If you sit on the board of a Singapore company limited by guarantee that operates as a non-profit, you carry a money laundering and terrorism financing responsibility that most CLG directors do not know they have. It is not a charity-sector nicety. It is a director’s duty, and the fact that your organisation exists to do good is precisely why it is exposed.
Raffles Corporate Services works with a panel of experienced Singapore law firms who offer cost-effective and efficient legal service and advice. This article is general information only and is not legal advice.
That last point is the one that takes boards by surprise. Non-profits are not targeted despite their charitable purpose. They are targeted because of it: they move money across borders for humanitarian reasons, they accept funds from donors who prefer not to be named, they operate in places where banking is thin and cash is normal, and they enjoy a presumption of good faith that a trading company does not.
ACRA publishes a dedicated AML/CFT guide for CLG non-profits, aimed squarely at directors and officers. Download it and read it. What follows is not a summary of that document; it is what the underlying obligation means for how your board actually runs the organisation.
Why the CLG form attracts this attention
A company limited by guarantee has no share capital. Nobody owns it. Members undertake to contribute a nominal amount to the company’s assets if it is wound up, and that guarantee is the extent of their financial stake. It is the standard vehicle in Singapore for associations, charities, professional bodies, industry groups and community organisations, for the obvious reason that there is no equity for anyone to extract.
That structural feature is also the vulnerability. In an ordinary company, following the money means following the shareholders. In a CLG there are no shareholders to follow. Control sits with a board and, sometimes, a membership that can be broad, informal and hard to trace.
The Financial Action Task Force, whose standards Singapore applies, defines a non-profit organisation broadly: any legal entity that primarily raises or distributes funds for charitable, religious, cultural, educational, social or similar purposes. That definition catches a large number of CLGs whose directors have never thought of themselves as being in a regulated sector at all.
Two clarifications worth making early, because they cause confusion:
- Not every CLG is a charity. Charity registration and Institution of a Public Character status are separate regimes administered under the charities framework, not by ACRA. A CLG can be an NPO for AML purposes without holding either.
- Not every CLG is an NPO. Some CLGs are trade bodies or management entities with no fundraising or distribution function at all. The risk conversation still applies, but proportionately.
How a non-profit actually gets misused
Boards find the abstract risk hard to act on, so it helps to be concrete. The recurring patterns are these.
Donations as a rinse cycle. Illicit funds are donated, the organisation’s books absorb them, and clean money leaves as grants, salaries or reimbursed expenses. The organisation may be entirely unaware. Anonymous or unusually large one-off gifts, and donors who insist on cash, are the obvious signals.
Programme money that diverges from programme delivery. Funds are raised for a stated purpose and spent on something else, or transferred to a partner organisation that cannot evidence what it did with them. Overseas disbursement into high-risk jurisdictions with weak local records is the classic version.
The shell that looks like a cause. An entity is incorporated as a CLG with a plausible mission, files the minimum, runs almost no activity, and exists to give a bank account a respectable name. Dormancy paired with meaningful money moving through the accounts is a red flag in itself.
Abuse of the organisation’s name and credibility. Someone raises funds using your identity, or affiliates with you loosely enough that donors believe they are giving to you. The reputational damage is yours even though the fraud was not.
Insider diversion. A trusted officer, often long-serving and largely unsupervised over the accounts, routes funds to connected persons. This is the most common failure in small organisations and it is almost always a governance failure rather than a sophisticated scheme.
What the board needs to have in place
| Control area | What good looks like in a CLG | Common failure |
|---|---|---|
| Governance | Board oversight of finances, no single person controlling both authorisation and payment | One long-serving officer runs everything |
| Donor due diligence | Proportionate checks on significant, anonymous or unusual donations | All donations accepted without question |
| Fund tracing | Money traceable from receipt to end use, purpose by purpose | Pooled account, no purpose-level tracking |
| Partner vetting | Overseas and local partners checked before funds move, and re-checked | Partner chosen on personal relationship alone |
| Cash handling | Dual custody, prompt banking, reconciled counts | Cash collections counted by one person |
| Beneficiary controls | Beneficiary identity and eligibility recorded, sample verification | Distribution lists with no supporting records |
| Record keeping | Records retained and retrievable, including for grants made abroad | Records held by a volunteer’s personal email |
| Escalation | A named person to whom concerns are raised, and a record of the outcome | No route, so concerns die in a corridor |
| Screening | Sanctions and designated-persons checks before significant transfers | No screening at all |
| Training | Board and staff briefed on red flags, refreshed | Assumed knowledge |
None of this requires a compliance department. It requires a board that has decided who does what, written it down, and checks that it is happening.
The proportionality point
A CLG running a residents’ committee on a five-figure budget should not be building the control environment of an international relief agency. The test is whether your controls answer your actual risks.
Ask three questions at a board meeting and minute the answers:
- Where does our money come from, and how much of it arrives from sources we cannot identify?
- Where does our money go, and can we evidence what it was used for?
- Who could move funds out of this organisation without a second person knowing?
If the third question has an answer other than “nobody”, you have found your first control gap and it will not be your only one.
The Companies Act obligations that sit underneath
AML risk does not sit in isolation. A CLG is a company, it is a public company, and the Companies Act 1967 applies to it.
That means holding annual general meetings under section 175, preparing and laying financial statements, and filing the annual return with ACRA. A CLG that is behind on filings is not merely untidy. Late or absent filings are one of the signals that an organisation is not being run, and an organisation that is not being run is the one that gets used.
The registrable controllers obligations under Part XIA of the Companies Act 1967 also apply unless the company falls within an exempted class. Working out who the registrable controllers of a CLG are is genuinely harder than for a company with shares, because control flows through board composition and membership rights rather than shareholdings. It is worth getting right rather than leaving blank, and it is a question your corporate secretary should be asked directly.
Directors’ duties do the rest of the work. A director who does not know where the organisation’s money goes is not discharging the duty to act with reasonable diligence, whatever the mission statement says.
What goes wrong in practice
The dominant failure mode in Singapore CLGs is not criminality. It is well-meaning informality that has outgrown itself.
An organisation starts small. The treasurer is a founder, trusted absolutely and correctly. Controls are unnecessary because everyone knows everyone. Ten years later the budget has grown by an order of magnitude, the founder still signs everything alone, the records live on a personal laptop, and nobody has ever raised it because raising it feels like an accusation.
Nothing has gone wrong. But the organisation now has no way of demonstrating that nothing has gone wrong, which is a different and much weaker position. When a bank runs a periodic review, when a funder asks for assurance, or when a single awkward transaction surfaces, the absence of records reads the same way whether the underlying conduct was clean or not.
The second failure is overseas disbursement on trust. Funds are wired to a partner in a difficult jurisdiction, the partner sends photographs and a short report, and the board accepts it because the alternative feels like insulting people doing hard work in bad conditions. The board’s duty is not satisfied by good intentions at the far end. If you cannot evidence use of funds, you are carrying the risk, and so are your directors personally.
The third is the banking consequence, which arrives before any regulator does. Banks apply their own risk appetite to non-profit clients. An organisation with weak records, unexplained inflows or opaque overseas transfers may find its account reviewed, restricted or closed, and finding a replacement is materially harder than the first time round.
Frequently asked questions
Does AML/CFT apply to my CLG if we are not a registered charity?
Yes, in substance. The risk framework follows what your organisation does, not what it is registered as. If you primarily raise or distribute funds for charitable, religious, cultural, educational or social purposes, you fall within the international definition of a non-profit and the expectations apply, registered charity or not.
We only receive donations from people we know. Do we still need controls?
Yes, though lighter ones. The point of proportionate controls is to be able to show that funds are accounted for, not to distrust your donors. A small organisation can satisfy this with two-signature authorisation, banked receipts and a board that reviews the accounts properly at each meeting.
What should we do about a large anonymous donation?
Do not accept it reflexively. Establish what you can about the source, record what you did, and decide at board level whether to accept, restrict or decline. Size, anonymity and insistence on cash together are a recognised red flag. If suspicion arises, escalate through your reporting route rather than simply returning the money quietly.
Who is responsible if funds are misused, the officer or the board?
Both, in different ways. The person who diverted funds faces the direct consequences. The board faces questions about whether it exercised reasonable diligence and maintained adequate oversight. “We trusted him” is an explanation, not a defence, particularly where no one ever checked.
Do we need to appoint a compliance officer?
Not necessarily, and for most small CLGs that would be disproportionate. What you do need is a named individual to whom concerns are escalated, a board that reviews financial controls as a standing item, and a written record of both. Naming nobody is the problem, not the absence of a formal title.
How does this interact with our ACRA filing obligations?
Directly. Annual returns, AGMs and financial statements are the baseline evidence that the organisation is being governed. An organisation that cannot file on time is rarely the organisation that can evidence its fund flows, and regulators and banks read the two together.
Getting the governance right before someone asks
Most CLG boards we meet are conscientious and under-resourced. The gap is almost never intent. It is that nobody was ever told this was part of the job, and the person who would have flagged it is the same person doing the books.
Fixing it is a morning’s work followed by a habit: decide who authorises, who pays, who reconciles and who reviews, make sure those are not all the same person, write down what you decided, and put it on the board agenda quarterly.
If you are still working out whether a CLG is the right vehicle at all, start with our guide to companies limited by guarantee in Singapore and our note on incorporating a non-profit CLG. If charitable or tax-deductible status is in view, see our pieces on Institutions of a Public Character and on Singapore charitable structures and donor-advised vehicles. Corporate service providers advising NPOs carry their own overlay, set out in our note on ACRA’s AML/CFT guidelines for registered CSPs. The charity and non-profit sector policy framework sits with the Ministry of Culture, Community and Youth.
Raffles Corporate Services acts as corporate secretary to companies limited by guarantee and keeps their filings, registers and board records in order. If your organisation has grown past the governance it was set up with, that is a straightforward conversation. More on Singapore corporate secretarial practice at Singapore Secretary Services.
The Editorial Team, Raffles Corporate Services
Need help with corporate secretarial or compliance matters?
If you would like help with your company's corporate secretarial, governance or compliance requirements, email [email protected] or WhatsApp +65 8501 7133.
Our team can assist with corporate secretarial, accounting and tax matters. Where legal advice is needed, advisers from our associated law firms can assist.