# FATF R.28 — Regulation and supervision of DNFBPs - **Part of:** [[FATF Recommendations]] Casinos must be licensed and subject to a comprehensive AML/CFT regulatory and supervisory regime, including measures to keep criminals or their associates from owning, controlling, managing, or operating one. Other designated non-financial businesses and professions must be subject to risk-based systems for monitoring and ensuring AML/CFT compliance, run by either a supervisor or a self-regulatory body. That supervisor or body must take measures to keep criminals or their associates from owning or managing them (for example, a fit-and-proper test) and have effective, proportionate and dissuasive sanctions available for non-compliance. ## Keyed AMLR articles _none_ ## Swiss counterparts - [[GwG Art. 14 - Affiliation to a self-regulatory organisation|GwG Art. 14]] — R.28(b) allows DNFBPs to be monitored by a self-regulatory body that also screens owners and managers; GwG Art. 14 requires advisers to join an SRO, conditional on the good reputation and proper conduct of the adviser, its managers and qualified shareholders (Abs. 2). *(related)* - [[GwG Art. 12 - Competence (supervision)|GwG Art. 12]] — GwG Art. 12 assigns supervision of casinos to the ESBK, of large-scale games to the intercantonal authority and of advisers to SROs (Bst. b, bbis, d); R.28 requires casinos to be comprehensively supervised and other DNFBPs monitored by a supervisor or self-regulatory body. *(related)* - [[GwG Art. 15 - Audit duty for dealers|GwG Art. 15]] — GwG Art. 15 requires dealers to appoint an audit firm to check their compliance; R.28(b) requires the other DNFBPs to be subject to effective systems for monitoring compliance. *(related)* ## Authoritative text > [!quote]- FATF Recommendation 28 — text of the Recommendation (FATF Recommendations, updated June 2026); interpretive note not reproduced > **28. Regulation and supervision of DNFBPs** > Designated non-financial businesses and professions should be subject to regulatory and supervisory measures as set out below. > (a) Casinos should be subject to a comprehensive regulatory and supervisory regime that ensures that they have effectively implemented the necessary AML/CFT measures. At a minimum: > casinos should be licensed; > competent authorities should take the necessary legal or regulatory measures to prevent criminals or their associates from holding, or being the beneficial owner of, a significant or controlling interest, holding a management function in, or being an operator of, a casino; and > competent authorities should ensure that casinos are effectively supervised for compliance with AML/CFT requirements. > (b) Countries should ensure that the other categories of DNFBPs are subject to effective systems for monitoring and ensuring compliance with AML/CFT requirements. This should be performed on a risk-sensitive basis. This may be performed by (a) a supervisor or (b) by an appropriate self-regulatory body (SRB), provided that such a body can ensure that its members comply with their obligations to combat money laundering and terrorist financing. > The supervisor or SRB should also (a) take the necessary measures to prevent criminals or their associates from being professionally accredited, or holding or being the beneficial owner of a significant or controlling interest or holding a management function, e.g. through evaluating persons on the basis of a "fit and proper" test; and (b) have effective, proportionate, and dissuasive sanctions in line with Recommendation 35 available to deal with failure to comply with AML/CFT requirements.