2026 is not a routine year for Swiss anti-money-laundering compliance. Three strands of reform are converging at once: a partial revision of the FINMA Anti-Money Laundering Ordinance (AMLO-FINMA), the entry into force of the Federal Act on the Transparency of Legal Entities (LETA) together with a revised Anti-Money Laundering Act (AMLA), and the arrival of a federal beneficial-ownership register. Behind these instruments sits a single supervisory intention that will outlast any individual article: examiners increasingly want to see that controls work, not merely that they exist.
This article is a practical readiness guide for Chief Compliance Officers and Heads of KYC at Swiss banks and External Asset Managers (EAMs). It explains what is actually changing, where the operational pressure will land, and how to close the gap between having a control framework on paper and being able to demonstrate its effectiveness on demand.
1. The 2026 regulatory picture at a glance
Several timelines are running in parallel, and the practical challenge is that they land on the same teams, the same onboarding files, and the same monitoring systems.
The revised AMLO-FINMA. FINMA opened a consultation on 12 May 2026 on a partial revision of the Anti-Money Laundering Ordinance, running until 9 June 2026. The revision reinforces the requirement to understand a client's structure and clarifies the treatment of payable-through accounts and sub-accounts — an area with direct consequences for the bank–EAM relationship (see section 3).
LETA and the revised AMLA. From 1 October 2026, the Federal Act on the Transparency of Legal Entities (LETA), together with a revised AMLA, introduces a federal beneficial-ownership register and tightens the obligation to identify the natural person who ultimately controls a legal entity — regardless of how many offshore layers sit in between. Thresholds for capturing beneficial ownership are lowered, and the population of persons who must be identified expands.
The EU backdrop. In parallel, the EU's anti-money-laundering package establishes a new supervisory authority, AMLA, with direct supervisory powers over selected high-risk entities, alongside a single rulebook covering risk-based customer due diligence, enhanced due diligence for high-risk relationships, ongoing transaction monitoring, and documented periodic reviews. Swiss institutions with EU-facing activity, correspondent relationships, or cross-border clients cannot treat this as someone else's problem.
| Milestone | Timing | What it changes | Primary impact |
|---|---|---|---|
| AMLO-FINMA consultation | 12 May – 9 June 2026 | Client-structure understanding; payable-through accounts / sub-accounts (art. 37) | Banks and EAMs, especially bank–EAM setups |
| LETA + revised AMLA | From 1 October 2026 | Ultimate-beneficial-owner identification across offshore layers; lowered thresholds | Onboarding and KYC file content |
| Federal beneficial-ownership register | From 1 October 2026 | Central register of ultimate natural persons | Data collection, verification and update duties |
| EU AML package / AMLA | Phasing in | Single rulebook; direct EU supervision of high-risk entities | Cross-border and EU-facing relationships |
The common thread is that none of these reforms rewards a static, once-a-year approach. Each assumes information that is current, traceable and defensible.
2. Beneficial ownership: finding the ultimate natural person
The centre of gravity in 2026 is beneficial ownership. The direction of travel is unambiguous: intermediaries must identify the natural person who ultimately owns or controls a legal entity, irrespective of the number of intermediate holding companies, trusts or offshore vehicles interposed between the client and that person.
What changes in practice
Three shifts matter for onboarding teams. First, lowered thresholds mean that individuals who previously fell below the capture line now have to be identified and documented. Second, the layered-structure rule removes the option of stopping at the first foreign entity in the chain — the analysis must run all the way to a natural person. Third, the federal register creates a reference point that institutions will be expected to consult, reconcile against their own findings, and — where discrepancies appear — investigate and, in defined cases, report.
For a private bank or an EAM onboarding a company owned through two or three intermediate vehicles across different jurisdictions, this is where the manual model breaks down. Reconstructing an ownership chain by hand — requesting registry extracts, translating them, mapping shareholdings, and re-verifying at each periodic review — is exactly the kind of work that takes 2 to 4 hours per file and stretches complex onboarding to four to six weeks.
Why the register raises the bar rather than lowering it
A central register is often described as a simplification. In compliance terms it is the opposite: it creates a second source of truth that your own file must be reconciled against. A mismatch between what the register says and what your KYC file concludes is no longer a private matter — it is a potential discrepancy you are expected to detect, resolve and document. The institutions that will cope best are those that can reconstruct an ownership chain, compare it against the register, and evidence the comparison in minutes rather than days.
3. Payable-through accounts and the bank–EAM relationship
The revised article 37 AMLO-FINMA addresses payable-through accounts and sub-accounts, and this is where EAMs and their custodian banks need to pay close attention. In substance, an intermediary may only execute payments for the clients of a counterparty where that counterparty supplies the necessary customer due-diligence information — including the KYC profile of the end clients.
For the bank–EAM relationship this formalises something that has long been a grey zone. The custodian bank cannot treat the EAM as an opaque single client whose underlying end-clients are invisible. The EAM, in turn, must be able to hand over structured, current, verifiable KYC information on its end-clients — not a PDF bundle assembled the night before an audit.
The operational consequence
This is a data-exchange problem before it is a legal one. If an EAM's KYC files live in disconnected folders, spreadsheets and email threads, satisfying a custodian bank's request for end-client due-diligence information becomes a multi-day scramble each time. If, instead, the information is structured, versioned and shareable, the same request becomes a controlled export. The reform effectively rewards institutions whose KYC data is machine-readable and penalises those whose data is trapped in documents.
4. The bigger shift: from presence of controls to demonstrable effectiveness
Underneath the specific instruments lies the change that will define supervision for the rest of the decade. For years, an institution could satisfy an examiner by showing that a control existed: a screening tool was in place, a periodic-review policy was written, an onboarding checklist was signed. In 2026, that is no longer enough. Supervisors — Swiss and EU alike — increasingly ask for demonstrable effectiveness: evidence that the control produced the right outcome, at the right time, on this specific file.
What "demonstrable" actually requires
Demonstrable effectiveness has three properties that tick-box compliance does not.
It is traceable. Every decision — why a risk rating was assigned, why an alert was cleared, why a beneficial owner was accepted — must be reconstructable after the fact, with the underlying evidence attached and the decision-maker identified.
It is timely. A review completed eleven months late, or an alert closed after the reporting window, fails the test even if the eventual conclusion was correct. Effectiveness has a clock.
It is evidence-based. Conclusions must rest on documented sources — registry extracts, screening results, the reconciliation against the beneficial-ownership register — not on an analyst's recollection or an undated note.
The gap this exposes is uncomfortable. Many institutions have controls that are genuinely present and genuinely well-intentioned, yet cannot be demonstrated at speed, because the evidence is scattered across systems and the audit trail has to be rebuilt manually. That gap is precisely where 2026 supervision will apply pressure.
5. A concrete 2026 readiness checklist
The following is a practical checklist for closing the gap before it is tested. It is organised by the part of the compliance operation it touches.
Onboarding. Update intake to capture ultimate beneficial owners through layered structures, not just the first-tier holder. Build in reconciliation against the federal register as a standard step, with a documented outcome. Lower internal capture thresholds to match the revised rules.
KYC files. Ensure every file holds a reconstructable ownership chain, the sources behind each link, the register comparison, and a clear record of who concluded what and when. Replace free-text notes with structured, versioned data.
Bank–EAM data exchange. For EAMs: make end-client KYC information structured and exportable on demand, in line with revised article 37. For banks: define what you require from EAMs and how you will verify it, rather than accepting document bundles at face value.
Monitoring. Move from scheduled, calendar-driven periodic reviews toward continuous, event-driven monitoring so that changes in ownership, sanctions status or adverse media update the file when they happen — not at the next annual cycle.
Documentation and audit trail. Ensure every decision is traceable, timestamped and evidence-linked, and that a complete audit trail for any file can be produced on demand rather than reassembled.
| Readiness area | Tick-box posture (before) | Demonstrable-effectiveness posture (2026) |
|---|---|---|
| Beneficial ownership | First-tier holder recorded | Ultimate natural person, full chain, register-reconciled |
| Onboarding thresholds | Legacy thresholds | Lowered thresholds applied and documented |
| Bank–EAM data | Document bundles on request | Structured, versioned, exportable end-client KYC |
| Periodic review | Annual / calendar-driven | Continuous, event-driven (pKYC) |
| Audit trail | Rebuilt manually for audits | Reconstructable on demand, timestamped, evidence-linked |
| Decision record | Free-text notes | Structured, attributable, source-backed |
6. Why manual processes cannot deliver demonstrable effectiveness at scale
The uncomfortable conclusion is that manual and semi-manual processes are structurally incapable of meeting the 2026 standard at scale — not because analysts are careless, but because the required properties (traceable, timely, evidence-based, at volume) fight against how manual work behaves.
Consider the mechanics. Reconstructing beneficial ownership by hand takes 2 to 4 hours per file; automated resolution reduces it to minutes, a saving of around 95%. Standard onboarding that runs 15 to 21 days manually — and up to six weeks for complex structures — compresses to 2 to 3 hours when document collection, extraction, screening and risk scoring are orchestrated rather than sequential. Document collection alone drops from 5 to 10 days to under 24 hours.
Effectiveness is also a false-positive problem. Sanctions and PEP screening run manually produces false-positive rates of 90 to 99%, with each false positive costing roughly 30 to 60 minutes of analyst time; contextual AI scoring brings that rate down to 20 to 25% — around 75 points lower — so that the audit trail reflects genuine decisions rather than noise. Periodic review per file falls from 2 to 4 hours to 20 to 45 minutes, a reduction near 70%, and continuous, event-driven pKYC removes 70 to 90% of scheduled periodic-review work entirely by updating files when events occur rather than on a calendar.
The capacity effect compounds all of this. A KYC analyst handles 15 to 25 clients per month manually and 80 to 120 with automation — four to five times more — which matters because a loaded Swiss KYC analyst costs CHF 80,000 to 110,000 per year and takes months to hire and onboard. The cost per onboarded client falls from CHF 300–800 to CHF 50–150, roughly 75% lower.
| Metric | Manual | Automated (Wecan) | Improvement |
|---|---|---|---|
| Ultimate beneficial-owner identification | 2–4 hours/file | Minutes | −95% |
| Standard onboarding | 15–21 days | 2–3 hours | −97% time |
| Complex-structure onboarding | Up to 6 weeks | 1–2 days | −85% time |
| Document collection | 5–10 days | Under 24h | −90% time |
| Screening false-positive rate | 90–99% | 20–25% | ≈ −75 pts |
| Periodic review per file | 2–4 hours | 20–45 minutes | −70% |
| Clients per analyst per month | 15–25 | 80–120 | ~4–5× |
| Cost per onboarded client | CHF 300–800 | CHF 50–150 | ≈ −75% |
The point is not that automation is faster — though it is. The point is that speed, traceability and evidence are the same capability. A system that resolves a beneficial-ownership chain automatically also records how it did so; a system that clears a screening alert contextually also captures why. Demonstrable effectiveness is a by-product of automation, and extremely expensive to manufacture without it. Typical Year-1 net ROI on this kind of automation runs around 200–260%, with payback in three to four months — but in 2026 the stronger argument is defensibility, not cost.
7. How Wecan helps institutions get 2026-ready
Wecan Comply is built around exactly the properties 2026 supervision demands. Beneficial-ownership resolution runs through layered structures automatically and reconciles against register data, so the ultimate natural person — and the evidence behind that conclusion — is captured, not reconstructed later. For the bank–EAM relationship, end-client KYC information is held as structured, versioned data that can be shared under revised article 37 as a controlled export rather than a document scramble.
Monitoring is continuous and event-driven, so ownership changes, sanctions updates and adverse media reach the file when they occur, which is what turns a calendar-bound review model into perpetual KYC. And because every action leaves a timestamped, source-linked record, the audit trail for any file can be produced on demand — the practical definition of demonstrable effectiveness.
The 2026 reforms will separate institutions that can prove their controls work from those that merely have them. The distance between those two positions is measured in evidence, traceability and time — precisely the ground automation was built to cover.