Singapore AML: Anti-Money Laundering Rules and Compliance Guide for 2026
Singapore AML is the anti-money laundering regime that decides how firms in the city-state spot dirty money and stop it. Reporting it to the authorities falls under the same regime. Rule-making sits with the Monetary Authority of Singapore (MAS). Anchoring the law is the Corruption, Drug Trafficking, and Other Serious Crimes Act 1992 (CDSA). This guide walks through that framework. Expect coverage of the regulators behind it and the controls firms actually run. There is plenty on what shifted after Singapore's S$3 billion money laundering case too.
Why has Singapore turned into such a draw for financial institutions? A big part of the answer is the machinery built to fight financial crime. What follows lays out the legal framework and the key laws. Screening checks that sit at the heart of compliance get their own sections. And so do the risks that shape the daily work for any firm operating here.
Singapore's S$3 Billion Case and Its Aftermath
One case reset what Singapore AML expects of firms. Investigators uncovered an S$3 billion money laundering operation in August 2023. Ten foreign nationals were arrested. Authorities seized cash and property along with a pile of luxury goods, and another 17 suspects remain wanted as fugitives. Dirty money, the case showed, had moved through respected institutions. On 4 July 2025 the Monetary Authority of Singapore fined nine financial institutions a combined S$27.45 million for the control failures behind it, citing weak source-of-wealth checks and poor transaction monitoring. The penalised firms included the Singapore arms of Credit Suisse, UBS, Citibank, Julius Baer, UOB, and LGT Bank, plus other licence holders.
Parliament went further. Lawmakers passed the Anti-Money Laundering and Other Matters Act 2024 to make cross-border cases easier to prosecute, with phased commencement starting in November 2024. For firms, the message is blunt. Source of wealth is where Singapore tests you hardest now, and ongoing monitoring is right behind it.
What Is Singapore AML?
Singapore is a global financial hub. Its regulators treat financial crime as a direct threat to that status. They have staked their reputation on transparency and security, so stringent AML measures are a priority here rather than an afterthought.
MAS regulates and supervises the fight against money laundering in Singapore. Three pillars hold up the anti-money laundering framework, and no firm gets to skip any of them. Customer checks come first, at onboarding. Then transaction monitoring runs across the whole life of the relationship. And firms have to report to the authorities promptly when something looks wrong. All of this builds a culture of compliance that strengthens accountability across financial institutions. Investor confidence stays intact partly because of it.
Legal Framework of Singapore AML
The Monetary Authority of Singapore (MAS), the country's central bank, shapes AML in Singapore. Through detailed guidelines and on-site inspections, MAS regulates how financial institutions meet their AML obligations. And it has shown plainly that it will act when those controls fail.
Singapore also works with international bodies such as the Financial Action Task Force (FATF), aligning its framework with global standards. International observers watch the country closely because it is such a significant business hub, especially for startups. Some bad actors try to set up shell companies here. That is exactly why running full AML checks before you onboard a customer matters so much.
AML Laws in Singapore: 6 Key Anti-Money Laundering Laws
The main AML regulation in Singapore is the Corruption, Drug Trafficking, and Other Serious Crimes Act 1992 (CDSA). Several MAS Notices sit alongside it and set sector-specific expectations:
Beyond the notices, several statutes underpin the framework. Each one addresses a different slice of financial crime:
- Corruption, Drug Trafficking, and Other Serious Crimes Act (CDSA): Empowers authorities to combat corruption, drug trafficking, and other serious crimes through legal measures that reach the proceeds of those offences.
- Terrorism (Suppression of Financing) Act (TSOFA): Targets and prevents the financing of terrorist activities.
- Precious Stones and Precious Metals Act (PSPM): Regulates the trade in precious stones and metals to prevent illicit activity in a cash-heavy sector.
- Securities and Futures Act (SFA): Sets the regulatory framework for securities and futures markets, promoting market integrity and investor protection.
- Computer Misuse Act (CMA): Addresses cyber threats and unauthorized access with legal measures that safeguard computer systems and data integrity.
- Personal Data Protection Act (PDPA): Governs how personal data is collected, used, and disclosed, which matters when firms gather and store customer information for AML checks.
Each law serves a specific purpose. Read together, they criminalize money laundering and terrorist financing while keeping financial transactions secure in a digital economy.
Role of Government and Regulatory Bodies
A handful of bodies keep AML compliance in Singapore working. MAS leads as the financial regulator. The Commercial Affairs Department (CAD) of the Singapore Police investigates financial crime. As the national financial intelligence unit, the Suspicious Transaction Reporting Office (STRO) receives and analyses reports of suspicious activity. Public-private partnerships and international cooperation channels fill out the rest of the picture, letting authorities share intelligence across borders.
This structure is built to handle threats to national security. Guarding the integrity of businesses falls to it too, and it backs the country's counter-terrorism efforts. Working in concert rather than in isolation, the bodies reinforce one another. That coordination is a big part of what makes the regime effective.
AML Risks in Singapore
Singapore's global connections and strong financial sector create exposure that regulators watch carefully. The main money laundering risks include:
- Trade-based money laundering (TBML), where the price or volume of goods is manipulated to move value across borders
- Offshore entities and shell companies used to obscure ownership
- Cross-border transactions that span multiple jurisdictions and legal regimes
- Real estate, a favoured destination for laundered funds
- Virtual currencies and fintech, where speed and pseudonymity raise the stakes
- Corruption and bribery, which feed illicit flows into the system
MAS and CAD assess and mitigate these risks on a continuing basis. That work is what keeps the controls aligned with how criminals actually operate.
What Is AML Screening?
AML screening is the process of checking customers and transactions against watchlists and risk data to catch money laundering before it takes hold. Onboarding is where it starts. From there it continues for the life of the relationship. A firm screens a new customer's name, and the checks keep running as sanctions lists update and behaviour shifts over the months that follow. Without screening, a firm has no reliable way to know whether it is doing business with a sanctioned party or a known launderer.
Three checks make up the core of most programs. Sanctions screening tests names against government and international restriction lists. PEP screening flags politically exposed persons who warrant closer review. Then there is adverse media screening, which surfaces negative news that can signal risk long before it ever reaches an official list. Each plays a distinct role. A thin program that runs one of the three but skips the others leaves obvious gaps.
Sanction Screening in AML
Sanction screening checks whether a customer, beneficial owner, or related party appears on a sanctions list. Lists like these are maintained by governments and bodies such as the UN, naming individuals and companies under economic restrictions, and sometimes whole countries, often tied to terrorism or proliferation risk. For a Singapore firm, screening against the relevant lists is not optional. Handling funds for a restricted party is precisely the outcome it prevents.
Most firms follow a clear sequence here. When the relationship starts, the firm verifies the customer's identity. That identity gets screened against the applicable lists. Any match is investigated rather than waved through, because false positives are common and a real hit carries serious consequences. From there the firm keeps screening on an ongoing basis, since a customer who was clean at onboarding can land on a list later. Matching logic matters a great deal here. Tune it too loose and analysts drown in noise. Tune it too tight and a genuine match slips past.
Name Screening and PEP Screening
Name screening is the broader discipline that sanctions and PEP checks live within. Customer details get compared against multiple data sources at once. Rarely is the hard part the lookup itself. Names transliterate differently. They vary in spelling and repeat across thousands of unrelated people, so the screening engine has to balance catching true matches against flooding the team with false positives.
PEP screening is a specific slice of that work. A politically exposed person holds a prominent public role, which brings a higher risk of bribery or corruption, so regulators expect closer scrutiny. Start with the flag itself: the PEP screening process first works out whether a customer is a PEP. Enhanced due diligence follows if the answer is yes. And monitoring of the relationship carries on over time. A minister flagged at onboarding does not stop being a PEP, and their risk can climb with a change in office, which is why one-time screening falls short. Records of each screen should be kept for regulators to review on request.
Compliance With Singapore AML
Illicit transactions slip through when compliance gets treated as a box to tick. So do corruption and terrorist funding. Manual processes eat time. Worse, they let important risk signals go unnoticed. Bringing in automated KYC solutions closes that gap and frees your team to focus on real alerts rather than data entry.
Compliance with AML regulations is a baseline expectation for any firm operating under Singapore's jurisdiction. The key points to get right:
- A risk-based approach that scales effort to the actual threat
- Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD)
- Transaction monitoring for fraud detection
- Reporting obligations, including suspicious transaction reports
- Third-party and supply-chain risk management
- Ongoing regulatory compliance as the rules evolve
How to Choose AML Screening Software
Picking AML screening software comes down to a few questions that cut through the feature lists. Start with the data. How current is it, how wide does it reach, and does it cover the sanctions, PEP, and adverse media sources your risk profile demands? Then ask about the matching logic. Can it be tuned, so the team is not buried under false positives or, worse, missing real ones? And what about ongoing monitoring. Does it run automatically, or does someone have to remember to re-screen?
Fit with your own stack matters too. Screening well counts for little if a tool cannot push alerts into your case workflow, since that gap creates manual handoffs that slow everything down. Look at how the software handles sanctions screening end to end, from the first check through to alert resolution, and weigh whether it scales as your customer base grows. Your sector drives the right choice here. So do your transaction patterns and the regulators you answer to.
Additional AML Legislation in Singapore
Singapore's anti-money laundering legislation extends past the CDSA. In 2019 the government passed the Payment Services Act (PSA), which sets out regulatory expectations for payment service providers and digital payment token services. It brought a fast-growing slice of the financial sector squarely under the AML net.
The STRO and the Commercial Affairs Department of the Singapore Police play significant roles in uncovering money laundering schemes. Suspicious activity reports filed by firms are an integral part of the regime, feeding the intelligence that lets investigators connect cases. MAS has also stepped up its scrutiny of shell companies. That is a clear signal of where it expects firms to look harder.
The 2026 FATF Review and What It Means
Singapore's framework drew a strong verdict from the Financial Action Task Force. On 6 May 2026 the FATF published its mutual evaluation report, based on an on-site visit in July 2025. Singapore came out with a strong and effective system to counter money laundering, terrorism financing, and proliferation financing. Assessors credited strong governance and a sound legal framework. Good coordination across government drew praise as well.
The review was not all praise. FATF noted that the system must produce sharper and more consistent risk-based results, and that awareness of proliferation financing risk could improve in sectors not traditionally subject to FATF obligations. For firms, the takeaway echoes the one the S$3 billion case delivered. Having controls on paper is not enough. Supervisors want to see them working in practice, case by case.
How KYC Hub Supports Singapore AML Compliance
KYC Hub's AML Screening and Monitoring solution gives firms in Singapore an end-to-end way to meet the obligations MAS sets. Exhaustive AML screening comes first, so customers and counterparties are checked against the sanctions and watchlists that matter. Continuous monitoring and AML alerts then keep the relationship under review after onboarding, which is exactly where Singapore's regime expects ongoing diligence to live.
Three further pillars fill out the picture. Global adverse media intelligence surfaces negative news that can flag risk before it reaches an official list. Network intelligence helps teams see the connections between entities that simple name checks miss, which is directly relevant to the shell-company and source-of-wealth concerns MAS keeps raising. Backed by global data coverage, the platform gives compliance teams one place to screen and monitor, with alert resolution handled in the same workflow rather than stitching separate tools together. For a firm trying to scale without scaling its false-positive workload, that consolidation is the practical win.
