Commission de Contrôle des Activités Financières (CCAF)

Overview

The Commission de Contrôle des Activités Financières (CCAF) is the independent financial authority responsible for supervising and regulating financial activities in the Principality of Monaco. Established by Law No. 1,338 of September 7, 2007, the CCAF serves as Monaco's primary financial services regulator, exercising oversight across banking, investment services, and related financial markets.

Unique Positioning

Monaco maintains a monetary agreement with France and the European Union, permitting the use of the Euro (EUR) as its official currency despite non-EU membership. The CCAF operates as an independent regulatory authority distinct from EU structures, yet substantially harmonizes its supervisory framework with EU standards to ensure market confidence and cross-border cooperation.

Institutional Status

• Established: September 7, 2007 (Law No. 1,338)

• Jurisdiction: Principality of Monaco

• Regulatory Model: Integrated financial services regulator

• Currency: Euro (EUR) via monetary agreement with France/EU

• International Membership: FATF (Financial Action Task Force) member

• Headquarters: Monaco (4 rue des Iris, BP 540, 98015 Monaco Cedex)

Basic Identity

Classification

Inclusion Justification

What This Entity Oversees

Supervisory Functions

Banking Supervision

The CCAF exercises comprehensive prudential supervision over:

• Credit Institutions: Banks and similar entities accepting deposits and extending credit

• Capital Adequacy: Compliance with Basel III capital requirements (adapted to Monaco jurisdiction)

• Liquidity Management: Monitoring of liquidity coverage ratios (LCR) and net stable funding ratios (NSFR)

• Credit Risk: Large exposures, concentration risk, and counterparty credit risk management

• Operational Risk: Business continuity, IT security, and outsourcing arrangements

• Governance & Risk Management: Board effectiveness, risk management frameworks, and internal controls

Supervisory Approach:

• Risk-rated on-site examinations (annual, biennial, or longer depending on risk profile)

• Thematic reviews focusing on emerging risks or compliance gaps

• Stress testing and recovery planning

• Regular reporting requirements (prudential returns, MIS, AML/CFT data)

Investment Services & Securities Regulation

The CCAF supervises investment firms and securities market participants:

• Authorization Framework: Licensing of investment firms, brokers, and dealers

• Capital & Liquidity Requirements: Compliance with investment firm prudential requirements

• Market Conduct: Best execution, suitability, appropriateness, and conflict of interest management

• Investor Protection: Compensation scheme (similar to DGSD for banking)

• Market Surveillance: Monitoring for market abuse, insider dealing, and manipulation

• Collective Investment Schemes: Authorization of investment funds and oversight of fund managers

Investment Services Coverage:

• Securities trading and brokerage

• Portfolio management services

• Financial advisory services

• Structured product distribution

• Derivatives trading and clearing

Conduct & Consumer Protection

The CCAF enforces conduct-of-business rules:

• Transparency Requirements: Disclosure of costs, fees, and risks

• Suitability Rules: Assessment of product appropriateness for retail customers

• Complaints Handling: Mandatory internal complaint procedures and timeframes

• Advertising Standards: Fair and accurate marketing of financial products

• Vulnerable Clients: Enhanced protections for elderly and vulnerable persons

• Distance Selling: Requirements for remote financial service provision

Payment Services & Electronic Money

The CCAF regulates payment institutions and e-money issuers:

• Payment Service Providers: Authorization and supervision of PSPs under PSD2-equivalent framework

• Payment Initiation Services: Third-party payment service oversight

• Account Information Services: Data access and consumer protection for account aggregators

• Strong Customer Authentication: Security requirements for electronic payment initiation

• Electronic Money Issuers: Prudential requirements for e-money institutions

Monaco holds full FATF membership, requiring implementation of international AML/CFT standards:

FATF Compliance Framework

• Mutual Evaluations: Periodic FATF assessments of AML/CFT effectiveness (last evaluation: 2019)

• Deficiency Remediation: Ongoing alignment with FATF Recommendations (40 Recommendations + 9 Special Recommendations)

• Technical Compliance & Effectiveness: FATF evaluation of both rule-making and enforcement

AML/CFT Implementation

• Customer Due Diligence (CDD): Know-your-customer requirements for all customers

• Enhanced Due Diligence (EDD): Enhanced scrutiny for politically exposed persons (PEPs), high-risk jurisdictions, and beneficial ownership

• Suspicious Activity Reporting (SAR): Mandatory reporting to Financial Intelligence Unit (FIU) within specified timeframes

• Sanctions Screening: Integration with UN, EU, OFAC, and local sanctions lists

• Beneficial Ownership Transparency: Registry and CDD requirements for corporate beneficial owners

• Reporting Obligations: Transaction reporting, cross-border transfers, and statistical reporting

Institutional Framework

• National Financial Intelligence Unit (FIU): Autonomous unit receiving and analyzing SARs

• Inter-Agency Coordination: Cooperation with law enforcement, customs, and foreign regulators

• International Cooperation: Mutual legal assistance and information exchange under bilateral MOUs and multilateral treaties

• Egmont Group: Participation in the global FIU network

Recent Regulatory Developments

2024-2026 Initiatives

• Financial Crime Cooperation: February 2026 MOU between CCAF and Autorité Monégasque de Sécurité Financière (AMSF) to strengthen AML/CFT, sanctions compliance, and corruption prevention

• Digital Asset Regulation: Sandbox programs and regulatory frameworks for crypto-asset service providers

• Cybersecurity Standards: Operational resilience and critical outsourcing requirements

• Climate Risk Integration: ESG considerations in prudential and conduct supervision

• Open Banking Implementation: PSD2-equivalent requirements for API access and data sharing

Regulatory Priorities & Industry Outlook

Current Focus Areas

1. Cross-Border Regulatory Coordination: Strengthened cooperation with French and EU regulators (Feb 2026 AMSF/CCAF MOU)

2. Digital Finance Governance: Regulatory frameworks for fintech, stablecoins, and crypto-asset service providers

3. Operational Resilience: Cybersecurity, IT risk management, and critical outsourcing oversight

4. Sanctions Compliance: Strengthened AML/CFT enforcement and alignment with international sanctions regimes

5. Consumer Protection: Enhanced transparency, complaints handling, and financial literacy

Structural Challenges & Opportunities

• Small Market Constraints: Limited domestic financial industry and talent pool

• Regulatory Arbitrage Risks: Potential for regulatory shopping due to strict EU regimes

• Cross-Border Integration: Dependency on French financial system integration

• Fintech Competition: Pressure to adopt competitive regulatory approaches for digital finance

Regulatory Powers

Inspection Authority

The CCAF possesses extensive investigative powers:

• On-Site Inspections: Scheduled and unannounced examinations of regulated entities

• Document Access: Compulsory access to books, records, and electronic data

• Staff Interviews: Authority to interview management, employees, and external parties

• Forensic Investigation: Authority to investigate suspected fraud or serious misconduct

• Whistleblower Protections: Confidentiality protections for internal and external reporters

Administrative Sanctions

The CCAF can impose graduated sanctions:

• Monetary Penalties: Fines up to EUR 10 million for serious violations (or percentage of turnover)

• Cease & Desist Orders: Prohibition of specific activities or product distribution

• License Suspension/Revocation: Temporary or permanent withdrawal of authorization

• Reputational Sanctions: Public naming of violators (with exceptions for confidentiality)

• Probationary Conditions: Special conditions on license continuation

• Remediation Orders: Requirements to correct deficiencies and provide restitution

Enforcement Process

• Administrative Procedure: Formal investigation, notice, and hearing rights

• Proportionality: Sanctions calibrated to entity size, breach severity, and cooperation

• Appeal Rights: Right to appeal administrative sanctions before competent courts

• Publication: Enforcement actions published on CCAF website (subject to confidentiality limitations)

Regulatory Role and Function

Governance

The CCAF's organizational structure includes:

• Board of Directors: Policy oversight and strategic direction (includes independent directors)

• Executive Management: Executive team responsible for day-to-day operations

• Supervisory Divisions:

• Banking Supervision Division

• Investment Services Division

• AML/CFT & Compliance Division

• Enforcement & Administrative Sanctions Division

• Regulatory Policy & Liaison

Contact Information

• Website: https://ccaf.mc/ (French, English versions available)

• Headquarters Address: 4 rue des Iris, BP 540, 98015 Monaco Cedex, Principality of Monaco

• Telephone: +377 98 98 43 59

• Fax: +377 98 98 43 76

• Official Registry: Searchable directory of authorized financial institutions

Key Contacts

• General Enquiries: Main office contact details available on CCAF website

• Authorization Applications: Dedicated department for new entity licensing

• Regulatory Reporting: Submission of prudential returns and AML/CFT data

• Compliance & Supervision: Questions regarding ongoing supervisory requirements

Legal Foundation

The CCAF derives its regulatory powers from the foundational law and supplementary instruments:

Primary Legislation

• Law No. 1,338 (September 7, 2007): Establishes CCAF structure, mandate, and supervisory authority

• Banking Regulations: Implementation of prudential standards aligned with EU Banking Directive (CRD V)

• Investment Services Directive (ISD): Transposition adapted for Monaco's regulatory environment

• AML/CFT Laws: Comprehensive anti-money laundering and counter-terrorist financing framework

• Insurance Supervision Laws: Regulatory framework for insurance undertakings

• Market Conduct Rules: Prohibition of market abuse, insider trading, and fraudulent practices

Regulatory Authority Characteristics

• Administrative Independence: CCAF operates free from political interference in individual supervisory decisions

• Integrated Supervision Model: Single regulator for banking, investment services, and payments

• Principle-Based Regulation: Risk-based approach focusing on prudential soundness and conduct of business

• Rule-Making Powers: Authority to issue binding regulations and supervisory guidance

Licensing and Authorization Relevance

The Commission de Contrôle des Activités Financières (CCAF) issues licenses across multiple financial sectors in Monaco:

The licensing framework requires applicants to meet capital requirements, demonstrate fitness and propriety of management, and establish adequate compliance and risk management systems.

Payments and Money Movement Relevance

The Commission de Contrôle des Activités Financières (CCAF) has the following relevance to payments and money movement in Monaco:

Payment Systems Governed or Overseen

The Commission de Contrôle des Activités Financières (CCAF) has oversight responsibilities across multiple financial sectors in Monaco, including payment services:

The entity regulates payment service providers, e-money issuers, and related financial intermediaries within its integrated supervisory mandate.

Relationship to Other Regulators

Multilateral Engagement

The CCAF maintains formal relationships with:

• European Authorities: Regular coordination with French AMF, ACPR, and EU regulatory bodies (EBA, ESMA, EIOPA)

• FATF Working Groups: Participation in mutual evaluation and AML/CFT effectiveness assessments

• Bilateral MOUs: Supervisory cooperation with regulators in major financial centers

• OECD Committees: Participation in financial services policy development

Regulatory Harmonization

Monaco's regulatory framework aligns substantially with EU standards despite non-membership:

• CRD V/CRR II: Capital and prudential requirements for credit institutions

• MiFID II: Investment services and market conduct rules

• UCITS Directive: Collective investment schemes framework

• IDD: Insurance distribution requirements

• GDPR: Data protection and privacy standards

• PSD2: Payment services and electronic money

Passport & Cross-Border Rights

• EU Passport Recognition: Limited recognition of EU passports based on mutual MOUs (not automatic)

• Equivalence Determinations: Assessment of regulatory equivalence for cross-border services

• Third Country Status: Treated as third country for most EU regulatory purposes, requiring compliance assessment

Geography and Jurisdiction Notes

Important Departments and Divisions

Key Public Resources

Notes on Naming and Language