by Koh Teng Teng
Share
Share
by Koh Teng Teng
Share
Share
Singapore’s financial sector managed S$5.4 trillion in Assets Under Management (AUM), supported by over 1,400 registered and licensed Fund Management Companies (FMCs) and Variable Capital Companies (VCCs). As Singapore solidifies its position as Asia’s primary wealth management hub, regulatory scrutiny by the Monetary Authority of Singapore (MAS) has intensified.
Key Pillars of the MAS AML/CFT Framework
MAS expects EAMs and FMCs to construct an institutional barrier against money laundering, terrorism financing, and proliferation financing. These obligations center around five core operational pillars:
| AML/CFT Pillar | Mandatory Compliance Requirement | Key Operational Output |
|---|---|---|
| 1. Governance & Oversight | Active Senior Management responsibility & independent compliance function | Board-approved policies, regular independent audits |
| 2. EWRA | Identification & rating of institutional ML/TF exposure | Annual Enterprise-Wide Risk Assessment document |
| 3. Standard CDD | Verification of beneficial owners, legal arrangements, & natural persons | Verified identity records & ongoing transaction monitoring |
| 4. Enhanced CDD (ECDD) | In-depth analysis of PEPs, complex structures, & high-risk geographies | Corroborated Source of Wealth (SoW) & Source of Funds (SoF) |
| 5. STR & Escalation | Prompt detection and filing of suspicious activities to the STRO | STR filings submitted within statutory windows |
Pillar 1: Governance, Board Oversight, and Risk Culture
Senior management holds ultimate responsibility for an entity’s AML/CFT framework. MAS mandates that the Board of Directors and Chief Executive Officers actively foster an institutional compliance culture. This involves assigning qualified Compliance Officers, funding ongoing compliance technology, and ensuring regular independent audits of internal controls.
Pillar 2: Enterprise-Wide Risk Assessment (EWRA)
Firms must execute an Enterprise-Wide Risk Assessment (EWRA) tailored to their scale, operating model, and client demographics. The EWRA must evaluate risks across customer segments, operating geographies, product/service offerings, and delivery channels. Emerging risks—including Proliferation Financing (PF) and legal structures like VCCs—must be re-evaluated at least annually or upon significant operational changes.
Pillar 3: Customer Due Diligence (CDD) & Ongoing Monitoring
CDD requires verifying client identities before establishing business relations. For institutional and fund clients, managers must look through multi-tiered corporate layers to identify the ultimate natural persons holding effective control or ownership thresholds (typically 25% or greater). Standard requirements extend to identifying trust-relevant parties, including settlors, trustees, protectors, and classes of beneficiaries.
Pillar 4: Enhanced Due Diligence (ECDD) for High-Risk Clients
When dealing with Politically Exposed Persons (PEPs), high-net-worth individual structures, or clients connected to high-risk jurisdictions, firms must apply Enhanced Due Diligence (ECDD). ECDD demands rigorous corroboration of the client’s Source of Wealth (SoW) and Source of Funds (SoF) using reliable, independent documentation such as audited financials, tax filings, or verified equity sale records.
Pillar 5: Suspicious Transaction Reporting (STR) & Escalation Timelines
If a firm suspects or has reasonable grounds to suspect that funds stem from criminal conduct, an STR must be submitted to the Commercial Affairs Department’s Suspicious Transaction Reporting Office (STRO). MAS compliance guidelines specify that STRs must be filed promptly after establishing suspicion. In cases involving designated sanctioned entities or targeted proliferation financing, filing windows contract significantly.
Comparison: Standard CDD vs. Enhanced Due Diligence (ECDD)
| Operational Dimension | Standard Customer Due Diligence (CDD) | Enhanced Due Diligence (ECDD) |
|---|---|---|
| Applicability | Low to medium-risk individuals, standard corporate structures | High-risk clients, PEPs, complex offshore trusts, high-risk countries |
| Wealth Verification | Self-declaration confirmed against basic income indicators | Mandatory independent verification of full Source of Wealth (SoW) |
| Approval Authority | Compliance Officer or Senior Manager | Senior Management / Board Level sign-off required |
| Review Frequency | Annual or bi-annual periodic review cycle | Ongoing, real-time monitoring with deep-dive periodic reviews |
| Screening Depth | Standard global PEP, sanctions, and adverse media screening | In-depth screening, local registry, & intelligence checks |
Enforcement Reality: Regulatory Penalties & Real-World Lessons
Regulatory non-compliance leads to direct financial and reputational consequences. In August 2022, the Monetary Authority of Singapore imposed a S$375,000 composition penalty on a Capital Markets Services (CMS) licensee for business conduct and AML/CFT failures.
The regulatory review highlighted specific gaps in internal controls, including inadequate oversight of high-risk activities, deficient ongoing monitoring, and delayed escalation of suspicious transactions. For External Asset Managers and FMCs, this enforcement action reinforces two clear lessons:
- Third-Party Custodian Reliance: EAMs cannot delegate overall AML accountability to custodian banks. Independent verification remains an explicit statutory requirement.
- Policy vs. Practice Gaps: Written internal compliance procedures must align directly with operational day-to-day execution.
To systematically evaluate your compliance operations against current enforcement benchmarks, explore our MAS AML/CFT Managed Compliance Solutions.
About the Author: Koh Teng Teng
