TRW Knowledge / Financial services regulation
Legal Framework for Banks in Bangladesh: 2026 Guide to Compliance, Licensing and Risk Management
This article provides an explanatory, practice-oriented overview of the legal framework that governs banks and licensed financial institutions in Bangladesh as of mid-2026. It is intended to assist compliance officers, in-house counsel, executives and external advisers who require a structured summary of statutory instruments, regulatory responsibilities and practical steps for establish
TRW Knowledge / Legal guidance
Banking, financial regulation and compliance / Bangladesh
2026 reviewThis article retains its original publication date. It has been structurally and substantively refreshed for 2026; readers should verify current rules, court practice and primary materials before acting on a particular matter.
Introduction
This article provides an explanatory, practice-oriented overview of the legal framework that governs banks and licensed financial institutions in Bangladesh as of mid-2026. It is intended to assist compliance officers, in-house counsel, executives and external advisers who require a structured summary of statutory instruments, regulatory responsibilities and practical steps for establishing or operating a bank. This material is explanatory and does not substitute for specific legal advice tailored to a transaction or corporate context; readers should consult the primary legislation, the Bangladesh Bank and qualified counsel for binding guidance.Structure of the legal framework
The Bangladeshi banking sector is regulated through a combination of primary legislation, subsidiary regulations and supervisory directives. Relevant instruments commonly referenced by practitioners include the Bank Companies Act, 1991, the Bangladesh Bank Order, 1972, and the Financial Institutions Act, 1993, together with sector-specific rules and circulars issued by the central bank. Other statutory provisions may be relevant for particular activities—for example, negotiable instruments, tax, anti-money laundering and data protection statutes. For up-to-date texts and official statements, consult the Bangladesh Bank website and the text of each law.Primary legal sources
- Bank Companies Act, 1991 (regulatory framework for banking companies and licensing processes)
- Bangladesh Bank Order, 1972 (establishes the Bangladesh Bank and its supervisory functions)
- Financial Institutions Act, 1993 (regulation of non-bank financial institutions)
- Negotiable Instruments Act, 1881 (governs cheques, promissory notes and related instruments)
Regulatory instruments and supervisory guidance
In addition to statutes, the Bangladesh Bank issues circulars, guidelines and prudential standards that implement and interpret statutory obligations. These instruments address licensing, capital adequacy, liquidity, reporting, consumer protection and anti-money laundering (AML) controls. Because such circulars are frequently updated, entities should maintain a process for monitoring Bangladesh Bank publications and other regulatory notices.Key regulatory requirements and themes
The following headings summarise recurrent regulatory themes affecting banks. The descriptions are explanatory and deliberately non-prescriptive: specific thresholds, timelines and documentary requirements can only be confirmed with the relevant statutory text, Bangladesh Bank circulars or a qualified adviser.Licensing and scope of authorised activities
To carry on banking business in Bangladesh an entity must be authorised by the Bangladesh Bank. Licensing assessments typically focus on the applicant's financial standing, governance arrangements, fitness and propriety of principal persons, proposed business model, and the adequacy of systems and controls. The Bangladesh Bank retains discretion to impose conditions on licences, to refuse an application, or to revoke an authorisation subject to statutory procedures.Capital adequacy and solvency
Capital and capital adequacy are central supervisory concerns. Legal and regulatory instruments set out requirements for minimum capital, capital components and ratios, and related reporting. These requirements are periodically revised; therefore, institutions should rely on the latest Bangladesh Bank circulars for quantitative standards and transitional arrangements.Anti-money laundering and counter-terrorist financing (AML/CTF)
Banks must implement AML/CTF programmes that include customer due diligence (CDD), transaction monitoring, suspicious activity reporting and record-keeping. The Legal framework includes statutory obligations and Bangladesh Bank-issued directions that align domestic requirements with international standards. Compliance programmes should be risk-based and proportionate to the bank's size and activity profile.Consumer protection and transparency
Regulatory expectations for consumer protection include clear disclosure of fees and charges, fair contract terms, timely handling of complaints and procedures for protecting depositors' interests. Specific consumer protections are set out in statutory provisions and supervisory guidance; firms should ensure policies and customer-facing documentation reflect current requirements.Reporting and supervisory interaction
Banks are subject to regular reporting obligations covering financial statements, prudential returns, large exposures and other supervisory metrics. The Bangladesh Bank also conducts on-site inspections and off-site surveillance. Institutions should maintain robust compliance calendars and escalation procedures for regulatory requests.Practical step-by-step process to establish a bank in Bangladesh (overview)
The sequence below describes the principal procedural stages commonly encountered when seeking to form or open a bank in Bangladesh. Timelines and documentary requirements change; this outline should be treated as an operational checklist rather than a substitute for contemporaneous regulatory guidance.- Feasibility and market analysis: prepare an independent market assessment covering customer demand, competitive positioning, projected financials and capital needs.
- Business plan and governance design: draft a business plan that sets out the proposed corporate structure, governance arrangements, risk appetite, and senior management profiles.
- Pre-application engagement: where permitted, engage with the Bangladesh Bank or local advisers to clarify procedural expectations and required documents.
- Formal application for licence: submit the application and supporting documents; the submission typically requires certified corporate records, details of shareholders, organisational charts, policies and proof of capital.
- Capital mobilisation and compliance readiness: ensure that the bank can meet initial capital requirements and has implemented core policies (AML, risk management, internal audit, compliance).
- Fit and proper assessments: provide required disclosures and attestations for proposed directors and senior managers so regulators can assess fitness and propriety.
- Operational readiness and systems testing: implement IT systems, internal controls and staffing sufficient to begin operations in a controlled manner.
- Regulatory approval and launch: once approval is granted, comply with any conditions and coordinate with the regulator on the launch sequence.
Notes on timing and conditionality
The process can vary materially depending on capital sources, the complexity of ownership structures, or whether the applicant is an existing foreign bank seeking a branch or subsidiary licence. Applicants should plan for regulatory engagement, document translations, and time to satisfy fit and proper checks.Governance, risk management and internal controls
Regulators expect banks to demonstrate effective governance and a sound control environment. Common supervisory expectations include:- an empowered, independent board with defined duties and committees;
- clear segregation of duties across front office, risk and compliance functions;
- an internal audit function with adequate remit and reporting lines;
- documented risk appetite statements and risk management frameworks covering credit, market, liquidity, operational and reputational risk;
- business continuity and cyber-security arrangements that are tested regularly.
Data protection, cyber-security and digital banking
Digital banking channels introduce both business opportunities and new compliance obligations. In addition to prudential requirements, banks must consider data protection rules, information security standards and contingency planning. Regulators periodically issue guidance addressing e-KYC, online payments, mobile banking and third-party technology providers. Firms should maintain a documented third-party risk management programme and ensure contractual protections with vendors.Reporting incidents and supervisory cooperation
Regulatory frameworks generally require prompt reporting of material incidents such as large operational failures, cyber-security breaches, significant customer complaints or capital shortfalls. Institutions should have clear internal escalation procedures and pre-defined templates for regulator notifications. Early, accurate engagement with supervisors typically reduces the risk of escalation.Common pitfalls and practical mitigations
The following issues are frequently observed in supervisory reviews. These examples are illustrative; institutions should evaluate relevance in their specific context.- Insufficient documentation of policies and procedures—mitigation: maintain version-controlled policies and ensure staff acknowledgment.
- Weak AML/CTF controls for new product lines—mitigation: perform risk assessments before launching products and apply enhanced due diligence where needed.
- Gaps in vendor oversight—mitigation: strengthen contractual terms, monitoring and exit plans for critical service providers.
- Inadequate capital planning under stress—mitigation: conduct regular stress tests and maintain contingency capital plans.
2026 update
Regulatory supervision and market practice continue to evolve in 2026. Several themes are prominent in supervisory dialogue and public guidance:- Digital banking and fintech integration: supervisors have increased focus on operational resilience, customer authentication and governance of fintech partnerships. Institutions with significant digital footprints should review their compliance and technical controls.
- Enhanced AML/CTF expectations: regulators expect risk-based transaction monitoring and improvements in beneficial ownership verification.
- Climate-related financial risk awareness: while regulatory responses differ by jurisdiction, banks are increasingly expected to consider climate-related risks in credit assessment and disclosure practices.
Cross-border considerations
Banks with cross-border operations should consider local licensing requirements, tax treatment, foreign exchange rules and data-transfer restrictions. Foreign banks seeking a presence in Bangladesh commonly evaluate whether to operate via branch, representative office or a locally incorporated subsidiary; each model has distinct regulatory and operational implications.Practical compliance checklist (concise)
- Maintain an updated register of applicable statutes and Bangladesh Bank circulars.
- Document and test AML/CTF processes, including CDD and monitoring scenarios.
- Keep governance documentation current and evidence board oversight of key risks.
- Conduct periodic independent reviews of IT security, vendor controls and business continuity.
- Ensure timely filing of prudential returns and responses to regulatory queries.
When to obtain tailored legal advice
Because regulatory outcomes and statutory interpretations depend on specific facts, organisations should seek tailored advice in situations such as:- application for a new licence or change to an existing licence;
- material transactions that affect capital, control or ownership;
- novel product launches, particularly where digital or cross-border elements are significant;
- material regulatory investigations, enforcement matters or significant incident reporting.
How an external legal team can assist (scope of services)
External lawyers and compliance advisers commonly provide services including regulatory gap analysis, drafting of licence applications, assistance with fitness and propriety submissions, review of policies and contracts, dispute resolution support, and liaison with supervisors. TRW Law Firm colleagues provide these types of services; see related practice area pages for scope and team information: our practices, financial services regulatory lawyers, and services.Documentation and record-keeping
Regulators place significant emphasis on the availability and quality of records. Common record types include customer identification records, transaction logs, board minutes, credit files, audit reports and regulatory submissions. Institutions should maintain retention schedules aligned with legal requirements and ensure records are accessible for regulatory review.Enforcement and consequences of non-compliance
Consequences for non-compliance may include administrative penalties, directions to remedy deficiencies, restrictions on business activities, or licence revocation under statutory regimes. The appropriate response depends on the nature and severity of the breach and the regulator's application of statutory powers. Where an institution faces regulatory action, immediate legal advice is normally advisable to manage disclosure obligations and remedial steps.Common operational questions
The following practical questions are commonly posed by in-house teams and prospective market entrants:- How strict are fit and proper requirements for board members? (They are material in licensing assessments; expectations cover competence, integrity and time commitment.)
- Can a foreign entity hold a majority stake in a bank? (Ownership rules vary by licence type and regulatory policy; evaluation of investor suitability is part of the licensing review.)
- What are typical AML customer due diligence requirements? (CDD expectations are risk-based and include identity verification, source-of-funds checks and enhanced due diligence for higher-risk relationships.)
- How do regulators approach outsourcing of critical services? (Supervisors expect robust due diligence, contractual protections and ongoing oversight of material service providers.)
Five practical FAQs
Q: What is the main regulatory body for banks in Bangladesh?
A: The main regulatory authority responsible for supervising banks in Bangladesh is the Bangladesh Bank; for formal regulatory statements and circulars consult the Bangladesh Bank website or the official text of relevant instruments.Q: How can banks ensure compliance with the legal framework?
A: Banks can promote compliance by maintaining current policies and procedures, conducting regular staff training, implementing risk-based controls and seeking legal and regulatory advice for complex or novel matters.Q: What are the consequences of non-compliance with banking regulations?
A: Consequences may include administrative penalties, directions to remedy deficiencies, restrictions on activities or, in extreme cases, revocation of licence; outcomes depend on the statutory framework and supervisory discretion in the particular case.Q: Are there specific requirements for digital banks in Bangladesh?
A: Digital banking operations are subject to prudential, security and consumer-protection expectations; banks operating digital channels should review the latest Bangladesh Bank guidance and ensure controls for data protection, authentication and transaction monitoring are in place.Q: How can TRW Law Firm assist banks in Bangladesh?
A: TRW Law Firm can assist by providing regulatory advice, preparing licence applications, reviewing compliance frameworks, advising on AML and consumer protection matters, and supporting regulatory engagement; specific services should be agreed after assessing the client's factual circumstances.Additional resources and contact points
Primary sources and official notices are available from the Bangladesh Bank; for further information on firm services and contacts see our firm pages: our firm, leading arbitration lawyer, and contact. For matters involving taxation or cross-border tax effects, consult a tax specialist such as those listed on tax lawyers.Concluding remarks
The regulatory environment for banks in Bangladesh combines statutory requirements, supervisory standards and evolving guidance reflecting technological and financial-sector developments. Institutions should maintain a proactive compliance posture, monitor regulatory communications, and obtain tailored legal advice for matters that could affect licensing, capital adequacy or enforcement risk. The content in this article is explanatory and non-exhaustive; readers should consult the primary authorities or qualified advisers for authoritative guidance.Book consultation or contact us by email at info@trw.org for specific matters requiring tailored legal advice.Bring the facts.
We bring direction.
For a focused discussion about a dispute, regulatory issue or procedural question, speak with TRW Law Firm. General information on this page is not legal advice.