AML/CFT in Asia Pacific Insurance: Where Regulators Are Focusing

Why Insurance Is Under the AML Microscope

Financial crime compliance has historically been treated as a banking concern. The volumes, transaction frequency and cash-handling characteristics of banking make it an obvious focus. Insurance, with lower transaction volumes and longer product cycles, has often been assumed to carry lower money laundering exposure.

The FATF Mutual Evaluation process has consistently challenged this assumption. Evaluations across Asia Pacific have identified the insurance sector, particularly the life insurance market, as carrying material and under-managed money laundering and terrorist financing risk. The mechanism is not difficult to understand. Life insurance products, particularly single-premium and investment-linked variants, can accept large sums, provide a legitimate financial services wrapper and return funds in a different form, in some cases to different beneficiaries, after a holding period.

Regional regulators have responded. Singapore's MAS has revised and strengthened its AML/CFT requirements for insurers through Notice 314. Malaysia's Bank Negara Malaysia has similarly tightened requirements under its insurance subsidiary AML/CFT guidelines. The regulatory direction across the region is consistent: the compliance standard expected of insurers has risen materially, and supervisory scrutiny has followed.

Higher-Risk Products and Channels

Not all insurance products carry the same AML/CFT risk. A sound risk-based approach starts with identifying the products, customers and channels that carry the highest exposure.

Single-premium life products remain the highest-risk category for most life insurers. The ability to place a large sum in a single transaction, combined with the liquidity that some products provide through policy loans and surrender values, makes them attractive for layering. The risk is heightened where products are sold on a non-advised basis with limited suitability assessment.

Investment-linked policies with flexible premium structures allow customers to vary contributions significantly over time, which can facilitate layering if transaction monitoring does not capture unusual contribution patterns.

Premium financing arrangements introduce additional complexity. Where a customer takes out a loan to fund insurance premiums, the source of funds for both the premium and the loan repayment requires examination. Arrangements where the financing is provided by a related party, or where the economic logic of taking out insurance on borrowed terms is unclear, warrant enhanced due diligence.

Cross-border distribution carries heightened risk when customers are purchasing Singapore policies from overseas, particularly where the regulatory environment in the customer's home jurisdiction has significant AML/CFT weaknesses. The FATF grey-list status of certain jurisdictions in the region should inform the enhanced due diligence applied to customers from those markets.

Insurance brokers and intermediaries present a channel risk that insurers cannot fully manage by focusing only on their own operations. The customer relationship and much of the due diligence contact sits with the intermediary. Insurers need to assess whether their intermediaries have adequate AML/CFT frameworks and need to maintain oversight that extends into the distribution channel.

Customer Due Diligence Requirements in Practice

MAS Notice 314 sets out the CDD requirements for Singapore insurers. The requirements distinguish between standard CDD, which applies to most customers, and enhanced due diligence, which is required for higher-risk relationships.

Standard CDD for insurance involves verifying the identity of the policyholder, understanding the nature and purpose of the insurance relationship, and maintaining records. For life insurance, this also requires identifying the beneficial owner: the person who ultimately benefits from the policy. Where the policy owner and the life assured are different from the beneficiary, each of those relationships needs to be understood.

Enhanced due diligence is required for customers assessed as higher risk, including politically exposed persons, customers from higher-risk jurisdictions, customers with unusual profile characteristics relative to the product being purchased, and situations where the source of funds or the economic purpose of the insurance is unclear.

Politically exposed persons require particular attention. A PEP is not prohibited from purchasing insurance, but the insurer must obtain senior management approval for the relationship, understand the source of the funds and apply ongoing enhanced monitoring. The definition of PEP extends beyond the individual to immediate family members and close associates, and PEP status should be reassessed during the policy lifecycle rather than only at inception.

Beneficial ownership verification has become more demanding in recent years. It is not sufficient to record who the beneficiary is. Insurers need to verify that information and understand why the policy structure is set up as it is. Where a beneficiary is a corporate entity rather than a natural person, understanding who ultimately controls and benefits from that entity is required.

Transaction Monitoring and Suspicious Activity Reporting

Transaction monitoring for insurers looks different from banking but is not less important. The indicators that suggest potential money laundering in an insurance context include:

• Early surrender of policies, particularly shortly after inception, where the customer accepts a financial penalty to access funds
• Premium overpayment followed by a refund request, which can be a mechanism to clean funds
• Frequent changes to beneficiary designations, particularly where the changes appear commercially irrational
• Policy assignment or transfer patterns that obscure the beneficial ownership trail
• Customers who appear to have insurance products across multiple insurers in a pattern that appears designed to stay below reporting thresholds
• Unusual geographical characteristics, such as a Singapore resident purchasing policies with premium payments consistently originating from high-risk jurisdictions

The calibration of an insurer's transaction monitoring framework should reflect the actual products it writes and the customer base it serves. A framework designed for one product type may not capture the relevant indicators for another.

Suspicious transaction reporting obligations apply to insurers as they do to other regulated financial institutions. Where there is reasonable grounds to suspect that a transaction may be related to money laundering or terrorist financing, a suspicious transaction report should be filed with the Suspicious Transaction Reporting Office. The threshold is suspicion, not proof.

AML Culture Reviews and What Supervisors Look For

Beyond the technical requirements, regulators are now examining AML/CFT culture as a distinct supervisory concern. This reflects the recognition that a technically compliant programme does not guarantee genuine commitment to financial crime prevention, and that the quality of compliance is determined at least as much by culture as by policies and procedures.

Supervisors assessing AML culture will look at:

Whether senior management demonstrates visible commitment to AML/CFT compliance, or whether it is treated as a back-office function. Tone from the top matters in financial crime compliance as it does in other areas of risk management.

Whether front-line staff understand their AML/CFT obligations and can apply them in practice, not just in theory. Training completion records are a proxy, but supervisors may also interview staff to assess the depth of understanding.

Whether compliance concerns are raised and responded to without penalty. If front-line staff or compliance officers feel that raising AML concerns creates career risk, the reporting pipeline will not function.

Whether AML/CFT is adequately resourced relative to the size and risk profile of the business. Under-resourced AML functions are a supervisory concern regardless of the quality of written policies.

Building a Compliant and Proportionate Framework

The regulatory requirements are detailed but the underlying principle is straightforward: insurers should know their customers, understand the purpose and source of funds in higher-risk situations, monitor relationships for unusual activity and report concerns promptly.

For insurers reviewing their AML/CFT programme, the priority areas are:

1. Risk assessment. Confirm that your enterprise-wide risk assessment reflects your current product portfolio and distribution channels. An assessment that was conducted before you introduced a new product or distribution partnership is likely to be outdated.

2. Customer risk rating methodology. Review whether your customer risk rating model captures the relevant risk factors for your business and is calibrated appropriately. Systems inherited from general frameworks may not be well-suited to insurance-specific risk factors.

3. Intermediary oversight. If you distribute through intermediaries, review what AML/CFT oversight you exercise over those relationships. Confirm you have assessed intermediary AML programmes and maintained appropriate records.

4. Training effectiveness. Review whether your AML training is genuinely effective rather than just completed. Consider whether product-specific and role-specific training would be more effective than generic programmes.

5. Governance and escalation. Confirm that your AML governance framework has clear escalation paths, that the compliance function has direct access to senior management and the board, and that AML matters are reported to the board risk committee on an appropriate frequency.

Our AML/CFT compliance team works with insurers and brokers on programme reviews, risk assessment development and regulatory engagement across Singapore and the Asia Pacific region. For insurers also navigating licensing or supervisory obligations, our regulatory licensing practice covers the broader compliance framework.