AML
April 8, 2026
4:37 pm

Common Source of Funds Documentation Accepted by Cyprus Banks and Regulated Entities

If you are opening a bank account on the island, setting up a company, or working with any regulated entity, you will face a requirement that catches many people off guard: proving where your money comes from. It is not a bureaucratic formality. Cyprus, as a European Union member state, operates under some of the strictest anti-money laundering (AML) obligations in the region, and every institution you deal with has a legal duty to verify the legitimacy of your capital before a business relationship can begin.

The regulatory backbone is the Prevention and Suppression of Money Laundering and Terrorist Financing Law (Law 188(I)/2007, as amended), which transposes EU directives, particularly AMLD5 and AMLD6, into domestic law. On top of that, the Central Bank of Cyprus issued a new AML/CFT Directive (K.D.P. 120/2025), effective since June 2025, which introduced extended customer due diligence obligations and stricter governance mandates for compliance officers across financial institutions. CySEC published its own updated directive (R.A.D 282/2024) a year earlier, tightening rules around electronic verification and adverse media monitoring for investment firms.

What does all of this mean for you in practical terms? It means that banks, trust and company service providers, investment firms, accountants, and even real estate agents in Cyprus are legally bound to collect, verify, and retain evidence of the origin of every euro you bring into a relationship with them. The Unit for Combating Money Laundering (MOKAS), which serves as the national Financial Intelligence Unit, receives suspicious transaction reports from these institutions. Failing to cooperate with the process will stall or, in many cases, terminate your application before it even reaches a decision-maker.

The most important thing to understand is that this process is not designed to be adversarial. It exists to protect the integrity of a financial system on which both residents and international clients depend. Getting your paperwork right from the start speeds things up.

How “Where Your Money Comes From” Differs from “How You Built Your Wealth”

These two concepts are frequently confused, but they address quite different questions. Understanding the distinction will save you time and frustration during the onboarding process.

The Specific Transaction vs the Bigger Picture

The origin of capital for a particular transaction (commonly referred to as SOF) examines the specific funds used in that transaction. If you are depositing €150,000 into a corporate bank account, the compliance team needs to see exactly where that particular sum originated. Did it come from a recent property sale? Was it a dividend distribution from a business you own? Perhaps it was a tax refund, a matured fixed deposit, or the proceeds of a share sale. The question is narrow and transaction-specific.

Your overall accumulated wealth (commonly referred to as SOW) paints a broader picture. It asks how you built your net worth over your lifetime. This might include decades of employment income, a family business, an inheritance, a combination of investment returns, or serial entrepreneurship. Compliance teams at banks and regulated entities look at both, but the depth of scrutiny varies by the client’s risk profile.

For standard due diligence, the focus is on the specific transaction. When enhanced measures apply, perhaps because of your risk classification, your country of residence, or the nature of the business, expect a much deeper investigation into both areas.

Accepted Paperwork for Employment and Salary Income

Salaried income is the most straightforward category. The paper trail is clean, predictable, and easy for compliance officers to verify. If your capital comes from wages or a regular salary, you will typically need to produce:

Recent payslips covering at least three to six months
An employment contract that confirms your salary terms, position, and employer details
Personal bank statements showing consistent receipt of those salary payments
Your most recent tax return or annual tax declaration, which ties the reported income to an official submission

What trips some people up is the gap between what they earn and what they are depositing. If your monthly salary is €5,000 but you are trying to deposit €200,000, a reasonable question arises: where did you accumulate that amount? This is where savings history and perhaps additional evidence of bonuses, equity payouts, or secondary income become relevant. Banks want to see the numbers add up.

Business Income and Corporate Profits

Entrepreneurs, shareholders, and self-employed professionals often find this category more demanding. The documentation trail is inherently more complex, and compliance teams know it.

What Regulated Entities Typically Request

Audited financial statements of the business (usually the most recent two to three years)
Tax returns filed with the relevant tax authority, showing declared business income
Dividend distribution resolutions or board minutes approving profit distribution
Corporate bank statements that demonstrate consistent revenue and profit patterns
Incorporation documents, articles of association, and a certificate of good standing for the company generating the income

For clients with multiple businesses, each entity’s contribution must be traced. You cannot simply point to a large balance in your personal account and say it came from “business activities.” The compliance officer needs to see the chain: the company earned the revenue, declared it, paid applicable taxes, distributed it legally, and the money landed in your account. Every step must be documented.

One subtle point worth noting: if your business is registered outside Cyprus, additional requirements may apply. Apostilled or notarised copies of incorporation certificates, beneficial owners’ declarations, and translated audited accounts are commonly requested. Banks in Cyprus tend to be especially cautious with structures involving jurisdictions that appear on EU or FATF watch lists.

Property Sales and Real Estate Proceeds

Selling a house, an apartment, or a commercial property generates a clear paper trail, which is a good thing. But compliance teams will still want to see the full picture:

A signed sale and purchase agreement showing the transaction price, parties involved, and date of completion
Title deeds confirming prior ownership
A bank reference or transfer record confirming receipt of the sale proceeds
Proof of any tax obligations settled on the sale (capital gains declaration or exemption certificate)
If the property was located outside Cyprus, a municipal certificate or equivalent confirming the transaction with the local land authority

Real estate proceeds are a common and widely accepted funding source for both personal and corporate bank account openings. The key is to ensure continuity between the sale price shown in the contract and the amount reflected in your banking records. Discrepancies, even small ones, caused by agent commissions or withholding tax, should be explained with supporting receipts.

Investments, Savings, and Financial Portfolio Liquidation

If your capital comes from selling shares, bonds, mutual funds, or other financial instruments, the documentation requirements centre on proving both the purchase and the sale.

Brokerage account statements showing position histories and trade confirmations
Evidence of the original investment (purchase orders, subscription agreements)
Fund transfer records showing when proceeds were credited to your account
Any relevant tax filings related to capital gains

For fixed deposit or term deposit maturities, a bank statement showing receipt of the matured amount, along with the original deposit confirmation, is sufficient.

Crypto-asset proceeds are increasingly common and also increasingly scrutinised. Under the 2025 amendments to the AML law, crypto-asset service providers (CASPs) are now included in the definition of financial institutions in Cyprus. If your capital originates from digital asset sales, be prepared to provide exchange transaction histories, wallet records that trace the on-ramps and off-ramps of your holdings, and corresponding bank statements confirming receipt of fiat. A flat 8% tax applies to crypto-asset disposal gains under the tax reform effective from 1 January 2026.

Inherited Funds, Gifts, and Other Less Common Categories

Not every source of capital fits neatly into the salary-or-business-profits box. Life is more complicated than that, and compliance teams understand this. However, the less conventional the origin, the more documentation you should expect to provide.

Inheritance

Inherited funds require clear evidence connecting the deceased’s estate to your receipt of the money. Typical documentation includes:

A grant of probate or equivalent court order
The will or testament naming you as a beneficiary
Bank statements confirming the transfer from the estate to your account
In some jurisdictions, a tax clearance certificate confirming that any inheritance taxes were paid or that an exemption applied

Gifts and Donations

Monetary gifts from family members or third parties are legitimate but should be treated with caution. Compliance officers will want to see:

A signed gift declaration or affidavit from the donor
The donor’s identification and, in some cases, their own proof of the capital’s origin
Bank statements from both sides reflecting the transfer
An explanation of the relationship between donor and recipient

Other Categories

Several additional categories appear regularly during onboarding in Cyprus:

Pension income: pension fund statements, government pension confirmation letters, and bank records showing regular deposits
Court awards or legal settlements: the court judgment, settlement agreement, and payment confirmation
Loan proceeds: the signed loan agreement, disbursement record, and lender identification
Insurance payouts: the policy details, claim approval, and payment record
Tax refunds: the relevant tax return and bank credit confirmation
Redundancy or severance payments: the employment termination agreement and bank record

Capital Origin	Primary Evidence Required	Supporting Evidence
Employment salary	Payslips, employment contract	Bank statements, tax return
Business profits	Audited accounts, tax returns	Dividend resolutions, corporate statements
Property sale	Sale agreement, title deeds	Tax clearance, transfer records
Investment liquidation	Brokerage statements, trade confirmations	Capital gains filings
Inheritance	Probate grant, will	Estate bank records, tax clearance
Gift or donation	Donor affidavit, relationship explanation	Both parties’ bank records
Crypto-asset proceeds	Exchange transaction history, wallet trail	Fiat off-ramp bank statement
Pension	Pension fund statement	Regular deposit bank records
Loan	Signed agreement, lender details	Disbursement confirmation

What Triggers Stricter Scrutiny During the Process

Standard customer due diligence applies to most new relationships. But certain circumstances trigger enhanced measures, and knowing which ones can help you prepare a stronger file from the outset.

Risk Factors That Prompt Additional Requests

The applicant is a politically exposed person (PEP) or has close associations with one
The transaction involves a high-risk jurisdiction listed by the EU or FATF
The declared activity falls within a sector considered higher risk, such as crypto, gambling, forex, or cash-intensive trading
There is a mismatch between the stated income and the volume of capital being introduced
Complex multi-layered ownership structures, particularly those involving trusts, nominees, or shell entities
The beneficial owners reside in different jurisdictions from the operating entity
Prior adverse media coverage about any party to the relationship

When enhanced scrutiny kicks in, compliance teams may request additional years of financial statements, second opinions from independent accountants, background checks on connected individuals, and in-person interviews with the beneficial owners or directors. This is not a reflection of wrongdoing on your part. It is a regulatory obligation that the institution must fulfil.

Sector-Specific Thresholds

The AML framework also sets specific transaction thresholds that trigger mandatory checks:

General occasional transactions: €15,000
Cash transactions in goods trading: €10,000
Gambling and casino activities: €2,000
Crypto-asset transfers: €1,000
Wire transfers under EU Regulation 2015/847: €1,000

Falling below these amounts does not guarantee exemption from verification. If there is any suspicion, regardless of the sum, due diligence measures apply in full.

Practical Steps to Prepare Your File Before Approaching a Provider

We have seen hundreds of onboarding files over the years. Some sail through in two weeks. Others drag on for months. The difference almost always comes down to preparation.

Gather everything before you make first contact. Do not assume you can submit partial paperwork and fill the gaps later. Banks in Cyprus are not obligated to hold your application open while you chase missing records.
Make sure all records are in English or Greek. If your original paperwork is in another language, arrange for certified translations in advance.
Notarise or apostille where required. Most banking institutions require certified true copies of passports. Corporate certificates from abroad often need an apostille. Ask your service providers what specific authentication is needed.
Ensure consistency across all submissions. Names, addresses, and figures must match across your passport, utility bills, tax returns, and bank records. Even a minor discrepancy, such as a middle name appearing on one record but not another, can cause delays.
Include a brief narrative. A short cover letter explaining who you are, what your business does, where your money originates, and why you need services in Cyprus can be remarkably effective. Compliance officers appreciate context.
Keep records current. Utility bills older than three to six months, outdated bank references, or expired certificates will be rejected. Check the validity windows your provider requires.
Anticipate follow-up requests. Even a perfectly prepared file may generate additional questions. Responding promptly and completely keeps the process moving.

C. Savva & Associates is not a law firm. For matters requiring legal expertise, the firm collaborates with its partner law firm Nicholas Ktenas & Co., LLC, which provides legal counsel on corporate and commercial law, banking and finance, data protection, intellectual property, employment law, and trusts.

Corporate Onboarding: Additional Layers for Cyprus Company Formation and Banking

Opening a corporate bank account in Cyprus or completing a Cyprus company formation engagement adds another layer of complexity. Beyond personal documentation for directors and shareholders, the entity itself must be verified.

Service providers and banking institutions will request:

Certificate of incorporation and certificate of registered office
Memorandum and articles of association
A current certificate of good standing (not older than three months for most banks)
The latest annual return filed with the Registrar of Companies
An organisational chart showing the full ownership chain up to the ultimate beneficial owners
Extracts from the UBO Registry confirming the registered beneficial ownership
Board resolutions authorising the opening of the account and designating signatories
A detailed business profile covering activities, expected turnover, trading jurisdictions, and key counterparties
Evidence of economic substance, including office lease agreements, employee contracts, and operational expenditure records

The substance question deserves particular attention. Cypriot banks have become increasingly cautious about entities that appear to lack genuine local activity. If your company exists purely on paper, with no staff, office, or operational presence, your application may be rejected regardless of how clean your documentation is. The corporate income tax rate in Cyprus now stands at 15% following the tax reform effective from 1 January 2026, and entities seeking to benefit from the island’s fiscal framework are expected to demonstrate real operational engagement.

Frequently Asked Questions

What documents can be used as a source of funds?

The range of acceptable proof depends on how the capital was generated. For salaried individuals, payslips, bank records, and a recent tax filing are standard. Business owners should prepare audited accounts, profit distribution records, and corporate banking history. Property sellers need the sale contract, title evidence, and transfer confirmations. Less typical categories, such as legal settlements, redundancy payouts, or matured life insurance policies, require the relevant agreement and payment confirmation. Each regulated entity in Cyprus may impose additional internal requirements on top of the legal baseline, so always confirm specifics before submitting.

What documents do I need to provide as proof of funds?

At a minimum, you need an official record showing the capital entering your possession and a supporting record confirming its legitimate origin. For most banking applications in Cyprus, this means combining a primary piece of evidence, such as a signed contract, official award letter, or certified distribution resolution, with corresponding bank records showing the credited amount. Compliance teams cross-reference dates, amounts, and counterparties across your submissions. Providing a clear narrative alongside these records, briefly explaining the timeline from the time the capital was earned or received to its current position, significantly reduces back-and-forth questions from the reviewing officer.

What is a supporting document for the source of funds?

A supporting record is any secondary piece of evidence that strengthens the primary proof. If your primary evidence is a property sale agreement, supporting records include the title deed confirming prior ownership, the tax authority’s capital gains assessment, or the conveyancing solicitor’s completion statement. For employment income, the primary payslip is supported by the employment contract and the employer’s official tax deduction certificate. These secondary pieces close potential gaps in the verification chain, giving the compliance officer confidence that the money trail is consistent, traceable, and free from unexplained discrepancies that would otherwise trigger further investigation.

What documentation do you need to identify the source of funds?

Identifying the origin of capital requires a layered approach. Start with the transaction-level proof, meaning the specific record that shows money moving from a legitimate activity into your control. Then add contextual evidence: tax filings that corroborate the declared income, official registrations that confirm business ownership, or court orders that validate legal entitlements. For higher-value transactions or clients classified under enhanced review, compliance teams in Cyprus may also request third-party confirmations, such as an independent accountant’s letter, a certified valuation report, or a reference from the originating financial institution, to cross-check the documentation you provide.

Get Your Onboarding File Ready with C. Savva & Associates

Preparing the right paperwork for AML verification in Cyprus does not have to be a frustrating experience. C. Savva & Associates works with individuals, entrepreneurs, and international businesses every day to assemble onboarding files that meet the expectations of banks, regulators, and compliance teams across the island.

Contact us today to schedule a consultation and get your documentation reviewed before you approach any institution. A properly prepared file is the fastest path to approval.