Your Clean Clients Won't Save You
This article will count 0.25 units (15 minutes) of unverifiable CPD. Remember to log these units under your membership profile.
In September, the Prudential Authority fined Capitec R28 million. The part worth pausing on is this: The penalty had nothing to do with laundering. By the bank’s own account, not a cent was laundered, and there was no fraud and no loss. Capitec was punished for something much quieter. It could not show the regulator that its controls were actually working.
If that can happen to a bank, it is worth asking what it means for a practice of one.
Punished for the gap, not the crime
The R28 million was not a single fine. It was five separate penalties for five separate failures, plus five formal cautions, all flowing from a 2023 inspection, with R5.5 million of it suspended. None of the failures were exotic. Weak due diligence on the client files the inspectors sampled. Thin enhanced and ongoing checks. Staff who were not trained often enough. Screening manuals put to use before management had signed them off. To its credit, the bank cooperated and set about closing the gaps, and the regulator said so.
Here is the uncomfortable bit. Capitec has a compliance department, a legal team and headline earnings north of R11 billion, and it still got caught on process. The law that caught it does not care whether your clients are honest. It cares whether you can prove you were paying attention.
Most of us cannot, at least not without the file to show for it. And most small practices quietly assume they will never need to. “My clients are fine, I would know.” FICA has never accepted that answer. As we set out in FIC Compliance After Registration, getting registered is the easy part. The duty is permanent, and it runs against every client and every transaction, all of the time.
The half nobody talks about
The registration story has been told on this site more than once. Register, build a real programme, walk away from the client who will not hand over FICA documents. That ground is well covered in The Client You Keep Is the Risk You Own. Good systems exist to catch things, and that is the point of them. So let us talk about the part that rarely gets written up. What do you actually do when your system works and you catch something?
Say you have kept the books for a small scrap metal dealer for three years. Steady, unremarkable, until this quarter. The cash deposits stop matching the volume of metal moving through the yard. The invoices are a little too round. There is a new supplier you cannot place. Nothing is proven. But something is off, and you know it. The client pays on time and sends you referrals.
That is the point where ethics stops being theory.
Where the Code and the law collide
Your professional Code of Conduct speaks first. The NOCLAR rules, non-compliance with laws and regulations, were written for exactly this moment. They tell you that you cannot simply look away, and they give you a route to set confidentiality aside and act in the public interest. But read honestly, NOCLAR mostly permits disclosure rather than demanding it. It opens the door. It rarely pushes you through. The law does that.
Section 29 of FICA applies to anyone carrying on a business who suspects they are dealing with the proceeds of unlawful activity. In practice, that means you, the moment a suspicious transaction lands in your file. There is no minimum amount. Suspicion is the trigger, and you do not need proof. You have fifteen business days to report it to the Financial Intelligence Centre, and you may not warn the client that a report is on the way.
Get this wrong and it stops being someone else’s institutional fine. Section 68 turns it into a personal offence, carrying up to fifteen years in prison or a fine of up to R100 million.
Put the two duties side by side and the tension is plain. The Code leaves room for judgement. The statute takes that room away. “I did not want to lose the client” will not help you. Neither will “I was not certain”, because certainty was never the test. Confidentiality protects your client’s affairs. It has never protected your silence about a crime.
The part that makes you a professional
This is really what separates a CBAP from someone who keeps books for a fee. When you take on a client’s numbers, you become part of how the country keeps dirty money out of the system. The scrap dealer washing cash is not a harmless quirk. That money undercuts the honest dealer down the road who pays his taxes and now cannot compete. Repeat it across a sector and you get businesses that fail, jobs that vanish and an economy that grows more slowly. The accountant who files the report is protecting the client who plays it straight. That is not admin. It is the whole reason the designation exists.
What to do before your next difficult client
Section 29 binds you personally, whether or not you have an RMCP in place. Registration does not switch the duty on or off.
When something feels wrong, write it down. A dated note of what you saw, what you suspected and what you did about it is the one document standing between you and Capitec’s problem. It is your evidence that you were watching.
If your suspicion firms up, report inside the fifteen business days and say nothing to the client. When your Code and a statute point in different directions, follow the statute. And if you cannot tell which one is speaking, get advice before the fifteen days run out, not after.
Your honest clients are not your defence. Your paper trail is.
Join CIBA and we will show you how to protect your licence, your clients and your own name when your instincts and the law pull in opposite directions.
Further reading
The Client You Keep Is the Risk You Own — Why the wrong client is a documented gap in your RMCP, and how to exit one.
FIC Compliance After Registration — What your ongoing FICA duties really are once you are registered.
When Power Becomes Risk: Why Every Accountant Must Understand PEPs — How inspectors test the evidence behind your screening calls.
Resilience Is an Ethical Choice — Why judgement, not technical skill, is what gets tested under pressure.