TRW KNOWLEDGE · LEGAL INFORMATION
Bangladesh Banking System Laws: A Comprehensive Legal Overview (2026)
This article provides a practical, source-grounded overview of the legal framework governing banks and financial institutions in Bangladesh. It explains primary regulatory instruments, licensing and capital expectations, compliance priorities including anti‑money‑laundering and consumer protection, and practical steps for organisers and advisers.
Introduction
The legal architecture that governs the banking system in Bangladesh shapes how banks and non‑bank financial institutions operate, manage risk and interact with customers. This overview explains the principal statutory sources, the supervisory and licensing landscape, core regulatory themes, and practical compliance steps that matter to boards, senior management, in‑house counsel and outside advisers. It is written as legal information to inform decision‑making and planning, not as a substitute for tailored legal advice.Statutory and regulatory framework
Banking in Bangladesh is supervised and regulated within a layered framework that combines primary statutes, subsidiary regulations and circulars from the central bank. The legislative layer establishes the licensing regime, governance duties, and broad prudential objectives. The supervisory layer implements those objectives through rules on capital, liquidity, reporting and conduct. Practitioners commonly refer to the central bank’s circulars when assessing current operational requirements because the circulars set detailed, periodically updated expectations on matters such as loan provisioning, risk classification and digital operations.Primary regulatory institutions and their roles
Regulation and oversight involve several institutional actors. The central supervisory authority issues licences, enforces prudential norms and carries out on‑site and off‑site supervision. Other government agencies may have overlapping responsibilities in areas such as taxation, anti‑corruption and criminal enforcement. Banks and their boards remain responsible for meeting both the letter and the spirit of supervisory directives and applicable statutes; supervisors typically focus on system stability, depositor protection and market integrity.Core legal themes for banking operations
Across statutes and supervisory instruments, a group of recurring themes appears. These are useful focal points for organisational compliance programmes:- Licensing and scope of business — who may accept deposits, offer trust services, or undertake foreign exchange operations.
- Capital and prudential buffers — requirements intended to absorb losses and protect depositors.
- Risk governance — board and senior management responsibilities for credit, market, operational and liquidity risks.
- Consumer protection and disclosure — transparency for customers, complaints handling and fair treatment.
- Anti‑money‑laundering and counter‑terrorist financing (AML/CTF) — customer due diligence, suspicious transaction reporting and record‑keeping.
- Reporting and supervision — timely submission of financial, compliance and statistical returns to the supervisor.
Licensing and establishment: stepwise legal guide
Entities that plan to operate as banks or certain types of financial institutions must follow a multi‑step administrative process. The following outline sets out core stages that typically apply; specific documentary and financial thresholds are set by the supervisory authority and can change, so applicants should check the latest circulars and guidance.- Preliminary assessment and feasibility: a written feasibility report setting out market rationale, projected balance sheet and governance arrangements.
- Promoter credentials and fit‑and‑proper checks: disclosure of promoters, ownership structure and management biographies for regulatory vetting.
- Capital commitment and proof of funds: evidence that the minimum paid‑up capital or initial capital phase‑in is available and legally sourced.
- Formal application and supporting documentation: submission of statutory forms, constitutive documents and policies (AML, risk management, internal controls).
- Supervisory review and conditions: the authority evaluates all materials and may impose licence conditions, including operational restrictions and reporting requirements.
- Licence issuance and commencement: when conditions are satisfied the authority issues the licence and the entity may commence operations subject to ongoing supervision.
| Provision | Practical considerations for applicants |
|---|---|
| Minimum capital | Prepare audited statements or certified proof of funds and a capital plan that anticipates phased regulatory increases; ensure sources of funds meet regulatory origin rules. |
| Fit and proper requirements | Collect full biographies and clearances for directors and senior officers; consider pre‑application engagement with the supervisor to identify potential issues. |
| Governance and policies | Adopt board‑approved policies (AML/CTF, credit, operational risk, cyber security) before application; demonstrate practical implementation steps and staffing plans. |
| Business scope and restrictions | Describe intended products and geographies clearly; if foreign currency or international operations are intended, identify additional regulatory permissions and correspondent banking arrangements. |
| Ongoing reporting | Implement systems for timely management information and statutory reporting; regulators may condition licences on specific IT and audit arrangements. |
Prudential obligations: capital, liquidity and risk management
Regulatory frameworks typically require banks to maintain minimum capital ratios and hold liquid assets to meet short‑term obligations. Boards must ensure risk appetite statements and approved risk frameworks translate into operational limits. Credit governance should cover lending authority levels, related‑party transaction rules and impairment policies. Operational risk programmes should address business continuity, incident response and third‑party vendor oversight, including outsourcing of critical systems.Consumer protection, conduct and disclosure
Conduct‑focused obligations emphasise fair and transparent treatment of customers. Firms are expected to make key terms and costs clear before contracts are concluded, maintain accessible complaint handling procedures and report systemic consumer protection concerns to the supervisor when required. For retail depositors, disclosure of deposit insurance arrangements and dispute mechanisms may be mandated. Boards should ensure product governance processes are in place where new products or pricing models are introduced.Anti‑money‑laundering and sanctions compliance
AML/CTF controls are a central regulatory priority. Typical elements of a compliant programme include risk‑based customer due diligence (including enhanced measures for higher‑risk customers), transaction monitoring, internal reporting procedures for suspicious activity, retention of records and staff training. Compliance frameworks should also address sanctions screening and cross‑border exposure—areas that attract attention from both supervisors and law enforcement.Digital banking, fintech interaction and operational resilience
The growth of digital banking and technology‑driven financial services has prompted supervisory guidance on electronic payments, mobile wallets, API integrations and cybersecurity. Operational resilience planning includes incident response, redundancy for critical systems and vendor management. Where banks partner with third‑party fintech providers, contractual protections should address data security, service levels and regulatory reporting obligations. When digital services cross jurisdictional borders, additional regulatory requirements in foreign jurisdictions may apply.Supervisory engagement and examinations
Supervisors use a mix of off‑site reporting, desk reviews and on‑site examinations to assess compliance and risk. Firms should maintain readily accessible documentation for statutory returns, audit trails for significant transactions and a clear escalation path for material incidents. Management response to supervisory findings should be timely and trackable; regulators expect remediation plans with concrete milestones where deficiencies are identified.Common pitfalls and risk mitigation
Advisers and executives frequently encounter a small number of recurring problems that can be addressed through proactive controls:- Underestimating implementation timelines for regulatory IT and reporting systems.
- Inadequate documentation of customer due diligence, particularly for high‑risk clients.
- Weak board oversight of credit concentrations or related‑party exposures.
- Poorly resourced compliance functions that cannot keep pace with regulatory change.
Interaction with other areas of law
Banking operations interact with multiple legal domains. Tax rules affect product structuring and cross‑border transactions; employment and labour regulations govern staff terms and redundancy processes; competition law considerations may arise in certain market conduct questions; and dispute resolution clauses determine whether commercial disputes go to local courts, specialist tribunals, or arbitration. When inward investment or cross‑border finance is involved, foreign direct investment approvals and exchange control rules may be relevant. Legal teams should coordinate across these disciplines to provide coherent advice.Practical compliance checklist for new and existing institutions
Below is a concise checklist intended to help institutions prioritise early actions and ongoing commitments. It is a practical starting point for internal governance and does not replace a full legal review.- Establish board‑level oversight and document risk appetite statements.
- Prepare and maintain up‑to‑date AML/CTF policies and training.
- Ensure initial capital is evidenced and funded from documented sources.
- Implement financial reporting and management information systems capable of statutory returns.
- Adopt robust vendor and third‑party due diligence procedures, including for cloud providers and fintech partners.
- Implement complaint handling procedures and consumer disclosure templates.
- Maintain a remediation register for supervisory findings with clear owners and timelines.
Practical links to specialist advice and services
Organisations that need tailored advice can consider retaining external specialists with experience in regulatory, tax and corporate matters. For example, regulatory structuring may require input from financial services regulatory lawyers and tax lawyers. Cross‑border financing and investor negotiations may raise issues where foreign direct investment lawyers add value. For dispute‑resolution planning, engagement with an experienced arbitration counsel can be considered. TRW Law Firm’s materials on practice areas provide a pathway to specialist teams and are accessible from the firm pages describing our approach and services: our firm, our practices, and services. For direct enquiries about engagement or next steps, see contact. Specialist practice pages that may be relevant include financial services regulatory lawyers, foreign direct investment lawyers and tax lawyers.Legal‑information disclaimer
The material in this article is provided for general informational purposes only. It does not constitute legal advice, and it should not be relied on as a substitute for specific legal counsel. Readers should consult qualified legal advisers about the application of law to particular facts and any recent regulatory developments that may affect their circumstances.FAQ
Q: Which instruments set the core rules for banks and financial institutions?
A: The core statutory instruments establish licensing, supervisory powers and broad prudential objectives. Regulatory authorities translate statutory obligations into detailed rules and circulars addressing capital, liquidity, reporting and market conduct. Practitioners must review both primary legislation and current supervisory circulars to understand precisely applicable requirements.Q: What should promoters expect during the fit‑and‑proper review?
A: Promoters should expect background checks concerning integrity, prior regulatory history and the source of funds. Clear and complete documentation for ownership, governance and personal biographies expedites review. If any issues are likely to arise, early disclosure and engagement with the supervisory authority can reduce the risk of delays.Q: How does AML/CTF compliance affect everyday banking operations?
A: AML/CTF obligations affect account opening, transaction monitoring and customer relationships. Banks must implement risk‑based customer due diligence, maintain records for statutory retention periods and report suspicious transactions. Operational processes, IT systems and staff training need to reflect these obligations so that monitoring and reporting occur promptly and reliably.Q: What are common deficiencies supervisors focus on in examinations?
A: Supervisors commonly identify deficiencies in credit risk classification, inadequate provisioning, weak AML controls, incomplete reporting and deficiencies in governance or internal audit. Timely remedial action plans and demonstrable progress addressing supervisory recommendations are important to restore supervisory confidence.Q: How should a bank approach digital partnerships with fintech firms?
A: Banks should conduct rigorous vendor due diligence, include contractual protections for data security and regulatory compliance, and maintain operational oversight of the fintech partner. Governance should specify who within the bank is responsible for vendor oversight, and contingency planning should cover service interruptions or data breaches.Q: When should an institution consult external legal counsel?
A: Institutions should consult external counsel when preparing licence applications, drafting complex governance documentation, negotiating significant third‑party contracts, responding to regulatory enquiries, or when material incidents implicate supervisory or enforcement risk. External counsel can also assist with cross‑border legal issues, tax treatment and dispute resolution planning.Q: What steps can boards take to strengthen compliance oversight?
A: Boards can strengthen oversight by adopting a clear risk appetite, establishing specialised board committees (audit, risk, compliance), ensuring independent internal audit, and requiring periodic external reviews of key control areas. Regular, candid reporting from management that highlights emerging risks and remediation timelines also supports informed governance.Q: How do tax and employment laws intersect with banking regulation?
A: Tax laws influence product structuring, pricing and cross‑border transactions. Employment and labour laws determine workforce contractual arrangements and redundancy procedures. Changes in these adjacent legal areas can have material operational and financial consequences for banks, so coordination between compliance, tax and HR functions is important.Q: Are there standard practices for responding to supervisory findings?
A: Standard practice involves preparing a written remediation plan that identifies root causes, corrective measures, responsible owners and clear timelines. The plan should be realistic, provide interim controls where necessary, and include progress reporting to the supervisor. Transparent engagement and demonstrable progress typically improve regulator outcomes.Q: How can an incoming investor assess regulatory risk before capital commitment?
A: Investors should conduct legal and regulatory due diligence that assesses licensing status, past supervisory interactions, contingent liabilities, AML exposure and capital adequacy. Where relevant, specialists in foreign direct investment and tax law should assess cross‑border permissions and potential fiscal consequences. Early risk identification helps structure investment and negotiation positions.CONTINUE EXPLORINGConnected
Connected
legal insight.
Let’s discuss
the detail.
For a focused conversation with TRW, book a consultation or contact the firm directly.Book consultation →info@trw.org