Singapore Banking & AML Compliance: Meet KYC & AML Standards

Setting up a company in Singapore gives you access to one of the most stable and reputable financial hubs in the world. However, that stellar reputation is aggressively protected. Over the past few years, the Monetary Authority of Singapore (MAS) and the Accounting and Corporate Regulatory Authority (ACRA) have drawn a hard line against financial crime, rolling out stringent Anti-Money Laundering (AML) and Countering the Financing of Terrorism (CFT) requirements.

For entrepreneurs, multinational subsidiaries, and foreign investors, this means that opening a corporate bank account and staying compliant isn't just a matter of filling out a form—it requires a proactive, strategic approach.

At Mirr Asia, we help businesses navigate this complex regulatory terrain. In this guide, we break down exactly what Singapore banks are looking for today, how to ace your Know Your Customer (KYC) checks, and how to keep your company in perfect standing with the authorities.

1. Understanding Singapore’s Current AML/CFT Landscape

Singapore operates on a zero-tolerance policy for illicit financial flows. Rather than just offering guidelines, regulatory bodies issue legally binding directives that financial institutions and Corporate Service Providers (CSPs) must follow to the letter.

Here are the critical frameworks shaping corporate banking right now:

• MAS Notice 626: This is the primary, legally binding directive issued by MAS that dictates how banks must prevent money laundering and terrorism financing. It forces banks to conduct deep Customer Due Diligence (CDD) and penalizes them heavily—sometimes with fines up to SGD 1 million per breach or even license revocation—if they fail to spot suspicious activities.

• The COSMIC Platform: Launched in April 2024, COSMIC (Collaborative Sharing of Money Laundering/Terrorism Financing Information and Cases) allows major banks like DBS, OCBC, and UOB to securely share data on clients who trigger financial crime "red flags." If your business provides inconsistent information to one bank, that data can now be flagged across the entire Singaporean banking network.

• Strict Corporate Service Provider Oversight: ACRA holds CSPs highly accountable, meaning your corporate secretary must rigorously verify your identity, background, and business intentions before even registering your company.

2. Acing the KYC Process: What Banks Actually Want

If you are applying for a corporate account, a generic business plan will no longer cut it. Banks are required by law to understand exactly who they are dealing with. To pass the KYC phase smoothly, you must prepare:

Ultimate Beneficial Ownership (UBO) Transparency

Banks must peel back the layers of your corporate structure to find the real humans in charge. Under Singapore law, a beneficial owner or "registrable controller" is anyone who holds more than 25% of the company's shares or voting rights, or anyone who exercises significant executive control. You will need to provide certified identity documents (passports, NRICs) and proof of residential address for every UBO.

Ironclad Proof of "Commercial Reality"

Banks want to see that your business is genuine and operational, not a shell entity. You should be ready to present:

• Signed contracts, purchase orders, or letters of intent from clients and suppliers.

• A live, professional business website.

• A clear, documented explanation of how your business generates revenue and which countries you trade with.

Transparent Source of Funds

You must definitively prove where your startup capital and ongoing funding come from. Whether it is personal savings, venture capital funding, or parent-company revenue, the paper trail must be documented and logically sound.

3. How to Avoid Regulatory Pitfalls and Maintain Compliance

Opening the account is just the beginning. To avoid frozen accounts, fines, or regulatory investigations, your company must maintain continuous compliance. Here is where most businesses trip up:

The RORC Trap: Update Within 2 Business Days

Every Singapore-incorporated company, LLP, and registered foreign company must maintain a Register of Registrable Controllers (RORC). This is not a "set and forget" document. If there is a change in your company's ownership or control (for example, a founder dilutes shares or a new investor comes on board), you are legally required to update your private register and lodge the changes with ACRA’s central system within two business days.

Failing to maintain or lodge this information is a criminal offense under the Companies Act, carrying a massive fine of up to SGD 25,000 per breach.

Verified Gov Reference: Read more about the exact RORC obligations directly on the ACRA Official RORC Guide.

Stick to Your Declared Business Profile

Banks utilize automated systems to monitor transactions. If you told the bank you are an e-commerce brand selling to Australia, but you suddenly receive massive, unexplained wire transfers from a high-risk jurisdiction, your account will be immediately flagged for review. Always inform your bank proactively if your business model or target markets change.

The 5-Year Document Retention Rule

Under MAS Notice 626, companies and financial institutions must retain all transaction records and due diligence information for a minimum of five years. Clean, organized bookkeeping ensures that when the bank conducts its periodic KYC refresh, you can hand over the required documents without breaking a sweat.

Verified Gov Reference: Review the full regulatory expectations on the MAS Notice 626 Portal.

Let Mirr Asia Handle the Heavy Lifting

At Mirr Asia, we believe that compliance should protect your business, not paralyze it. We act as your strategic corporate partner on the ground in Singapore.

From conducting pre-application KYC audits to managing your ACRA lodgements and RORC updates, we ensure your business remains in perfect standing. By aligning your corporate structuring with the expectations of tier-1 banks, we dramatically reduce onboarding times and operational friction.

Ready to grow your business without the compliance headache? Reach out to the experts at Mirr Asia today.

FAQs

1. How long does it usually take to open a corporate bank account in Singapore?

For standard setups with straightforward ownership and complete documentation, it typically takes 2 to 4 weeks. However, if your company has a complex, multi-layered holding structure (e.g., offshore entities or trusts), the bank will perform Enhanced Due Diligence (EDD), which can extend the timeline to 6 to 12 weeks.

2. Who is considered a Registrable Controller or UBO in Singapore?

A Registrable Controller (or Ultimate Beneficial Owner) is any individual or entity that owns more than 25% of the company's shares, controls more than 25% of the voting rights, or exercises significant executive control over the company's decisions.

3. What happens if I forget to update my company's RORC?

Updating the Register of Registrable Controllers is a strict legal requirement. If ownership changes and you fail to lodge this update with ACRA within two business days, it is considered a criminal offense. The company and its officers can face fines of up to SGD 25,000 upon conviction.

4. Why is the bank asking for my business contracts just to open an account?

Because of strict MAS regulations, banks must prove "commercial reality." They are legally required to verify that your company is a genuine operating business and not a shell entity created for illicit money movement. Contracts, invoices, and active websites provide this proof.

5. Can a foreign national open a corporate bank account in Singapore without relocating?

Yes, 100% foreign-owned entities can successfully open corporate bank accounts in Singapore. While you do not need to reside in the country, you must pass rigorous identity verification (often via video call) and provide thoroughly documented proof of your source of wealth and business intentions.