SA Financial-Sector Regulation: Twin Peaks, FAIS, the Banks Act & the NCR [2026]

The regulatory map: who does what

If you lend money, take deposits, advise on financial products or sell insurance in South Africa, more than one regulator may be watching — and each one is interested in a different thing. It helps to picture the system as a set of overlapping circles rather than a single rulebook. At the centre sits the South African Reserve Bank (SARB), the country’s central bank and the guardian of financial stability. Around it, four bodies do the day-to-day regulating:

• The Prudential Authority (PA) — housed inside the SARB. It worries about whether financial institutions stay solvent and sound: banks, insurers and the market-infrastructure plumbing.
• The Financial Sector Conduct Authority (FSCA) — the conduct regulator. It worries about whether those institutions treat their customers fairly and whether the markets are honest and efficient.
• The National Credit Regulator (NCR) — the dedicated consumer-credit regulator under the National Credit Act. It registers credit providers, debt counsellors and credit bureaux and enforces the credit-conduct rules.
• The courts — the final arbiters of whether a particular agreement is even caught by the credit regime, and of enforcement disputes between lenders and borrowers.

The two big questions a finance lawyer asks of any deal are therefore: which regulator’s licence do I need? and does the National Credit Act reach this agreement at all? The rest of this guide walks through each peak and each statute in turn, with the actual words of the governing Act, before showing how they fit together.

Twin Peaks: the Financial Sector Regulation Act

Before 2018, South Africa had a patchwork of sector-by-sector regulators. The Financial Sector Regulation Act 9 of 2017 (the “FSR Act”) replaced that with a deliberate “Twin Peaks” design borrowed from Australia and the United Kingdom. The idea is simple but powerful: split financial regulation into two functions and give each its own dedicated regulator. One peak guards prudential soundness — will the institution be able to pay what it owes? The other guards market conduct — does it behave honestly and treat customers fairly? The same bank is supervised by both, from two different angles.

The two peaks are the Prudential Authority and the Financial Sector Conduct Authority. The FSR Act establishes each, sets its objective, and gives it functions and powers across all the “financial sector laws” that sit beneath it. The whole structure is read, like every modern statute, through the unitary interpretive method the Supreme Court of Appeal laid down in Natal Joint Municipal Pension Fund v Endumeni Municipality — text, context and purpose together:

That lens matters here because the boundaries between the regulators are functional, not formal. A deal is mapped to a regulator by what it does — the same substance-over-form logic the courts apply when deciding whether the National Credit Act reaches an agreement, discussed below.

The Prudential Authority: safety and soundness

The first peak is the Prudential Authority. The FSR Act establishes it as a juristic person operating within the administration of the Reserve Bank — so although it is a distinct body, it lives inside the SARB and draws on its expertise:

Its job — its statutory objective — is the prudential side of finance: keeping institutions solvent and sound, and protecting customers against the risk that an institution simply cannot pay what it has promised. The Act states it in four limbs:

For a lender, the practical point is this: if you are a bank, the Prudential Authority supervises your capital, liquidity and governance under the Banks Act. If you are a non-bank lender — a private credit provider, a factoring house, a payday lender — the Prudential Authority is not your regulator, because you are not taking deposits. Your obligations come instead from the conduct side (FSCA, where relevant) and, above all, from the National Credit Regulator.

The Financial Sector Conduct Authority: fair treatment

The second peak is the Financial Sector Conduct Authority (FSCA), the successor to the old Financial Services Board. Unlike the Prudential Authority, it is a free-standing national public entity:

Its objective is the conduct side of finance: honest, efficient markets and the fair treatment of customers. This is where the now-familiar “Treating Customers Fairly” outcomes live, and where consumer financial education sits:

Note the deliberate overlap with the Prudential Authority on limb (c): both peaks assist in maintaining financial stability. Twin Peaks is not two silos; it is two regulators who must co-operate, co-ordinated by the SARB and statutory committees. A single bank can therefore be visited by the Prudential Authority about its capital and by the FSCA about how it sells products — the same institution, two lenses.

The Banks Act: only a registered public company may be a bank

The Banks Act 94 of 1990 is the statute that decides who is allowed to be a bank at all. Its central prohibition is short and absolute: you may not conduct the business of a bank unless you are a registered public company. That registration is granted and supervised by the Prudential Authority (the Act’s “Authority”, formerly the Registrar of Banks):

Everything turns on what counts as “the business of a bank”. The defining feature is taking deposits from the public — not merely lending. The Act spells it out:

So the Banks Act and the National Credit Act answer different questions. The Banks Act asks “may you take the public’s deposits?”; the NCA asks “may you extend this credit, and on what terms?”. A bank typically needs to comply with both; a private lender usually needs only the NCA route.

FAIS: licensing financial advisers and intermediaries

The Financial Advisory and Intermediary Services Act 37 of 2002 (“FAIS”) governs the people who advise on, or act as intermediaries for, financial products — insurance brokers, investment advisers, and the like. It does not regulate the product itself; it regulates the advice and the sale. Its gateway is a licensing prohibition: you may not act as a financial services provider without a licence, now issued and supervised by the FSCA:

The practical takeaway: FAIS is the regime for the advice and intermediation layer, enforced by the FSCA. Many finance businesses touch it without realising — the moment you give a client a recommendation about a financial product, or earn a commission for placing one, FAIS may be engaged. Lending money against security or on an acknowledgement of debt, by contrast, is squarely a credit question, not a FAIS one.

The National Credit Act and the National Credit Regulator

For lenders, the most important of the four regimes is usually the National Credit Act 34 of 2005, policed by the National Credit Regulator (NCR). The NCA is the consumer-protection statute for credit: it sets out who must register, caps interest and fees, requires affordability assessments, builds the debt-review system, and prescribes the enforcement procedure a credit provider must follow before suing.

But the NCA does not reach every deal. It only applies to a “credit agreement”, and the Act lists exactly four species:

And here is the rule that drives the whole gateway analysis: a credit facility is decided “irrespective of its form”. The label on the paperwork does not control; the substance does. That is why a deal dressed up as a discount can turn out to be a regulated loan — the issue the Supreme Court of Appeal confronted in its 2026 anchor decision:

On that reasoning the SCA held that a fixed, once-off loan is not a “credit facility” (it has none of the revolving draw-down autonomy of a credit card), and that the agreements in any event fell outside the Act on the thresholds — covered in detail in invoice discounting vs loans and NCA thresholds for companies.

Where the NCA does apply, registration with the NCR is no longer optional for anyone above a size threshold — the threshold is now nil (R0). The Act sets the registration trigger by reference to a prescribed threshold:

Getting this wrong is dangerous. An unregistered credit provider whose agreement the Act required to be registered risks having that agreement declared void from inception (s 89(2)(d) read with s 89(5)(a) — quoted in full on the unlawful-agreements page) — the lender can lose its claim entirely. The NCR also registers debt counsellors, credit bureaux and payment-distribution agents, and shares enforcement of credit conduct with the National Consumer Tribunal.

How it all fits together

The four regimes are best understood as answering four different questions about the same finance business. Run your deal through them in order:

1. Are you taking deposits from the public? If yes, you are conducting the business of a bank and must be a registered public-company bank, prudentially supervised by the Prudential Authority under the Banks Act. If no, you are not a bank and need no banking licence.
2. Are you advising on or intermediating a financial product? If yes, you need a FAIS licence and must meet fit-and-proper and conduct standards policed by the FSCA.
3. Are you extending credit under an agreement the NCA reaches? If yes, you must register as a credit provider with the NCR (the threshold is nil (R0)) and comply with the Act’s interest caps, affordability and enforcement rules. Whether the Act reaches the agreement is the substance-and-threshold question — a loan to a company at or above the R1 000 000 juristic-person threshold, or a large agreement (principal debt at or above R250 000), is excluded.
4. How do you treat the customer day to day? Across all of the above, the FSCA’s fair-treatment outcomes and the NCA’s consumer protections run in parallel, and the SARB co-ordinates overall financial stability.

A high-street bank lending to consumers sits inside all four circles at once: Banks Act (deposit-taking), FAIS (where it advises), NCA/NCR (its consumer lending) and FSCA conduct rules. A boutique private lender funding itself from shareholders sits in only one: the NCA/NCR. The art of structuring finance in South Africa is knowing, before you sign, exactly which circles your deal falls into — because each carries its own licence, its own ongoing obligations, and its own penalty for non-compliance.

The firm advises lenders, businesses and borrowers on exactly this mapping — from NCR registration and security drafting to notarial bonds and private bonds — and on loan and suretyship structures that keep a deal both enforceable and compliant.