Everything Sandton and Fourways agency principals need to know about the new Risk and Compliance Return — and how to prepare before the 31 July deadline.
FIC Directive 11 of 2026 requires every estate agency in South Africa — classified as an accountable institution under the Financial Intelligence Centre Act (FICA) — to submit a Risk and Compliance Return (RCR) via the FIC's goAML platform. It's a detailed self-assessment covering your agency's anti-money laundering, counter-terrorist financing, and broader risk management controls. For agencies still managing compliance informally, this is the moment that informal approach gets tested.
Directive 11 was gazetted in final form on 31 March 2026 and took effect 1 April 2026. The submission window opened 4 May 2026, and the return covers a three-year reporting period — generally 1 April 2023 to 31 March 2026. Estate agencies and legal practitioners must submit by 17:00 on 31 July 2026.
This isn't a simple tick-box form. The RCR is a comprehensive self-assessment evaluating how well your agency understands and manages money laundering, terrorist financing, and proliferation financing risk — and whether your controls are actually working, not just written down.
Directive 11 doesn't replace your existing Customer Due Diligence (CDD) and Know Your Customer (KYC) obligations — it reports on how well you're meeting them. That includes:
If any of these three are inconsistent or undocumented, the RCR will surface that gap — because the return is asking you to self-report on exactly these controls.
Real estate has been under particular scrutiny. Estate agent submission rates for earlier compliance returns lagged well behind other accountable institutions, and the sector was specifically flagged as a factor slowing South Africa's exit from the FATF greylist. Although South Africa exited the greylist in October 2025, the FIC has committed to demonstrating sustained enforcement ahead of a new FATF Mutual Evaluation running through October 2027 — meaning scrutiny on real estate isn't easing, it's continuing under a different name.
FIC Directive 11 isn't, in the FIC's own words, "earth-shattering" — it's a data-gathering exercise, not a new compliance regime. But it does mean your agency's actual practices, not just your policy documents, are about to be reported on directly. Agencies that treat the next few months as a genuine readiness check — rather than a form to fill in on 30 July — will be the ones that walk into the deadline with confidence instead of a scramble.
Want to see what automated compliance readiness looks like for your agency?
Book a discovery call