Sri Lanka (LK)
Lead Signal
Sri Lanka enters the World Payments Monitor's coverage this cycle with its first full baseline, and the standout finding is the 2023 formalisation of market-conduct supervision. The Central Bank of Sri Lanka's Financial Consumer Protection Regulations No. 01 of 2023 establish the country's first comprehensive market-conduct supervision regime, extending across all CBSL-regulated payment service providers rather than banks alone. The shift is structural rather than incremental: conduct oversight had previously sat as an adjunct to prudential supervision, whereas the 2023 Regulations create a standalone regime administered through the Financial Consumer Relations Department, with dedicated enforcement and referral powers reaching non-compliant conduct to competent authorities. That conduct build-out sits alongside a parallel expansion of the licensing perimeter: a dedicated regulation for money and value transfer service providers, Regulations No.01 of 2024 of 30 April 2024, brought MVTS providers under a CBSL licensing track separate from card and mobile-payment licensing, and payment-initiation and account-information PSPs are now required to hold professional indemnity insurance and to undertake AML/CFT risk assessments. Read together, these three instruments represent the most significant tightening of the non-bank payments perimeter since the Payment and Settlement Systems Act No. 28 of 2005 first vested the Central Bank of Sri Lanka as the sole authority able to license or operate a payment system in the country.
Outlook
The next several review cycles should watch three things in particular: whether the FIU's VASP registration roadmap converts into an enacted FTRA amendment ahead of the 2026 mutual evaluation, since no confirmed parliamentary timeline currently exists; whether CBSL issues any primary-source confirmation, or retraction, of the April 2026 tourism-sector stablecoin claim; and how the mutual evaluation outcome itself feeds through to correspondent banking continuity and the broader tightening trajectory already visible across the 2023-2024 conduct and licensing build-out. Commercial and investment activity in the interim looks set to remain dominated by multilateral development finance rather than private M&A or venture capital, reflecting a comparatively thin private capital market relative to regional fintech peers.
Other Developments
Beneath the conduct and licensing headline, the baseline surfaces a cluster of secondary developments. On card and scheme compliance, CBSL's Payments Bulletin for the third quarter of 2025 records 14 Licensed Commercial Banks and 4 Licensed Finance Companies as authorised card issuers and acquirers, while a separate Retail Payment Services and Card Schemes Regulation now brings card scheme operators themselves — not just issuers and acquirers — within CBSL's licensing perimeter, with a one-year transition window for incumbent schemes. Enforcement activity has been active: Nation Lanka Finance PLC had its licence cancelled effective 4 July 2025 under CBSL's resolution powers, following continuous Finance Business Act violations, and the Banking (Amendment) Act No. 24 of 2024 has meanwhile handed CBSL administrative fine powers that extend its enforcement toolkit beyond simple licence suspension or cancellation.
On digital assets, Sri Lanka continues to operate without a dedicated stablecoin or virtual-asset statute, leaving crypto in a legal grey zone in which holding is not banned but banks have been barred since 2021 from processing crypto-linked card payments. The Financial Intelligence Unit has launched a mandatory VASP survey and a registration roadmap ahead of the 2026 mutual evaluation, aiming at FATF-aligned AML/CFT requirements for virtual asset service providers. A separate claim that CBSL-linked payment service providers enabled stablecoin payments for the tourism sector in April 2026 could not be corroborated against CBSL's own circulars or news pages during review and has been downgraded to Possible confidence pending official confirmation; it should be treated as unverified.
Operational resilience rests on a Technology Risk and Resilience Framework that mandates round-the-clock security operations centres, annual penetration testing and cloud-risk notification for licensed finance companies. A claim that the CBSL Real-Time Gross Settlement system completed an ISO 20022 upgrade in 2024 rests on a single vendor source and was downgraded from Confirmed to Assessed on review, since CBSL's own 2026 Policy Agenda references a Payment System Roadmap for 2025-2027 without confirming a completed migration.
On corridors, worker remittances remain Sri Lanka's dominant non-debt-creating foreign-exchange inflow, historically covering approximately 80 percent of the trade deficit, with the Middle East corridor — home to roughly 660,000 migrant workers — accounting for around half of total inflows and correspondingly exposed to regional conflict risk. In industry structure, the banking sector (24 Licensed Commercial Banks, 6 Licensed Specialised Banks and roughly 34 Licensed Finance Companies) continues to dominate financial-sector assets, and the International Finance Corporation has announced a USD 166 million investment programme across three private commercial banks — Nations Trust Bank, Commercial Bank of Ceylon and National Development Bank — combining loans, risk-sharing facilities and trade-finance guarantees aimed at SME and payments-adjacent lending. On product development, GovPay launched in February 2025 as the first of a planned trio of unified government digital-payment platforms, building on the CEFTS instant-payment switch that has provided 24/7 interbank transfers since 2015. On consumer protection, Sri Lanka has no mandatory authorised-push-payment fraud reimbursement scheme comparable to the UK's Payment Systems Regulator model, relying instead on FCRD complaint handling, public-awareness warnings and CBSL circulars tightening customer identification.
Cross-Monitor Connections
Sri Lanka's third FATF/APG mutual evaluation, due in 2026 under a revised effectiveness-focused methodology with virtual-asset supervision a specific point of focus, is the connective thread across this baseline. The AML/CFT legal framework itself — resting on the Prevention of Money Laundering Act, the Financial Transactions Reporting Act and the Convention on the Suppression of Terrorist Financing Act — is carried in this brief via the Sentinel.gi feed as provenance only; the World Payments Monitor does not perform independent illicit-finance analysis of that framework. What is squarely within scope here is the payments-market consequence: the Financial Intelligence Unit itself has warned that continuity of correspondent banking access depends on Sri Lanka avoiding grey-listing at the 2026 evaluation, a dependency made sharper by the fact that Citibank is reported as the sole direct US correspondent bank serving the country, with all other domestic banks reliant on correspondent relationships abroad. A grey-list outcome would be expected to trigger counter-measures from partner jurisdictions with knock-on effects for credit ratings and insurance risk premia. This correspondent-banking exposure, together with the still-unresolved stablecoin/VASP legislative gap, has been flagged to the Financial Intelligence Monitor as carrying illicit-finance and sanctions-evasion significance beyond the World Payments Monitor's market-access and conduct remit.
Domains
14 regulatory modules · click to expand the full sub-briefLicensing, Authorisation & Market Access
ConfirmedThe Payment and Settlement Systems Act No.
Conduct, Safeguarding & Promotions
ConfirmedMarket-conduct supervision in Sri Lanka was formalised for the first time via the Financial Consumer Protection Regulations No.
Stablecoins & Digital Money
AssessedSri Lanka has no dedicated stablecoin or virtual-asset statute in force, leaving crypto in a legal grey zone: holding is not banned, but banks have been barred since 2021 from processing crypto-linked card payments.
Operational Resilience & Critical Infrastructure
ConfirmedLicensed finance companies operate under a Technology Risk and Resilience Framework that mandates round-the-clock security operations centres, annual penetration testing and cloud-adoption risk assessment, with notification to CBSL required before critical systems move to cloud.
Scheme & Network Compliance
HighCBSL's Payments Bulletin for the third quarter of 2025 records 14 Licensed Commercial Banks and 4 Licensed Finance Companies as authorised card issuers and acquirers.
Payment Corridor Dynamics
HighWorker remittances remain Sri Lanka's largest non-debt-creating foreign-exchange inflow, historically covering approximately 80 percent of the trade deficit; the Foreign Remittance Facilitation Department was established in November 2021 to streamline these flows.
Full per-domain detail — all 14 modules
W1aConfirmedLicensing, Authorisation & Market Access
see this theme across all jurisdictions →6 claimsCBSL is the sole payments regulator under the PSS Act No. 28 of 2005; card issuers/acquirers and mobile payment/e-money operators are licensed under the Payment Cards and Mobile Payment Systems Regulations No. 1 of 2013; money/value transfer service providers were brought under a dedicated CBSL regulation in 2024; a FinTech Regulatory Sandbox has operated since 2018/2020 for pre-licensing testing.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Licensing, Authorisation & Market Access
The Payment and Settlement Systems Act No. 28 of 2005 vests the Central Bank of Sri Lanka as the sole authority able to license or operate a payment system in the country; no other legal entity may commence or operate one without CBSL authorisation. Card issuers and acquirers, and mobile-payment operators, are licensed under a separate 2013 regulation, and in 2024 the Central Bank extended the licensing perimeter again: Regulations No.01 of 2024, dated 30 April 2024, brought money and value transfer service providers under a dedicated CBSL licensing and registration track distinct from card and mobile-payment licensing.
Outlook
Watch for further extension of the licensing perimeter as MVTS and card-scheme licensing beds in, and for how the FinTech Regulatory Sandbox interacts with new entrant testing under this expanding authorisation framework.
CBSL is the sole payments regulator under the PSS Act No. 28 of 2005; card issuers/acquirers and mobile payment/e-money operators are licensed under the Payment Cards and Mobile Payment Systems Regulations No. 1 of 2013; money/value transfer service providers were brought under a dedicated CBSL regulation in 2024; a FinTech Regulatory Sandbox has operated since 2018/2020 for pre-licensing testing.
Evidence — 6 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Market-conduct supervision was formalised for the first time in Sri Lanka via the Financial Consumer Protection Regulations No. 01 of 2023, administered by CBSL's FCRD; retail-payment-service PSPs offering payment initiation/account-information services must hold professional indemnity insurance and undertake AML/CFT risk assessments; conduct rules apply uniformly across CBSL-regulated FSPs including PSPs and card schemes.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Conduct, Safeguarding & Financial Promotions
Market-conduct supervision in Sri Lanka was formalised for the first time via the Financial Consumer Protection Regulations No. 01 of 2023, administered by the Central Bank's Financial Consumer Relations Department, which holds full enforcement and referral powers over CBSL-regulated financial service providers. The conduct perimeter extends to non-bank payment service providers directly: firms offering payment-initiation and account-information services are required to hold professional indemnity insurance and to carry out an AML/CFT risk assessment, a conduct-adjacent obligation that sits alongside, rather than substitutes for, prudential licensing.
Outlook
Expect the Financial Consumer Relations Department's enforcement caseload to grow as the 2023 conduct regime beds in across both bank and non-bank PSPs; the professional-indemnity-insurance requirement for payment-initiation and account-information providers remains capped at Assessed confidence pending a T1 CBSL confirmation of the specific insurance quantum.
Market-conduct supervision was formalised for the first time in Sri Lanka via the Financial Consumer Protection Regulations No. 01 of 2023, administered by CBSL's FCRD; retail-payment-service PSPs offering payment initiation/account-information services must hold professional indemnity insurance and undertake AML/CFT risk assessments; conduct rules apply uniformly across CBSL-regulated FSPs including PSPs and card schemes.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sri Lanka has no dedicated stablecoin/virtual-asset statute in force; crypto exists in a legal grey zone. The FIU is running a mandatory VASP survey and CBSL has proposed FTRA amendments to bring VASPs under AML/CFT registration, with a licensing bill still pending as of mid-2026; a narrow tourism-sector stablecoin-payment channel via licensed intermediaries was reportedly piloted in 2026 (unconfirmed by CBSL primary sources), and CBDC exploration was shelved in 2023 on IMF concerns.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Stablecoins & Digital Money
Sri Lanka has no dedicated stablecoin or virtual-asset statute in force, leaving crypto in a legal grey zone: holding is not banned, but banks have been barred since 2021 from processing crypto-linked card payments. Ahead of the country's third FATF/APG mutual evaluation, the Financial Intelligence Unit has launched a mandatory VASP survey and a registration roadmap aimed at bringing virtual asset service providers under FATF-aligned AML/CFT requirements. A separate report describes CBSL-linked payment service providers enabling stablecoin payments — reportedly USDT and USDC — for the tourism sector from April 2026; this claim rests on a single specialist crypto-news source and could not be corroborated against CBSL's own circulars or news pages during review, so it is carried here at Possible confidence only and should be treated as unverified pending official confirmation.
Outlook
The decisive variable is whether the FIU's VASP roadmap converts into an enacted FTRA amendment before the 2026 mutual evaluation; no confirmed parliamentary timeline for such a bill currently exists, and the unverified tourism stablecoin claim should either be corroborated by a CBSL primary source or retracted next cycle.
Sri Lanka has no dedicated stablecoin/virtual-asset statute in force; crypto exists in a legal grey zone. The FIU is running a mandatory VASP survey and CBSL has proposed FTRA amendments to bring VASPs under AML/CFT registration, with a licensing bill still pending as of mid-2026; a narrow tourism-sector stablecoin-payment channel via licensed intermediaries was reportedly piloted in 2026 (unconfirmed by CBSL primary sources), and CBDC exploration was shelved in 2023 on IMF concerns.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
W3ConfirmedOperational Resilience & Critical Infrastructure
see this theme across all jurisdictions →4 claimsCBSL regulates technology/cyber risk via Banking Act Directions No. 16 of 2021 (amended Dec 2023) and a parallel Technology Risk & Resilience framework for licensed finance companies; licensed banks must report IT/cybersecurity incidents to CBSL; the RTGS backbone is reported to have been upgraded to ISO 20022 in 2024 (not confirmed by CBSL primary sources).
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Operational Resilience & Critical Infrastructure
Licensed finance companies operate under a Technology Risk and Resilience Framework that mandates round-the-clock security operations centres, annual penetration testing and cloud-adoption risk assessment, with notification to CBSL required before critical systems move to cloud. A separate claim that the CBSL Real-Time Gross Settlement system completed an ISO 20022 upgrade in 2024 rests on a single vendor knowledge-base source; CBSL's own 2026 Policy Agenda references a Payment System Roadmap for 2025-2027 without confirming a completed migration, so this claim has been downgraded from Confirmed to Assessed pending primary-source verification.
Outlook
The resilience framework itself is well established, but the RTGS ISO 20022 migration status should be treated as unconfirmed until CBSL publishes primary documentation; watch the 2025-2027 Payment System Roadmap for a definitive statement.
CBSL regulates technology/cyber risk via Banking Act Directions No. 16 of 2021 (amended Dec 2023) and a parallel Technology Risk & Resilience framework for licensed finance companies; licensed banks must report IT/cybersecurity incidents to CBSL; the RTGS backbone is reported to have been upgraded to ISO 20022 in 2024 (not confirmed by CBSL primary sources).
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Card-scheme and network compliance rests on the Payment Cards and Mobile Payment Systems Regulations No. 1 of 2013 and the Credit Card Operational Guidelines No. 1 of 2010; CBSL's own national card scheme (LankaPay, with JCB International) operates as a lower-cost domestic alternative to international schemes; the Retail Payment Services and Card Schemes regulation extended licensing to Card Scheme operators themselves.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Scheme & Network Compliance
CBSL's Payments Bulletin for the third quarter of 2025 records 14 Licensed Commercial Banks and 4 Licensed Finance Companies as authorised card issuers and acquirers. Card schemes themselves — not just issuing and acquiring banks — now require a CBSL licence under the Retail Payment Services and Card Schemes Regulation, with existing schemes given a one-year transition period to obtain one.
Outlook
Watch for the transition period's expiry to confirm which incumbent card schemes have secured licences, and for any interchange-fee guidance, an area where no cap regulation currently exists in Sri Lanka.
Card-scheme and network compliance rests on the Payment Cards and Mobile Payment Systems Regulations No. 1 of 2013 and the Credit Card Operational Guidelines No. 1 of 2010; CBSL's own national card scheme (LankaPay, with JCB International) operates as a lower-cost domestic alternative to international schemes; the Retail Payment Services and Card Schemes regulation extended licensing to Card Scheme operators themselves.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Worker remittances are Sri Lanka's largest non-debt-creating FX inflow, roughly half originating from the Middle East and channelled through banks, exchange houses and the Lanka Remit app; a China-tourism corridor runs via LANKAQR-UnionPay integration; the India corridor remains restricted to formal banking channels.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Payment Corridor Dynamics
Worker remittances remain Sri Lanka's largest non-debt-creating foreign-exchange inflow, historically covering approximately 80 percent of the trade deficit; the Foreign Remittance Facilitation Department was established in November 2021 to streamline these flows. The Middle East corridor accounts for roughly half of total worker remittances and is home to an estimated 660,000 Sri Lankan migrant workers, leaving this single corridor exposed to regional conflict risk.
Outlook
The Middle East corridor's weight in total remittance inflows makes it the single largest corridor-level vulnerability in the payments system; any escalation of regional conflict risk would be expected to show up quickly in remittance-flow data and FX-inflow coverage of the trade deficit.
Worker remittances are Sri Lanka's largest non-debt-creating FX inflow, roughly half originating from the Middle East and channelled through banks, exchange houses and the Lanka Remit app; a China-tourism corridor runs via LANKAQR-UnionPay integration; the India corridor remains restricted to formal banking channels.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Sri Lanka's bank-dominated financial sector comprises 24 Licensed Commercial Banks, 6 Licensed Specialised Banks and ~34-37 Licensed Finance Companies, with state-owned banks holding roughly half of banking assets; a growing fintech layer coexists with banks; multilateral development finance (IFC) is actively recapitalising private commercial banks.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Industry Structure & Commercial Dynamics
Sri Lanka's financial sector remains bank-dominated: 24 Licensed Commercial Banks, 6 Licensed Specialised Banks and roughly 34 Licensed Finance Companies account for the great majority of financial-sector assets, with state-owned banks holding a substantial share of banking-sector assets. Against this backdrop, the International Finance Corporation announced a USD 166 million investment programme spanning loans, risk-sharing facilities and a trade-finance guarantee across three private commercial banks — Nations Trust Bank, Commercial Bank of Ceylon and National Development Bank — aimed at expanding SME and payments-adjacent lending.
Outlook
The IFC programme is currently the dominant commercial-structure signal in Sri Lankan banking; watch for whether other DFIs follow with comparable recapitalisation programmes, and for any resulting shift in the balance between state-owned and private commercial banks.
Sri Lanka's bank-dominated financial sector comprises 24 Licensed Commercial Banks, 6 Licensed Specialised Banks and ~34-37 Licensed Finance Companies, with state-owned banks holding roughly half of banking assets; a growing fintech layer coexists with banks; multilateral development finance (IFC) is actively recapitalising private commercial banks.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Recent enforcement centres on CBSL's expanded resolution and administrative-fine powers under the Banking (Special Provisions) Act No. 17 of 2023 and the Banking (Amendment) Act No. 24 of 2024: a finance-company licence cancellation (Nation Lanka Finance PLC, July 2025), unauthorised deposit-taking enforcement, and an internal-fraud disclosure at NDB (2026) are the most current live matters.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Legal & Litigation
Nation Lanka Finance PLC had its licence cancelled effective 4 July 2025 under the Central Bank's resolution powers, following continuous violations of the Finance Business Act; an Administrator was appointed to manage the wind-down. This action draws on an enforcement toolkit that has itself been strengthened: the Banking (Amendment) Act No. 24 of 2024 granted CBSL administrative fine powers that extend its supervisory reach beyond the older binary of licence suspension or cancellation.
Outlook
Expect further resolution or enforcement actions to be tested against this newly expanded toolkit; the Nation Lanka Finance PLC wind-down remains the clearest live test case of CBSL's resolution powers under the 2023 Banking (Special Provisions) Act framework.
Recent enforcement centres on CBSL's expanded resolution and administrative-fine powers under the Banking (Special Provisions) Act No. 17 of 2023 and the Banking (Amendment) Act No. 24 of 2024: a finance-company licence cancellation (Nation Lanka Finance PLC, July 2025), unauthorised deposit-taking enforcement, and an internal-fraud disclosure at NDB (2026) are the most current live matters.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Merchant acquiring is licensed under the Payment Cards and Mobile Payment Systems Regulations, with a blend of bank acquirers and fintech PSPs offering preferential LankaPay-linked fees; fraud risk is moderate but growing, with 3DS/velocity checks recommended; cross-border settlements carry withholding tax and VAT considerations.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Merchant Acquiring & Risk
Merchant acquiring in Sri Lanka blends bank acquirers and fintech payment service providers, with LankaPay-linked fee incentives positioned as a lower-cost domestic alternative to international-scheme acquiring costs. Card-testing fraud is an active operational concern, with 3D Secure authentication and velocity checks recommended as standard controls, and cross-border merchant settlement carries a roughly 14 percent withholding tax and 8 percent VAT.
Outlook
Watch for further formalisation of acquiring-side fraud controls as card-not-present volumes grow, and for how the LankaPay fee-incentive structure evolves relative to the international card schemes now themselves subject to CBSL licensing.
Merchant acquiring is licensed under the Payment Cards and Mobile Payment Systems Regulations, with a blend of bank acquirers and fintech PSPs offering preferential LankaPay-linked fees; fraud risk is moderate but growing, with 3DS/velocity checks recommended; cross-border settlements carry withholding tax and VAT considerations.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Product innovation is anchored around CBSL/LankaClear infrastructure: CEFTS, LANKAQR, GovPay (launched Feb 2025), a national card scheme co-branded with JCB, and an active FinTech Regulatory Sandbox; CBDC work has been paused since 2023.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Product Innovation & Market Development
The CEFTS instant-payment switch has provided 24/7 interbank fund transfers since 2015, with request-to-pay functionality and no cut-off times, forming the core real-time payments backbone. GovPay launched on 7 February 2025 as the first of a planned trio of unified government digital-payment platforms, built within the existing legal framework rather than requiring new primary legislation.
Outlook
Watch for the second and third instalments of the government's digital-payment platform trio to follow GovPay, and for whether CEFTS-linked infrastructure is extended further into cross-border or corridor-specific use cases.
Product innovation is anchored around CBSL/LankaClear infrastructure: CEFTS, LANKAQR, GovPay (launched Feb 2025), a national card scheme co-branded with JCB, and an active FinTech Regulatory Sandbox; CBDC work has been paused since 2023.
Evidence — 5 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
Consumer protection runs through the Financial Consumer Protection Regulations No. 01 of 2023 and the FCRD complaint-handling/CMS infrastructure; there is no statutory mandatory APP-fraud reimbursement scheme; CBSL instead relies on public-awareness warnings, mandatory SMS alerting, and 2024 circulars tightening customer identification for mobile-payment-linked accounts.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Consumer Protection & APP Fraud
The Financial Consumer Relations Department operates a Complaint Management System accessible 24/7, assigning Complaint Reference Numbers and referring non-compliant conduct to competent authorities. Sri Lanka has no mandatory authorised-push-payment fraud reimbursement scheme comparable to the UK's Payment Systems Regulator model; instead, CBSL relies on public-awareness warnings, mandatory SMS alerting and circulars tightening customer identification for mobile-payment-linked accounts.
Outlook
The absence of a mandatory APP-fraud reimbursement scheme remains a structural gap relative to reimbursement-model jurisdictions; watch for whether the FCRD's complaint-handling data eventually builds a case for a mandatory scheme.
Consumer protection runs through the Financial Consumer Protection Regulations No. 01 of 2023 and the FCRD complaint-handling/CMS infrastructure; there is no statutory mandatory APP-fraud reimbursement scheme; CBSL instead relies on public-awareness warnings, mandatory SMS alerting, and 2024 circulars tightening customer identification for mobile-payment-linked accounts.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
W11HighAML/CFT & Financial Crime (Sentinel.gi-fed)
Sentinelsee this theme across all jurisdictions →8 claimsSri Lanka's AML/CFT regime rests on the PMLA (2006), FTRA (2006) and CSTFA (2005), supervised by the FIU within CBSL under a National AML/CFT Policy 2023-2028; the country was grey-listed twice and delisted twice, and is undergoing its third FATF/APG mutual evaluation in 2026 under a revised effectiveness-focused methodology, with virtual-asset supervision (R.15) a key focus.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
AML/CFT & Financial Crime
This module carries Sentinel.gi-fed intelligence as provenance only; the World Payments Monitor does not perform independent illicit-finance analysis and readers should consult the Sentinel.gi feed directly for underlying AML/CFT detail. Sri Lanka's AML/CFT legal framework rests on the Prevention of Money Laundering Act, the Financial Transactions Reporting Act and the Convention on the Suppression of Terrorist Financing Act. The country is undergoing its third FATF/APG mutual evaluation in 2026 under a revised, effectiveness-focused methodology, with virtual-asset supervision under Recommendation 15 identified as a key focus area.
Outlook
The 2026 mutual evaluation outcome is the single largest AML/CFT-adjacent variable for Sri Lanka's payments sector this cycle; see the Sentinel.gi feed for ongoing illicit-finance analysis and the Financial Intelligence Monitor for the cross-monitor read-through on correspondent-banking and sanctions exposure.
Sri Lanka's AML/CFT regime rests on the PMLA (2006), FTRA (2006) and CSTFA (2005), supervised by the FIU within CBSL under a National AML/CFT Policy 2023-2028; the country was grey-listed twice and delisted twice, and is undergoing its third FATF/APG mutual evaluation in 2026 under a revised effectiveness-focused methodology, with virtual-asset supervision (R.15) a key focus.
Evidence — 8 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- True
Event Findings
Correspondent banking access remains bank-mediated and FATF-status-sensitive: only Citibank operates directly as a US bank, while domestic commercial banks rely on correspondent relationships abroad; FIU has flagged that continuation depends on staying off the FATF grey list ahead of the 2026 mutual evaluation. Domestic settlement runs through CBSL's RTGS system and the US Dollar Cheque Clearing System.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Correspondent Banking, Settlement & Access
Correspondent banking access in Sri Lanka remains bank-mediated and asymmetric: domestic commercial banks depend on correspondent relationships abroad, and Citibank is reported as the sole bank operating as a direct US correspondent for the country. That dependency is explicitly FATF-status-sensitive — the Financial Intelligence Unit has warned that continuity of correspondent banking access depends on Sri Lanka avoiding grey-listing at the 2026 mutual evaluation, since a grey-list outcome would be expected to trigger counter-measures from partner jurisdictions with knock-on effects for credit ratings and insurance risk premia.
Outlook
Correspondent banking continuity is the single clearest transmission channel between Sri Lanka's AML/CFT evaluation outcome and its payments-market access; the bank-mediated, single-correspondent structure means that any adverse 2026 mutual evaluation finding would be expected to propagate quickly into cross-border settlement capacity for domestic banks.
Correspondent banking access remains bank-mediated and FATF-status-sensitive: only Citibank operates directly as a US bank, while domestic commercial banks rely on correspondent relationships abroad; FIU has flagged that continuation depends on staying off the FATF grey list ahead of the 2026 mutual evaluation. Domestic settlement runs through CBSL's RTGS system and the US Dollar Cheque Clearing System.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False
Event Findings
W13AssessedCommercial Intelligence (M&A, Investment & Product)
see this theme across all jurisdictions →4 claimsTrailing-12-month commercial activity in Sri Lankan payments/fintech is dominated by multilateral development financing rather than private M&A: a large IFC bank-recapitalisation package, GovPay's public-sector platform launch, and a cross-border fintech-sandbox partnership are the standout events; disclosed private equity/VC funding remains thin.
No periodic updates yet · baseline brief is current.
Read the full sub-brief
Commercial Intelligence (M&A, Investment & Product)
Three discrete commercial events anchor this cycle. The International Finance Corporation announced a USD 166 million investment programme — a USD 50 million loan, USD 80 million in risk-sharing facilities and a USD 36 million trade-finance guarantee — across Nations Trust Bank, Commercial Bank of Ceylon and National Development Bank, targeting SME and payments-adjacent lending expansion. GovPay launched on 7 February 2025 as the first of a planned trio of unified government digital-payment platforms; the launch value was not publicly disclosed. Separately, the FinTech Association of Sri Lanka announced a strategic collaboration with Singapore's APIX Platform, supporting cross-border fintech-sandbox connectivity across South and Southeast Asia; deal terms were not publicly disclosed.
Outlook
Commercial activity in Sri Lankan payments remains dominated by multilateral development finance rather than private M&A or venture capital; disclosed private-capital signal remains thin, and the next test will be whether the FASL-APIX collaboration produces any disclosed sandbox deal-flow.
Trailing-12-month commercial activity in Sri Lankan payments/fintech is dominated by multilateral development financing rather than private M&A: a large IFC bank-recapitalisation package, GovPay's public-sector platform launch, and a cross-border fintech-sandbox partnership are the standout events; disclosed private equity/VC funding remains thin.
Evidence — 4 structured claims
Key facts
- Content Tier
- SB
- Sentinel Feed
- False