Singapore aced its FATF evaluation — now comes the hard part

Institutions operating within Singapore’s financial system must be able to show under scrutiny what their controls are achieving. 

Singapore’s Financial Action Task Force (FATF) mutual evaluation published earlier this year has delivered the strongest result in the nation’s history.

Upgraded to the form Enhanced Follow-up to Regular Follow-up, in FATFs framework and assessed as substantially effective across seven of 11 immediate outcomes, the report confirms that Singapore has one of the world’s most mature and well-coordinated AML/CFT regimes. But viewing this result only as a form of validation misses what it actually demands.

Being upgraded from Enhanced Follow-up to Regular Follow-up is only the start of a monitoring cycle where FATF has adopted a three-year roadmap of key recommended actions, designed to strengthen areas of the assessment that were deemed incomplete.

Although the FATF described Singapore’s governance architecture as amongst the most capable in the world, it stressed that Singapore’s AML/CFT framework must be “sharper in producing demonstrable and consistent risk-based results.”

The implication is that institutions operating within Singapore’s financial system must be able to actually show, under scrutiny, what their controls are achieving.

Demonstrated outcomes of the framework matter most in the financial sectors that carry the most complexity. Inevitably, Singapore’s standing as a global financial centre is what also shapes its risk profile. Assets under management reached $6.07t at the end of 2024, and most of that money crosses borders in both directions: A total of 77% came from outside Singapore, and 88% was invested outside it.

The same connectivity that Singapore offers as a financial centre also makes it a useful staging point for funds tied to financial crime committed elsewhere.

The $3b money laundering case uncovered in 2023 illustrates this point. The FATF did not read the case as a failure of the system, but as a measure of how attractive that system is to those who want to abuse it, and of how well Singapore’s agencies responded once they detected it.

The same case illustrates where institutions still have work to do. Whilst the FATF team was on site in July 2025, MAS imposed penalties amounting to $27.45m on nine financial institutions for breaches connected to the case. Most of the firms had AML frameworks documented and in place, but they were unable to show that the frameworks worked in practice.

The wider supervisory record points the same way. Between 2020 and 2024, MAS flagged 25 deficiencies and 36 breaches relating to ongoing monitoring alone, mostly involving firms that failed to keep customer information current, or to catch transactions that did not fit expected patterns.

All this affects Singapore’s private banking and wealth management sector directly. According to the Mutual Evaluation Report, Singapore now hosts more than 2,000 single family offices, growing at 43% a year on the back of favourable tax treatment and the country’s reputation as a place to manage wealth.

Six of those family offices were tied to people convicted in the $3b case. FATF pointed out that Singapore has yet to assess the vulnerabilities created by the layered legal structures these offices tend to sit behind.

External asset managers who broker the relationships between wealthy clients and banks were rated as a high-priority sector for the same reasons: Complex arrangements, cross-border activity, and limited transparency.

Beneficial ownership is where a wealth-heavy jurisdiction carries the most complexity, and it is where Singapore received its Partially Compliant ratings, on the two recommendations covering legal persons and legal arrangements. FATF found that ownership information for legal persons sits on a register largely unverified beyond customer due diligence, which puts its accuracy in doubt.

Trusts proved harder still. Over the entire review period, assessors found that tracing assets through complex trust structures could not be reliably demonstrated.

There is now a definite schedule for FATF’s recommended actions. Over the next three years, Singapore has committed to sharpening its risk assessments for trusts, unregistered foreign companies and family office structures; tightening the checks that keep its beneficial ownership registry accurate, and bringing enforcement penalties in line with the seriousness of the breaches involved.

The FATF’s findings also put today’s review cadence in a new light. Banks review higher-risk clients once a year and lower-risk clients, as rarely as every three to five years. If there are any reviews in between, it means that there has been a specific trigger, like an unusually large transfer. The trouble is that three to five years is a long gap. A client can look clean during a review, and a lot can change before the next scheduled review, which means that a bank relying on scheduled check-ins might be working from an outdated picture.

For any institution with real exposure to Singapore’s wealth sector, the three-year roadmap is a guide to where supervisory attention will land.

Can a firm show that its rating of a client’s risk reflects the client’s current circumstances? Can it show that source-of-wealth in high-risk accounts has been independently checked rather than taken at face value? Can it show that its monitoring systems produce signed-off decisions rather than a queue of unresolved alerts? These are the areas supervisors will press on as the cycle runs.

Singapore earned this result through coordinated, committed effort. Keeping it over the next three years will depend on what the country’s institutions can show in practice.