MAS requires financial institutions to look through legal entities to identify and verify the identity of beneficial owners - the natural persons who ultimately own or control the customer. This is critical because legal entities can be used to hide the true parties behind transactions, facilitating money laundering and other financial crimes.

For corporate customers, beneficial owners are generally individuals who ultimately own or control 25% or more of the shares or voting rights, or who otherwise exercise control over the management of the entity. Control can be exercised through various means including ownership, voting rights, agreements, or other arrangements.

Customer Due Diligence is not a one-time exercise conducted only at onboarding. Financial institutions have ongoing obligations to monitor business relationships throughout their duration to ensure that transactions and activities remain consistent with their knowledge of the customer, their business, and their risk profile. Ongoing monitoring is essential for detecting suspicious activities that may develop over time.

The intensity and frequency of monitoring must be commensurate with risk. Higher-risk relationships require more frequent and detailed monitoring, while lower-risk relationships may be monitored less intensively. However, all relationships require some level of ongoing attention to identify changes in behavior or circumstances that may indicate increased risk.

Recognizing when to escalate concerns is a critical responsibility of every employee. You are the eyes and ears of the institution's AML/CFT program. When you encounter situations that cause concern or uncertainty, prompt escalation ensures that experienced compliance professionals can assess the situation and take appropriate action.

Never hesitate to escalate. It is always better to escalate a situation that turns out to be legitimate than to fail to escalate something that later proves to be suspicious. There is no penalty for raising genuine concerns in good faith. Your institution's compliance team is there to support you and make final determinations about suspicious activity.

Sanctions are restrictive measures imposed by governments or international bodies to prevent dealings with specific individuals, entities, or countries. They serve as tools to address threats to international peace and security, combat terrorism, prevent the proliferation of weapons of mass destruction, and respond to human rights violations or other international concerns.

For financial institutions operating in Singapore, sanctions compliance requires understanding multiple sanctions regimes that may apply. Singapore enforces UN Security Council sanctions as a matter of international obligation, and MAS maintains additional sanctions lists. Financial institutions with operations or relationships involving the United States or European Union must also consider those jurisdictions' sanctions programs, which can have extraterritorial reach.

Correspondent banking relationships involve one bank providing services on behalf of another bank, often to facilitate cross-border payments and access to foreign markets. While essential for international banking, these relationships present heightened money laundering, terrorism financing, and sanctions evasion risks because the correspondent bank has limited visibility into the underlying customers and transactions of the respondent bank.

MAS requires enhanced due diligence for correspondent banking relationships because of these elevated risks. The correspondent bank must understand not only the respondent bank as an institution but also the adequacy of its AML/CFT controls, as the correspondent bank can be held accountable for facilitating illicit transactions flowing through its respondent banks.

Bribery is the act of offering, promising, giving, accepting, or soliciting an advantage as an inducement for an action which is illegal, unethical, or represents a breach of trust. Corruption is a broader term that encompasses bribery and other forms of abuse of entrusted power for private gain, including embezzlement, fraud, and extortion.

It's important to understand that bribery doesn't require large sums of money or explicit quid pro quo agreements. Even modest gifts or favors can constitute bribery if given with corrupt intent to influence a decision or action. The key issue is the purpose and context, not just the value.

One of the most common questions about anti-corruption compliance involves gifts, entertainment, and hospitality. Not all gifts and entertainment constitute bribery - legitimate business courtesies play an appropriate role in building relationships. However, organizations must have clear policies to distinguish between acceptable business courtesies and inappropriate inducements that could constitute bribery.

The distinction often comes down to value, timing, frequency, transparency, and intent. A modest gift given openly during a holiday season is very different from an expensive gift given secretly while negotiating a contract. Context matters enormously.

Facilitation payments, sometimes called "grease payments," are small bribes made to secure or expedite routine government actions that the payer is legally entitled to receive, such as processing visas, clearing customs, connecting utilities, or obtaining permits. While some foreign jurisdictions may have historically tolerated these payments under narrow circumstances, Singapore's Prevention of Corruption Act does not provide any exception for facilitation payments. They are illegal, regardless of the amount or the destination country.

Even if local practice in a foreign country suggests facilitation payments are normal or expected, Singapore law applies to Singaporeans and Singapore entities operating abroad. Making facilitation payments exposes both the company and individuals to criminal prosecution under Singapore law.

Keppel Offshore & Marine (KOM), a leading global offshore and marine engineering group and subsidiary of Keppel Corporation, was involved in a systematic bribery scheme to secure contracts from Petrobras, Brazil's state-owned oil company. This case demonstrates the extraterritorial reach of Singapore's anti-corruption laws and the severe consequences of corrupt practices.

Between 2001 and 2014, KOM paid approximately USD 55 million in bribes to Brazilian officials at Petrobras through agents and intermediaries. These bribes were made to secure contracts for the construction of oil rigs and drillships worth billions of dollars, generating approximately USD 351 million in profits for KOM. The bribes were disguised as legitimate consulting fees and commission payments to agents who had little legitimate role to justify their compensation.

The scheme involved creating false documentation, using shell companies in tax havens, and making payments through complex channels designed to hide the corrupt nature of the transactions. Senior KOM executives were aware of or participated in the bribery scheme.

Standard Chartered Bank, a major international bank with significant operations in Singapore, faced coordinated regulatory action from multiple jurisdictions including Singapore for processing transactions that violated United States sanctions against Iran and other countries. The case demonstrates the complexity of sanctions compliance in cross-border banking and the extraterritorial reach of US sanctions.

Between 2007 and 2011, Standard Chartered processed thousands of transactions totaling hundreds of millions of dollars for Iranian clients in violation of US sanctions. The bank's compliance controls were inadequate to identify and block these transactions. In some cases, payment instructions were deliberately structured to avoid detection by US sanctions screening systems by removing references to Iranian parties.

The bank processed U-turn transactions (payments that entered and exited the US financial system for non-Iranian parties but involved underlying Iranian interests) and other sanctions-prohibited transactions. Internal emails showed that compliance concerns were overridden by business priorities, with one senior executive notoriously stating that the bank was prepared to accept sanctions risk for business reasons.

Wirecard's Asian operations, headquartered in Singapore, were part of a global payment processing company that collapsed spectacularly in 2020 after revelations of massive accounting fraud. The Singapore entity processed payments for merchants globally, including some involved in illegal activities. The case highlights the importance of merchant due diligence in payment processing businesses.

Wirecard Asia processed transactions for high-risk merchants including illegal online gambling sites, fraudulent websites, and money laundering schemes operating under the guise of legitimate e-commerce. The company had inadequate due diligence procedures for onboarding merchants and insufficient transaction monitoring to detect illicit activity patterns.

Internal controls were weak, with evidence suggesting deliberate concealment of the true nature of some merchant businesses and their activities. The Singapore entity generated substantial revenues from processing transactions for these problematic merchants, prioritizing business growth over compliance and due diligence. When the global Wirecard fraud was exposed, investigations revealed that the Asia operations had processed billions in questionable transactions.

MAS Notice 626 (for banks) and MAS Notice 824 (for capital markets intermediaries) impose comprehensive record keeping requirements on financial institutions. These requirements ensure that complete records are available for regulatory reviews, audits, and law enforcement investigations for an extended period after relationships end or transactions occur.

All records must be maintained in a form that allows them to be retrieved readily upon request by MAS or other authorities. This means records must be well-organized, properly indexed, and accessible within a reasonable timeframe. Simply keeping records is not enough - they must be retrievable when needed.

Effective document retention requires more than simply storing records for the minimum period. Financial institutions must implement comprehensive retention policies that ensure records are preserved properly, remain accessible, and are protected from unauthorized access, alteration, or destruction.

An audit trail is a chronological record that documents the sequence of activities or events related to specific operations, procedures, or transactions. Audit trails are essential for demonstrating compliance, investigating suspicious activities, responding to regulatory inquiries, and deterring internal misconduct.

Knowing how and where to report concerns ensures that issues are brought to the attention of appropriate personnel who can investigate and take action. Most organizations provide multiple reporting channels to accommodate different comfort levels and circumstances.

Singapore law provides comprehensive protections for individuals who make protected disclosures in good faith. These protections recognize that whistleblowers play a vital role in detecting wrongdoing and should be encouraged, not penalized, for coming forward. Employers are explicitly prohibited from retaliating against employees who report suspected wrongdoing through proper channels.

A customer who operates a small retail business has been banking with your institution for two years with normal activity. Suddenly, the customer begins making large cash deposits of SGD 18,000-19,000 every few days, just below the SGD 20,000 reporting threshold. Previously, the customer made deposits of SGD 5,000-8,000 once or twice per month. The deposits are significantly inconsistent with the customer's previous transaction patterns and stated business model. When you inquire about the increased deposits, the customer becomes defensive and provides vague explanations about "increased sales" but cannot provide documentation.

This scenario presents multiple red flags:

Immediate actions:

You work in procurement and have professional relationships with several vendors. One vendor you have worked with for over a year offers you two tickets to a sold-out concert by a popular international artist. The tickets have a market value of approximately SGD 800 (SGD 400 each). The vendor mentions this as "a thank you for your business and great working relationship." Your organization is currently in the process of evaluating contract renewals with this vendor, and you are part of the evaluation committee that will make recommendations to senior management. The vendor knows you are involved in this decision-making process.

This scenario raises serious corruption and conflict of interest concerns:

Immediate actions:

Follow this clear escalation process whenever you encounter suspicious activities or have compliance concerns. Each step is important and should not be skipped.

Certain jurisdictions present heightened money laundering, terrorism financing, or sanctions risks. Transactions involving these jurisdictions require enhanced scrutiny. This list provides examples but is not exhaustive - always check current FATF lists and sanctions designations.

Understanding when different levels of CDD are required subject to Organization's Risk Appetite and ensures compliance with MAS requirements. This table summarises key triggers and corresponding actions.