2026-05-20
The Gibraltar Financial Services Commission mandates that regulated entities establish and maintain risk-sensitive policies, controls, and procedures to prevent money laundering, terrorist financing, and proliferation financing. These entities must implement comprehensive systems for customer due diligence, reporting, and independent audits while ensuring group-wide compliance for branches and subsidiaries. Furthermore, regulated entities retain ultimate responsibility for outsourced functions and must apply specific virtual asset screening controls if operating as a Virtual Asset Service Provider.