Singapore achieved a strong outcome in the Financial Action Task Force’s (FATF) 2026 Mutual Evaluation and was placed under Regular Follow-up. This recognises the overall effectiveness of Singapore’s framework for combating money laundering, terrorism financing and proliferation financing. It also acknowledges the role of Corporate Service Providers (CSPs) in customer due diligence and ongoing monitoring.
However, a positive evaluation does not mean that regulatory expectations will remain unchanged. FATF’s fifth-round evaluation places greater emphasis on whether regulatory measures are genuinely effective in practice.
Following the evaluation, ACRA Chief Executive Mrs Chia-Tern Huey Min identified three priorities for the CSP sector:
- Keeping beneficial ownership records accurate and up to date;
- Promptly identifying and reporting suspicious transactions through Suspicious Transaction Reports (STRs);
- Strengthening the sector’s understanding of how complex structures may be misused for illicit purposes.
These priorities provide a clear indication of the next phase of CSP regulation in Singapore. Regulatory reviews will increasingly examine not only whether required procedures were completed, but also whether the underlying compliance measures were effective.
Priority 1: Beneficial Ownership Information Must Be Accurate and Up to Date
Beneficial ownership will remain a central area of CSP regulation.
CSPs should not simply record the shareholders or controllers declared by a client. They must take reasonable steps to determine who ultimately owns or controls the entity and ensure that the information is updated when ownership or control changes.
Future regulatory reviews may focus more closely on:
- The sources used to verify beneficial ownership information;
- Whether the ultimate natural person has been identified;
- Whether legal ownership and actual control are consistent;
- Whether client information differs from corporate registry records;
- Whether discrepancies were investigated and documented.
The key question will shift from whether beneficial ownership information was collected to whether it is accurate, current and supported by reliable evidence.
Priority 2: STR Decisions Require a Complete Record
ACRA has emphasised that CSPs must promptly identify suspicious transactions and report them through Suspicious Transaction Reports.
Regulatory attention is unlikely to focus only on the number of STRs filed. It will also consider whether the CSP has an effective process for identifying risk, escalating concerns internally and reaching a properly supported decision.
CSPs should retain records of:
- The risk indicators identified;
- Internal escalation steps;
- Reviews conducted by compliance personnel;
- Supporting information and evidence;
- The final decision;
- The reasons for not filing an STR, where applicable;
- Any subsequent monitoring or risk-mitigation measures.
Regardless of whether an STR is ultimately filed, the decision-making process should be traceable and capable of being reasonably explained during a regulatory review.
Priority 3: Complex Structures Must Be Properly Explained
A complex structure is not necessarily suspicious. Cross-border investment, financing, asset holding and group management may all require multiple layers of ownership.
However, a structure that appears disproportionate to the client’s actual business needs, or lacks a reasonable commercial or legal purpose, should trigger further review.
CSPs should pay particular attention to:
- Structures involving multiple jurisdictions;
- Multi-layered corporate shareholders;
- Trusts, nominee arrangements or agency relationships;
- Intermediary entities with no clearly explained purpose;
- Differences between legal ownership and actual control;
- Complex layers that may conceal the ultimate beneficial owner.
Identifying a complex structure is only the first step. CSPs should also document its commercial or legal rationale, the risks identified, and the basis for establishing or continuing the client relationship.
AI Can Improve Efficiency, but It Cannot Replace Professional Judgement
ACRA recognises that artificial intelligence can help CSPs improve efficiency in client onboarding, KYC screening, document review, anomaly detection and regulatory filings.
However, criminals can also use AI to create synthetic identities, falsified documents and deepfakes. AI may also make it easier to establish layered legal persons and legal arrangements that obscure ultimate beneficial owners or illicit financial flows.
ACRA’s position is clear: AI can process information and flag risks, but it cannot replace professional judgement or assume ultimate responsibility for a compliance decision.
An appropriate operating model should therefore be:
System-generated result → Risk indicators and supporting rationale → Human review → Documented final decision
Human judgement remains essential when deciding whether a complex structure is commercially reasonable, whether a transaction is suspicious, whether a client’s risk rating is appropriate, and whether an STR should be filed.
Proliferation Financing Controls Will Become More Explicit
FATF’s fifth-round evaluation covers money laundering, terrorism financing and proliferation financing. For CSPs, proliferation financing should not be treated as equivalent to general sanctions-list screening.
Risk assessments should also consider:
- Direct or indirect connections to high-risk jurisdictions;
- Shipping and international trade activities;
- Dual-use goods;
- Complex cross-border intermediary companies;
- Opaque ownership and control structures;
- Nominee or third-party relationships that may be used to circumvent sanctions.
Proliferation financing controls may be incorporated into existing customer due diligence processes, but they should remain a clear, identifiable and separately explainable risk dimension.
From Procedural Compliance to Effective Compliance
The next phase of CSP regulation in Singapore will focus more closely on whether beneficial ownership has been properly verified, complex structures have been reasonably assessed, STR decisions are supported by complete records, and AI-generated results have undergone appropriate human review.
ACRA has made it clear that as financial crime becomes more sophisticated, the standards expected of CSPs will continue to rise.
CSPs should not wait for new regulations or a compliance review notice before taking action. They should strengthen their supporting evidence, human-review processes and audit trails now. Continued regulatory strengthening is already a clearly foreseeable direction.
AlgoCandy helps CSPs integrate client identification, beneficial ownership verification, complex structure analysis, AML/CFT/CPF screening, risk assessment, human review and evidence management within a single workflow.
The key question in future regulatory reviews will not simply be what checks a CSP completed, but:
Can the CSP produce complete and reliable evidence showing how each compliance conclusion was reached?
This will become a core capability for CSPs preparing for the next phase of regulatory expectations in Singapore.