PHNOM PENH: Three licence revocations in a single year show a regulator willing to act decisively. The next chapter — and the more lasting legacy — lies in catching these problems earlier and finishing the safeguards Cambodia has already started building.
On Aug 3, 2026, the National Bank of Cambodia revoked the banking licences of CCU Commercial Bank, Heng Feng (Cambodia) Bank and HH (Cambodia) Bank, placing all three into liquidation. It was the third such closure episode this year, following the earlier liquidations of Prince Bank and Panda Commercial Bank — bringing the tally of shuttered institutions to at least six.
REACHS & Partners will liquidate CCU; Baker Tilly Cambodia will handle Heng Feng and HH.
The central bank cited compliance requirements under Cambodia’s banking laws and ongoing financial pressures; separately, all three had already appeared on the US Treasury’s OFAC sanctions list over alleged links to cyber-fraud and trafficking networks.
Whatever the precise weighting between those factors, the pattern by now speaks for itself: this is the third time in 2026 that Cambodian regulators have pulled a license rather than let a compromised institution keep operating. That should be read as a credit to the National Bank of Cambodia, not a source of alarm about it — and it deserves a serious, constructive conversation about how to build on it.
The numbers say strength, not fragility
Combined, the three latest banks account for roughly 0.5% of aggregate assets, deposits, and credit across Cambodia’s banking sector — genuinely negligible.
Total banking-system assets stood near $99.8 billion at mid-2026, with deposits and credit both growing at a healthy 4.4% to 4.6% year-on-year. The NBC’s core claim — that removing a handful of compromised micro-institutions doesn’t equate to systemic risk when the broader system is well-capitalised and expanding — holds up against the data.
One caveat worth keeping in view: the sector’s gross non-performing loan ratio has climbed to 9.6% this year, even as provisioning kept the net figure to a manageable 3.3%. That’s a separate, ongoing asset-quality story the system should keep watching — not evidence against these particular closures, but a reminder that a clean bill of health on systemic risk isn’t the same as a clean bill of health on everything.
How the vulnerabilities took root — and why that’s not a Cambodia-specific failure.
Understanding why this round of closures was necessary means looking honestly at how institutions vulnerable to illicit exploitation obtained and held banking licences in the first place. Three structural gaps stand out, and all three are common to fast-growing financial hubs across the region, not unique failures of Cambodia’s regulator:
Opaque ownership. Proxy holders, nominee directors and layered offshore structures have let high-risk actors acquire licences or controlling stakes without tripping standard vetting flags, particularly where checks lean on documentation rather than forensic review.
Static compliance. KYC and AML controls satisfied once at onboarding, rather than monitored continuously, leave blind spots around high-volume activity tied to online gambling, SEZ-linked trade and digital-asset flows — the channel through which illicit proceeds get fragmented and laundered as ordinary trade or investment.
Cross-border blind spots. Correspondent banking moves faster than any single national regulator’s audit capacity, which is why illicit flows are sometimes only surfaced by external actions — like US sanctions designations — rather than caught at home.
It’s also worth naming the scale honestly. The scam-compound economy that has drawn international sanctions attention to Cambodia is, at its core, a forced-labour and trafficking crisis affecting a large, trafficked workforce.
Banking is one layer of that problem — the money-laundering layer — not the whole of it. Framed that way, these licence revocations are an important contribution to a broader, multi-agency fight, which argues for sustained coordination between the central bank, law enforcement and labour authorities rather than treating this as a banking story alone.
What the NBC has already shown — and what would make it durable
This year’s playbook — revoke, appoint independent liquidators, disclose the limited scale of impact, keep the wider system running — is a sound template for decisive action without inviting panic.
Three public interventions in a single year, each with named liquidators and disclosed exposure figures rather than silence, are the actions of a regulator willing to absorb short-term friction for longer-term credibility. That track record is itself evidence of capability. The open question isn’t whether the NBC will act once it finds a problem — it clearly will. It’s whether this pattern evolves from catching problems after the fact into catching them before a licence is ever issued.
Yet, technical resilience on a balance sheet is only half the battle; maintaining public trust on the ground is the other. When closures happen in waves, even negligible market-share losses can trigger retail anxiety if communication lags.
The ultimate test of a regulator isn’t just managing the math of systemic risk — it is ensuring that everyday depositors never have to wonder whether the rule of law protects their hard-earned savings with absolute predictability and speed. To make this oversight truly durable, three concrete steps are required:
Forensic beneficial-ownership verification at licensing — moving past documentary checks to independent review that screens out proxy fronting before a license is granted, not after years of operation.
Real-time transaction monitoring at the NBC and Financial Intelligence Unit, so anomalous flows get flagged as they happen rather than surfacing only through periodic audits or foreign sanctions actions.
Faster, more transparent liquidation timelines, paired with deeper regional and international information-sharing — including quicker feedback loops with bodies like OFAC — so problems can be caught earlier rather than reactively.
None of this requires reinventing Cambodia’s approach. It requires extending a direction the government has already shown it’s willing to take. Three transparent closures in one year suggest the underlying case for reform has already been internalised inside the NBC and its partner agencies. What remains is sustaining the investment and cooperation needed to make prevention as routine as enforcement has become.
The unfinished piece: deposit insurance
For depositors and borrowers with exposure to CCU, Heng Feng or HH Bank, liquidators are legally bound to distribute assets by statutory priority, and borrowers remain obligated to service their loans — a closed bank does not erase a debt.
That process would be considerably stronger with one piece of infrastructure Cambodia has discussed for nearly a decade but never finished building: a formal deposit insurance scheme.
Most of Cambodia’s Asean+3 peers already have one. As recently as this April, the Asean+3 Macroeconomic Research Office argued the case for Cambodia to establish deposit protection has never been stronger, noting that because most deposits are dollar-denominated, the NBC cannot fully act as lender of last resort during a bank run the way it could with riel.
A deposit insurance fund wouldn’t have prevented these particular closures. What it would do is give ordinary depositors a funded, guaranteed backstop, so public confidence doesn’t rest entirely on how efficiently any one liquidation unfolds. Given how far the groundwork already goes — including earlier technical cooperation with the US Treasury on scheme design — this is less a new undertaking than an unfinished one worth completing.
It is arguably the single highest-leverage step Cambodian policymakers could take this year to convert a strong record of enforcement into lasting public trust.
The case has already been made
Cambodia has shown, multiple times over in 2026 alone, that it is willing to close a bad bank publicly, transparently and without destabilising the wider system.
That is a genuine institutional achievement, and it deserves to be recognised as one. The more lasting legacy — for depositors, for investors and for Cambodia’s standing as a serious financial centre — will be built from here: forensic licensing that keeps bad actors out from the start, real-time oversight that catches problems early, faster and fairer liquidations, and a deposit insurance scheme that finally gives ordinary Cambodians a guarantee, not just a promise.
None of these steps are speculative or foreign to Cambodia’s own policy conversation — each has already been proposed, piloted or discussed by the NBC, the Financial Intelligence Unit or international partners. What they need now is follow-through. Cambodia has proven it will close a bad bank. The opportunity in front of its leaders — and the standard the public has every right to expect — is finishing the system that means fewer ever need to be closed at all. - The Phnom Penh Post/ANN
[Long Panhavuth is founder and attorney-at-law at Pan & Associates Lawfirm. The views and opinions expressed are his own.]
