The Vault Reopens: Switzerland Trades Secrecy for the Travel Rule

For more than a century, Swiss finance sold one thing above all others: discretion. The numbered account, the banker who knew everything and disclosed nothing, the vault that answered to no foreign regulator. That model made Zurich and Geneva custodians of the world's wealth. Now the vault is being reopened, not by scandal but by statute. In 2026 Switzerland brings into force the deepest recasting of its anti-money laundering architecture in a generation, built around an obligation that cuts against the country's founding instinct: information about who is sending money, and to whom, must now travel with the payment.

A financial centre built on confidentiality is being made to operationalise transparency, under the eye of an assessor that has already found it wanting. That is the paradox, and Swiss institutions have until October to resolve it.

Why the timing is not a coincidence

The Financial Action Task Force (FATF) will conduct Switzerland's fifth-round mutual evaluation in 2026 and 2027, according to the State Secretariat for International Financial Matters. The Swiss Financial Market Supervisory Authority (FINMA) sits at the centre of that reform. On 26 September 2025 the Federal Parliament adopted both a revised Anti-Money Laundering Act (AMLA) and an entirely new Federal Act on the Transparency of Legal Entities and the Identification of Beneficial Owners, known as the Legal Entities Transparency Act (LETA). The Federal Council confirmed on 12 June 2026 that both will enter into force on 1 October 2026. A parallel revision of the FINMA Anti-Money Laundering Ordinance (AMLO-FINMA) follows on 1 January 2027.

The sequencing tells its own story. Switzerland is not reforming because it wants to. It is reforming because the FATF's fourth-round report in 2016 and its follow-up in October 2023 exposed weaknesses a country trading on financial credibility could not leave standing. The sharpest criticism concerned beneficial ownership: Switzerland could establish who owned a legal entity, but it could not reliably verify it. LETA is the answer to that charge.

The register that will not be public

LETA creates something Switzerland has never had: a centralised federal register of beneficial owners, maintained by the Federal Department of Justice and Police, with an audit unit at the Federal Department of Finance checking the accuracy and completeness of what is filed. Companies must identify the natural person who ultimately controls them, defined as anyone holding at least 25 percent of capital or voting rights or exercising control by other means, and report that person's name, date of birth, nationality and address. Where no individual meets the threshold, the most senior member of the management body is deemed the beneficial owner.

Here the Swiss compromise reveals itself. The register is not public. Access is restricted to certain authorities and to entities subject to the AMLA, according to the State Secretariat for International Financial Matters, a set that runs to law enforcement, the Money Laundering Reporting Office Switzerland, tax cooperation and embargo enforcement bodies, and financial supervisors. This is a deliberate departure from the European Union model, and it is the single most important design decision in the entire package. Switzerland has chosen visibility for the state without exposure to the public: authorities gain the traceability the FATF demands while clients retain protection from open scrutiny. Whether that balance survives contact with an assessor that has pushed other jurisdictions toward wider access is one of the open questions the evaluation will settle.

The reforms reach further than companies. The revised AMLA extends core due diligence obligations to advisers, lawyers, notaries, trustees and consultants when they provide services such as those tied to real estate transactions or the establishment and structure of legal entities, a scope the State Secretariat for International Financial Matters sets out directly. These advisers must now identify clients, establish beneficial owners, document the purpose of the structures they create and report suspicion to the reporting office. The logic is plain. Financial crime is often designed before a single franc moves through a bank, and the reform pushes the compliance perimeter back to the point of creation.

What the travel rule actually demands

For virtual asset firms, the travel rule is not new, but its enforcement context has hardened. FATF Recommendation 16 requires that originator and beneficiary information accompany a transfer so that the receiving institution can screen names against sanctions lists and act on discrepancies. Switzerland applies the rule to crypto transfers above 1,000 Swiss francs through Article 10 of AMLO-FINMA, a threshold FINMA has confirmed applies to linked transactions across a thirty-day window rather than per transaction, closing the obvious route of splitting a payment to stay beneath it.

What distinguishes the Swiss approach is its severity. FINMA has interpreted Recommendation 16 more strictly than the FATF baseline. Where the standard focuses on transfers between regulated institutions, Switzerland extends the obligation to self-hosted wallets: a Swiss firm may transact with an external wallet only if it can verify, through what FINMA calls suitable technical means such as a cryptographic signature, that its customer controls that wallet. For a wallet belonging to a third party, the firm must identify that party, establish the beneficial owner and confirm control before the transfer proceeds. Transfers to unregulated wallet providers are not permitted. The stance goes beyond what most jurisdictions require, and it converts the travel rule from a data-transmission exercise into a verification burden.

The AMLO-FINMA revision then closes a residual gap. The exemption that treated payments to and from Liechtenstein as domestic transfers is being repealed. FINMA's explanatory report accompanying the May 2026 consultation records that the carve-out became obsolete once the QR-bill format arrived in July 2020 and the full data set began travelling on every cross-border payment between the two countries. It is a small change with a large signal: no more informal exceptions, no more treating a neighbour as an extension of home.

The enforcement that gives the rules teeth

Rules unenforced are decoration. These are not. On 27 February 2026 FINMA confirmed that its liquidation order against MBaer Merchant Bank AG had taken effect, winding down a Zurich private bank founded by a descendant of the Bär banking dynasty. FINMA found serious and systematic failures: the bank ignored its own compliance department, failed to investigate the background of business relationships, delayed or omitted suspicious activity reports and, in several cases, executed transactions for clients on sanctions lists whose assets had been frozen. The regulator found that 80 percent of the bank's relationships carried heightened risk and that 98 percent of incoming assets came from high-risk clients.

The MBaer case matters for two reasons. First, FINMA chose to destroy an institution rather than fine it, a sharp break from the confidential, negotiated settlements that once defined Swiss supervision. Second, it moved in concert with Washington. The liquidation followed by a single day the US Treasury's Financial Crimes Enforcement Network designating MBaer a primary money-laundering concern under Section 311 of the USA PATRIOT Act. A Swiss regulator and a US agency closing on a private bank together is exactly the exposure Swiss secrecy once existed to prevent.

Private banks and custodians in the middle

Between the register, the travel rule and the enforcement stands the Swiss institution itself, and the operational reality is uncomfortable. Private banks built their systems and their culture around confidentiality; they must now demonstrate that they understand the ownership and control structure of every client, a new explicit requirement in the revised ordinance that responds directly to FATF criticism. Verification, not mere collection, is the standard. Documented evidence, not a client declaration taken on trust, is what an assessor will expect to see.

Crypto-custody providers face a parallel adjustment. FINMA's Guidance 01/2026, published on 12 January 2026, set out expectations for the safe custody of crypto-based assets, stressing that responsibility remains with the authorised Swiss institution even when custody is delegated abroad. Add the proposed FinIA licensing categories for crypto-institutions and payment institutions, consulted on until February 2026, and the direction is unmistakable. The self-regulatory route that once governed most crypto firms is narrowing, and direct FINMA supervision is becoming the norm for anyone holding client assets.

The unresolved friction sits in the plumbing. FINMA itself has acknowledged that no equivalent of the interbank messaging network exists for reliably transmitting identity data on the blockchain. Firms rely on interoperability protocols such as TRISA and industry-backed frameworks such as TRUST, but adoption remains uneven, and a Swiss firm transacting with a counterparty in a jurisdiction that enforces the travel rule loosely inherits the gap. Strict rules at home do not guarantee data at the border.

Conclusion: Reconciliation, not surrender

Read all this as the death of Swiss financial privacy and you read it wrong. Switzerland is not abolishing confidentiality; it is redrawing the line between confidentiality and concealment. The beneficial ownership register is closed to the public, and professional secrecy for lawyers and notaries survives with specific safeguards. The client's affairs stay private from the market. They no longer stay private from the state when the state has cause to look.

This is a more defensible position than the one it replaces, and it is also more demanding. Confidentiality that depends on the integrity of verified data is harder to sustain than confidentiality that depends on silence. A numbered account kept no records that could later prove inadequate. A modern Swiss institution must now hold data that is accurate, verified and usable, and must prove it holds that data to a supervisor prepared to revoke a licence. The privacy Switzerland now offers is conditional, evidenced and auditable. It is privacy that has to be earned.

The vault, then, has not been emptied. It has been rebuilt with a window that only the authorities can open, and only for cause. For a financial centre that spent a century insisting the window did not exist, that is a profound shift. The Swiss wager is that credibility, not secrecy, is now the more valuable currency, and that a reputation for clean money will outlast a reputation for hidden money. The FATF's assessors will deliver the first verdict. Switzerland's clients will deliver the second.

Is your firm treating the travel rule as a data-transmission task when supervisors are already measuring it as a verification standard?

At OpusDatum, we help financial institutions translate obligations such as the Swiss travel rule and beneficial ownership requirements into control frameworks that withstand supervisory scrutiny. We work with firms to move from data collection to genuine verification, and to build the audit trails that regulators now expect to see.

If you would like to discuss how these reforms affect your compliance framework, contact us.