AML
April 8, 2026
4:15 pm

Understanding the Difference Between Source of Funds and Source of Wealth

If you work in financial services, corporate administration, or professional advisory, you have probably heard both terms thrown around as though they mean the same thing. They do not. And the confusion between them is surprisingly common, even among professionals who deal with anti-money laundering (AML) procedures daily.

Getting this wrong can create real problems. At best, it delays client onboarding. At worst, it opens the door to regulatory action, reputational harm, and financial penalties that no firm wants to face. The most frustrating part is that the two concepts are genuinely straightforward once you see them side by side. The issue is that most people never take the time to separate them clearly.

In Cyprus, where professional service providers, banks, and investment firms must comply with strict customer due diligence (CDD) obligations under the Prevention and Suppression of Money Laundering and Terrorist Financing Law of 2007 (as amended), clarity on these terms is not optional. It is a regulatory expectation, enforced by supervisory bodies including CySEC, the Central Bank of Cyprus, and MOKAS, the country’s Financial Intelligence Unit.

What is meant by SOF?

SOF, or source of funds, refers to the origin of money being used in a particular transaction or series of transactions. Think of it as answering one very specific question: where did the capital for this deal come from?

It is the traceable path that connects a payment to its legitimate source. SOF involves tracing the specific transaction back to its source and confirming that it was acquired through lawful means. This is not about broad financial history. It is narrowly focused on the particular activity at hand.

Common Examples of SOF

Employment salary or wages
Proceeds from a property sale
Inheritance received from a deceased relative
Pension payments or retirement income
Dividend or interest earnings from investments
Gambling or lottery winnings
Compensation awarded through legal proceedings
Personal savings held over a period of years
Business revenue or profit distributions
Loan proceeds from a regulated financial institution

Let us say a client is purchasing commercial property in Limassol for €500,000. The SOF check would need to confirm exactly where that half-million came from. Did it arrive from a bank account funded by rental income? Was it transferred as part of a business disposal? The point is to trace that specific amount to its origin, not to examine every euro the individual has ever earned.

What SOF Documents Are Typically Required?

The documentation needed will vary based on the risk profile of the client and the nature of the transaction, but commonly requested items include:

Bank statements showing the incoming transfer
Employment contracts paired with payslips
Sale agreements for property or assets
Loan agreements from a regulated lender
Probate or inheritance documentation
Tax declarations showing declared income
Cryptocurrency exchange records, where relevant

What matters is that the paperwork tells a consistent and credible story. A client claiming their payment is from employment income should be able to produce payslips that match the amount deposited. If the figures do not line up, further investigation is warranted.

What Does SOW Really Mean?

SOW, or source of wealth, is a broader concept altogether. While SOF targets a single payment, SOW explains how a client accumulated their assets and financial standing over their lifetime. It has a much wider scope, spanning years, sometimes decades, of financial activity.

Wealth explains the full picture. It answers the question: how did this person come to hold the level of assets they currently possess? This is a more extensive check than the source-of-funds check because it does not stop at a single transaction. Instead, it examines the individual’s complete economic history.

Typical Origins of Accumulated Wealth

Long-term employment in a senior or high-paying role
Profits generated from business ownership
Returns on investments, including equities, bonds, or real estate
Family inheritance or gifts received over time
Proceeds from the sale of a company or a significant asset
Royalties or licensing income
Professional fees earned across a career

SOW verification is particularly relevant for high-net-worth individuals, politically exposed persons (PEPs), and anyone whose declared level of prosperity does not obviously match their professional background. If someone presents with €10 million in assets but works in a modestly paid profession, the discrepancy raises questions that SOW checks are designed to address.

A Side-by-Side Comparison

To make the distinction as clear as possible, here is a summary table:

Aspect	SOF (Funds)	SOW (Wealth)
Focus	A specific payment or transaction	Total financial position and asset accumulation
Scope	Narrow, targeting the immediate capital trail	Broad, covering the entire financial history
Key Question	Where did this particular money come from?	How was this person’s total prosperity built?
Depth of Review	Limited, proportional to transaction risk	Extensive examination of years of economic activity
Triggered By	Individual transactions or account openings	Higher-risk clients, PEPs, or unusual profiles
Typical Evidence	Bank statements, contracts, and sale records	Tax returns, career history, business valuations
Regulatory Context	Standard CDD requirement	Typically part of Enhanced Due Diligence (EDD)

How Both Fit Into AML and KYC Frameworks

The Role in Customer Onboarding

Financial institutions, corporate service providers, accountants, and legal practitioners are all required to perform Know Your Customer (KYC) procedures when establishing new business relationships. Verifying where a client’s capital originates and confirming how their broader prosperity was built are critical parts of this process.

Under the Cyprus AML Law, obliged entities must conduct CDD, including establishing an economic profile for every customer. This profile should reflect expected transaction volumes, the nature of the business relationship, and the declared origin of both capital and other assets. When something does not add up, further scrutiny is required.

SOF checks are a standard part of the onboarding process for most clients. SOW checks, on the other hand, are generally triggered during Enhanced Due Diligence. EDD is mandatory when dealing with PEPs, clients from higher-risk jurisdictions, or situations where the firm identifies elevated risk factors.

Why Regulators Care So Much

The reason supervisory authorities place such emphasis on these checks is simple. Money laundering typically involves disguising the illegal origin of capital by moving it through legitimate-looking channels. Without robust procedures to verify the sources of payments and the mechanisms by which prosperity is generated, illicit capital can enter the financial system undetected.

Cyprus, as an EU member state, has fully transposed the EU’s Anti-Money Laundering Directives (including the 5th and 6th AMLDs) into national legislation. The Central Bank of Cyprus AML/CFT Directive (Κ.Δ.Π. 120/2025), which came into force on 2 June 2025, strengthened governance requirements for boards and compliance officers while enabling proportional, risk-based reviews. Meanwhile, the establishment of the National Sanctions Implementation Unit (NSIU) in 2025 created a centralised enforcement body with the power to impose administrative fines of up to €100,000, plus a € 100-per-day fine for ongoing non-compliance.

The upcoming launch of the EU’s Anti-Money Laundering Authority (AMLA), with Regulatory Technical Standards expected around mid-2026, signals that obligations will only tighten further.

Practical Scenarios That Illustrate the Difference

Scenario One: A Routine Property Purchase

A salaried professional in Nicosia wants to buy an apartment for €250,000. The corporate service provider handling the transaction requests:

Recent bank statements showing the accumulated savings
An employment contract confirming the salary level
Proof that the deposit was transferred from the buyer’s personal account

This is a straightforward SOF check. The transaction amount is consistent with the client’s declared earnings, and the trail is clear. No SOW investigation is needed because the risk profile is low.

Scenario Two: A High-Value Investment by a Non-Resident

A non-resident individual seeks to invest €2 million through a Cyprus Investment Firm. The client states that their prosperity stems from a family business in a jurisdiction with a moderate AML risk.

In this case, the firm will need both SOF and SOW documentation. For the immediate investment, bank records and transfer confirmations will trace the specific capital. But the overall level of assets warrants deeper examination, including business ownership records, audited financial statements, and, if warranted, media research to confirm the client’s declared background. A senior manager must approve the relationship before it proceeds.

Scenario Three: A PEP Opening a Corporate Account

A politically exposed person requests the formation of a Cyprus holding company. Even if the initial capitalisation is modest, the PEP status automatically triggers EDD requirements. SOW verification is mandatory regardless of transaction size. The firm must determine how the individual’s total financial position was built, examine whether there are connections to public corruption, and conduct ongoing monitoring throughout the relationship.

Common Mistakes Firms Make

Even experienced compliance teams sometimes stumble on the practical application of these concepts. Here are some of the most frequent errors:

Treating the two as interchangeable. Collecting only transaction-level evidence when the client’s risk profile clearly calls for a broader investigation into total prosperity.
Accepting weak documentation. A signed self-declaration is rarely sufficient on its own. Supporting records should corroborate any claims the client makes about the origin of their capital or overall financial position.
Failing to reassess over time. Circumstances change. A client who was low-risk at onboarding may later present new risk factors, such as a connection to a newly sanctioned jurisdiction or a sudden, unexplained increase in transaction volume.
Ignoring red flags in favour of speed. Commercial pressure to onboard clients quickly can lead to shortcuts. Regulators in Cyprus have intensified inspections, and CySEC alone conducted 43 thematic AML reviews in 2025, imposing fines and settlements totalling approximately €2.3 million
Neglecting to document the rationale. Even when the right checks are performed, failing to record the rationale for a particular decision can be just as damaging during a regulatory audit.

The Cyprus Regulatory Landscape

Cyprus has made significant progress in strengthening its AML framework. The primary legislation, Law 188(I)/2007, has been amended multiple times to align with evolving EU directives and FATF recommendations. MONEYVAL’s most recent Enhanced Follow-Up Report, published in June 2025, found that Cyprus is now compliant or largely compliant on 38 of the 40 FATF Recommendations, with none rated as non-compliant.

Key regulatory obligations for firms operating in Cyprus include:

Conducting thorough CDD and KYC at the start of every business relationship
Applying EDD for PEPs, high-risk clients, and cross-border correspondent relationships
Appointing a qualified AML Compliance Officer (AMLCO) within the organisation
Reporting suspicious transactions to MOKAS without delay
Maintaining records of all CDD and screening activities for a minimum of five years
Annually confirming beneficial ownership details in the national register

The consequences of failure are significant. Under the AML Law, a person convicted of knowingly participating in money laundering faces up to 14 years’ imprisonment, a fine of up to €500,000, or both. Supervisory authorities can impose administrative penalties of up to €1,000,000 and revoke business licences for serious or repeated breaches.

C. Savva & Associates is not a law firm. For matters requiring legal expertise, the firm collaborates with its partner law firm Nicholas Ktenas & Co., LLC, which provides legal counsel on corporate and commercial law, banking and finance, data protection, intellectual property, employment law, and trusts.

Frequently Asked Questions

Is Cyprus a high-risk country in AML?

No, Cyprus is not classified as a high-risk jurisdiction. It does not appear on the FATF grey list or black list, and as of the February 2026 FATF Plenary, it remains outside both categories. MONEYVAL’s June 2025 follow-up report confirmed that Cyprus is compliant or largely compliant on 38 of 40 FATF Recommendations. The country has made substantial progress in recent years, including establishing the National Sanctions Implementation Unit and bringing crypto-asset service providers under AML supervision. While historical perceptions linger, the current regulatory framework reflects a jurisdiction committed to international standards.

What is the meaning of AML compliance?

AML compliance refers to the policies, procedures, and controls that businesses implement to prevent their services from being exploited for money laundering or terrorist financing. In practice, this includes verifying client identities, monitoring transactions for suspicious patterns, conducting risk assessments, and filing reports with financial intelligence units when irregularities arise. Regulated firms must also appoint dedicated compliance officers and provide ongoing staff training. Across the EU, these obligations are shaped by the Anti-Money Laundering Directives and FATF Recommendations, with national regulators responsible for supervision and enforcement within each member state.

Is there money laundering in Cyprus?

Like any international financial centre, Cyprus faces exposure to illicit financial flows. Its geographic position between Europe, Asia, and Africa, combined with its historically open business environment, has attracted both legitimate investment and, at times, questionable capital. However, the country has taken decisive steps to address these vulnerabilities. A March 2024 memorandum of understanding with the United States specifically targeted cooperation on countering illicit financial activity. MOKAS, the national Financial Intelligence Unit, actively collects and analyses suspicious transaction reports, referring verified cases to law enforcement for prosecution and potential convictions carrying severe criminal penalties.

What can happen if a company fails to comply with AML regulations?

Non-compliance carries severe consequences under Cyprus law. Supervisory authorities, including CySEC and the Central Bank, can impose administrative fines of up to €1,000,000 for serious breaches. Licence revocation is a real possibility for repeat or egregious offenders. Individuals responsible for AML oversight within an organisation may face personal criminal liability, including up to 14 years’ imprisonment for knowingly facilitating illicit activity. Beyond legal penalties, the reputational fallout from a public enforcement action can destroy client relationships and make it extremely difficult to maintain banking facilities or attract future business.

Get Expert Guidance on AML and Compliance

Sorting through these requirements can feel overwhelming, particularly for firms managing clients across multiple jurisdictions. C. Savva & Associates works with businesses and individuals to build clear, defensible compliance processes that satisfy regulatory expectations without creating unnecessary friction. If you need help with customer onboarding, risk assessments, or AML procedures tailored to your operations, get in touch for a consultation.