AML/CFT Compliance in Belize: IFSC/FSC, MLTPA, and the 2026 Regulatory Landscape

Belize’s financial sector is at a crossroads. The Financial Services Commission (FSC), which took over from the International Financial Services Commission (IFSC) in 2023, is tightening AML/CFT rules while the country seeks to retain its reputation as a well-regulated offshore hub. Recent fines, a new VASP licensing regime, and the rollout of a central beneficial-ownership register signal that the regulator is moving from a “light-touch” approach to a more rigorous supervisory model. For banks, trust companies, and crypto-asset service providers, the next twelve months will demand concrete changes to policies, systems, and reporting practices.

The Regulatory Landscape

The backbone of Belize’s AML/CFT regime is the Money Laundering and Terrorism (Prevention) Act (MLTPA). Section 5(1) of the Act obliges all “obliged persons” - including banks, insurance companies, trust service providers, securities dealers, and VASPs - to establish internal controls, conduct risk assessments, and report suspicious activity to the FIU. The 2023 amendment added a specific offence for failure to maintain up-to-date beneficial-ownership information, aligning the law with the Beneficial Ownership Register Act 2025.

The Financial Services Commission Act 2023 (Section 12) granted the FSC expanded supervisory powers, including the ability to issue enforcement notices, impose administrative fines, and suspend or revoke licences. The Act also created a consolidated registry for licences, beneficial-ownership filings, and compliance certificates, which the FSC began operating in March 2024.

The FIU Act 2002 (Section 4) defines the FIU’s mandate to receive, analyse, and disseminate suspicious-activity reports. The FIU operates the goAML-compatible platform “FIU-Connect” and publishes quarterly guidance on filing standards. The FIU’s 2025 “SAR Timeliness Guidance” clarifies that “without undue delay” means filing within 24 hours of detection, unless a documented justification is provided.

Belize’s participation in the Caribbean Financial Action Task Force (CFATF) obliges the jurisdiction to adopt FATF-style recommendations. The most recent CFATF mutual evaluation, published in September 2024, highlighted progress on beneficial-ownership transparency but noted “persistent gaps in sanctions screening and VASP supervision”. The FSC’s 2025-2026 action plan directly addresses those gaps.

FSC Guidance and Regulatory Updates (2024-2026)

On 15 January 2025 the FSC released “Guidance Note 01 - AML/CFT Risk Management for International Financial Services”. The note expands on Section 6 of the MLTPA, requiring a documented risk-assessment methodology that distinguishes between money-laundering and terrorist-financing risks. The guidance also introduces a “risk-tiered customer-due-diligence matrix” that must be reviewed at least annually.

In June 2025 the FSC published “VASP Licensing Framework - Regulation 02”. The regulation mandates registration of all virtual-asset service providers, the appointment of a compliance officer, and the implementation of blockchain-analytics tools approved by the FIU. Non-compliance triggers a default fine of BZD 500,000 per day of continued operation without a licence, as set out in Section 9(3) of the VASP Regulation.

The 2024 amendment to the MLTPA introduced Section 14A, which creates a specific offence for “willful failure to screen against United Nations or EU sanctions”. The amendment also lowered the maximum administrative fine for a single breach to BZD 5 million (approximately US 2.5 million), a figure that was applied in the first major sanctions-screening enforcement case of 2025.

Customer Due Diligence and KYC

Belize’s CDD regime follows the three-step approach set out in Section 8 of the MLTPA: (1) identification, (2) verification, and (3) ongoing monitoring. For natural persons, verification must include a government-issued ID, proof of residential address, and, where available, a biometric check. For legal entities, the regulator requires a certified copy of the incorporation document, a list of directors, and the ultimate beneficial-owner (UBO) details as filed in the Beneficial Ownership Register.

The FSC’s 2025 guidance clarifies that “high-risk” customers - politically exposed persons (PEPs), non-resident entities, and crypto-asset users - must undergo enhanced due diligence (EDD). EDD includes source-of-wealth analysis, senior-management interviews, and a minimum of three months of transaction monitoring before onboarding.

Simplified due diligence is permitted only for “low-risk” retail customers whose transactions do not exceed BZD 10,000 per month and who are resident in jurisdictions with strong AML regimes. The FSC requires a written justification for any SDD classification, and the justification must be retained for five years.

Sanctions Screening

All obliged persons must screen customers and transactions against the United Nations Consolidated List, the European Union Consolidated Sanctions List, and any Belize-specific designations issued by the Ministry of Economic Development. The FSC’s 2024 “Sanctions Screening Manual” (Section 3) requires real-time name-screening at onboarding and periodic batch screening every 30 days.

Failure to screen or to act on a positive match triggers the offence under Section 14A of the MLTPA. In March 2025 the FSC fined International Bank of Belize Ltd BZD 2.5 million (US 1.25 million) for processing a BZD 12 million wire to a sanctioned entity in violation of the manual. The fine was calculated using the turnover-based formula set out in Section 15 of the MLTPA.

SAR/STR Reporting

The MLTPA (Section 11) obliges institutions to file SARs for any transaction that appears to be linked to money-laundering, terrorist financing, or a sanctioned party. The FIU’s 2025 “Reporting Standards” require the inclusion of a risk-rating score (1-5) and a clear indication of whether the report is a “first-time” or “follow-up” filing.

The FIU also accepts “Suspicious Transaction Reports” (STRs) for single transactions that raise red flags but do not yet constitute a full SAR. STRs must be filed within the same 24-hour window and are automatically escalated to SAR status if the FIU determines a higher risk.

Risk-Based Approach

Section 6 of the MLTPA requires each obliged person to develop a risk-assessment framework that covers product risk, customer risk, geographic risk, and delivery-channel risk. The FSC’s 2025 guidance adds a “risk-tier matrix” that assigns a numeric score to each factor and mandates that the overall risk rating be reviewed at least annually or whenever a material change occurs.

The FIU’s 2025 “Risk-Based Monitoring Guidance” recommends the use of transaction-monitoring software that can generate alerts based on rule-sets aligned with the risk-tier matrix. The guidance also stresses the importance of “scenario-based testing” - a process where the institution simulates high-risk transactions to validate the effectiveness of its monitoring rules.

Crypto-Assets and VASPs

Belize entered the virtual-asset space in 2022 with a voluntary registration scheme. The 2025 VASP Regulation made registration mandatory and introduced a licensing fee of BZD 150,000 per year. Licensed VASPs must retain a “crypto-risk register”, conduct on-chain analytics for all wallet addresses, and submit quarterly AML reports to the FIU.

Section 9 of the VASP Regulation requires that any transfer to an “unhosted wallet” (i.e., a wallet not controlled by a regulated entity) be subject to enhanced verification, including a source-of-funds declaration and a minimum transaction limit of BZD 5,000. Non-compliance can result in a daily fine of BZD 500,000, as demonstrated in the November 2025 enforcement action against CryptoX Ltd.

Recent Enforcement (2024-2025)

The FSC and FIU have increased the number and size of enforcement actions since 2024. The table below summarises the most significant cases that illustrate the regulator’s focus on SAR timeliness, sanctions compliance, and VASP registration.

In addition to the headline fines, the FSC issued 27 administrative notices in 2025 for deficiencies in record-keeping, inadequate staff training, and failure to maintain a current beneficial-ownership register. The regulator announced a series of “targeted inspections” for VASPs and trust companies in early 2026, indicating that enforcement will remain a priority.

Practical Compliance Checklist for Belize Institutions

Common Pitfalls

Recent enforcement files reveal three recurring weaknesses. First, many institutions file SARs after the 24-hour window, often citing “operational backlog”. The FIU’s 2025 guidance makes clear that “without undue delay” is interpreted as a strict 24-hour deadline, and repeated lateness is treated as a separate breach.

Second, fragmented governance structures lead to duplicated or missing records. When AML investigations are split across multiple subsidiaries or business lines, the FSC views the lack of a single point of accountability as a material compliance failure, as seen in the Global Insurance Brokers case.

Third, reliance on commercial screening tools without documented methodology is a frequent issue. The FSC expects institutions to retain evidence of data-quality checks, matching algorithms, and periodic vendor validation. A “black-box” approach does not satisfy the regulator’s requirement for demonstrable controls.

How RegMantle Helps

RegMantle produces jurisdiction-specific AML/CFT documentation for Belize-based entities, referencing the MLTPA, FSC Act 2023, Beneficial Ownership Register Act 2025, and the VASP Regulation. The platform generates a complete AML policy manual, risk-assessment template, KYC/CDD procedures, sanctions-screening policy, SAR/STR filing guide, and a VASP-specific on-chain-analytics checklist. All documents are pre-filled with the correct section numbers, citation formats, and can be exported as branded DOCX files ready for board approval and FSC inspection.