MAS AML / CFT for licensed entities — Step-by-step walkthrough
MAS AML / CFT for licensed entities is the framework of anti-money-laundering and countering-the-financing-of-terrorism obligations that the Monetary Authority of Singapore imposes through its sector-specific Notices and Guidelines. It requires every licensed institution to identify customers, assess risk, monitor transactions and file suspicious transaction reports. This walkthrough explains the duties and how to evidence them in 2026.
Raffles Corporate Services works with a panel of corporate and employment law firms; this article is general information, not legal advice.
The legal architecture of MAS AML / CFT for licensed entities
The obligations rest on three layers. The primary statute is the Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act 1992, which creates the offence of failing to report suspicion. Above it sit the Terrorism (Suppression of Financing) Act 2002 and the United Nations sanctions regulations. MAS then issues binding Notices, such as Notice SFA04-N02 for capital markets intermediaries and the corresponding Notices for banks, payment institutions and fund managers, each accompanied by detailed Guidelines.
These Notices are issued under the relevant licensing statute, so a breach is a regulatory contravention attracting penalties, directions and, in serious cases, licence revocation. The reporting duty under the 1992 Act is criminal and falls on individuals as well as the institution.
Customer due diligence requirements
Every licensed entity must perform customer due diligence before establishing a business relationship: verifying the customer’s identity, identifying beneficial owners who hold 25 per cent or more, understanding the purpose of the relationship, and screening against sanctions and politically-exposed-person lists. Enhanced due diligence applies to higher-risk customers, including PEPs and customers from higher-risk jurisdictions.
Ongoing monitoring is continuous, not a one-off. Institutions must keep customer information current, scrutinise transactions for consistency with the customer’s profile, and maintain records for at least five years after the relationship ends. For incoming foreign founders, our companion guide on Sole proprietorship vs LLP vs Pte Ltd shows how entity structure affects the beneficial-ownership picture you must capture.
Risk-based approach and the enterprise-wide assessment
MAS expects a documented enterprise-wide risk assessment that scores the institution’s exposure across customers, products, geographies and delivery channels, refreshed at least every two years or when the business changes materially. Controls are then calibrated to that risk. A licensed fund manager onboarding accredited investors faces a different profile from a payment institution handling cross-border remittances, and the controls must reflect that.
Where a regulated vehicle is a fund, the AML/CFT duties attach to the appointed fund manager. Our cross-site note on VCC Act 2018 explains the legal-personality framework that determines which entity carries the obligation. Internally, our walkthrough on MAS Licensed Fund Management Company (LFMC) sets out how the fund management licence itself is structured.
Suspicious transaction reporting
When an officer of a licensed entity knows or has reasonable grounds to suspect that property represents the proceeds of crime, a suspicious transaction report must be filed with the Suspicious Transaction Reporting Office through the SONAR system, as soon as is reasonably practicable. Tipping off the customer is itself an offence. There is no de minimis threshold; suspicion, not amount, is the trigger.
Cost, timeline and staffing
A proportionate AML/CFT programme for a small licensed entity costs roughly S$20,000 to S$50,000 to build, including a name-screening tool (S$5,000 to S$15,000 per year) and independent review. MAS expects an appointed AML/CFT compliance officer and, for larger institutions, an independent audit of the programme. Allow 6 to 12 weeks to reach an examinable standard before commencing regulated activity.
Common mistakes
Frequent failings include screening only at onboarding rather than continuously, treating beneficial-ownership identification as a tick-box without verifying the natural persons behind layered structures, and under-resourcing the compliance function so that alerts go unreviewed. Each of these has featured in MAS enforcement actions and supervisory reprimands.
FAQs on MAS AML / CFT for licensed entities
Which statute creates the duty to report suspicion? The Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act 1992 creates the offence of failing to report a suspicious transaction.
What beneficial-ownership threshold applies? MAS Notices require identification of beneficial owners holding 25 per cent or more, with verification of the natural persons behind the structure.
How long must records be kept? At least five years after the business relationship ends, or after the completion of an occasional transaction.
Is there a minimum amount before a report is needed? No. The trigger is reasonable suspicion, regardless of the transaction value.
Authoritative sources: the Monetary Authority of Singapore. See also Singapore Statutes Online.
Need help with this? Call, SMS or WhatsApp +65 8501 7133, or email [email protected]. Raffles Corporate Services works with a panel of corporate and employment law firms; this article is general information, not legal advice.