This article was first published by BBrief in June/July 2026 Issue (pages 12-14)
Abstract
The Financial Intelligence Centre’s attempt to impose retrospective penalties for a period extending fully five years prior to the existence of any lawful authority is not merely misguided, it is a brazen affront to the rule of law. In purporting to punish conduct that fell entirely outside its statutory remit at the relevant time, the Centre has exhibited a form of bureaucratic arrogance that borders on the authoritarian. This is a flagrant abuse of power: An assertion of authority ex post facto that betrays a troubling institutional culture in which legal limits are treated as optional and citizens as subordinate to administrative whim. Such conduct reflects a contemptuous indifference to the most basic principles of legality and fairness, and raises serious questions about the discipline, restraint and accountability of those entrusted with the exercise of public power.
A regulator unmoored: Arrogance, overreach, and the failure of FICA orthodoxy
The recent judgment of the Gauteng High Court in Pretoria, rebuking the Financial Intelligence Centre (FIC) for unlawfully inflating penalties against a small law firm, ought to be read not as a narrow procedural correction, but as a moment of institutional exposure. In a constitutional state, the coercive powers of regulators derive their legitimacy from disciplined fidelity to the law, not from bureaucratic zeal. Where that discipline falters, authority curdles into arbitrariness.
At issue was a proposition so audacious that it scarcely bears restatement: That the FIC could levy administrative penalties for alleged non-compliance stretching back to 2017, fully five years before it acquired the supervisory authority to do so. This was not an error at the margins. It was a wholesale repudiation of the principle of legality. The regulator purported to exercise power it did not possess, over a period in which it had no jurisdiction, to magnify the quantum of punishment and the amount of money by which to swell its coffers.
More troubling still it was affirmed, without apparent hesitation, by the FIC’s own Board of Appeal; the body entrusted with internal oversight and restraint instead functioned as an echo chamber, endorsing an interpretation that any first-year law student would recognise as untenable. Such institutional self-affirmation in the face of manifest illegality speaks not merely to error, but to deviate culture.
The High Court’s correction was inevitable. The penalty must now be recalculated within the confines of the law. Yet the deeper question lingers: How did such an overreach come to be advanced and then vigorously defended?
Over the past two decades, South Africa has embraced an increasingly elaborate architecture of so called “anti-money laundering” (AML) controls: The Financial Intelligence Centre Act (FICA), know-your-customer (KYC) protocols, risk-based supervision and an ever-expanding, parasitic compliance industry. These measures are justified by reference to standards formulated by the Financial Action Task Force (FATF), whose endorsement has become the lodestar of regulatory “virtue”.
Yet for all their complexity, cost and intrusiveness, the empirical record of these regimes is, at best, equivocal. At worst, they are damning.
Globally it is now widely acknowledged – even within policy circles – that AML systems intercept a vanishingly small fraction of illicit financial flows. Estimates frequently cited in international studies suggest that well under 1% of global money laundering is ultimately detected and interdicted. The remaining 99% circulates with impunity through the very financial systems subjected to ever-tightening regulatory scrutiny.
Despite years of escalating compliance burdens, the South Africa continues to endure high-profile episodes of industrial-scale corruption, most notably the phenomenon of state capture and departmental corruption, in which vast sums are siphoned through formal financial channels with apparent ease. For all its procedural “rigour”, the machinery of KYC and FICA has not prevent these abuses. Nor has it meaningfully exposed them in real time.
On one hand, a sprawling compliance edifice with accompanying parasitic institutions, imposes onerous obligations on ordinary businesses, particularly small and medium-sized enterprises least equipped to absorb them. On the other, the architects of grand corruption navigate these controls with evident ease.
Deprived of demonstrable success, the FIC appears to have turned its extraordinarily excessive powers toward those least able to resist: small firms, family-run practices, and technical or administrative infractions. The result is a species of regulatory theatre, high in visibility, low in substantive impact, where penalties are pursued with vigour, but real criminality remains largely unscathed.
The law firm sought to demonstrate that it had taken concrete remedial steps to rectify compliance errors, including engaging a recognised KYC service provider. This is precisely the behaviour that a rational regulator should incentivise: Acknowledgement, correction, and future alignment.
The implications of the FIC’s Appeal Board dismissal are as stark as they are troubling: That remediation is irrelevant, that compliance achieved after the fact carries no weight, and that the regulatory objective is not improved conduct, but punitive extraction. The High Court rightly set aside this reasoning. Yet the arrogant, state protection racket mindset it reveals is not so easily dispelled.
One is left to conclude that the FIC’s approach is animated less by a coherent theory of risk reduction, than by an institutional reflex toward maximal sanctioning. Duration is stretched beyond jurisdiction; mitigating evidence is discounted; penalties are calibrated upwards. The appearance, if not the specific intent, is of a bureaucracy more concerned with asserting dominance and pleasing the FATF masters, than with advancing the public interest.
This is not merely unjust; it is economically corrosive. Small firms operate on thin margins and rely heavily on trust, reputation and personal relationships. The imposition of inflated penalties, grounded in unlawful reasoning, is not a trivial inconvenience. It is a direct assault on civility and viability.
Equally concerning is that when regulatory engagement is perceived as capricious and adversarial, firms respond not with enhanced cooperation, but with defensive minimalism. Resources are diverted from productive activity into ever more elaborate compliance rituals. The net effect is a drag on both growth and employment creation.
Defenders of the current regime will invoke the spectre of international censure. South Africa’s grey listing by the FATF is frequently deployed as a justification for intensified enforcement. But this argument, while superficially compelling, elides a crucial distinction between form and substance. Compliance with international standards must not be an end in itself. It must be a means to the reduction of financial crime.
Where those standards generate vast administrative burdens without measurable commensurate gains in detection or deterrence, their uncritical application becomes entirely counterproductive. It also risks engendering a false sense of security, an illusion of control sustained by paperwork, rather than by tangible outcomes.
The High Court, in its understated way, insisted that enforcement be proportionate, evidence-based and grounded in a genuine assessment of risk. This is not a radical proposition; it is the minimum requirement of rational governance by all regulators.
The FIC must now confront the uncomfortable possibility that its current trajectory is unsustainable. That an enforcement model predicated on expansive interpretation, procedural rigidity and punitive excess is both legally vulnerable and substantively ineffective. That the legitimacy of regulation depends not on the volume of sanctions imposed, but on the fairness, coherence and demonstrably measurable impact of its actions.
This demands a cultural shift: from apparent FIC arrogance to distinct humility, from presumption to restraint, from box-ticking to genuine risk assessment.
It will require an Appeal Board willing to interrogate, rather than endorse, officials trained to distinguish between jurisdiction and aspiration, and leadership prepared to measure success not by activity, but by empirically measurable outcomes.
Above all, it will require a rebalancing of the relationship between state and citizen. Regulators are not sovereign actors. They are custodians of delegated authority, bound by law and accountable to those they regulate. Where that relationship is distorted, that is where power is exercised with thinly veiled contempt, the entire edifice of administrative justice is imperilled.
The Court has spoken. Whether the FIC has the institutional maturity to heed it remains an open question. Should it fail to do so, it will find itself increasingly at odds not only with the judiciary, but with the very society whose interests it is ostensibly charged to protect.
