A Complete Excel-Based Solution for CBC AML compliance

Financial institutions operating under the Central Bank of Cyprus (CBC) must now submit detailed AML/CFT risk-assessment data in the strict XML format. (Κ.Δ.Π. 120/2025, Αρ. 5943)
The requirements are extensive. The XML schema is rigid. And manual preparation leads to costly delays, failed submissions, and unnecessary compliance risk.

Our solution eliminates all of that.

The Problem

CBC’s AML reporting requires institutions to prepare XML files that follow the exact structure of the official schema (PayInstRiskAssessment_v1.2.xsd) and the CBC’s “Data submission template – Instructions and tables.”

This includes:

Legal Persons & Natural Persons tables
100+ mandatory and conditional data fields
Strict formats for numbers, Yes/No indicators, and decimals
Country codes, NACE codes 2.0 & 2.1, UBO rules, PEP classification
Transaction-value exclusions (internal transfers, reversals, intra-group flows)
Period-specific reporting windows and reference dates

A turnkey tool that converts your Excel data into a fully compliant CBC XML file — instantly.

We built a specialised Excel template engineered specifically for the CBC’s PAYINST-AML-RA requirements.
It combines user-friendly data entry with automated XML generation, ensuring accuracy and compliance with zero stress.

What Is the CBC AML XML Reporting Requirement?

The CBC AML XML reporting refers to the mandatory submission of structured Anti-Money Laundering and Counter-Terrorist Financing (AML/CFT) customer-risk data to the Central Bank of Cyprus (CBC) in a prescribed XML format. Under this framework, Payment Institutions and Electronic Money Institutions must provide detailed information on their customer base—covering risk classification, UBO characteristics, PEP status, transactional activity, NACE coding, balances, and more—using the official CBC schema (PayInstRiskAssessment_v1.2.xsd) and instructions. The reporting is performed quarterly, and the XML file must strictly follow both the CBC’s hierarchical structure and its field-level validation rules. In practice, this ensures consistent, high-quality supervisory data that enables the CBC to assess institution-level and sector-wide AML/CFT risk. However, because the XML format is highly structured and technically sensitive, producing a compliant file manually can be complex and error-prone—leading many institutions to seek automated solutions.

Who Must Submit the CBC AML XML Reporting?

The CBC AML XML reporting requirement applies to a broad range of financial institutions and entities supervised by the Central Bank of Cyprus. This includes credit institutions, electronic money institutions, payment institutions, currency exchange offices, financial credit companies, credit servicing and credit-management firms, as well as any other persons or entities under the supervisory authority of the Central Bank of Cyprus. All of these institutions are required to submit structured AML/CFT customer-risk data in the mandated XML format on a quarterly basis to support the CBC’s supervisory risk-assessment framework.

What Is the Reporting Frequency?

The CBC AML XML reporting is required on a quarterly basis.

What data must be included in the CBC AML XML report?

Explain that institutions must provide customer segmentation, risk ratings, UBO information, PEP status, NACE codes, crypto-service involvement, transaction values/volumes, balances, and country codes — all aligned with the CBC schema.

External links

Bank of Cyprus : https://www.bankofcyprus.com/

R.A.A. 120/2025, No. 5943: https://www.cylaw.org/KDP/data/2025_1_120.pdf