Singapore Fund Manager AML: MAS Notice SFA04-N02 Explained
MAS Notice SFA04-N02 is the anti-money laundering rulebook for capital markets intermediaries in Singapore, including licensed fund management companies. This guide explains the 30 June 2025 version: who it covers, why fund investors are "customers", what due diligence, screening and monitoring it requires, how far you can rely on administrators and distributors, and what records and reports MAS expects.
Singapore's AML/CFT framework is built on MAS Notices issued to each type of financial institution. Banks follow Notice 626, payment service providers follow PSN01, and capital markets intermediaries, which include fund managers, follow SFA04-N02. The Notices share a common structure, but each has provisions specific to its sector. For fund managers the distinctive provisions are the definition of "customer", the treatment of beneficial owners of investment vehicles, and the guidance on distributors and other intermediaries.
This guide reflects the Notice and Guidelines as published on the MAS website on 28 October 2026. It is a summary for compliance and operations teams, not legal advice. Paragraph numbers refer to the Notice unless stated otherwise.
What SFA04-N02 Is and Who It Covers
On 30 June 2025 MAS reissued a set of its sector AML/CFT Notices, SFA04-N02 among them, under the Financial Services and Markets Act 2022, cancelling the versions that had been issued under the MAS Act. The new Notice took effect on 1 July 2025, together with a new set of Guidelines dated 1 July 2025.
| Item | Detail |
|---|---|
| Instrument | MAS Notice SFA04-N02, Prevention of Money Laundering and Countering the Financing of Terrorism: Capital Markets Intermediaries |
| Legal basis | Section 16 of the Financial Services and Markets Act 2022 (paragraph 1.1) |
| Date and effect | Dated 30 June 2025; takes effect from 1 July 2025 (paragraph 1.2) |
| What it replaced | The version dated 24 April 2015 (last revised 1 March 2022), cancelled from 1 July 2025 by the MAS Notices (Cancellation) 2025 of 30 June 2025 |
| Who it applies to | All holders of a capital markets services licence under the Securities and Futures Act 2001, and persons exempted from licensing under paragraphs 3(1)(d), 3A(1)(d) and 7(1)(b) of the Second Schedule to the SF(LCB)R (paragraph 1.1) |
| Companion guidance | Guidelines to MAS Notice SFA04-N02, dated 1 July 2025, to be read with the Notice |
| Money laundering | Includes proliferation financing throughout the Notice (footnote 1) |
The MAS web page for the Notice lists the activities it applies to, among them licensed fund management companies, venture capital fund management companies, REIT management, dealing in capital markets products, custodial services, corporate finance advisory and securities crowdfunding. A variable capital company is itself subject to a separate notice, MAS Notice VCC-N01, while its licensed manager remains subject to SFA04-N02. For the wider Singapore framework see our MAS regulatory guide, and for banks our guide to MAS Notice 626.
Why Fund Investors Are "Customers"
Paragraph 2.1 defines a "customer" of a capital markets intermediary as a person with whom it establishes business relations, a person for whom it undertakes a transaction without opening an account, or a person who has invested or invests into an investment vehicle to which the intermediary provides the regulated activity of fund management. "Business relations" expressly include the provision of fund management services.
That third limb is what makes investor due diligence a direct regulatory obligation for Singapore fund managers, and not only a contractual expectation of administrators or banks. The definition excludes investors in an investment vehicle that is itself a listed entity under paragraph 6.16(a) or (b), a vehicle whose interests are distributed by a financial institution under paragraph 6.16(c) or (d), or a vehicle whose primary manager is another financial institution supervised for AML/CFT to FATF-consistent standards.
Two further points follow from the Notice and its Guidelines:
- Beneficial owners of the fund. Footnote 6 to paragraph 6.16 makes clear that a firm acting as primary manager of an investment vehicle must still inquire into the beneficial owners of that vehicle, unless its interests are distributed by a financial institution described in 6.16(c) or (d).
- Distributors. Guidelines paragraph 2-3(b) explains that where a manager uses distributors such as banks or financial advisers, the end investors are treated as beneficial owners of the manager's customer, the fund. If the distributor is an MAS-supervised institution or a foreign institution supervised to FATF-consistent standards, the manager should obtain the distributor's confirmation that it is responsible for AML/CFT checks on the underlying investors, and may consider simplified CDD on the distributor.
- Portfolio-manager and tri-partite structures. Guidelines paragraph 2-3(a) sets out scenarios where a firm manages a portfolio for a fund whose primary manager is another firm. The firm should assess whether the 6.16 exemptions apply; if not, it must apply appropriate CDD to the underlying investors.
The practical reading for a private fund manager is simple: unless an exemption clearly applies, treat each subscribing investor as a customer and build a know-your-investor file before accepting the subscription.
CDD on Investors: What to Collect and Verify
Paragraph 6.3 requires CDD when business relations are established, for transactions above S$20,000 with a person who has no business relations, for any digital capital markets product token transaction or value transfer for such a person regardless of value, when money laundering or terrorism financing is suspected, and when the firm doubts information it already holds. Anonymous or fictitious-name accounts are prohibited (6.1). The measures themselves are set out in paragraphs 6.5 to 6.18.
| Who | What the Notice requires |
|---|---|
| The investor (natural person) | Full name including aliases; unique identification number; residential address; date of birth; nationality (paragraph 6.6(a)); verified against reliable, independent source data, documents or information (6.9) |
| The investor (legal person or arrangement) | Full name; registration or tax number; registered address and principal place of business; date and place of incorporation; trust deed if any; purpose; place of administration; legal form, constitution and powers (6.6(b)); verified under 6.9 |
| Connected parties | For entity investors: directors or persons with executive authority, partners or managers, or persons with executive authority in a legal arrangement. Full name and identification number (6.8); date of birth and nationality may be taken instead where risk is not high and the number cannot be obtained (6.8A) |
| Persons acting for the investor | Identify and verify each natural person appointed to act, and verify their authority with documentary evidence and a specimen signature or electronic verification (6.10, 6.11) |
| Beneficial owners | Inquire whether any exist (6.13) and identify the natural persons who ultimately own or control the investor, or failing that the persons with executive authority (6.14); exemptions for listed entities and FATF-supervised financial institutions (6.16) |
| Purpose of the relationship | Understand, and where appropriate obtain, the purpose and intended nature of the business relations (6.18) |
Timing. Verification must normally be completed before business relations are established (6.32). A firm may onboard first and verify afterwards only where deferral is essential so as not to interrupt the normal conduct of business and the risks can be effectively managed; it then needs documented policies on when this is allowed and must complete verification as soon as reasonably practicable (6.33, 6.34). Where CDD cannot be completed, the firm must not commence or continue the relationship or undertake the transaction, and must consider filing a suspicious transaction report (6.35, 13.3).
Non-face-to-face onboarding, which is how many fund subscriptions are taken, needs specific policies, and the CDD performed must be at least as robust as it would be face to face (6.27 to 6.29). Where the subscription pack already collects most of this data, the gap is usually verification and beneficial-ownership tracing; see our guide to fund subscription documents.
Screening, Risk Assessment and Ongoing Monitoring
Paragraph 6.39 requires the firm to screen the customer, the persons acting for it, its connected parties and its beneficial owners against relevant money laundering and terrorism financing information sources and the lists provided by MAS and other Singapore authorities. The Guidelines (6-15-1) add that every party identified under the Notice must be screened regardless of the customer's risk profile.
| Screening point | Notice paragraph |
|---|---|
| When, or as soon as reasonably practicable after, business relations are established | 6.40(a) |
| When a transaction above S$20,000 is undertaken for a person without business relations | 6.40(b) |
| On a periodic basis after onboarding | 6.40(c) |
| When MAS or another Singapore authority updates its lists, or when the persons acting, connected parties or beneficial owners change | 6.40(d) |
| Results of screening and assessment documented | 6.41 |
Paragraphs 6.40(e) and (f) add equivalent triggers for digital capital markets product token transactions and value transfers, which most fund managers will not encounter.
Risk assessment. Paragraph 4.1 requires the firm to identify, assess and understand its money laundering and terrorism financing risks across customers, their countries, the firm's own locations, and its products, services, transactions and delivery channels. The assessment must be documented and kept up to date (4.2), with policies approved by senior management to mitigate the risks identified (4.3). The Guidelines (4-18) expect the enterprise-wide assessment to be reviewed at least once every two years, or sooner on material trigger events such as new customer segments, delivery channels or products.
Ongoing monitoring. The firm must monitor business relations on an ongoing basis (6.19), scrutinise transactions so that they are consistent with its knowledge of the customer, its business and risk profile and, where appropriate, the source of funds (6.20), pay special attention to complex, unusually large or unusual patterns of transactions with no apparent economic or lawful purpose (6.21), and keep CDD data up to date through reviews, particularly for higher-risk customers (6.24). The Guidelines (6-10-6) suggest more frequent periodic review for higher-risk customers, for example annually. For a fund this means watching subscription payments, transfers of interests, redemption instructions and changes in an investor's ownership, not only the initial subscription. Reliance on a third party for ongoing monitoring is not permitted (9.3).
Simplified and Enhanced Due Diligence
Simplified CDD is allowed where the firm is satisfied, on an adequate and documented analysis, that the risks are low (7.1 to 7.3, 7.6). It is never allowed for customers or beneficial owners from countries subject to FATF countermeasures, from countries known to have inadequate AML/CFT measures, or where money laundering or terrorism financing is suspected (7.4). Financial institutions listed in Appendix 2 of the Notice may qualify for simplified measures (7.5).
Politically exposed persons. Paragraph 8 covers domestic, foreign and international organisation PEPs, their family members and close associates, and sets the enhanced measures below. See also our PEP glossary entry.
| Measure | Requirement |
|---|---|
| Detection | Internal systems to determine whether the customer, persons acting, connected parties or beneficial owners are PEPs, or family members or close associates of PEPs (8.2) |
| Senior management approval | To establish or continue the relationship (8.3(a)) |
| Source of wealth and funds | Established by appropriate and reasonable means for the customer and any beneficial owner (8.3(b)) |
| Enhanced monitoring | Increased degree and nature of monitoring throughout the relationship (8.3(c)) |
| Risk-based flexibility | Permitted for domestic PEPs, international organisation PEPs and PEPs who have stepped down, and their family members and close associates, unless the relationship presents higher risk (8.4) |
Other higher-risk customers. The firm needs systems to identify higher-risk relationships (8.5). Paragraph 8.6 lists circumstances that are, or may be, higher risk, including customers or beneficial owners from FATF countermeasure countries, from countries known to have inadequate AML/CFT measures, and legal persons with no apparent business activity or economic purpose. The Guidelines add that where a material source of wealth or source of funds cannot be corroborated, the firm should assess whether the residual risk is acceptable and whether mitigation such as senior management approval and enhanced monitoring should apply (8-5-7A), and where plausibility and legitimacy cannot be established, consider terminating the relationship and filing an STR (8-5-7C).
Relying on Administrators and Distributors
Most fund managers do not run investor due diligence alone. The Notice distinguishes two arrangements.
- Third-party reliance (paragraph 9). A firm may rely on a qualifying third party, such as a financial institution listed in Appendix 2 of the Notice (for example a licensed bank or another capital markets services licence holder), a foreign institution supervised to FATF-consistent standards, or a group entity (payment-service-only and digital-token-only licensees are excluded), to perform CDD, simplified CDD and enhanced CDD. Conditions: the firm is satisfied the third party is supervised for AML/CFT and has adequate measures; it has assessed the country risks of where the third party operates; the third party is not one MAS has precluded; and the third party can provide the CDD data without delay on request (9.2). The firm must document that basis, unless the third party is an Appendix 2 institution, and immediately obtain the CDD information (9.4). It cannot rely on a third party for ongoing monitoring (9.3), and it stays responsible for every obligation in the Notice (9.5).
- Outsourcing. Guidelines paragraph 9-1 states that paragraph 9 does not apply to outsourcing. An administrator or transfer agent that performs investor checks on the manager's behalf, under the manager's policies, is an outsourced service provider, not a relied-upon third party. The checks remain the manager's own and must meet the Notice in full.
Either way, the manager should know exactly what its administrator collects, which lists it screens against, how it escalates alerts, and how quickly it can produce an investor's file. Our guide to investor onboarding describes how managers and administrators share one workflow and one record.
Records, Suspicious Transaction Reports and Governance
- Record keeping (paragraph 11). CDD information, account files, business correspondence and analysis must be kept for at least five years after the business relations end; transaction records for at least five years after the transaction (11.3). Records may be held as originals or copies, on paper or electronically, if admissible in a Singapore court (11.4). Records relating to an STR or investigation are kept as STRO or other authorities direct (11.5).
- Suspicious transaction reporting (paragraph 13). The firm needs a single internal reference point to which all staff refer suspicions (13.1) and must promptly file STRs with the Suspicious Transaction Reporting Office, regardless of amount, including attempted transactions, with a copy to MAS on request (13.2). It must consider an STR where it cannot complete CDD or an investor withdraws rather than provide information (13.3). Where completing CDD would tip off the customer, the firm may stop performing those measures; it must then document the basis for its assessment and file an STR (13.4). Section 57 of the CDSA on tipping off applies.
- Governance (paragraph 14). Internal policies proportionate to the firm's risks and size (14.1); an AML/CFT compliance officer at management level with adequate resources and access to records (14.10, 14.11); an independent, adequately resourced audit function (14.12); screening when hiring staff and appointing representatives (14.13); and training (14.14). Singapore-incorporated firms must extend a group AML/CFT policy to branches and subsidiaries (14.4 to 14.9).
- Proliferation financing. References to money laundering throughout the Notice include proliferation financing (footnote 1, 4.1), so the risk assessment and controls must address it, and the Guidelines contain a dedicated section of guidance on proliferation financing.
For how to decide when a report is needed, see when to file a SAR or STR.
SFA04-N02 Checklist for Fund Management Companies
Map your customers
List every fund you manage, every investor type, and every distributor or intermediary. Decide, and record, where the 6.16 exemptions apply and where investors are your customers.
Refresh the enterprise-wide risk assessment
Cover customers, countries, products and channels, and proliferation financing. Have senior management approve it and diarise the review.
Standardise the investor CDD file
Identification data, verification evidence, persons acting and their authority, connected parties, beneficial owners, purpose of the relationship, and a risk rating.
Screen everyone, every time
Customer, persons acting, connected parties and beneficial owners, at onboarding, periodically, and on list or ownership changes. Keep the results.
Set the EDD triggers
PEPs and their family members and close associates, FATF countermeasure and inadequate-AML countries, entities with no apparent purpose, and uncorroborated source of wealth.
Paper the administrator relationship
Decide whether it is reliance under paragraph 9 or outsourcing, document the basis, and make sure files can be produced without delay.
Monitor after closing
Subscription payments, transfers, third-party redemption instructions and ownership changes feed the monitoring programme, with a route to the STR reference point.
Keep records for five years and train staff
Retention periods under paragraph 11, an appointed compliance officer, independent audit and regular training.
The Singapore AML/CFT compliance checklist covers the common provisions across the MAS Notices in more detail.
How One Constellation Supports Fund Managers
One Constellation gives fund management companies and their administrators one workflow for investor due diligence under SFA04-N02: an investor onboarding portal, identity verification, KYB and beneficial-ownership tracing, sanctions, PEP and adverse-media screening at onboarding and on a periodic basis, risk assessment, transaction monitoring, and case management with STR workflows. The record for each investor sits in one place, which helps when MAS, an auditor or a distributor asks for it. See AML compliance for fund managers and investor onboarding.
Frequently Asked Questions
Who does MAS Notice SFA04-N02 apply to?
All holders of a capital markets services licence under the Securities and Futures Act 2001, including licensed fund management companies, and persons exempted from licensing under paragraphs 3(1)(d), 3A(1)(d) and 7(1)(b) of the Second Schedule to the SF(LCB)R. The MAS page also lists venture capital fund managers, REIT managers and other capital markets activities. A variable capital company is itself subject to a separate notice, MAS Notice VCC-N01, while its licensed manager remains subject to SFA04-N02.
When did the current version of SFA04-N02 take effect?
The current Notice is dated 30 June 2025 and took effect on 1 July 2025. It was issued under section 16 of the Financial Services and Markets Act 2022 and replaced the version dated 24 April 2015, last revised on 1 March 2022, which was cancelled from 1 July 2025.
Are investors in a fund the fund manager's customers?
Yes. The Notice defines a customer to include a person who invests in an investment vehicle to which the firm provides fund management, unless the vehicle is a listed entity, its interests are distributed by a qualifying financial institution, or its primary manager is another financial institution supervised for AML/CFT to FATF-consistent standards.
Can a fund manager rely on its administrator for investor KYC?
A manager may rely on a qualifying third party under paragraph 9 if it is satisfied the third party is supervised for AML/CFT, has assessed the relevant country risks, and can obtain the CDD data without delay; it remains responsible and cannot rely on anyone for ongoing monitoring. Where an administrator works under the manager's own policies, that is outsourcing, which paragraph 9 does not cover, and the checks must meet the Notice in full.
How long must records be kept under SFA04-N02?
At least five years after the end of the business relations for CDD information, account files, correspondence and analysis, and at least five years after completion for transaction records, subject to any longer period required by law or by STRO for matters under investigation.
Sources
- MAS: Notice SFA 04-N02 to Capital Markets Intermediaries on Prevention of Money Laundering and Countering the Financing of Terrorism (page, last revised 30 June 2025)
- MAS Notice SFA04-N02 dated 30 June 2025 (PDF)
- MAS: Guidelines to Notice SFA 04-N02 (page, last revised 30 June 2025)
- Guidelines to MAS Notice SFA04-N02 dated 1 July 2025 (PDF)
- MAS Notices (Cancellation) 2025 dated 30 June 2025 (PDF)
This article is general information, not legal advice. Requirements change — check the current text with the regulator before relying on it.
Investor Due Diligence Built for SFA04-N02
See how Singapore fund managers and administrators onboard investors, trace beneficial owners, screen and monitor them in one workflow.
