Anti-Money Laundering Compliance in Singapore

What AML compliance in Singapore covers

AML compliance in Singapore means the policies, controls and reporting that stop a business being used to launder the proceeds of crime, finance terrorism or finance the proliferation of weapons of mass destruction. For financial institutions it is a detailed licensing obligation supervised by the Monetary Authority of Singapore (MAS). For every business and individual, it includes criminal-law duties to report suspicion and to avoid dealing with criminal property.

The stakes have risen. The large money laundering case uncovered in 2023 prompted a cross-government review, tighter supervision and new tools for information sharing between banks. Singapore's 2024 national risk assessment and its 2026 Financial Action Task Force (FATF) evaluation have kept the spotlight on how well controls actually work, not merely whether policies exist.

The legal question arises at onboarding, when a customer's source of wealth does not add up; during monitoring, when transactions stop matching the profile; and when a regulator, a correspondent bank or the police asks for information. It also arises in M&A and fundraising, where an acquirer or investor inherits the target's control weaknesses.

The legal framework

Three layers of law apply. The first is criminal law of general application. The Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act 1992 (CDSA) creates the money laundering offences, requires any person who knows or suspects in the course of business or employment that property is connected with criminal conduct to file a suspicious transaction report (STR), and makes tipping off an offence. It also establishes the Suspicious Transaction Reporting Office (STRO). The Terrorism (Suppression of Financing) Act 2002 imposes parallel duties for terrorist property and applies to everyone; the Ministry of Home Affairs explains the counter-terrorist financing framework.

The second layer is sector regulation of financial institutions. MAS issues AML/CFT notices to each class of institution it regulates, with guidelines that explain its expectations. Notice 626 applies to banks, PSN01 and PSN02 apply to payment service providers, and parallel notices cover capital markets intermediaries, financial advisers, insurers, trust companies and others. According to MAS, failing to comply with an AML/CFT notice is an offence under the Financial Services and Markets Act 2022, punishable by a fine of up to S$1 million, with a further daily fine for a continuing offence.

The third layer covers designated non-financial businesses and professions. Corporate service providers, real estate agents and developers, dealers in precious stones and metals, casinos, lawyers and accountants each have AML/CFT duties under their own legislation or professional rules. The Corporate Service Providers Act 2024, in force since 9 June 2025, requires providers of corporate services to register with ACRA and tightens the rules on nominee directors.

Singapore's risk picture

A sound programme starts from the national risks. The Money Laundering National Risk Assessment published on 20 June 2024 identifies fraud (especially cyber-enabled fraud), organised crime, corruption, tax crimes and trade-based money laundering as the key threats. It assesses banking, including wealth management, as the highest-risk sector, and identifies corporate service providers, digital payment token service providers, cross-border money transfer operators, licensed trust companies, real estate and precious stones and metals dealers as higher risk.

The same year, Singapore published refreshed national strategies on anti-money laundering, countering terrorist financing, proliferation financing and asset recovery. In May 2026 the FATF published its mutual evaluation of Singapore, which MAS described as strongly affirming a robust and effective framework. For regulated firms the message is that supervisors will expect enterprise risk assessments to reflect these findings and controls to be proportionate to them.

Each threat has a practical meaning. Cyber-enabled fraud means money mule accounts and rapid onward transfers, so monitoring must detect accounts that suddenly receive many small credits from unrelated payers. Trade-based laundering means over- or under-invoicing and goods that never move, so trade finance teams need to test documents against shipping data and market prices. Corruption and tax crimes point to politically exposed persons, unexplained wealth and complex offshore structures. Mapping each threat to a specific control is the clearest way to show a supervisor the programme is risk-based.

Supervisors no longer ask whether you have an AML policy. They ask whether your controls would have caught the last case that made the news.

The core controls

Although each MAS notice has its own detail, the architecture of AML compliance in Singapore is consistent across sectors. Our article on financial services AML architecture explores it at greater length.

Enterprise-wide risk assessment

Firms must identify and assess the money laundering, terrorist financing and proliferation financing risks across customers, countries, products, services, transactions and delivery channels, and document the assessment. It must be approved by senior management, kept up to date and used to calibrate everything else. New products and technologies require a risk assessment before launch.

Customer due diligence

Firms must identify and verify customers, identify beneficial owners and understand the purpose and intended nature of the relationship. Enhanced due diligence applies to higher-risk customers, including politically exposed persons and those linked to higher-risk jurisdictions, and usually includes establishing source of wealth and source of funds. Complex structures with nominee directors, shell companies or trusts deserve particular scrutiny, a point reinforced by the national risk assessment.

Monitoring, screening and reporting

Ongoing monitoring must detect transactions that are unusual for the customer profile. Screening against targeted financial sanctions lists, which MAS publishes on its targeted financial sanctions pages, must be continuous, not only at onboarding. Where suspicion arises, an STR must be filed with STRO, now through the SONAR platform, and the customer must not be tipped off. Records must be retained for the periods the relevant notice prescribes.

Governance, training and testing

Boards and senior management are accountable for the AML/CFT framework. Firms need a compliance officer with sufficient seniority and resources, regular training, independent audit and testing of controls, and screening of employees and representatives. Payment firms should also read our note on payment services AML/CFT, and digital token providers should note the travel rule obligations under MAS Notice PSN02.

COSMIC and information sharing

MAS launched COSMIC (Collaborative Sharing of ML/TF Information and Cases) on 1 April 2024. It is a secure digital platform through which participating banks share information on customers who show multiple red flags of potential financial crime, once set thresholds are met. The initial participants were DBS, OCBC, UOB, Standard Chartered, Citibank and HSBC, and the focus areas are misuse of legal persons, misuse of trade finance and proliferation financing in commercial banking.

For corporate customers, COSMIC means that concerns raised by one bank may reach others. A company whose ownership structure, trade flows or counterparties look opaque may find that account opening, trade finance or correspondent services become harder across the market. Clean, well-documented structures are now a commercial asset as much as a compliance one.

Building or remediating a programme

Whether you are launching a regulated business, preparing for an MAS inspection or responding to findings, AML compliance in Singapore follows a recognisable sequence.

1. Scope the obligations. Confirm which statutes, MAS notices or sector rules apply, including to group entities and outsourced functions.
2. Assess the risks. Prepare or refresh the enterprise-wide risk assessment against the national risk assessment and the firm's actual customer base.
3. Write proportionate policies. Translate the risk assessment into customer risk scoring, due diligence standards, escalation thresholds and exit criteria.
4. Configure systems. Calibrate screening and monitoring rules, test them against real typologies and document tuning decisions.
5. Set governance. Appoint a capable compliance officer, define board reporting and assign named owners for each control.
6. Train and test. Deliver role-specific training, then commission independent testing or audit of how controls work in practice.
7. Remediate and evidence. Track findings to closure with deadlines and keep the evidence that would satisfy a supervisor.

Risks and common mistakes

Non-financial businesses and bank customers

AML compliance in Singapore is not only a concern for banks. Corporate service providers must now register with ACRA, conduct due diligence on the companies they serve and assess nominee directors as fit and proper before arranging them. Our company secretarial team explains how this changes routine filings. Real estate businesses, precious stones and metals dealers and professional firms have their own sector obligations, which follow the same logic of risk assessment, due diligence, record keeping and reporting.

Ordinary trading companies have a narrower but real exposure. The CDSA reporting duty and the sanctions rules apply to them, and an employee who processes a payment while suspecting it is tainted can commit an offence. A simple internal policy, a named person to whom staff escalate concerns, and a record of how each concern was resolved go a long way.

Companies are also on the receiving end of bank controls. Expect banks to ask for ownership charts down to the individuals who control the business, evidence of source of funds for significant capital injections, explanations of unusual trade flows and information about counterparties in higher-risk jurisdictions. Delays in account opening, trade finance or payments are often caused by incomplete answers rather than any real concern. Preparing a standing due diligence pack, with constitutional documents, registers of controllers, group structure, audited accounts and descriptions of key business flows, saves weeks and reduces the risk of an exit decision that, under COSMIC, may influence other banks too.

For groups acquiring a regulated business, AML due diligence on the target is essential. Review recent inspection findings, remediation plans, STR volumes and alert backlogs, and price any remediation cost into the deal.

Investigations and enforcement

MAS uses inspections, thematic reviews and supervisory visits to test AML compliance in Singapore, and its enforcement toolkit includes reprimands, composition penalties, directions, restrictions on business and prohibition orders against individuals. The Commercial Affairs Department investigates money laundering offences, which can lead to prosecution of individuals and companies. Our investigation and crisis response practice and our guide to white-collar crime explain how these processes interact.

When a supervisory finding or law enforcement request arrives, preserve documents, establish privilege where an internal investigation is needed, and communicate with regulators consistently. Cross-border requests raise data protection and confidentiality questions that should be resolved before material is sent. Our note on regulatory cooperation looks at how to manage multiple authorities.

The cross-border angle

Singapore is a member of the FATF and a founding member of the Asia/Pacific Group on Money Laundering, and its standards closely track FATF recommendations. Groups operating across several jurisdictions need a framework that meets the strictest applicable standard while respecting local data and secrecy rules.

TRW & Co's network is directly relevant. Bangladeshi businesses and individuals opening Singapore accounts often face enhanced due diligence on source of wealth and remittance channels, and benefit from well-prepared documentation. UK and Swiss groups bring their own regulatory expectations that must be reconciled with MAS notices. UAE-linked trade and Chinese supply chains raise trade-based money laundering and sanctions questions. Where Singapore court or tribunal representation is required, we work alongside Singapore-qualified counsel, and we coordinate counsel across our network so the group's position is consistent.

How TRW & Co helps with AML compliance in Singapore

We advise regulated institutions, fintechs, corporate service providers and corporate customers of banks on building, testing and defending their AML/CFT frameworks.

See our practices for related work, including banking and finance, or contact us to discuss your programme.

Checklist for decision-makers

• Is our enterprise-wide risk assessment current, approved by senior management and aligned with the 2024 national risk assessment?
• Do we know which MAS notice, sector law or professional rule applies to each entity in the group?
• Can we explain, file by file, why high-risk customers were accepted and how source of wealth was verified?
• Are sanctions and proliferation financing screening continuous and linked to AML monitoring?
• Is there a fast, documented process for deciding whether to file an STR, with tipping-off safeguards?
• Are outsourced or automated controls understood, tested and contractually auditable?
• Does the board receive meaningful metrics, including alert backlogs and overdue reviews?
• Has AML compliance in Singapore been independently tested within the last cycle, and are findings tracked to closure?

Firms that can answer yes to each question are well placed for supervisory scrutiny and for the bank and investor due diligence that increasingly depends on it.

Frequently asked questions

Sources and official materials

1. MAS: Anti-Money Laundering — MAS AML/CFT approach, notices, penalties and national strategies
2. Money Laundering National Risk Assessment 2024 — Key threats and higher-risk sectors
3. MAS: COSMIC — Bank information-sharing platform launched April 2024
4. CDSA 1992 — Money laundering offences, STR duty and tipping off
5. MAS: Targeted financial sanctions — Sanctions obligations and designated lists
6. MHA: Countering the financing of terrorism — National CFT framework
7. ACRA: Corporate Service Providers Act — CSP registration and nominee director rules

General information only, current as at 20 October 2026. It is not legal advice and does not create a lawyer–client relationship. Singapore law and regulatory practice change; check current official sources and take advice on the facts of your matter.