Regulatory fines dominate the headlines, but for South African institutions caught out by AML failures, the printed penalty is only the opening chapter.
According to RelyComply, Old Mutual was fined R15.9m and HSBC R9.5bn for compliance shortcomings, while one business trust faced a R250,000 penalty. Yet the real financial toll, unfolding over the following 36 months, is often far larger than the headline figure.
The first hidden cost is remediation. Rebuilding a compliance function typically demands sweeping policy changes, the hiring of external consultants, legal advisers and auditors, and technology overhauls to fix faulty KYC, transaction monitoring and reporting systems. Each of these diverts resources and time away from revenue-generating work, often at a cost that dwarfs the original fine.
Leadership is the next casualty. Accountability regimes such as the UK’s Senior Managers and Certification Regime, or FICA rules in South Africa, put individual executives in the firing line, with personal liability and fines of up to R100m possible in cases involving criminal intent. Even voluntary departures of chief compliance officers or money laundering reporting officers trigger lengthy recruitment drives that can stall reform efforts already in motion.
Reputational damage compounds the problem. Research shows that a single compliance breach is enough to end a business partnership for 87% of firms, while a further 87% of executives rank reputational risk above other strategic threats, according to Deloitte. South Africa’s own experience with FATF greylisting between 2023 and 2025, only reversed by the EU and UK in January 2026, illustrates how a poor compliance record can freeze market access and deter investment.
Finally, institutions often face prolonged scrutiny. Sanlam, for instance, had R3.6m of its fine suspended for two years pending demonstrated improvements. Consent orders and remediation programmes typically run for one to three years, during which fear of further breaches can trigger over-cautious, over-filed suspicious activity reports, slowing innovation, M&A activity and expansion plans.
The lesson is that treating AML fines as an isolated cost misses the bigger picture. A R10m penalty, or the fivefold increase that can follow repeat failures, is merely the visible tip of a much larger financial and reputational burden. Investing upfront in RegTech platforms, strong governance and well-trained staff is proving far cheaper than the alternative.
Read the full RelyComply post here.
Copyright © 2026 RegTech Analyst
Copyright © 2026 RegTech Analyst
