TRW KNOWLEDGE · LEGAL INFORMATION
Bangladesh Banking Compliance Requirements: A Step-by-Step Legal Guide
This comprehensive legal guide examines the 2026 Bangladesh banking compliance requirements, covering the Bank Company (Amendment) Act 2023, the Finance Company Act 2023, and new e-KYC mandates. Prepared by TRW Law Firm, it provides essential information for financial institutions navigating the regulatory landscape overseen by the Bangladesh Bank and BFIU.
2026 updateThis article retains its original publication date. Its structure, internal navigation and general information have been refreshed for 2026; current primary sources and advice should be checked before acting on any specific matter.
Introduction to Banking Compliance in Bangladesh (2026)
The financial landscape of Bangladesh has undergone a significant transformation, driven by rapid digitalization and the implementation of more stringent regulatory frameworks designed to ensure macroeconomic stability. In 2026, banking compliance is no longer merely a checklist of regulatory requirements but has evolved into a fundamental pillar of corporate strategy for financial institutions. The integrity of the banking system is maintained through a complex interplay of primary legislation, central bank circulars, and international standards, all aimed at mitigating risks associated with financial crimes, ensuring capital adequacy, and protecting the interests of depositors. For any financial entity, whether a traditional commercial bank or a newly licensed digital-only institution, navigating these Bangladesh banking compliance requirements is essential for maintaining operational licenses and fostering public trust.The regulatory environment in Bangladesh is characterized by the proactive oversight of the Bangladesh Bank, which serves as the central bank and the primary regulator. Over the past few years, the introduction of the Bank Company (Amendment) Act, 2023, and the Finance Company Act, 2023, has redefined the legal obligations of financial institutions. These updates address emerging challenges such as willful loan defaults, the rise of fintech, and the increasing sophistication of money laundering techniques. Consequently, compliance officers today manage a broader range of responsibilities, from electronic Know Your Customer (e-KYC) protocols to complex Basel III capital requirements. Understanding these regulations is the first step toward building a resilient financial institution that can thrive in Bangladesh's competitive market.At Tahmidur Remura Wahid (TRW) Law Firm, our team of legal professionals understands that compliance is a dynamic process. As a full-service international law firm based in Dhaka, we provide comprehensive guidance to domestic and foreign investors navigating the intricacies of the Bangladeshi financial sector. Whether you are seeking information on financial services regulatory law or require assistance with foreign direct investment, our firm is dedicated to providing people-first legal information that empowers institutions to operate with confidence and transparency.The Regulatory Landscape: Primary Statutes and Authorities
The foundation of banking compliance in Bangladesh rests upon several key statutes and delegated legislation. The primary regulator is the Bangladesh Bank, which derives its authority from the Bangladesh Bank Order, 1972. Under this mandate, the central bank issues circulars and guidelines that govern every aspect of banking operations. Alongside the Bangladesh Bank, the Bangladesh Financial Intelligence Unit (BFIU) operates as the central agency responsible for coordinating efforts to combat money laundering and terrorist financing. The BFIU’s role is critical in the 2026 environment, as it monitors transactions and ensures that institutions adhere to international standards set by the Financial Action Task Force (FATF).The Bank Company Act, 1991 (Amended 2023)
The Bank Company Act, 1991, remains the cornerstone of banking regulation. The 2023 amendments introduced pivotal changes, most notably the stricter management of "willful loan defaulters." Banks are now legally mandated to identify such defaulters and report them to the Bangladesh Bank, which publishes their names. This measure is designed to instill discipline in the credit market and reduce non-performing loans (NPLs). Furthermore, the Act now imposes tighter restrictions on the number of family members who can serve on a bank's board of directors, aiming to improve corporate governance and prevent the concentration of power within specific families.The Finance Company Act, 2023
Replacing the older Financial Institutions Act of 1993, the Finance Company Act, 2023, modernizes the regulation of Non-Banking Financial Institutions (NBFIs). This legislation provides a robust framework for licensing and operation, emphasizing the protection of retail depositors. Key provisions include enhanced capital requirements, stricter shareholding limits, and more comprehensive audit mandates. The Act also empowers the Bangladesh Bank to take swifter corrective actions against failing finance companies, including the appointment of observers or initiating restructuring processes. Compliance involves a thorough review of internal policies to ensure alignment with these updated standards.Money Laundering Prevention Act, 2012
The Money Laundering Prevention Act, 2012, and the Anti-Terrorism Act, 2009, form the legal basis for Bangladesh's AML/CFT framework. In 2026, compliance is monitored with unprecedented rigor. Financial institutions must maintain detailed records and conduct enhanced due diligence on high-risk customers, including Politically Exposed Persons (PEPs). The BFIU regularly issues updated circulars regarding trade-based money laundering, which banks must integrate into automated monitoring systems. Failure to comply can lead to severe penalties, including hefty fines and the potential revocation of banking licenses, reflecting the government's commitment to a transparent financial system.Core Compliance Pillars for Financial Institutions
To achieve comprehensive compliance, financial institutions must focus on several core pillars. These represent the functional areas where regulatory scrutiny is most intense and where the risk of non-compliance is highest. In the current 2026 environment, these areas have been further complicated by the integration of digital technologies and the adoption of sophisticated risk management models.KYC and the 2026 e-KYC Mandates
Know Your Customer (KYC) procedures are the first line of defense. In March 2026, the Bangladesh Bank issued BRPD Circular No. 08, introducing updated guidelines on Electronic Know-Your-Customer (e-KYC). This circular marks a strategic shift toward digital onboarding, allowing banks to verify identities using biometric data and NID integration. The e-KYC framework is designed to increase financial inclusion by making it easier for individuals in remote areas to open accounts, while enhancing verification accuracy. Banks must implement tiered KYC levels, where verification intensity is proportional to the customer's risk profile and transaction nature.Anti-Money Laundering (AML) and CFT
The AML/CFT pillar requires banks to establish a dedicated compliance department, often headed by a Chief Anti-Money Laundering Officer (CAMLCO). This department implements the AML policy, conducts risk assessments, and ensures staff are trained to recognize red flags. In 2026, the use of Artificial Intelligence (AI) in transaction monitoring is a regulatory expectation for larger banks. These technologies enable real-time detection of unusual patterns indicating illicit fund movement. Furthermore, banks must ensure they do not provide services to individuals or entities on international sanction lists, such as those issued by the UN Security Council.Corporate Governance and Board Oversight
Effective corporate governance is essential for stability. The Bangladesh Bank has issued guidelines on "Fit and Proper" criteria for directors and senior management, ensuring leadership possesses integrity and competence. Under the 2023 amendments, the role of independent directors has been strengthened. They are expected to play active roles in board committees, particularly the Audit and Risk Management Committees. These committees provide critical oversight, ensuring internal controls are robust and that management adheres to the board-approved compliance framework.Capital Adequacy and Basel III Standards
Bangladesh has adopted the Basel III framework to ensure banks maintain sufficient capital to absorb losses. As of 2026, the minimum Capital to Risk-weighted Assets Ratio (CRAR) for banks is set at 12.50%, including a capital conservation buffer. Banks must also maintain a minimum Tier 1 capital ratio and adhere to Liquidity Coverage Ratio (LCR) and Net Stable Funding Ratio (NSFR) requirements. Regular stress testing is mandated to evaluate how a bank's capital position would be affected by adverse scenarios, such as a spike in NPLs. Compliance requires sophisticated accounting expertise to accurately calculate risk-weighted assets across portfolios.Reporting Obligations and Regulatory Filings
A critical component of the Bangladesh banking compliance requirements is the timely submission of regulatory reports. These provide the Bangladesh Bank and BFIU with data necessary to monitor institutional health and systemic stability. Most filings are conducted through the central bank's Integrated Data Acquisition System (IDAS) or the BFIU's dedicated portal.Suspicious Transaction Reporting (STR)
Institutions are legally obligated to report any transaction suspected of involving proceeds of crime or being related to terrorist financing. An STR must be filed with the BFIU whenever there is reasonable ground for suspicion, regardless of the amount. The "tipping off" rule is strictly enforced; the bank must not disclose to the customer that an STR has been filed. In 2026, the BFIU has placed increased emphasis on STR quality, requiring detailed narratives and supporting documentation to assist law enforcement investigations. Failure to report suspicious activity is a criminal offense.Cash Transaction Reporting (CTR)
Banks must also file Cash Transaction Reports for all cash deposits or withdrawals exceeding a specific threshold, currently BDT 10 lakh in a single day for a single account. CTRs help authorities track large cash movements, a common characteristic of money laundering. The reporting process is automated in most banks, with the core banking system (CBS) flagging eligible transactions for review by the compliance team before submission. Regular reconciliation ensures no reportable transactions are missed due to technical errors.Digital Banking and Fintech Compliance
The emergence of digital-only banks represents a significant development. In 2023, the Bangladesh Bank issued guidelines for digital banks, paving the way for institutions operating without physical branches. These banks are subject to the same primary laws as traditional banks but must adhere to additional requirements for cybersecurity, data privacy, and technology risk management. For instance, they must maintain data servers within Bangladesh and implement multi-factor authentication. They are also required to have robust disaster recovery and business continuity plans.Fintech companies partnering with banks for services like mobile financial services (MFS) also fall within the regulatory umbrella. They must ensure platforms are secure and not facilitating unauthorized activities. The Payment and Settlement Systems Act, 2024, provides a clearer legal framework, emphasizing interoperability and consumer protection. For businesses entering this space, consulting with professional legal advisors is crucial to ensure models comply with both banking and technology regulations.Step-by-Step Implementation Guide for Banking Compliance
For financial institutions looking to strengthen their compliance posture in 2026, a systematic approach is recommended. This guide outlines the practical steps necessary to align operations with the current Bangladesh banking compliance requirements.- Regulatory Gap Analysis: Review existing policies against the latest laws, including the 2023 amendments. Identify where current practices fall short of new mandates.
- Update Compliance Charter: Revise the charter to reflect expanded responsibilities and the enhanced role of the board. Ensure the CAMLCO has sufficient independence.
- Implement e-KYC Systems: Integrate biometric and NID verification tools into onboarding in accordance with BRPD Circular No. 08/2026. Ensure support for tiered KYC.
- Enhance Transaction Monitoring: Upgrade automated systems to include AI-driven analytics capable of detecting sophisticated patterns. Regularly update rule sets.
- Strengthen Cybersecurity Framework: Implement a robust policy aligning with Bangladesh Bank's ICT security guidelines. Conduct regular penetration testing.
- Staff Training and Awareness: Roll out mandatory programs covering AML/CFT red flags, e-KYC procedures, and legal consequences of non-compliance.
- Independent Audit and Review: Schedule regular internal and external audits to verify framework effectiveness and use findings for continuous improvement.
Table: Key Compliance Deadlines and Requirements
| Requirement Area | Primary Regulation | Key Action/Deadline |
|---|---|---|
| e-KYC Implementation | BRPD Circular No. 08/2026 | Full integration of biometric NID verification for all new accounts. |
| Willful Defaulter Reporting | Bank Company Act (Amended 2023) | Quarterly submission of list to Bangladesh Bank. |
| Capital Adequacy (Basel III) | BRPD Circular No. 18/2014 & Updates | Maintain CRAR at 12.50% at all times. |
| CTR/STR Filing | Money Laundering Prevention Act 2012 | CTR within 21 days of month-end; STR immediately upon suspicion. |
| Board Composition | BRPD Circular No. 11/2013 & 2023 Amendments | Ensure independent directors meet \"Fit and Proper\" criteria. |
Legal Information Disclaimer
The information provided in this article is for general informational purposes only and does not constitute legal, financial, or professional advice. While we strive to ensure accuracy, laws and regulations in Bangladesh are subject to frequent changes by authorities such as the Bangladesh Bank and BFIU. Readers should not act upon this information without seeking tailored advice from qualified legal professionals regarding their specific circumstances. Tahmidur Remura Wahid (TRW) Law Firm expressly disclaims all liability in respect to actions taken or not taken based on any or all the contents of this article.Navigating the complex regulatory waters of the Bangladeshi financial sector requires a deep understanding of local laws and international best practices. Whether you are dealing with tax law, employment and labor disputes, or complex arbitration matters, our firm is committed to excellence. We also provide resources such as the Supreme Court cause list to keep our clients informed of judicial developments. For a deeper look into our firm's history and values, please visit our firm page.For broader context on the firm’s approach to complex legal questions, readers may explore TRW Law Firm, its practice areas, the firm’s legal services, and the appropriate route to contact the team. These resources provide general information and do not replace advice on particular facts.
Frequently Asked Questions (FAQ)
What are the primary differences between the old Financial Institutions Act and the new Finance Company Act, 2023?
The Finance Company Act, 2023, introduces more stringent oversight for Non-Banking Financial Institutions (NBFIs) compared to the 1993 Act. Key differences include higher minimum capital requirements, stricter limits on family shareholding to prevent corporate capture, and enhanced powers for the Bangladesh Bank to intervene in distressed institutions. The new Act also places a heavier emphasis on protecting retail depositors through improved governance and mandatory audit committees.How does the 2026 e-KYC guideline affect existing bank customers?
While BRPD Circular No. 08/2026 primarily focuses on onboarding new customers through digital means, it also requires banks to update records of existing customers whose profiles are incomplete. Banks may request existing customers to provide biometric data or verify NID details through digital portals to ensure accounts remain compliant with latest AML/CFT standards. Failure to update records may result in temporary restrictions on account operations.What are the legal consequences for a bank that fails to report a willful loan defaulter?
Under the Bank Company (Amendment) Act, 2023, failure to report a willful loan defaulter to the Bangladesh Bank is a serious regulatory breach. The central bank can impose significant financial penalties on the institution and take disciplinary action against responsible officers. Furthermore, the bank may be barred from opening new branches or expanding business operations until the non-compliance is rectified. In extreme cases, repeated failure can lead to the removal of the bank's managing director or board members.Are digital-only banks in Bangladesh subject to the same AML/CFT requirements as traditional banks?
Yes, digital-only banks are subject to the same primary AML/CFT legislation, including the Money Laundering Prevention Act, 2012. Because they operate exclusively online, they are often required to implement even more robust automated monitoring systems and cybersecurity controls to mitigate inherent risks of remote transactions. They must strictly follow e-KYC guidelines and ensure identity verification processes are foolproof.What is the role of the Bangladesh Financial Intelligence Unit (BFIU) in banking compliance?
The BFIU is the central agency in Bangladesh responsible for receiving and analyzing information related to money laundering and terrorist financing. In banking compliance, the BFIU issues detailed guidelines on AML/CFT, monitors STR and CTR submissions, and conducts inspections of financial institutions. The BFIU also coordinates with international bodies like the FATF to ensure Bangladesh's financial system remains aligned with global standards, and it has authority to freeze accounts suspected of criminal activity.CONTINUE EXPLORINGConnected
Connected
legal insight.
Let’s discuss
the detail.
For a focused conversation with TRW, book a consultation or contact the firm directly.Book consultation →info@trw.org