICA. The schedule is detailed, but the categories most commonly relevant to South African SMEs include:
- Attorneys — when receiving, holding, or paying out funds on behalf of clients
- Estate agents — involved in the buying or selling of immovable property
- Accountants and auditors — when performing certain financial or transactional services
- Motor vehicle dealers — selling vehicles above the prescribed threshold
- Krugerrand dealers and high-value goods dealers — dealing in certain precious metals or stones
- Credit providers — registered under the National Credit Act
- Banks, insurers, and other financial institutions — including money transfer and foreign exchange services
- Trust and company service providers — forming companies or acting as nominee directors
- Tax practitioners — in certain transactional roles
- Crypto asset service providers — added in recent amendments
This list is not exhaustive. The full Schedule 1 is published in FICA and updated by regulation. If your business type is not immediately obvious in the list above, the safest approach is to check directly at fic.gov.za or consult a qualified compliance adviser.
---
What If I Am Not an Accountable Institution?
FICA also defines a category called Reporting Institutions (Schedule 3), which have a narrower obligation: they must report cash transactions above a prescribed threshold but do not carry the full compliance programme requirements of Accountable Institutions. Businesses not in either schedule still have a general obligation under South African law not to facilitate money laundering, but they are not required to register with the FIC or implement a full FICA compliance programme.
---
What Does FIC Registration Actually Involve?
If your business is an Accountable Institution, registration is done through the FIC's goAML web portal. Here is a general overview of what the process covers, based on FIC published guidance:
- Create a goAML account. The responsible party (typically the business owner or designated compliance officer) registers the organisation on the goAML platform at goaml.fic.gov.za.
- Register the institution. You submit details about the legal entity, its nature of business, and the individuals responsible for compliance.
- Appoint a Compliance Officer. FICA requires Accountable Institutions to appoint a responsible person to oversee the compliance function. For many SMEs, this is the owner themselves.
- Implement a Risk and Compliance Programme (RCP). This includes a written risk assessment, customer due diligence (CDD) procedures, record-keeping practices, staff training, and internal controls. The FIC publishes guidance notes to assist with this — see the FIC guidance notes library.
- Submit required reports. Depending on your institution type, these may include Cash Threshold Reports (CTRs), Suspicious and Unusual Transaction Reports (SUTRs), and Terrorist Property Reports (TPRs), all submitted through goAML.
---
Common Questions SME Owners Ask
"I am a sole proprietor — does FICA still apply?" The Schedule 1 categories are defined by the *nature of the business activity*, not the legal form of the entity. A sole-proprietor attorney or estate agent would still be an Accountable Institution.
"My business is very small. Is there a size exemption?" FICA does not provide a general small-business exemption from the Accountable Institution obligations. Thresholds exist for certain reporting (for example, cash transaction reporting), but the registration and compliance programme obligations apply regardless of business size if you fall in Schedule 1.
"What happens if I do not register?" Non-compliance with FICA carries significant penalties. Rather than speculate on enforcement outcomes, the FIC's published enforcement actions and penalty framework are available at fic.gov.za. Consult a qualified adviser if you are uncertain about your position.
"How does this relate to POPIA?" FICA compliance involves collecting, storing, and processing personal information about customers — which means your POPIA obligations under the Protection of Personal Information Act run in parallel. For instance, POPIA's requirements around collection notification, security safeguards, and retention periods all interact with your FICA record-keeping duties. These two compliance frameworks are separate but overlapping.
---
A Practical Starting Point
If you are unsure whether your business needs to register with the FIC, here is a reasonable starting path:
- Check Schedule 1 of FICA — the full text is available through the FIC website and South African government gazette.
- Read the relevant FIC Guidance Note for your industry — the FIC has published sector-specific guidance for estate agents, attorneys, motor dealers, and others.
- Seek qualified legal or compliance advice before concluding you are not an Accountable Institution. The consequences of getting this wrong are material.
- If you are in scope, register on goAML promptly — the FIC has been active in outreach and enforcement, and voluntary early compliance is treated more favourably than non-compliance discovered during supervision.
---
Summary
FIC registration is a legal requirement for businesses that fall within Schedule 1 of FICA as Accountable Institutions. The categories cover a wide range of professional and financial service providers common among South African SMEs — from attorneys and estate agents to credit providers and crypto asset service providers. Registration is done through the goAML platform and triggers obligations around customer due diligence, record-keeping, and transaction reporting.
If your business touches financial transactions in a professional or intermediary capacity, it is worth taking the time to check your status carefully.
> Disclaimer: This article is general information based on published Financial Intelligence Centre guidance and the Financial Intelligence Centre Act. It is not legal advice. The FIC compliance landscape is updated regularly by regulation and guidance note. For advice on your specific business situation, consult a qualified attorney or FICA compliance specialist.