MAS Notice 314 vs the General AML/CFT Guidelines: Which Rules Apply to Your Insurance Licence?

MAS Notice 314 direct life insurers must comply with is a binding notice issued by the Monetary Authority of Singapore (MAS), and it is the main source of enforceable anti-money laundering and countering the financing of terrorism (AML/CFT) obligations for that licence class. Insurers that are not direct life insurers, including general insurers, reinsurers, captives and foreign insurers operating through a Singapore branch or representative arrangement, should not assume that Notice 314 simply does not matter to them. They are expected to work from MAS's general AML/CFT guidance, and supervisors judge the quality of that work against the same risk-based standards. This article explains how to decide which regime governs your licence, where the two diverge in practice and how to run a gap assessment that stands up in an inspection.

Why the question of applicability matters

The first mistake we see in AML/CFT programme design is treating applicability as a label rather than an analysis. A compliance officer reads that Notice 314 covers life insurers, concludes the notice is irrelevant to a general insurer or reinsurer and files it away. The opposite mistake is just as common: a group applies Notice 314 line by line to every entity because it is the most detailed text available, creating controls that are costly, poorly matched to the risk and hard to defend when someone asks why a reinsurance treaty relationship is being onboarded like a retail annuity customer.

Both errors share a cause. Applicability depends on the activity the licensed entity carries on, not on the group's overall identity. A composite group may hold a direct life licence, a general licence and a reinsurance licence through different entities, and each entity needs its own documented determination. Before any gap work starts, record for every Singapore licensed entity, branch and regulated intermediary:

• the licence class held under the Insurance Act 1966 and any other MAS licence or registration;
• the products actually written, including any life policies with investment or savings components;
• whether the entity sells directly to policyholders or only deals with other regulated institutions;
• the distribution channels used, including agents, licensed financial advisers and brokers.

Intermediaries in your chain are subject to their own requirements, and licensed financial advisers and insurance brokers are covered by separate MAS notices rather than Notice 314. Your programme should map those relationships but not assume the insurer's notice governs the intermediary's conduct.

What Notice 314 requires of direct life insurers

Notice 314 sets out prescriptive obligations for direct life insurers. The core elements a practitioner should be able to evidence are:

• an enterprise-wide risk assessment covering customers, products, services, transactions, delivery channels and countries of exposure, documented and kept current;
• customer due diligence at onboarding and when triggers occur, including identification and verification of customers, beneficial owners and, where relevant, policy beneficiaries;
• enhanced due diligence for higher-risk customers, including politically exposed persons, with senior management approval and measures to establish source of wealth and source of funds;
• ongoing monitoring of the business relationship, with transaction monitoring calibrated to the risk profile of the book;
• screening against sanctions lists and targeted financial sanctions obligations;
• suspicious transaction reporting to the Suspicious Transaction Reporting Office, with internal escalation procedures and record keeping;
• record retention, internal policies, procedures and controls, an independent audit function, staff screening and training.

Because the notice is binding, failure to comply is a regulatory breach that can attract enforcement action, not merely a weak finding in a thematic review. The accompanying guidelines explain MAS's expectations on how the notice should be applied and are the document inspectors tend to use when judging whether a control is adequate. If you want to see how one of the more demanding elements is applied, our article on source of wealth and source of funds under Notice 314 goes through the evidence standard for higher-risk policyholders.

How the position differs for other licensed and foreign insurers

For general insurers, reinsurers, captives and foreign insurers, the practical position is different in form even though the underlying legal duties are not. Obligations under Singapore's criminal and sanctions laws apply regardless of licence class. These include the Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act, the Terrorism (Suppression of Financing) Act and the MAS sanctions regulations. The requirement to file suspicious transaction reports does not depend on holding a life licence.

What differs is the source of the detailed standard. Rather than a binding notice with prescriptive customer due diligence steps, these entities work from MAS's general AML/CFT guidelines and the risk-based approach they describe. That gives more room to design controls proportionate to the actual risk, but it also puts the burden on the entity to document why its choices are reasonable. The reasoning behind a decision to apply simplified measures to a reinsurance counterparty, for example, must be written down, approved and reviewed. A control that is lighter than Notice 314 is defensible only when the risk assessment supports it.

Foreign insurers and groups with a Singapore presence face an extra layer. Head office policies written to a home regulator's standard, or to a group standard, often assume a different definition of beneficial ownership, a different threshold for enhanced measures or a different escalation route for suspicious activity. Group policies should be tested against Singapore requirements and, where the Singapore standard is stricter, a local addendum should say so explicitly. Our guidance on AML/CFT frameworks for insurers in the region covers how to reconcile group and local standards.

Proliferation financing and the shared risk assessment

Whichever regime applies, proliferation financing is now a standard component of the enterprise-wide risk assessment, and MAS has made clear that it expects institutions to assess it separately from money laundering and terrorism financing. For insurers, the exposure usually arises through trade-related and marine cargo lines, specialty and political risk covers, and counterparties in or connected to higher-risk jurisdictions. A reinsurer or captive writing these lines can have a more significant proliferation financing profile than a life insurer selling term cover to domestic retail customers.

This is a good example of why applicability analysis should not stop at the licence label. A general insurer or reinsurer that treats AML/CFT as a life insurance topic may overlook that its own portfolio carries the more relevant sanctions and proliferation financing exposure. Our article on the 2025 AML/CFT revisions and proliferation financing sets out how to test your current risk assessment against the revised expectations.

Running a practical gap assessment

Once applicability is documented, the gap assessment can be run in five steps.

1. Fix the baseline. Identify the governing standard for each entity: Notice 314 and its guidelines for direct life insurers, the general guidelines for others, and any additional home regulator requirements for foreign groups.
2. Map controls to requirements. List each requirement and tie it to a specific policy paragraph, procedure, system control and named owner. Gaps usually appear where a requirement exists in the policy but no one owns the operational step.
3. Test the risk assessment. Check that the enterprise-wide risk assessment is dated, board approved, current and visibly drives control decisions, including proliferation financing and the delivery channels you actually use.
4. Sample the evidence. Pull a sample of onboarding files, enhanced due diligence cases, monitoring alerts and suspicious transaction escalations. Sampling reveals whether controls operate as written, which paper review cannot.
5. Report to the board with ownership and dates. Each finding should have an accountable executive, a remediation action and a target date, so the board can show active oversight.

Allow for realistic timelines. A baseline and control mapping can be completed in a few weeks for a single entity, but sampling and remediation of systems or monitoring scenarios commonly take several months. Do not schedule the assessment immediately before a regulatory inspection if remediation cannot be completed.

Governance points that inspectors look for

Three governance points recur. First, the board and senior management must be able to show they understand the risk assessment, not merely that they received a paper. Second, the compliance function needs enough independence and resources, and in a branch structure the local compliance officer needs a clear reporting line. Third, outsourced activities such as screening, monitoring or customer onboarding remain the insurer's responsibility, so outsourcing agreements must give the insurer access to data and the ability to audit.

Insurers that cannot answer these three points cleanly should treat them as the first remediation priority, since they affect the credibility of everything else in the programme. They also sit alongside wider enterprise risk work; the AML/CFT risk assessment should feed the insurer's enterprise risk management framework rather than sit apart from it.

Next steps

If you are unsure which AML/CFT standard governs each of your Singapore entities, or want an independent gap assessment against Notice 314 or the general guidelines, speak to our team about AML/CFT advisory. We can help you document the applicability determination, test your risk assessment and prepare a board-ready remediation plan.