
HPT News
Anti-Money Laundering Compliance for Offshore Structures
Every offshore structure must satisfy AML requirements at every level — formation, banking, ongoing monitoring, and reporting. Non-compliance risks criminal liability, not just fines.
2026
Anti-money laundering compliance is the operating system of the offshore world. Every entity formation, bank account opening, trustee appointment, and corporate service engagement requires AML due diligence. Non-compliance does not merely result in fines — it creates criminal liability for the individuals involved, loss of banking relationships, and potential dissolution of the structure itself. Understanding AML requirements is essential for anyone using offshore structures, not just the professionals who manage them.
The AML Framework
International Standards: FATF Recommendations
The Financial Action Task Force (FATF) sets the global standard for AML/CFT compliance through its 40 Recommendations. Key requirements include:
- Customer Due Diligence (CDD): Identify and verify the identity of the customer and beneficial owner before establishing a business relationship or conducting a transaction
- Enhanced Due Diligence (EDD): Apply additional measures for higher-risk customers, including Politically Exposed Persons (PEPs), customers from high-risk jurisdictions, and complex or unusual transactions
- Record Keeping: Maintain CDD records and transaction records for at least five years
- Suspicious Transaction Reporting (STR): Report suspicious transactions to the relevant Financial Intelligence Unit (FIU)
- Risk-Based Approach: Assess and mitigate ML/TF risk based on the customer's profile, geographic exposure, products used, and delivery channels
Key Legislation by Jurisdiction
United Kingdom:
- Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017)
- Proceeds of Crime Act 2002 (POCA) — establishes money laundering offences and the Suspicious Activity Report (SAR) regime
- Criminal Finances Act 2017 — creates corporate offences for failing to prevent the facilitation of tax evasion
European Union:
- Fourth Anti-Money Laundering Directive (2015/849)
- Fifth AMLD (2018/843) — extended scope to crypto-asset service providers
- Sixth AMLD Package (2024) — establishes EU Anti-Money Laundering Authority (AMLA) and harmonises rules
Cayman Islands:
- Anti-Money Laundering Regulations (as revised)
- Proceeds of Crime Act (as revised)
- Guidance Notes on the Prevention and Detection of Money Laundering and Terrorist Financing
BVI:
- Anti-Money Laundering Regulations 2008 (as amended)
- Anti-Money Laundering and Terrorist Financing Code of Practice 2008
- Proceeds of Criminal Conduct Act 1997
Singapore:
- Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act (CDSA)
- MAS Notice 626 (banks), Notice SFA04-N02 (capital markets intermediaries)
AML at Each Stage of an Offshore Structure
Stage 1: Entity Formation
When forming a company, trust, or foundation, the corporate service provider (registered agent) must conduct CDD on:
- The beneficial owner(s): Identification and verification of all individuals who ultimately own or control the entity (typically 25%+ threshold)
- Directors and officers: Identification and verification of all directors, signatories, and key personnel
- Source of funds: Evidence of the origin of the initial capital contributed to the entity (bank statements, sale proceeds, employment income)
- Source of wealth: Evidence of the overall wealth of the beneficial owner (how they accumulated their net worth)
- Purpose of the structure: A clear explanation of why the entity is being formed and how it will be used
Documentation typically required:
- Certified passport copies (notarised or apostilled)
- Proof of address (utility bill, bank statement — less than 3 months old)
- Bank reference letter
- Professional reference letter (from a lawyer, accountant, or banker)
- Source of funds documentation (bank statements showing the trail of funds)
- Corporate structure chart identifying all entities and beneficial owners
Stage 2: Bank Account Opening
Banks conduct their own independent CDD, which is typically more rigorous than the formation agent's:
- KYC documentation: Same as formation, but banks often require original certified documents (not copies)
- Business plan or activity description: Banks require a detailed description of the account's expected activity — transaction volumes, counterparties, currencies, and sources of incoming/outgoing payments
- Tax compliance: Confirmation that the beneficial owner is tax compliant in their country of residence. CRS self-certification forms (identifying tax residency) are mandatory
- Sanctions screening: All parties (beneficial owners, directors, counterparties) are screened against OFAC SDN, EU Consolidated List, UN sanctions, and other applicable lists
- PEP screening: All parties are checked against PEP databases (current and former holders of prominent public functions, their family members, and close associates)
Timeline: Account opening typically takes 4 to 12 weeks for offshore structures, depending on the bank, jurisdiction, and complexity of the structure.
Stage 3: Ongoing Monitoring
Once the structure is operational, both the service provider and the bank conduct ongoing monitoring:
- Transaction monitoring: Automated and manual review of transactions for suspicious patterns — unusual volume, unexpected counterparties, transactions with high-risk jurisdictions, structuring (breaking large transactions into smaller ones to avoid reporting thresholds)
- Periodic review: CDD is refreshed periodically — annually for high-risk clients, every 3 years for medium-risk, every 5 years for low-risk
- Event-driven review: CDD is updated whenever a material change occurs — change of beneficial owner, change of business activity, adverse media reports
Stage 4: Reporting
If suspicious activity is identified, the service provider or bank must file a report:
- UK: Suspicious Activity Report (SAR) filed with the National Crime Agency (NCA) via the SAR Online system
- Cayman Islands: Suspicious Activity Report filed with the Financial Reporting Authority (FRA)
- BVI: Suspicious Transaction Report filed with the Financial Investigation Agency (FIA)
- Singapore: Suspicious Transaction Report filed with the Suspicious Transaction Reporting Office (STRO)
- US: Suspicious Activity Report (SAR) filed with FinCEN
Tipping off: In most jurisdictions, it is a criminal offence to inform the customer that a suspicious activity report has been filed. This means the customer may not know that their transactions are under review.
High-Risk Factors
Certain characteristics automatically trigger Enhanced Due Diligence (EDD):
Client-Related Risk Factors
- Politically Exposed Persons (PEPs): Current or former heads of state, senior government officials, senior judiciary, senior military, board members of state-owned enterprises, and their family members and close associates
- Complex ownership structures: Multiple layers of companies, trusts, and foundations that obscure the beneficial owner
- Bearer shares: Historically used for anonymity, now prohibited or restricted in most jurisdictions
- Adverse media: Negative news coverage related to financial crime, corruption, or sanctions
Geographic Risk Factors
- FATF grey list countries: Currently includes jurisdictions under increased monitoring (the list changes regularly — check fatf-gafi.org for current status)
- FATF blacklist countries: Currently includes North Korea and Myanmar (subject to counter-measures)
- High-risk jurisdictions: Countries identified by the EU, US, or UK as posing elevated ML/TF risk
- Sanctions targets: Countries subject to comprehensive sanctions (Iran, North Korea, Syria, Russia, Belarus, and others)
Transaction Risk Factors
- Cash-intensive businesses
- Cryptocurrency transactions (particularly involving unhosted wallets or mixing services)
- Trade finance (complex documentation, multiple jurisdictions)
- Correspondent banking (layered banking relationships)
- Real estate transactions (particularly high-value residential property)
Penalties for Non-Compliance
Criminal Penalties
- UK: Money laundering offences under POCA carry a maximum of 14 years imprisonment. Failure to report suspicion: up to 5 years. Tipping off: up to 5 years
- US: Federal money laundering charges under 18 USC 1956 carry up to 20 years imprisonment and fines of USD 500,000 or twice the value of the transaction
- Cayman: Money laundering offences carry up to 14 years imprisonment under the Proceeds of Crime Act
- Singapore: Maximum 10 years imprisonment and SGD 500,000 fine under the CDSA
Regulatory Penalties
- UK FCA: Fines of unlimited amount. Recent fines include GBP 264 million (NatWest, 2021) and GBP 163 million (Deutsche Bank, 2017)
- CIMA (Cayman): Fines up to CI$1 million per breach, plus licence revocation
- MAS (Singapore): Fines up to SGD 1 million per breach, plus licence revocation
Practical Consequences
- Loss of banking relationships (bank closes all accounts associated with the non-compliant entity)
- De-registration of the entity (struck off the corporate register)
- Inability to open new bank accounts or engage service providers
- Reputational damage affecting business operations
Key Takeaways
- AML compliance is required at every stage of an offshore structure: formation, banking, ongoing monitoring, and reporting — it is not a one-time exercise
- CDD requires identification of all beneficial owners, verification of identity, documentation of source of funds and source of wealth, and screening against sanctions and PEP databases
- Banks conduct their own independent CDD, typically more rigorous than the formation agent's, and account opening takes 4 to 12 weeks for offshore structures
- Suspicious activity reports must be filed when suspicious transactions are identified — tipping off the client is a criminal offence in most jurisdictions
- Criminal penalties for money laundering range from 5 to 20 years imprisonment across major jurisdictions; regulatory fines are unlimited in the UK
- PEPs, complex ownership structures, high-risk jurisdictions, and cryptocurrency transactions automatically trigger Enhanced Due Diligence
- Full AML compliance is not optional — it is the price of participation in the international financial system
Get HPT intelligence in your inbox
Offshore structuring analysis, jurisdiction updates, and tax planning insights. No marketing. Unsubscribe any time.
Related Services
Popular Jurisdictions
Have a question about this topic?
Our Single Issue Diagnosis gets you a written answer on your specific situation from £1,500.
Apply NowRelated Articles
Browse by Category
Have a question about this topic?
Get a written answer on your specific situation from a senior director.
Apply Now →