(Slides) Module 2 - Customer Due Diligence Process
(Slides) Module 2 - Customer Due Diligence Process
(Slides) Module 2 - Customer Due Diligence Process
COMPLIANCE OFFICERS
Module 2
Customer Due
Diligence
Process
(CDD)
Version 2.0
GROUP OF COMPLIANCE OFFICERS AML/CFT TRAINING MODULES MEMBER EDUCATION PROGRAMME 2
9:00 am Introduction & CDD
11:00 am Break
Training Agenda
11:30 am CDD (Continuation)
1:00 pm Lunch
CDD (Continuation)
2:00 pm
ECDD
3:30 pm Break
4:00 pm ODD
5:00 pm End
9
CDD is a regulatory
requirement
On-going Due
Red Flags CDD/ECDD
Diligence (ODD)
Pre-Transaction During Transaction Post Transaction
*Note:
• Red Flags will be covered separately in Module 3
• Not all red flag triggers require a submission of STR
Requirement to display
notice (both physical &
digital) in a conspicuous
position at MSBs approved
premises in the format below
informing customers of the
CDD requirements
15
Co need to decide Based
acceptable CD .
on co exercise
g-
• Identify the customer & verify the customer’s identify;
Para 14C.4 independent
source of dox
• Verify that any person acting on behalf of the customer is so
authorised, and identify and verify the identity of that person;
On Behalf Transactions
• For trusts, the settlor, the trustee(s), the protector (if any), the
beneficiary or class of beneficiaries, and any other natural
person exercising ultimate effective control over the trust
(including through the chain of control/ownership);or
• For other types of legal arrangements, the persons in equivalent
Beneficial Owner (BO)
or similar positions
*such as foundations, and legal arrangements such as trusts which administer
and distribute funds
3. RI needs to identify & verify person authorised to represent customer (in this case – the Legal Person).
How? When dealing with such person, through:-
(i) Letter of Authority or
(ii) Directors’ Resolution
23
LEGAL PERSONs (continue)
5. Whenever in doubt of identity of persons in (Item 2 to 4 in Slide 23), RI shall:- winding up / dissolution
(i) conduct BACKGROUND basic search (or inquiry). Purpose to ensure the person is not:-
(a) under dissolution
(b) under liquidation
(c) a bankrupt
(ii) verify authenticity of information provided by the person with *SSM, *LFSA or any other authority
24
SUMMARY : CDD on Legal Person(s)
Identify & Verify For Sole-Proprietorship / Partnership
[Note:
Name of Forms have changed name for
companies incorporated under
Companies Act 2016]
At Individual Level
• ID of the Sole-proprietor or partners
• Identity of beneficial owners and • Letter of authority
• Letter of authority or directors’ • ID of authorized persons
authorised persons resolution
• ID of authorised persons
If in Doubts
*Or Corporate profiles obtained from SSM as per Q52 of FIED FAQ
Where there is any doubt as to the • Conduct a basic search or enquiry on the background
identity of the persons • Verify the authenticity of the information with SSM or other relevant agencies
Shareholders Details
Corporate Details
Notwithstanding above, RI must identify and maintain information relating to identity of directors & shareholders of
Legal Person referred to under Para 14C.10.9. How? Through public register, other reliable sources or based on
information provided by customer
(i) Name;
Legal form + proof of existence ; or
Any reliable references to verify the identity of the customer.
(ii) Power – that regulate & bind customer (as well as names of relevant having Senior Management position; and
RI needs to identify and (take reasonable measure to) verify BENEFICIAL OWNER through:-
YES
beneficiaries, can MSB rely on 3rd
Party to verify identity of
beneficiaries?
but RI need to
comply with Para 16
30
CDD on
Clubs, Societies
and Charities Para 14C.10.17 to Para 14C.10.19
Organizations which are set up to provide
services to its members and general public
registered with the Registry of Society (ROS)
3. RI needs (take reasonable measures) to identify and verify Beneficial Owners of customer
4. When in doubt on identity of persons mentioned above, RI shall verify the authenticity of the information
provided with:-
(i) ROS – Registrar of Societies
(ii) LFSA – Labuan Financial Services Authority
(iii) SSM – Companies Commission of Malaysia
(iv) LAD – Legal Affairs Division under Prime Minister’s Department
(v) Any other relevant authority
32
Para 14C.15
What to do with these customers now? Conduct CDD on such existing relationships.
WHEN? At appropriate times
WHAT aspect to consider?
(i) Whether and when CDD measures have (previously) been undertaken
(ii) Adequate data obtained
*Section 16 AMLA is on CDD requirement
33
Full name Date of
How to IDENTIFY Customer & BO? birth
ID Number
Para 14C.10
RI may conduct simplified CDD where ML/TF risks are assessed as LOW
Pre-Condition
-Need prior BNM approval
Condition(s)
(i) analyse ML/TF risks ADEQUATELY
(ii) established mechanisms and internal controls for effective on going monitoring of
customer & transaction [ensuring prompt detection of unusual / suspicious transactions]
(iii) BOD approval for simplified CDD implementation
(iv) periodic review on ML/TF risks
35
Para 14C.12
Introduction
It is CDD conducted on specific type of transaction, namely:-
(i) Money Changing & Wholesale of Currency
(ii) Wire Transfer / Remittance Business
For transaction RM10K and above – Conduct For transaction RM3K and above – Conduct
Standard CDD (see slide 34) Standard CDD (see slide 34)
36
VERIFICATION
What does it mean?
Para 14C.6 - 9
What is ‘VERIFY’?
An act of making sure that (in this case – issue of identity of customer or BO) is true, accurate and
justified.
When?
RI may complete verification WHEN:-
(i) ML/TF risks assessed LOW; and
(ii) verification not possible (at the point of establishing business relationship)
Conditions to be SATISFIED
(i) Delayed verification must be as soon as reasonably practicable [not more than 10 working days]
(ii) Delay is essential (so as not to interrupt RI normal conduct of business)
(iii) ML/TF risk are effectively managed [adopt RISK MANAGEMENT PROCEDURES]
(iv) No suspicion of ML/TF risks
38
CDD
Para 14C.16
Non Face-to-Face Business Relationship
RI may establish NF2F business relationship provided:-
(i) established independent contact with customer Verify again+ reliable source
(ii) verify customer’s information against reliable & independent sources to confirm his identity &
identifying known (or suspected) ML/TF risks associated with customer
(iii) request, sighting and maintain records (of additional documents) in customer verifications
40
NF2F Requirement(s) for Remittance & Money
Changing transaction Para 14C.16.14
(i) ONLY transact with individual who has a bank account
41
ADDITIONAL requirement (for Remittance transaction) Para 14C.16.15
(i) Individual Customer (including Expatriate)
Total monthly transactional limit : not more than RM5K Foreigner stay at
hotel
AND use address of
hotel
-funds only remitted to home country
-beneficially must be pre-registered by customer with RI during establishment of business relationship
-RI must have proper internal process
[including: -appropriate control & procedures in place to attend to customer’s request to change/alter pre-
registered beneficiaries (and its monitoring procedure to identify suspicious pattern)]
42
TARGETED FINANCIAL SANCTIONS
These are measures for asset freezing and prohibitions to prevent funds or other
assets from being made available, directly or indirectly, for the benefit of
specified entities / designated persons who are being sanctioned.
43
Terrorism Financing Proliferation Financing Other UN Sanctions Regimes
Act of providing financing to Act of providing funds or Any other United Nation
terrorist acts and for terrorist financial services which are Sanctions Committee
and terrorist organisations, used, in whole or in part for the (UNSC) sanctions regimes
through legitimate or manufacture, acquisition, in relation to upholding of
illegitimate sources possession, development, peace and security, and
export, trans-shipment, prevention of armed
brokering, delivery and related conflicts and human right
material (including technologies violations.
and dual use goods used for
non-legitimate purposes), in
contravention of national laws
or, where applicable,
international obligations.
Para 27 Para 28 Para 29
44
TARGETED FINANCIAL SANCTIONS on
TERRORISM
FINANCING
Para 27
45
Financing of:-
- terrorist acts;
- terrorists;
- terrorist organizations.
46
Al-Qaeda
Key areas of Afghanistan / Pakistan
Terrorism Activities Taliban
Islamic State Afghanistan
Iraq / Syria
Abu Sayyaf
Boko Haram
Philippines
Nigeria
Jemaah Islamiyah
Indonesia
Domestic List
Name and Particulars of SPECIFIED ENTITIES declared by Minister of Home Affairs under subsidiary
legislation made under Section 66B(1) AMLA
Related Party
(a) Person related to :-
(i) Properties Wholly /Jointly by
or SPECIFIED ENTITY
(ii) Funds
Controlled (directly/indirectly) by
On behalf of
(b) Person acting Or SPECIFIED ENTITY
At direction of
(
48
INTRODUCTION (continuation)
UNSCR List
Refer to who?
Those whose names
and particulars
designated by UNSC /
relevant Sanctions
Committee
Note:
UNSC = United Nation Security Council
UNSCR = United Nation Security Council Resolutions
49
What RI needs to do?
Needs to keep updated with relevant UNSCR including:-
50
MAINTENANCE OF SANCTIONS LIST Domestic List
RI needs to maintain the following lists:-
RI needs to keep updated Domestic List published
UNSCR List in Gazette
RI needs to maintain sanction database on UNSCR List RI to maintain sanction database on Domestic List
Consolidated UNSCR List can be found in Consolidated Domestic List can be found in
http://www.un.org http://www.federalgazette.agc.gov.my
List shall remain in database until specified entities List shall remain in database until specified entities
delisted (published in UN website) delisted (published in Gazette)
51
SUMMARY
What RI needs to do?
(1) Keep updated with relevant UNSCR relating to combating the financing of terrorism
[See the list in Para 27.2.1]
52
Sanctions Screening on Customer
Screen against?
-Domestic List
-UNSCR List
53
Step 1
Conduct on who? Customer [existing, potential or new] to see if customer is specified entity or
related parties
54
Step 2 : Make sure it is TRUE POSITIVE (true match)
- Additional information
- Additional identification documents
55
STEP 3 : ACTION [if TRUE POSITIVE]
STEP 4 : REPORTING
56
PROLIFERATION
FINANCING
Para 28
57
INTRODUCTION
Definition
Customer
(i) Beneficial Owner
(ii) Beneficiary
UNSCR List
Name and Particulars of persons designated by UNSC (or its relevant Sanctions Committee) deemed
DESIGNATED PERSONs under Strategic Trade Act 2010 (STA)
Related Party
(a) Person related to :- Wholly /Jointly owned by
(i) Funds DESIGNATED
or PERSON
(ii) Financial Assets Controlled (directly/indirectly) by
(iii) Economic Resources
(ii) Keep updated on new decisions of UNSCR (or its relevant Committee) See Appendix 6
(iv) Ensure information in sanctions database is updated (and effected without delay upon publication)
(vi) List maintain until delisting of designated country or person as published in UN website
59
Step 1
60
Step 2 : Make sure it is TRUE POSITIVE (true match)
- Additional information
- Additional identification documents
Related Party
- RI needs to examine & analyse past transactions of DESIGNATED PERSON and related party
- RI needs to maintain record of analysis
61
STEP 3 : ACTION [if TRUE POSITIVE]
STEP 4 : REPORTING
62
OTHER
SANCTION(S)
Para 29
63
INTRODUCTION
Definition
Customer
(i) Beneficial Owner
(ii) Beneficiary
UNSCR List
Name and Particulars of persons designated by UNSC (or its relevant Sanctions Committee) deemed
DESIGNATED PERSONs under relevant Central Bank of Malaysia Act 2009 (CBA) regulations
Related Party
(a) Person related to :- Wholly /Jointly owned by
(i) Funds DESIGNATED
or PERSON
(ii) Financial Assets Controlled (directly/indirectly) by
(iii) Economic Resources
(ii) Keep updated on new decisions of UNSCR (or its relevant Committee) See Appendix 7
(iv) Ensure information in sanctions database is updated (and effected without delay upon publication)
(vi) List maintain until delisting of designated country or person as published in UN website
65
Step 1
66
Step 2 : Make sure it is TRUE POSITIVE (true match)
- Additional information
- Additional identification documents
Related Party
- RI needs to examine & analyse past transactions of DESIGNATED PERSON and related party
- RI needs to maintain record of analysis
67
STEP 3 : ACTION [if TRUE POSITIVE]
STEP 4 : REPORTING
:
[To report, use form in Appendix 8a]
- Periodic Reporting : where RI in possession or in control of frozen or blocked funds or financial assets
or economic resources on any changes to the same
[To report, use form in Appendix 8b]
Note: RI does not need to submit report on customer who conduct one off transaction
-STR on:
(i) Related Transaction
(ii) Attempted Transaction
68
FAILURE to
satisfactorily
complete CDD
What can/must RI do?
69
CDD - Failure to satisfactorily complete CDD
Para 14C.17
RI SHALL NOT
- Open account;
- Commence business relation;
- Perform any transaction [potential customer]
RI SHALL
- Terminate business relations [existing customer]
TIPPING
(a) knows or has reason to suspect that an investigating
officer is acting, or is proposing to act, in connection
with an investigation which is being, or is about to be,
conducted under or for the purposes of this Act or
OFF
any subsidiary legislation made under it and discloses
to any other person information or any other matter
which is likely to prejudice that investigation or
proposed investigation; or
(b) knows or has reason to suspect that a disclosure has
been made to an investigating officer under this Act
and discloses to any other person information or any
other matter which is likely to prejudice any
investigation which might be conducted following the
disclosure,
An offence under Section 35 of AMLA
commits an offence and shall on conviction be liable to a
fine not exceeding three million ringgit or to
imprisonment for a term not exceeding five years or to
both.
71
RI suspicious of ML/TF + REASONABLY believes by performing CDD
would TIP OFF customer
Note:
RI is allowed to continue transaction for the PURPOSE of making further
inquiry/investigation on ML/TF suspicion
72
RELIANCE ON 3RD PARTY to conduct CDD
Para 16
Allowable?
Yes
73
RELIANCE ON 3RD PARTY to conduct CDD (cont)
Para 16
74
75
What is ECDD
76
Enhanced Customer Due
Diligence (ECDD) is the CDD
process of gathering data and
information to verify the identity of
customers, but with additional
information required to mitigate the
risk associated with them.
77
Para 14C.13 WHEN is ECDD required?
RI is required to perform ECDD where ML/TF risks are
ASSESSED as higher risk
In ADDITION, RI may also consider the following ECDD measure(s) in line with ML/TF risks identified:-
(i) Obtaining additional information on intended level of business relationship
(ii) Obtaining additional information on the intended level of nature of business relationship
(iii) Inquiring reason(s) for intended (or performed) transactions
(iv) Requiring 1st payment to be carried out through customer’s banking account subject to similar CDD
measures
Travelling Documents
such as:
Business Documents
such as:
Finance Documents
such as:
Other Documents
such as:
Wining Tickets Sales Contract
Para 15
FOREIGN PEPs
RI needs to put in Risk Management System [to determine whether customer/BO is PEP]
Once determined positively – MUST conduct ECDD (as specified under Para 14C.13) and enhanced
ODD (under Para 14C.14.4)
81
GROUP OF COMPLIANCE OFFICERS AML/CFT TRAINING MODULES MEMBER EDUCATION PROGRAMME
82
WHAT RI needs to know and do? Para 17
Conduct ECDD proportionate to risk, business relationships and transaction with any person from higher
risks countries (called for by FATF) or by Government of Malaysia
The FATF has identified jurisdictions with strategic deficiencies in their frameworks to combat money
laundering and the financing of terrorism and proliferation: high-risk jurisdictions subject to a call for
action (‘Black List’) and jurisdictions under increased monitoring (‘Grey List’)
Jurisdictions under increased monitoring are actively working with the FATF to
address strategic deficiencies in their regimes to counter money laundering,
terrorist financing, and proliferation financing. When the FATF places a jurisdiction
under increased monitoring, it means the country has committed to resolve swiftly
the identified strategic deficiencies within agreed timeframes and is subject to
increased monitoring.
See the updated list of countries in February 2021. Find them here:-
https://www.fatf-gafi.org/publications/high-risk-and-other-monitored-jurisdictions/documents/increased-
monitoring-february-2021.html
84
Counter measures
Grey List
RI is required to apply counter measure [proportionate to the risks] when called upon to do
so by FATF/ Gov. of Malaysia
86
87
What is ODD & why it is needed?
ODD Features:-
- Measures
- Consideration
ODD Conduct
ODD Tools
3rd Party Reliance
88
ODD
What is On-going
Due Diligence?
An ongoing monitoring of the business relationship
where transactions are continuously scrutinized
throughout the course of relationship to ensure that:
90
RI needs to:-
1. Scrutinize Transaction (throughout course of business relationship)
a appears unusual;
c
does not have any apparent economic
purpose
By Higher Risk
To detect ML/TF attempts
Countries / PEP How to detect irregular transaction
patterns
By Beneficiary Details Able to detect multiple senders sending
(For remittance service) to same beneficiary
● View Exception Reports from the MIS
Able to detect transactions that exceeds regularly;
By Customer Profile
customer’s profile ● Monitor irregular transaction patterns
from the relevant reports and identify
To identify attempts to avoid detection
By Delivery Channel
by using various transaction channels suspicious transaction activities.
Record Keeping ● Guide – documents kept must enable reconstruction of transaction & evidence for
prosecution of criminal activity
Para 24
Keep in WHAT form? Para 24.5
● In the form that is admissible as evidence in court pursuant to Evidence Act 1950
● Avail such record to supervisory authority(ies) / law enforcement agency in a TIMELY
manner
96
ACCURATE
DATA
ENTRY
THE IMPORTANCE
97
Importance of accurate
data entry
During the CDD process
Customer data must be accurately keyed in the
MIS according to the ID and the information given
During Transaction
After Transaction
100
RI must have :-
• MIS may be integrated with RI’s information system that contains customer’s
normal transactions or business profile which is accurate, up-to-date and
reliable
GROUP OF COMPLIANCE OFFICERS AML/CFT TRAINING MODULES MEMBER EDUCATION PROGRAMME
101
Management Information System (MIS)
• Customer Profiling
• Irregular Transaction • Irregular Transaction • Mandatory Data Archiving
• High Risk / Medium Risk
Alerts Monitoring
/ Low Risk
103
CDD Form
To facilitate in obtaining the information
of customers and beneficial owners
AML/CFT & TFS Anti-Money Laundering, Countering Financing of Terrorism and Targeted Financial Sanctions for
for Fis Financial Institutions
BO Beneficial Owner
Para Refers to the specific paragraph in BNM Policy Document called Anti-Money Laundering,
Countering Financing of Terrorism and Targeted Financial Sanctions for Financial Institutions
RI Reporting Institution
105
Kindly NOTE:-
Evaluation and
Assessment
All rights reserved. No part of this document may be reproduced, stored in a retrieval system or transmitted in any form by any means electronic,
mechanical, photocopying, recording or otherwise, without the prior written permission MAMSB. Use (by adoption or otherwise) of any part of this
document (in whole or in part) without the prior written permission of MAMSB shall be a violation of copyright.
Website http://www.mamsb.org.my
E-mail [email protected]