Prudential Authority fines Capitec R28m over FICA control gaps
The penalty lands on South Africa's biggest digital bank after an inspection found weaknesses in the checks that keep dirty money out of the system.
eNCA reports that the Prudential Authority has fined Capitec Bank R28-million and imposed administrative sanctions on the lender for breaching the Financial Intelligence Centre Act.
The penalty follows an inspection by the regulator, which found shortcomings in the bank’s compliance controls. The Prudential Authority identified weaknesses in customer due diligence, in the measures meant to detect and prevent money laundering, and in staff training. It also flagged gaps in certain screening, reporting and risk management processes.
Capitec says it cooperated fully with the Prudential Authority throughout the process and that it has taken steps to address the deficiencies raised in the inspection.
What the regulator found
FICA is the law that requires banks and other accountable institutions to know who their customers are, to watch transactions for signs of criminal proceeds, and to report what they find to the Financial Intelligence Centre. The obligations are administrative in form and serious in effect. A bank that cannot show it ran the checks is a bank the system cannot rely on.
The Prudential Authority’s inspection found the bank’s controls wanting on several of those fronts at once. Customer due diligence, the process of identifying and verifying a client and understanding what they do with their money, was one area of weakness. Anti-money laundering measures were another. Training, the part that determines whether a policy on paper becomes a habit at the counter, was a third. Screening, reporting and risk management processes also drew findings.
The R28-million penalty and the accompanying administrative sanctions are the regulator’s response to that picture.
Why this matters beyond one bank
South Africa’s banking sector is the pipe through which most of the economy’s money moves, and it carries obligations that reach past the bank’s own balance sheet. The Financial Action Task Force, the global body that assesses countries on their defences against money laundering and terrorist financing, has kept South Africa under enhanced monitoring since 2023. Banks that fail their FICA duties weaken the case the country is making to be removed from that list.
That is the context in which a R28-million fine is more than a line item. Weak customer checks at a large lender are a route through which illicit money can enter and leave the formal system, and the cost of that is carried by everyone who uses the system honestly.
For Capitec’s customers, the immediate effect is likely to be felt in process rather than in price. Banks under a regulator’s eye typically tighten onboarding, ask for more documents when accounts are opened or reviewed, and slow down transactions that trip a new alert. The bank has not said its customers will face any change, and no figure in the sanction points to one.
The bank’s answer
Capitec’s response has been to accept the outcome and point to remediation. It says it cooperated fully with the regulator and has taken steps to address the deficiencies identified during the inspection.
The Prudential Authority, which sits within the South African Reserve Bank, has the power to impose both financial penalties and administrative sanctions on institutions it supervises. Its findings against Capitec are the product of a routine inspection rather than a criminal complaint, and the matter is a regulatory one.
Capitec remains one of the country’s largest banks by customer numbers and has been among its strongest performers on earnings. In its most recent results, headline earnings rose 36% to R6,4-billion, a figure eNCA also reported.
The bank’s next set of results and the Prudential Authority’s ongoing supervision will show whether the remediation holds. Until then, the record is what the regulator found, what it fined, and what the bank says it has done about it.
