Corporate Secretarial · KYC and AML Compliance
KYC and AML compliance for foreign-owned Singapore companies.
Before a Singapore company can be formed, banked, or administered, someone has to establish who is behind it. We identify, verify, and screen the individuals and corporate structures that own and control our clients' companies, at onboarding and whenever the facts change, and we keep the file in a state that answers every later question from the same evidence.
01 Context
Why the checks exist, and why they are not optional.
Singapore polices who stands behind its companies.
Singapore regulates the firms that form and administer companies. Corporate service providers operate under the Corporate Service Providers Act and its regulations, a framework built to counter money laundering, terrorism financing, and proliferation financing, and it requires customer due diligence before corporate services are provided: identifying and verifying customers and their beneficial owners, establishing the purpose of the relationship, screening against the sources the framework prescribes, and documenting all of it.
So the checks are not a firm's private caution; they are how the jurisdiction works. Any provider forming a Singapore company for an overseas company must ask who owns it, who controls it, and how the structure fits together, and a provider who asks nothing should worry you more than one who asks a lot.
Our position is that the exercise, done properly once, is an asset. The same verified picture of the ownership chain supports the incorporation filing, the statutory registers, the nominee director arrangement where there is one, and the questions banks ask at account opening and at every periodic review afterwards. This page describes how we run it.
02 Coverage
What the checks cover, for individuals and for corporates.
For individuals, directors, shareholders, and the people who ultimately stand behind them, verification means reliable identification documents, proof of residential address, and screening of each name. For corporate shareholders the exercise runs layer by layer: constitutional documents, registers of members and directors, and evidence of standing for each entity in the chain, repeated until the chain resolves to identifiable human beings.
The onboarding file
- Certified identification and proof of address for every relevant individual.
- Corporate documents establishing each layer of the ownership chain.
- The beneficial-owner analysis: who ultimately owns or controls the company, documented with evidence.
- Screening records for every individual and entity checked.
- A plain account of the structure's purpose, and of anything a reviewer would query: unusual layers, third parties with control, or arrangements that separate ownership from direction.
Straightforward structures pass through this quickly. Layered international structures take longer, in proportion to how much of the chain has to be evidenced, and the honest advice is to expect that and prepare the documents once, properly, rather than piecemeal.
Certification is where overseas companies lose the most time, so it is worth stating plainly: documents verifying identity generally need to be certified copies rather than photographs, the acceptable certifiers and formats vary with the document and the jurisdiction, and we specify what each item needs when we issue the document list. One complete round of collection beats three partial ones, and the difference between the two is usually a week of elapsed time per layer of the structure.
Corporate layers deserve one more note. A parent company's own registers must actually be current before they can evidence anything; a chain is only as documented as its least-maintained entity. Where a layer's paperwork has drifted, we say so early, because repairing it is the parent's work in its own jurisdiction and cannot be done from Singapore.
03 Beneficial owners
Beneficial owners, and the register that records them.
Beneficial ownership is the question the whole exercise turns on: not whose name is on the share certificate, but who ultimately owns or controls the company through however many layers sit in between. Holding companies, trusts, and nominee arrangements all move the answer somewhere other than the obvious place, and the analysis has to follow it there with evidence rather than assumption.
Singapore gives that analysis a statutory home. Companies must keep a register of registrable controllers recording the individuals and entities that ultimately own or control them. It is a private register, kept at the registered office or at the office of the company's corporate service provider, and the same information must be lodged with ACRA's central register, with updates lodged within two business days of the private register being amended. Under ACRA's current guidance, entities incorporated from 16 June 2025 set the register up on the day they incorporate, so the controller analysis now has to be right at formation, not settled later.
In practice the two exercises are one exercise. The verification work done at onboarding produces the controller analysis; the controller analysis populates the register; and every later change in the chain above the company reopens both. That is why we run KYC and register maintenance together under one corporate secretarial roof rather than as separate services that can drift apart.
04 Screening
Screening: names checked against the lists that matter.
Verification establishes that people are who they say they are. Screening asks a different question about the same names: whether any individual or entity in the structure appears on the sanctions and terrorism-financing designations Singapore applies, or otherwise carries a profile the framework requires providers to treat with heightened care. Every individual and entity in the chain is screened at onboarding, and screening is not a one-off: names are re-checked when the structure changes and on a periodic cycle in between.
Most clients pass through screening without ever noticing it happened. Where something needs a closer look, a common name generating false matches, a jurisdiction in the chain that calls for more evidence, we ask precise questions, resolve the match one way or the other, and document the resolution. What we do not do is wave things through. A file with an unresolved query in it is not a file, and the discipline of resolving queries at onboarding is what keeps the later years quiet.
The same logic explains the banks. Account opening and periodic bank reviews are screening and verification exercises run by institutions under their own regulatory obligations, supervised in Singapore by MAS. A company arriving with a complete, current KYC file gives the bank's process something to work with; one arriving with gaps invites the long correspondence every overseas company has heard about. We cannot decide a bank's outcome, and we do not promise one, but we can make sure the file is never the reason for delay.
05 Monitoring
Kept current, not rebuilt in a panic.
A KYC file describes the company as it stood on the day the file was built. Companies move: shareholders change, officers change, control shifts within groups, and what the company actually does evolves away from what it said it would do. Each of those events prompts us to look again at who controls the entity and whether the documented picture still holds, alongside the periodic reviews that run regardless.
For owners, the practical obligation is small but real: tell us when the chain above the company moves. A transfer between group entities that seems administrative at HQ can change the controller analysis, the register, and the central lodgement in Singapore, on the two-business-day clock described above. Told early, each of those is routine. Discovered late, they are repairs.
The file that is refreshed as the company changes never needs the painful full rebuild that a neglected one does, and it is ready, on any given day, for the diligence exercise, bank review, or regulator's question that arrives without an appointment. These procedures apply to every engagement we take, incorporation included; if the company is still to be formed, they begin as part of company formations, before the application is filed rather than after.
Bring us the structure as it really is.
Tell us who owns the company, and from where. We will tell you what the file needs, what we will ask for, and how long the exercise should take.
Speak to our team →