01
Open the RCR tool
Try the official online RCR tool with the FIC-issued goAML credentials linked to the accountable institution.
Open official RCR toolRCR recovery and notice response
Missed the 2026 RCR deadline or received a FIC notice? Start here
The 2026 filing dates were 30 June and 31 July. An outstanding return calls for prompt action through the official RCR tool. This guide covers access problems, submission proof and the steps to take when a FIC notice arrives.
Outstanding RCR
What to do after a missed deadline
The FIC says failure to submit can lead to administrative action. Its earlier post-deadline guidance told affected institutions to continue submitting outstanding returns. Start with the online tool and keep a dated record of each step.
02
Submit the outstanding return
Complete the RCR promptly while the tool accepts the submission. Save the confirmation page and submission reference.
03
Log an access problem
Send a FIC compliance query when credentials, the Org ID or the online tool prevents submission. Keep the query reference and screenshots.
Open FIC compliance queries04
Prepare for correspondence
Check goAML and the organisation inbox. A FIC notice needs a response by the date and through the channel stated in the notice.
Keep the RCR confirmation, goAML messages, screenshots, query references and internal escalation record in one dated folder. These records show what happened and when your team acted.
RCR login access
Where to create an account for rcr.fic.gov.za
The official RCR login page uses a FIC-issued goAML username and password. Start with the FIC's goAML registration and reporting portal when the organisation needs credentials or an Org ID.
Register on goAML first
The FIC says registrations are completed electronically on goAML and registration is free. The RCR tool login uses your FIC-issued goAML username and password.
Register the organisation if it is new
If the accountable institution is not yet registered with the FIC, register the organisation on the official goAML portal and wait for FIC approval and an Org ID.
Use the Org ID for RCR access
The FIC RCR overview says only accountable institutions registered on goAML and issued an Org ID may submit an RCR. Capture the goAML-generated Org ID, not a personal ID number or company registration number.
Add users without duplicating the organisation
If the organisation is already registered, the FIC FAQ says additional users should register as a person using the Org ID. Existing registrants should not create a duplicate organisation registration.
Immediate response
What to do if you received a FIC notice
Match the correspondence to goAML, then identify the affected entity and Org ID. The notice tells you which response date and FIC channel apply.
Match the notice to goAML
Check the sender and your goAML message board. Record the affected entity, FIC Org ID, Schedule 1 item and the type of notice.
Record the response date
Use the date stated in the notice. A final demand, inspection request, notice of intention to sanction or sanction notice can carry its own response instructions.
Build the response file
Collect the RCR confirmation, goAML messages, screenshots, internal escalation record and the documents that support the answers in the return.
Use the channel in the notice
Send the response through the FIC channel named in the correspondence. Keep the sent copy, timestamp, reference number and delivery proof.
2026 dates for reference
Which RCR deadline applied to your sector
Directive 11 opened the 2026 submission window on 4 May. The Schedule 1 item linked to the organisation's FIC registration determines which closing date applied.
2026 closing date
30 June 2026 at 17:00
- Submissions open
- 4 May 2026
- Who this covers
- Item 2 trust and company service providers; item 9 casinos; item 11 credit providers excluding banks, mutual banks and co-operative bank credit providers; item 14 The Postbank; item 21 South African Mint Company; item 22 crypto asset service providers.
- Data period
- 1 July 2023 to 31 March 2026, unless noted below
- Official-note context
- For item 2 and item 9 casinos, the official schedule lists the data period as 1 April 2023 to 31 March 2026.
2026 closing date
31 July 2026 at 17:00
- Submissions open
- 4 May 2026
- Who this covers
- Item 1 legal practitioners; item 3 estate agents; item 20 high-value goods dealers including dealers in precious stones, precious metals and Krugerrands; item 9 non-casino gambling institutions.
- Data period
- 1 July 2023 to 31 March 2026 for high-value goods dealers; 1 April 2023 to 31 March 2026 for items 1, 3 and non-casino item 9.
- Official-note context
- The FIC media release summarises this window as 4 May to 31 July 2026.
Submission and response file
Information to gather for the Risk and Compliance Return
The FIC's 2026 material points institutions to records such as the RMCP, CIPC documents, financials and prior regulatory reports. Bring those records together before completing an outstanding return or answering a notice.
FIC registration details, goAML access and Org ID
Risk Management and Compliance Programme (RMCP)
Customer due diligence and enhanced due diligence procedures
Identity verification and company verification records
Beneficial ownership and director verification records
AML, PEP and sanctions screening approach
Records of regulatory reports filed to the FIC where applicable
Training and monitoring records
Internal owner for FICA compliance and RCR submission
VerifyNow support
How VerifyNow helps with your compliance evidence
VerifyNow provides identity, company and screening reports for the evidence file behind CDD, KYB and risk controls. Your organisation completes the RCR and sends any FIC response through the official channel.
FICA Toolkit
Find RMCP, CDD, EDD, reporting and POPIA resources in one place.
Open resourceRMCP Generator
Create a starting Risk Management and Compliance Programme for your business.
Open resourceSouth Africa ID Verification
Build CDD evidence with Home Affairs ID checks.
Open resourceCompany Verification
Support KYB, company and director checks with CIPC data.
Open resourceAML/PEP Screening
Screen people and entities against sanctions, PEP and watchlist sources.
Open resourceFICA Compliance Guide
Map accountable-institution controls to VerifyNow reports.
Open resourceFAQ
FIC notice and RCR questions
What is an RCR?+
RCR stands for Risk and Compliance Return. It is an online self-assessment submitted to the Financial Intelligence Centre by specified accountable institutions about money laundering, terrorist financing and proliferation financing risks, and the controls used to manage those risks.
What should I do if I received a FIC notice?+
Check the notice against your goAML message board. Record the affected entity, FIC Org ID, Schedule 1 item and response date. Gather the supporting records, then use the FIC channel stated in the notice. Keep the sent response and delivery proof.
What if my company received a FIC notice but we are not registered?+
The FIC RCR overview says only institutions successfully registered on goAML and issued an Org ID may submit an RCR, and institutions not yet registered are requested to register immediately. Use the official FIC registration and compliance-query channels.
Where do I create an account to log in to rcr.fic.gov.za?+
Create or manage your FIC access on the official goAML registration and reporting portal. The RCR tool says users log in with their FIC-issued goAML username and password. Once the accountable institution is registered and has an Org ID, use the goAML credentials to access rcr.fic.gov.za.
What if we missed the RCR deadline?+
Open the official RCR tool and submit the outstanding return while the channel accepts it. Check goAML and the organisation inbox. Send a FIC compliance query when access fails, then keep the reference, screenshots and submission proof. Follow the response date stated in any final demand, inspection request or sanction correspondence. Legal or compliance advice can help with an enforcement response.
Can VerifyNow submit the RCR for us?+
VerifyNow supplies identity, company and screening reports that can support the institution’s evidence file. The accountable institution submits its RCR and sends its own response to the FIC.
Official references
Primary FIC sources to check
Check the notice, goAML message board and official FIC pages for the instructions that apply to your institution.
FIC web notice: Directive 11 and 2026 RCR scheduleFIC media release: 2026 Risk and Compliance ReturnsFIC RCR overviewOfficial FIC RCR toolOfficial FIC goAML registration and reporting portalFIC FAQ: how to register with the FICFIC compliance queriesFIC supervision and enforcementFIC advisory on outstanding RCR submissionsFIC media release on submitting outstanding RCRs
Build the file for your RCR or FIC response
Use the FICA Toolkit to organise the documents behind your answers. VerifyNow checks can add identity, company and screening reports to the evidence record.