AML / CFT · Legal obligation · Montenegro

AML procedures and training — preventing money laundering and terrorist financing

If you are an obliged entity under the Law on the Prevention of Money Laundering and Terrorist Financing, the paperwork is not a formality: a risk analysis, internal procedures, a compliance officer and trained staff are required straight away, and supervisors usually ask for them for the first time just when you do not have them.

ℹ️ The text on this page follows the Law on the Prevention of Money Laundering and Terrorist Financing (Official Gazette of Montenegro, Nos. 110/2023 and 65/2024). This is an overview of obligations, not legal advice — for interpretation in a specific case, the current text of the law and the supervisor's practice apply.

Who is an obliged entity under the law

The law lists obliged entities in Article 4. It is not only about banks — the list includes businesses that rarely see themselves as "financial":

Financial sector

credit institutions and branches of foreign credit institutions; factoring and purchase of receivables, financial leasing, safe deposit box rental, issuing guarantees, lending and credit intermediation, currency exchange; payment institutions and electronic money institutions

Post, funds and capital markets

Pošta Crne Gore (the Montenegrin postal operator); investment and pension fund management companies; investment firms providing capital market services

Insurance

life insurance companies; insurance brokers and agents, as regards life insurance

Gambling and pawnshops

gambling operators; pawnshops

Virtual currencies

exchange between virtual and fiat currencies and custodian wallet providers

Accounting, audit and tax advice

forfaiting; audit firms and certified auditors; accounting; tax advisory services and advice on tax matters

Company formation and asset management

services for forming legal entities and companies, business and fiduciary services; asset management for third parties

Real estate and construction

investment in, trade in and brokerage of real estate; brokerage of lettings where the monthly rent is €10,000 or more; construction of residential and commercial buildings

Loans and payment instruments

granting and brokering loans; issuing and managing payment instruments not covered by payment services regulations

High-value goods

trade in motor vehicles; trade in vessels and aircraft and related services; trade in and brokerage (including auctions) of works of art, precious metals, precious stones and other goods — where €10,000 or more is paid or received, in one or several linked transactions

Free zones and art storage

storage and safekeeping of works of art and trade in art when carried out in ports, free zones or warehouses, with the same €10,000 threshold

A lawyer is an obliged entity when assisting a client in planning or carrying out transactions relating to the purchase and sale of real estate or a company, managing money, securities or other assets, opening and managing accounts, raising funds for setting up and running a company, or setting up and managing a company, fund or foundation — and when carrying out a financial or real estate transaction on the client's behalf. A notary is an obliged entity when drawing up notarial deeds and certifying documents relating to those transactions, as well as for loan agreements.

The Government may designate other obliged entities if the nature of the business carries a higher risk, and may exempt operators of certain games of chance (other than casinos) from part of the obligations where an assessment shows lower risk.

What the law requires from obliged entities

This is the minimum supervisors ask for — and the order in which we set it up:

Risk analysisAn internal risk analysis is drawn up within 60 days of incorporation or start of business, and updated at least once a year — with a risk assessment for every new product, service or channel.
Policies, controls and proceduresA risk management system proportionate to the scope and nature of the business and to the size and type of clients and products — not a template copied from another company.
Customer due diligence and monitoringIdentification of the client and beneficial owner, monitoring of the business relationship and transaction controls, with documented handling.
Compliance officer and deputyAppointed within 60 days of incorporation and reported to the financial intelligence unit within three working days. The conditions are strict: completed training, a passed professional exam and a licence issued by the financial intelligence unit (valid for five years). One person can be the compliance officer for only one obliged entity. For obliged entities with four or fewer employees a deputy is not mandatory, and the director may perform the duties if they meet the same conditions.
Staff trainingRegular professional training and development of staff in this area — with a programme and records of the training held.
Indicator listYour own list of indicators for recognising suspicious clients and transactions, updated regularly.
Records and retentionRecords, data and documentation are kept for ten years after the end of the business relationship or the transaction.
Annual reportThe compliance officer prepares a report at least once a year; it is submitted to the supervisor on request, within three days.

Thresholds and deadlines you need to know

The most common mistakes are not in the documentation but in the deadlines — these are the ones that get checked:

€15,000occasional transaction
Customer due diligenceApplied when establishing a business relationship, for an occasional transaction of €15,000 or more (including a series of linked transactions), for transfers of funds of €1,000 or more and for trade in goods of €10,000 or more. When there is suspicion — regardless of the amount.
before executionsuspicious transactions
Reporting to the financial intelligence unitData is submitted before the transaction is executed or the deal is concluded, with an estimate of when it is due to be carried out. If that is not possible because of the nature of the business — no later than the next working day, with an explanation why.
3 working dayscash transactions
Transaction reporting deadlineCredit institutions and payment service providers report cash transactions of €15,000 or more and non-cash transactions of €100,000 or more. For some non-financial obliged entities the threshold is €10,000. The deadline is the same — no later than three working days after execution.
8 dayssupervisor's request
Submitting documentationData, information and documentation requested by the competent supervisor must be submitted no later than eight days from the date the request is received.
60 daysfrom incorporation
Risk analysisThe internal risk analysis is drawn up within 60 days of incorporation or start of business, and updated at least once a year.
10 yearsretention
RecordsData, documentation and reports are kept for ten years after the end of the business relationship or the transaction.

Who supervises and what the penalties are

Supervision is divided by type of obliged entity (Article 131):

Central Bank of Montenegrocredit institutions, leasing, factoring, lending and currency exchange businesses, payment institutions and electronic money institutions
Capital Market Commissioninvestment and pension fund management companies and investment firms
Insurance Supervision Agencylife insurance companies, insurance brokers and agents
Agency for Electronic Communications and Postal ServicesPošta Crne Gore
Games of Chance Administrationgambling operators
Tax Administrationpawnshops and entities registered in the Register of Beneficial Owners
Digital Assets Authorityvirtual currency businesses and custodian wallets
The Ministry, through an authorised officeraccountants, auditors, tax advisers, real estate brokers, vehicle dealers and other obliged entities under item 13
Bar Association of Montenegrolawyers
Penalties

For offences under this law, a legal entity is fined €3,000 to €20,000, the responsible person in a legal entity and a natural person €500 to €2,000, and a sole trader €500 to €6,000. A ban on carrying out the activity or duty may be imposed in addition to the fine.

What we do for you

We do not sell a binder of templates — we set up what supervisors require, in a way that fits how you actually work:

Risk analysis

An internal document with risk factors for your clients, countries, channels and products — in the form supervisors expect, with an annual update plan.

Procedures and forms

Policies and procedures, customer due diligence questionnaires, beneficial ownership records and reporting forms — adapted to your business.

Indicator list

Indicators for recognising suspicious clients and transactions that make sense for what you actually do.

Compliance officer

Help with selection and appointment, a description of duties and training — including the deputy, who is most often forgotten.

Staff training

Training for front desk, sales and management, with records and materials that stay with you. The statutory training and exam for the compliance officer are run by a licensed adult education provider — we prepare the candidate.

Inspection readiness

An internal check before an inspection, a review of records and help preparing the annual report.

Training — what we can do, and what goes through a licensed provider

Staff training is an obligation of the obliged entity: the law requires regular professional training and development of people who work with clients, and supervisors ask for proof that training took place. We deliver that training — for front desk, sales and client intake, for management and for the team around the compliance officer. It covers suspicious transaction indicators using your own examples, what to do when suspicion arises, the ban on tipping off a client that a report has been filed, and record-keeping. We run it in person in Podgorica and Bijelo Polje, and online for the whole of Montenegro.

Training for the compliance officer is a different matter. Under the law it is delivered by a licensed adult education provider, under a programme approved in advance by the financial intelligence unit. After the training the candidate takes a professional exam before a committee set up by the head of the financial intelligence unit, which issues a certificate of passing and then a licence valid for five years. We cannot replace that training and exam — what we do is prepare the candidate for the exam and build the whole system around it: risk analysis, procedures, indicators, records and inspection readiness.

Frequently asked questions

Is an AML system certified?

No. This is a legal obligation, not a standard that gets certified — there is no certification body and no certificate. What exists is supervision, which checks whether you have a risk analysis, procedures, a compliance officer, training and records. If you want a management system framework around it, that is ISO 37301 (compliance) or ISO 37001.

We are a small accounting firm — are we obliged entities?

Yes. The law also treats sole traders and natural persons carrying out a business activity as obliged entities, so accounting and audit services, tax advice, real estate brokerage and a range of other activities are included — regardless of the number of employees.

Who can be a compliance officer?

A person who has completed compliance officer training, passed the professional exam and received a licence from the financial intelligence unit; the licence is valid for five years and can be renewed. In addition, the person must not have been convicted of a criminal offence punishable by more than six months' imprisonment and can be the compliance officer for only one obliged entity. For obliged entities with four or fewer employees, the director may perform these duties under the same conditions, and a deputy is then not mandatory.

What do supervisors ask for first?

The risk analysis and the date of its last update, internal procedures, the decision appointing the compliance officer and deputy, training records, the indicator list and customer due diligence records. The deadline for submitting what is requested is eight days from the request.

What are the penalties?

For a legal entity the fine is €3,000 to €20,000, for the responsible person in a legal entity and a natural person €500 to €2,000, and for a sole trader €500 to €6,000. A ban on carrying out the activity or duty may also be imposed.

How much do compliance work and training cost?

It depends on your business, the number of employees and whether you have any documents at all. Send a short description of your business — you will get the scope of work and a price, with no obligation.

📋 Check the exact price for your organisation →

Some of our references

More than 400 organisations in Montenegro and the region have gone through implementation with us — from banks and public bodies to manufacturing, IT, laboratories and hospitality.

KIPS — Qualiterna client for ISO standards
Mtel Crna Gora — Qualiterna client for ISO standards
Čikom — Qualiterna client for ISO standards
Erste Bank — Qualiterna client for ISO standards
Montenegroberza — Qualiterna client for ISO standards
CGES — Crnogorski elektroprenosni sistem — Qualiterna client for ISO standards
Port of Adria — Qualiterna client for ISO standards
Ministarstvo poljoprivrede, šumarstva i vodoprivrede — Qualiterna client for ISO standards
Ministarstvo socijalnog staranja, brige o porodici i demografije — Qualiterna client for ISO standards
Agencija za nadzor osiguranja — Qualiterna client for ISO standards
Komisija za tržište kapitala — Qualiterna client for ISO standards
Ispitni centar Crne Gore — Qualiterna client for ISO standards
Arhiv — Qualiterna client for ISO standards
Crnagoracop — Qualiterna client for ISO standards
Zavod za transfuziju krvi Crne Gore — Qualiterna client for ISO standards
Aviopetrol — Qualiterna client for ISO standards
Rokšped — Qualiterna client for ISO standards
Montenomaks — Qualiterna client for ISO standards
Securitas Montenegro — Qualiterna client for ISO standards
DataLab — Qualiterna client for ISO standards
Comtrade — Qualiterna client for ISO standards
Amplitudo — Qualiterna client for ISO standards
Axians — Qualiterna client for ISO standards
Bild Studio — Qualiterna client for ISO standards
Codingo — Qualiterna client for ISO standards
Coreit — Qualiterna client for ISO standards
Vodovod i kanalizacija Danilovgrad — Qualiterna client for ISO standards
Xenergy — Qualiterna client for ISO standards
4SEC — Qualiterna client for ISO standards
A-Mark — Qualiterna client for ISO standards
Adria Hotel — Qualiterna client for ISO standards
Alfa Project — Qualiterna client for ISO standards
Alliance Crna Gora — Qualiterna client for ISO standards
AP Print — Qualiterna client for ISO standards
Art Beton — Qualiterna client for ISO standards
Art Gloria — Qualiterna client for ISO standards
ASP Montenegro — Qualiterna client for ISO standards
ATACO — Qualiterna client for ISO standards
B Team — Qualiterna client for ISO standards
Biro Konto — Qualiterna client for ISO standards
Bombeton — Qualiterna client for ISO standards
Business Universal — Qualiterna client for ISO standards
Car Invest — Qualiterna client for ISO standards
Centroslavija — Qualiterna client for ISO standards
CINMED — Qualiterna client for ISO standards
City Facility — Qualiterna client for ISO standards
Centralno klirinško depozitarno društvo — Qualiterna client for ISO standards
CMM — Qualiterna client for ISO standards
Credera — Qualiterna client for ISO standards
Dealing — Qualiterna client for ISO standards
Defacto — Qualiterna client for ISO standards
Đurići — Qualiterna client for ISO standards
Vujačić Company — Qualiterna client for ISO standards
Vulaš — Qualiterna client for ISO standards
Walter — Qualiterna client for ISO standards
Zečević Dental — Qualiterna client for ISO standards

These are only some of our clients. More about us →

Are you an obliged entity — and do you have the paperwork?

Tell us when your deadline is and what it concerns — we will propose a preparation plan that gets there in time. Call us or send an inquiry — we reply within 24 hours.

✓ Thank you! Your message has been sent — we will get back to you shortly.