2010-01-01
The Money Laundering Prevention Authority of the Central Bank of Samoa issued these guidelines to implement the Money Laundering Prevention Act 2007 and ensure compliance with anti-money laundering and counter-terrorist financing obligations. The document mandates that financial institutions establish effective internal control systems, including customer due diligence, risk-based monitoring, and the appointment of compliance officers to detect and report suspicious transactions. It provides specific operational requirements and examples of suspicious activities for various sectors such as banks, insurance companies, lawyers, and real estate agents to maintain the integrity of Samoa's financial system.
1 MONEY LAUNDERING AND TERRORIST FINANCING PREVENTION GUIDELINES FOR THE FINANCIAL SECTOR MONEY LAUNDERING PREVENTION AUTHORITY CENTRAL BANK OF SAMOA PRIVATE BAG APIA SAMOA April 2010
2 Contents EXPLANATORY FOREWORD ......................................................................................5 PART 1 – THE FINANCIAL INTELLIGENCE UNIT AND OBLIGATIONS PLACED ON FINANCIAL INSTITUTIONS....................................................................................7 The Financial Intelligence Unit....................................................................................7 Obligations of Financial Institutions.............................................................................7 Penalties and Offences............................................................................................9 Implementation of AML/CFT in a cross border context.............................................10 Banks and Insurance Companies ..........................................................................10 Other financial institutions ......................................................................................10 PART 2 – GENERAL INFORMATION .........................................................................11 What is money laundering?.......................................................................................11 Stages of Money Laundering ....................................................................................11 Vulnerability of Financial Institutions to Money Laundering.......................................13 The need to combat money laundering.....................................................................13 Vulnerability points for money launderers .................................................................14 The Financing of Terrorism.......................................................................................14 What is Terrorist Financing? ..................................................................................14 Methods of Terrorist Financing ..............................................................................15 Laundering of Terrorist-Related Funds ..................................................................15 Importance of Combating Terrorist Financing........................................................15 International Efforts to Combat Terrorist Financing................................................16 PART 3 – DEVELOPING AN EFFECTIVE SYSTEM...................................................17 Introduction ...............................................................................................................17 The Duty of Vigilance.............................................................................................17 Responsibilities of Financial Institutions.................................................................18 Money Laundering Compliance Officer..................................................................19 Identification procedures ........................................................................................19 Know your Customer..............................................................................................20 Components of an Effective System.........................................................................21 Essential Elements of Know-Your-Customer Requirements ..................................21 Customer acceptance policy ..................................................................................21 General Guidelines for Establishing Satisfactory Evidence of Identity......................22 Evidence of Identity................................................................................................23 What is Identity? ....................................................................................................23 Customers who are legal persons..........................................................................24 Direct Clients - Trusts.............................................................................................25 Non-profit organizations (NPOs)............................................................................26 Certification of Documents .....................................................................................26 Reliance on Third Parties or Intermediaries – Introduced business..........................26 Exemptions from Identification Requirements...........................................................27 Lower Risk Customers, Jurisdictions and Business Relationships ...........................28 Higher Risk Customers, Jurisdictions and Business Relationships...........................28 Correspondent banking relationships.....................................................................30 Politically exposed persons....................................................................................31
3 Non face to face Verification ..................................................................................31 Non-Resident Customers.......................................................................................32 Wire Transfers ..........................................................................................................32 Monitoring and Risk Management ............................................................................33 On-going Monitoring of Accounts and Transactions ..............................................33 Risk Management – Compliance Reviews, Internal and External Audits...............33 A risk based approach to Customer Due Diligence (CDD).....................................34 Record Keeping Requirements .................................................................................35 Reporting and Recognition of Suspicious Transactions............................................36 Reporting of suspicious transactions ........................................................................36 Recognition of Suspicious Transactions ................................................................37 Education and Training .............................................................................................38 The Need for Staff Awareness ...............................................................................38 Protection..................................................................................................................38 PART 4 – SPECIFIC GUIDELINES FOR DIFFERENT CLASSES OF FINANCIAL INSTITUTION ..............................................................................................................39 INFORMATION FOR BANKS & CREDIT UNIONS......................................................40 Reporting ..................................................................................................................40 Record Keeping ........................................................................................................40 Identification requirements ........................................................................................41 Third Party Determination .........................................................................................41 Politically Exposed Person........................................................................................41 Compliance Regime..................................................................................................42 Examples of Suspicious Transactions ......................................................................42 INFORMATION FOR INSURANCE COMPANIES, BROKERS & AGENTS ................47 Reporting ..................................................................................................................47 Record Keeping ........................................................................................................47 Identification requirements ........................................................................................47 Third Party Determination .........................................................................................47 Politically Exposed Person........................................................................................48 Compliance Regime..................................................................................................48 Examples of Suspicious Transactions ......................................................................48 INFORMATION FOR ACCOUNTANTS & LAWYERS .................................................50 Your Obligations .......................................................................................................50 Reporting ..................................................................................................................50 Record Keeping ........................................................................................................50 Identification requirements ........................................................................................51 Third Party Determination .........................................................................................51 Politically Exposed Person........................................................................................51 Compliance Regime..................................................................................................51 Examples of Suspicious Transaction ........................................................................52 Accountants’ Transactions .....................................................................................52 Lawyers’ Transactions ...........................................................................................52 INFORMATION FOR MONEY REMITTANCE/SERVICES BUSINESSES ..................54 Your Obligations .......................................................................................................54 Reporting ..................................................................................................................54 Record Keeping ........................................................................................................54
4 Identification requirements ........................................................................................55 Politically Exposed Person........................................................................................55 Third Party Determination .........................................................................................55 Compliance Regime..................................................................................................56 Examples of Suspicious Transactions ......................................................................56 INFORMATION FOR REAL ESTATE AGENTS ..........................................................58 Your Obligations .......................................................................................................58 Reporting ..................................................................................................................58 Record Keeping ........................................................................................................58 Identification requirements ........................................................................................58 Third Party Determination .........................................................................................59 Politically Exposed Person........................................................................................59 Compliance Regime..................................................................................................59 Examples of Suspicious Transactions ......................................................................59 INFORMATION FOR TRUST & COMPANY SERVICE PROVIDERS .........................61 Your Obligations .......................................................................................................61 Reporting ..................................................................................................................61 Record Keeping ........................................................................................................62 Identification requirements ........................................................................................62 Third Party Determination .........................................................................................62 Politically Exposed Person........................................................................................62 Compliance Regime..................................................................................................62 Examples of Suspicious Transactions for Trust & Company Service Providers........63 INFORMATION FOR DEALERS IN PRECIOUS METALS, STONES AND JEWELLERY................................................................................................................64 Your Obligations .......................................................................................................64 Reporting ..................................................................................................................64 Record Keeping ........................................................................................................64 Identification requirements ........................................................................................64 Third Party Determination .........................................................................................65 Politically Exposed Person........................................................................................65 Compliance Regime..................................................................................................65 PART 5 – SFIU REPORTING FORM ..........................................................................66
5 EXPLANATORY FOREWORD The Money Laundering Prevention Act 2007 (MLPA), the Money Laundering Prevention Regulations 2009 (MLPR) and the Prevention and Suppression of Terrorism Act 2002 (PSTA) makes money laundering and the financing of terrorism a criminal offence. These Acts are important pieces of legislation, which require conscientious application by all concerned for the sake of Samoa’s reputation as a responsible jurisdiction and to maintain the integrity of our financial system. The Governor of the Central Bank of Samoa (CBS) is the Money Laundering Prevention Authority (the “Authority”) appointed under Section 4(2) of the MLPA to implement and regulate the provisions of the Act, until such time as the Minister makes a further appointment. The Money Laundering Prevention Task Force is established under section 5 of the MLPA and is the advisory body to the Money Laundering Prevention Authority. Its objectives include ensuring close liaison between Government agencies, departments and the Financial Intelligence Unit and making recommendations to the Authority in respect of issues relating to money laundering or the financing of terrorism. The Money Laundering Prevention Authority (the “Authority”) is required to produce Guidelines to enable financial institutions or any other person(s) (whether incorporated or unincorporated) to recognize and deal with the criminal offence of money laundering. This Guideline is issued by the Authority to: Outline the requirements of the Money Laundering Prevention Act 2007 (the “MLPA”) and the Money Laundering Prevention Regulations 2009 (the “MLPR”); Provide a practical interpretation of the requirements of the Act and Regulations; Give examples of good practice; and Assist management of financial institutions in developing policies and procedures appropriate to their business. The guideline is issued under section 4(3) of the MLPA and is provided as general information only. It is not a legal advice and is not intended to replace the MLPA or MLPR. Financial institutions should seek their own independent legal advice on the interpretation and requirements of the MLPA and the MPLR. Financial institutions are expected to be aware of the requirements of the MLPA and MLPR. The role of the Authority, the Samoa Financial Intelligence Unit (SFIU) and other supervisory agencies in Samoa such as the Central Bank of Samoa, the Samoa International Finance Authority and the Samoan Institute of Accountants is to ensure compliance with the requirements of the MLPA and MLPR. These agencies will, when assessing compliance of financial institutions, take into consideration the size and complexity of the financial institution.
6 Financial institutions’ reporting of suspicious transactions is a cornerstone of the Financial Action Task Force (FATF)1 recommendations. Law enforcement agencies throughout the world acknowledge that the successful investigation of money laundering offences depends largely on information received from the financial community. Financial institutions are not being asked or expected to assume the role of law enforcers. A positive approach to Samoa’s legislative requirements, however, will greatly improve the efforts of those agencies responsible for enforcement. These Guidelines will be reviewed periodically to reflect changing circumstances and experiences and to provide additional clarification concerning matters where queries arise. More generally, the Authority will work closely with other bodies in Samoa, such as the Central Bank of Samoa and the Samoa International Finance Authority, to ensure that Samoa’s system to combat financial crime and terrorist financing meets international requirements. The Scope of these Guidelines covers “financial institutions” which are defined in Schedule 1 the MLPA. Terminology used in this Guideline is consistent with the MLPA and the MLPR. These Guidelines have been written in several sections: Part 1 gives an overview of the powers of the SFIU and obligations placed on financial institutions. Part 2 provides information on money laundering and terrorist financing. Part 3 outlines key elements of developing effective policies and procedures to assist financial institutions comply with their statutory obligations. Part 4 includes a series of appendices which briefly summarises requirements for each class of financial institution along with examples of suspicious transactions. Part 5 includes a copy of the suspicious transaction reporting (STR) form that financial institutions are required to complete pursuant to the MLPA. Financial institutions should contact the SFIU to discuss aspects of these guidelines and any problems or questions arising from the MLPA or MLPR. Money Laundering Prevention Authority Phone: (685) 34132, 34130 Facsimile: (685) 20293 Email: cbs@lesamoa.net
1 The Financial Actions Task Force (FATF) is the international standard setter and has issued guidance to jurisdictions in relation to money laundering and terrorist financing.
7 PART 1 – THE FINANCIAL INTELLIGENCE UNIT AND OBLIGATIONS PLACED ON FINANCIAL INSTITUTIONS The Financial Intelligence Unit Section 6 of the MLPA establishes the Samoa Financial Intelligence Unit (SFIU). The SFIU is the principle point of contact for all issues relating to AML/CFT. Section 7 of the MLPA sets out the functions and powers of the SFIU and, these include but are not limited to: i) Receiving reports furnished by financial institutions or any person, whether incorporated or unincorporated, on suspicious or unusual transactions. The SFIU considers and obtains more information, as it may require. In terms of section 7(2) of the MLPA, where the FIU has reasonable grounds to suspect that money laundering or terrorist financing is involved, it may apply to the Court for an order to temporarily freeze the funds affected by the transaction or attempted transaction; ii) Liaising with law enforcement agencies both within Samoa and abroad in respect of transactions involving money laundering or terrorist financing; iii) Ensuring compliance by financial institutions with the requirements of the MLPA and this Guideline; iv) Giving instructions to facilitate an investigation; and v) Compiling statistics, issuing guidelines or giving advice to the Minister and the Attorney General. Section 10 of the MLPA gives the SFIU, or any person it authorizes in writing, the power to examine the records and inquire into the business and affairs of any financial institution for the purpose of ensuring compliance with the Act or Guidelines. Section 11(2) of the MLPA provides that the SFIU may direct any financial institution that has without reasonable excuse failed to comply in whole or in part with its obligations under the Act, to implement any action plan to ensure compliance with its obligations under the MLPA. Where a financial institution fails to comply with a directive issued by the SFIU, it may, upon application to the Courts, obtain an order against any or all officers or employees of the financial institution. Obligations of Financial Institutions The MLPA and MLPR impose requirements on financial institutions related to reporting of transactions, record keeping, monitoring of transactions, implementation of policies and procedures, staff awareness and customer identification. Aspects of these requirements are outlined in Part 3 of this Guideline to provide assistance to financial institutions to ensure compliance with their statutory obligations.
8 The SFIU acknowledges that financial institutions subject to the requirements of the MLPA and MLPR operate in different markets with different risks and therefore policies and procedures will vary between firms. Regardless of the size of the organisation or the nature of its activities, internal controls should address the following:
9 Penalties and Offences The MLPA and MLPR impose severe penalties on financial institutions and their employees. Breaches of Samoa’s legislation can result in financial institutions and their imposed being subject to a range of penalties which, upon conviction, include fines and imprisonment or both. Key aspects are summarized below. However, financial institutions should ensure that they are familiar with all aspects of the legislation and the obligations placed on them to put in place policies and procedures to ensure that their services are not used by those involved in money laundering or the financing of terrorism. Assisting persons commit the offences of money laundering or terrorist financing The combined effect of the Money Laundering Prevention Act 2007 and the Prevention and Suppression of Terrorism Act 2002 is to make it an offence for any person to provide assistance to a criminal to obtain, conceal, retain or invest funds and to finance or assist in the financing of terrorism, if that person knows or suspects or, in the case of financing or assisting in the financing of terrorism should have known or suspected, that those funds are the proceeds of crime or to be used to carry out an act of terrorism. Such assistance is punishable on conviction to a fine not exceeding 10,000 penalty units, or to imprisonment for a period not exceeding 7 years, or to both such fine and imprisonment for a money laundering offence and to a fine not exceeding 1,000 penalty units or to imprisonment for a term not exceeding 5 years for assisting the financing of terrorist acts. Failure to report It is an offence for any person who acquires knowledge or a suspicion of money laundering or terrorist financing in the course of their trade, profession, business or employment, not to report the knowledge or suspicion, as soon as it is reasonably practicable, after the information comes to his attention. Failure to report in these circumstances is punishable on conviction by a maximum fine of 500 penalty units. If the person involved is a financial institution as defined under the Money Laundering Prevention Act 2007, the licence of such financial institution may be revoked by the Central Bank or the Minister, as the case may be, pursuant to the provisions of the relevant legislation. Tipping-off It is an offence for anyone to take any action likely to prejudice an investigation by the relevant authorities by informing (i.e. tipping off) the person who is the subject of a suspicious transaction report, or anybody else, that a disclosure has been made or that the Police or Customs authorities are carrying out or intending to carry out a money laundering or terrorist financing investigation. The punishment on conviction for this “tipping-off” offence is a maximum of five years imprisonment or a fine not exceeding 500 penalty units or both such fine and imprisonment.
10 Implementation of AML/CFT in a cross border context Banks and Insurance Companies The Central Bank of Samoa expects banking and insurance groups to apply an accepted minimum standard of KYC policies and procedures to both their local and overseas operations. Parent institutions must communicate their policies and procedures to their overseas branches and subsidiaries, including non-banking entities such as trust companies, and have a routine for testing compliance against both home and host country KYC standards in order for their programmes to operate effectively globally. Such compliance tests will also be tested by external auditors and supervisors. However small an overseas establishment is, a senior officer should be designated to be directly responsible for ensuring that all relevant staff are trained in, and observe, KYC procedures that meet both home and host standards. While this officer will bear primary responsibility, internal auditors and compliance officers from both local and head offices as appropriate should support him. Other financial institutions The Authority and the SFIU expects financial institutions in Samoa which have operations outside of Samoa to follow the requirements for banks and insurance companies outlined above.
11 PART 2 – GENERAL INFORMATION What is Money Laundering? Money laundering is the process by which criminals attempt to conceal the true origin and ownership of money or other assets gained from crime. If undertaken successfully, money laundering also allows criminals to maintain control over those proceeds of crime and, ultimately, disguise the true criminal source of this income. Money laundering is a global problem that affects all countries. By its nature, it is a hidden activity and therefore the scale of the problem and the amount of criminal money being generated either locally or globally each year is impossible to measure accurately, but it has been estimated at between USD1.3 trillion to USD3.3 trillion per year2 . Failure to prevent the laundering of the proceeds of crime permits criminals to benefit from their actions, thus making crime more attractive. Stages of Money Laundering There is no one method of laundering money. Methods can range from the purchase and resale of a luxury item (e.g. a car or jewellery), to passing money through a complex international web of legitimate businesses and “shell companies” (i.e. those companies that primarily exist only as named legal entities without any trading or business activities). Initially, however, in the case of drug trafficking and some other serious crimes such as robbery, the proceeds usually take the form of cash, which needs to enter the financial system by some means. Likewise, street level purchases of drugs are almost always made with cash. Despite the variety of methods employed, the laundering process is accomplished in three stages, which may comprise numerous transactions, by the launderers that could alert a reporting institution to criminal activity: a) Placement - the physical disposal of the money or assets gained from crime. This may include: i) Placing cash on deposit at a bank (often intermingled with a legitimate money to obscure the audit trail), thus converting cash into readily recoverable funds; ii) Physically moving cash between countries; iii) Making loans in tainted cash to businesses which seem legitimate or are connected with legitimate businesses, thus also converting cash into debt;
2 In the 1996, the International Monetary Fund (IMF) estimated the global volume of money laundering to be between two to five per cent of world GDP (Source: US National Money Laundering Strategy 2002). This estimate of the global volume of money laundering is based on the 1996 study and 2007 IMF world GDP data.
12 iv) Purchasing high value goods for personal use or expensive presents to reward existing or potential colleagues; v) Purchasing negotiable assets in one-off transactions; or vi) Placing cash in the client account of a professional intermediary. b) Layering - separating criminal proceeds from their source by creating complex layers of financial transactions designed to disguise the audit trail and provide anonymity. This may include: i) Rapid switches of funds between banks and/or countries; ii) Use of cash deposits as collateral to support legitimate transactions; iii) Switching cash through a network of legitimate business and “shell companies” across several jurisdictions; or iv) Resale of goods or assets. c) Integration - the provision of apparent legitimacy to criminally derived wealth. If the layering process has succeeded, integration schemes place the laundered proceeds back into the economy in such a way that they re-enter the financial system appearing as legitimate or ‘clean’ funds. The three basic steps may occur as separate and distinct phases. They may occur simultaneously or, more commonly, they may overlap. How the basic steps are used depends on the available laundering options and the requirements of the criminal individual or criminal organisation(s) involved. Although placement, layering and integration are common strategies in laundering, section 11 of the Proceeds of Crime Act 2007 goes further and defines money laundering to include: Engaging in a transaction that involves property, knowing or having reason to believe that it is derived from the proceeds of crime; or The acquisition, possession and use of property by a person or bringing into Samoa property, knowing or having reason to believe that it is derived from the proceeds of crime; or Concealing or disguising the true nature, source location, disposition, movement, ownership of or right with respect to property that the person knows or ought reasonably to know to be the proceeds of crime; or Rendering assistance to another person to covert or transfer property that the person knows or ought reasonably to know to be the proceeds of crime with the aim of concealing or disguising the illicit origin of that property.
13 Vulnerability of Financial Institutions to Money Laundering Historically, efforts to combat money laundering have concentrated on the deposit-taking procedures of financial institutions where it is easier to discover the launderer’s activities. However, criminals have learnt that unusual or large cash payments made into financial institutions can create suspicion and lead to additional enquiries. Criminals have therefore sought other means to convert the illegally earned cash or to mix it with legitimate cash earnings before it enters the financial system, thus making it harder to detect at the placement stage. Equally, there are many crimes (particularly the more sophisticated ones) where cash is not involved. The need to combat money laundering The ability to launder the proceeds of crime through the financial system is vital to the success of criminal operations. The unchecked use of financial systems for this purpose has the potential to undermine individual financial institutions and ultimately the entire financial sector. The increased integration of the world's financial systems and the removal of barriers to the free movement of capital have made money laundering easier and complicated the tracing process. Financial institutions that become involved in a money laundering scandal, even unwittingly, will risk prosecution, the loss of their good market reputation, and damage the reputation of Samoa as a safe and reliable country for investors. Money laundering is often thought to be associated solely with banks, other credit institutions and bureaux de change. Whilst the traditional banking processes of deposit taking, money transfer and lending do offer a vital laundering mechanism, particularly in the initial conversion from cash, products and services offered by other types of financial and non-financial sector businesses are also attractive to the launderer. The sophisticated launderer often involves many other unwitting accomplices such as:
14 Vulnerability points for money launderers Money launderers’ transactions are more vulnerable to detection at certain points in the financial system, specifically: i) Entry of cash into the financial system; ii) Cross-border flows of cash; iii) Transfers within and from the financial system; iv) Purchasing investments and other assets; v) Incorporation of companies; and vi) Formation of trusts. Through the analysis of suspicious transactions reports submitted to the Samoan Financial Intelligence Unit (SFIU) by financial institutions, the following methods and trends have been identified in Samoa: i) Placement of alleged criminal proceeds derived from fraudulent activities which occurred overseas in bank accounts established with the local financial institution; ii) Smuggling of cash in smaller amounts to avoid detection or attention of relevant authorities or financial institutions of any suspicious nature of transaction; iii) The use of scam letters to mislead members of the public regarding winning large sums of money or high yields on investment. The Financing of Terrorism What is Terrorist Financing? Terrorist financing involves collecting and providing funds for terrorist activity. Terrorist activity has as its main objective intimidation of a population or compelling a government to do something or not do something. This is done by intentionally killing, seriously harming or endangering a person, causing substantial property damage likely to seriously harm people or by seriously interfering with or disrupting essential services, facilities or systems. Terrorists need financial support to carry out terrorist activities and achieve their goals. In this respect, there is little difference between terrorists and other criminals in their use of the financial system. A successful terrorist group, much like a criminal organization, is one that is able to build and maintain an effective financial infrastructure. For this, it must develop sources of funding and means of obscuring the links between those sources and the activities the funds support. It needs to find a way to make sure that the funds are available and can be used to get whatever goods or services are needed to commit terrorist acts. The money
15 needed to mount terrorist attacks can be small and the associated transactions are not necessarily complex. Methods of Terrorist Financing There are two primary sources of financing for terrorist activities. The first involves getting financial support from countries, organizations or individuals. The other involves revenue-generating activities. These are explained in further detail below. Financial Support Terrorism could be sponsored by a country or government, although this is believed to have declined in recent years. State support may be replaced by support from other sources, such as individuals with sufficient financial means. Revenue-Generating Activities The revenue-generating activities of terrorist groups may resemble other criminal organizations. Kidnapping and extortion can serve a dual purpose of providing needed financial resources while furthering the main terrorist objective of intimidating the target population. In addition, terrorist groups may use smuggling, fraud, theft, robbery, and narcotics trafficking to generate funds. Financing for terrorist groups may also include legitimately earned income, which might include collection of membership dues and subscriptions, sale of publications, speaking tours, cultural and social events, as well as solicitation and appeals within the community. This fundraising might be in the name of organizations with charitable or relief status, so that donors are led to believe they are giving to a legitimate cause. Only a few non-profit organizations or supposedly charitable organizations have been implicated in terrorist financing. In these cases, the organizations may in fact have carried out some of the charitable or relief work. Members or donors may have had no idea that a portion of funds raised by the charity was being diverted to terrorist activities. This type of legitimately earned financing might also include donations by terrorist group members of a portion of their personal earnings. Laundering of Terrorist-Related Funds Like criminal organizations, terrorists must find ways to launder or transfer illicit funds without drawing the attention of the authorities. For this reason, transactions related to terrorist financing may look a lot like those related to money laundering. Therefore, strong, comprehensive anti-money laundering regimes are essential to tracking terrorist financial activities. Importance of Combating Terrorist Financing Acts of terrorism pose a significant threat to the safety and security of people all around the world. Samoa continues to work with other nations to confront terrorism and bring those who support, plan and carry out acts of terrorism to justice. Business relationships with terrorist groups could expose financial institutions or financial intermediaries to significant reputational and operational risk, as well as
16 legal repercussions. The risk is even more serious if the terrorist group is subsequently shown to have benefited from the lack of effective monitoring or willful blindness of a particular institution or intermediary that enabled them to carry out the terrorist activities. International Efforts to Combat Terrorist Financing At an extraordinary Plenary on the Financing of Terrorism held in October 2001, the Financial Actions Task Force (FATF) expanded its mission beyond money laundering. During the extraordinary Plenary, the FATF agree to a set of special recommendations which committed members to:
17 PART 3 – DEVELOPING AN EFFECTIVE SYSTEM Introduction The MLPA and MLPR impose requirements on financial institutions related to reporting of transactions, record keeping, monitoring of transactions, staff awareness and customer identification. To assist financial institutions develop internal policies and procedures to establish an effective system to combat money laundering and terrorist financing, this section of the Guideline provides guidance on the practical implementation of the requirements and intent of the MLPA and MLPR. The Duty of Vigilance Financial institutions are required to have in place adequate policies, practices and procedures that promote high ethical and professional standards and prevent the institution from being used, intentionally or unintentionally, by criminal elements. Section 31(1)(b) of the MLPA requires financial institutions to establish and maintain policies and procedures to combat money laundering and terrorist financing. The duty of vigilance is necessary to avoid assisting the process of laundering and to react to possible attempts at being used for that purpose. Thus the duty of vigilance consists mainly of the following five elements: i) Verification; ii) Recognition of suspicious transactions; iii) Reporting of transactions as required by the MLPA; iv)Keeping records; and v) Training Institutions perform their duty of vigilance by having in place systems which enable them to: i) Determine the true identity of customers requesting their services; ii) Recognise and report suspicious transactions to the SFIU; iii) Keep records for the prescribed period of time; iv) Train key staff to ensure that they understand their obligations under the MLPA; v) Liaise closely with the SFIU on matters concerning policy and systems to detect money laundering and the financing of terrorism; and vi) Ensure that internal audit and compliance functions regularly monitor the implementation and operation of the institution’s anti-money laundering and counter terrorist financing (AML/CFT) policies and procedures.
18 The nature and scope of the policies and procedures will vary depending on its size, structure and the nature of the business. However, irrespective of size and structure, all institutions should establish policies and procedures which in effect measure up to the requirements of the MLPA and the MLPR. The system should enable key staff to react effectively to suspicious occasions and circumstances by reporting them to the relevant personnel in-house and to receive training from time to time, whether from the institution or externally. Responsibilities of Financial Institutions To ensure that Samoa is not used as a channel for criminal or terrorist funds, all financial institutions should: a) Comply with SFIU policies, regulations, directives and their statutory obligations under the MLPA and MLPR. The Directors and Management of financial institutions should ensure that SFIU policies and all relevant Acts are adhered to and that a service is not provided where there are reasonable grounds to believe that transactions are associated with a money laundering offence or an offence of the financing of terrorism activities; b) Appoint a compliance officer to be responsible for ensuring the institution’s compliance with the requirements of the MLPA; c) Establish an audit function to test its anti-money laundering and combating financing of terrorism procedures and systems; d) Co-operate with law enforcement agencies such as the SFIU within any limits imposed by legislation on customer confidentiality or where there are reasonable grounds for suspecting money laundering or the financing of terrorism; e) Implement effective procedures for customer identification, record keeping and reporting suspicious transactions. These procedures should be in line with Parts III and IV the MLPA and the Parts II, III and IV of the MLPR; f) Screen potential employees to ensure that they are fit and proper; g) Ensure that its officers and employees are:
19 Money Laundering Compliance Officer Section 31(1) of the MLPA, requires financial institutions to appoint an officer who is responsible for ensuring compliance with Samoa’s requirements. It is recommended that this officer be designated as the Money Laundering Compliance Officer. In addition to ensuring that the financial institution complies with its statutory obligations, the officer should: Be responsible for the review and submission of suspicious transaction reports (STRs) to the SFIU; Be responsible for staff training in relation to money laundering and terrorist financing; Regularly review the financial institution’s policies and procedures to ensure that these are up to date with both Samoa’s requirements and international standards as outlined by the Financial Actions Task Force; Test policies and procedures to ensure that these are being implemented by staff of the institution; and Be the liaison point between the financial institution and the SFIU. The SFIU expects that the Money Laundering Compliance Officer should be a senior staff member with the necessary powers to ensure the effective management of the system. The requirement that a financial institution appoint a compliance officer does not apply to an individual who, in the course of carrying out his/her business, does not employ or act in association with any other person (refer section 31(2) of the MLPA). This exemption does not remove or negate obligations on that person to report transactions that may be related to money laundering or terrorist financing to the SFIU or comply with other requirements of the MPLA and the MPLR, such as the customer and verification identification requirements and record keeping requirements. Identification procedures An important objective of obtaining and verifying the identity of customers through reliable documents and sources is to ensure that any person(s) or body corporate found to be conducting or attempting to conduct any serious offence, money laundering offence or an offence of the financing of terrorism, is easily detected, traced and dealt with by the SFIU, and relevant law enforcement and regulatory authorities. Section 16 of the MLPA requires that financial institutions undertake customer due diligence measures, including identifying and verifying the identity of customers, when: establishing business relationships; carrying out occasional transactions; there is a suspicion of money laundering or terrorist financing;
20 the financial institution has doubts about the adequacy of previously obtained customer identification data. Financial institutions are, as a matter of best practice and prudent management, encouraged to conduct continuous due diligence on their customers in the course of business. Financial institutions should take reasonable measures to identify a customer on the basis of any official or other identifying document and verify the identity of the customer on the basis of reliable and independent source documents, data or information or other evidence. Section 5 of the MPLR provides financial institutions with a list of documents that are acceptable for the purposes of verifying a customer’s identity. In the case of legal persons, section 6 of the MLPR requires verification of the legal existence of the legal person by obtaining copies of the entity’s certificate of incorporation and information relating to: the customer's name, legal form, address and its directors; the principal owners and beneficiaries and control structure, including identifying the natural person who ultimately owns or controls the legal person; provisions regulating the power to bind the entity (e.g. its Articles of Association); and the authorisation of any person purporting to act on behalf of the customer and the identity of the persons. The documentation requirements for the identification of natural persons involved in the ownership or control of legal persons are the same as those specified under section 5 of the MPLR. Know your Customer The need for financial institutions to know their customers is vital for the prevention of money laundering and to counter the financing of terrorism. If a customer has established an account under a false identity, he/she may be doing so for the purpose of defrauding the financial institution itself or merely to ensure that he/she cannot be traced or linked to the proceeds of the crime that the institution is being used to launder. A false name, address or date of birth will usually mean that the law enforcement agencies cannot trace the customer if needed for interview in connection with an investigation. When a business relationship is being established, the nature of the business that the customer expects to conduct with the financial institution should be ascertained at the outset to show what might be expected as normal activity. In order to be able to judge whether a transaction is or is not suspicious, financial institutions need to have a clear understanding of the legitimate business of their customers.
21 The procedures which financial institutions adopt to comply with money laundering legislation will inevitably overlap with the prudential fraud prevention measures which they would undertake in order to protect themselves and their genuine customers. So far as lending is concerned, a bank or non-bank financial institution engaged in lending will naturally want to make specific checks on an applicant’s true identity, credit-worthiness, employment and other income details. Such checks will often be very similar to identity checks undertaken for money laundering purposes. Section 19 of the MLPA requires a financial institution to maintain accounts in the true name of the account holder. Financial institutions should not open an account or conduct ongoing business with a customer who insists on anonymity or who gives a fictitious name. Nor should confidential numbered accounts function as anonymous accounts but they should be subject to exactly the same KYC procedures as all other customer accounts, even if the test is carried out by selected staff. Whereas a numbered account can offer additional protection for the identity of the account-holder, the identity must be known to a sufficient number of staff to perform proper due diligence. Such accounts should in no circumstances be used to hide the customer’s identity from the institution’s compliance function or from supervisory authorities. Components of an Effective System Essential Elements of Know-Your-Customer Requirements All financial institutions should to have in place adequate policies, practices and procedures that promote high ethical and professional standards and prevent the institution from being used, intentionally or unintentionally, by criminal elements. The design of these policies should reflect the nature of the services offered by the institution. Essential elements should start from the institutions’ risk management and control procedures and should include: a) customer acceptance policy, b) customer identification, c) on-going monitoring of high risk accounts, and d) risk management. Institutions should not only establish the identity of their customers, but should also monitor account activity to determine those transactions that do not conform with the normal or expected transactions for that customer or type of account. Customer acceptance policy Financial institutions should develop clear customer acceptance policies and procedures, including a description of the types of customer that are likely to pose a higher than average risk to the institution. In preparing such policies, factors such as customers’ background, country of origin, public or high profile position, linked accounts, business activities or other risk indicators should be considered.
22 Financial institutions should develop graduated customer acceptance policies and procedures that require more extensive due diligence for higher risk customers. These policies should take into account the requirements of section 14 and 15 of the MPLR. General Guidelines for Establishing Satisfactory Evidence of Identity The MLPR specifies a number of documents that financial institutions must obtain as evidence of identity. The overriding requirement is for the financial institution itself to be satisfied that it has established the true identity of the prospective customer as far as it is reasonably possible. A financial institution should establish to its satisfaction that it is dealing with a real person or organisation (natural, corporate or legal), and verify the identity of those persons who have power to operate an account. If funds to be deposited or invested are being supplied by or on behalf of a third party, the identity of the third party (i.e. the underlying beneficiary) should also be established and verified (refer section 13(3) of the MPLA). Where face to face contact is normal procedure and it is expected that face to face contact will take place early in the business relationship, wherever possible, the prospective customer should be seen personally and photographic evidence of identity obtained. The verification procedures necessary to establish the identity of the prospective customer should basically be the same whatever type of account or service is required (e.g. current, deposit, lending or mortgage accounts). The evidence of identity required should be obtained from documents issued by reputable sources. As required under section 18(3) of the MLPA, copies of the supporting evidence of a person’s identity must be retained for a minimum period of five years. In addition, financial institutions must keep records of every transaction that is conducted through it and must, as required by section 18(3) of the MLPCA retain records for a period of five years after the completion of the transaction or when the account was closed or business relationship ceases. Any subsequent changes to the customer’s name, address, or employment details of which the financial institution becomes aware should be recorded as part of the “know your customer” process. Generally this would be undertaken as part of good practice for the financial institution’s own protection against fraud and bad debts. Once identification procedures have been satisfactorily completed, then the business relationship has been established and, as long as records concerning that customer are maintained in line with Section 18 of the MLPCA, no further evidence of identity is needed when transactions are subsequently undertaken for that customer as long as regular contact is maintained. However, if the financial institution has reason to suspect that the transaction is suspicious or unusual it is required under section 16(4)(a) of the MPLA to re-verify the customers identity and take measures to understand the nature and purpose of the transaction.
23 When an existing customer closes one account and opens another, there is no need to re-verify identity, although good practice would be to obtain any missing or additional information at this time. This is particularly important if there has been no recent contact with the customer e.g. within the past twelve months. Evidence of Identity As a general rule, financial institutions should obtain satisfactory evidence of identity of a prospective customer at the time of opening an account or entering into a business relationship. Section 10 of the MLPR allows financial institutions, in certain circumstances and where the risks of money laundering or terrorist financing are effectively managed, to delay completion of customer identification and verification in certain circumstances. In such circumstances, unless satisfactory evidence of identity is obtained as soon as is reasonably practicable and prior to the customer carrying out another transaction with the financial institution, the financial institution should pursuant to section 17 of the MPLA not proceed any further with the business relationship or carry out a one-off transaction with the customer, unless directed to do so by the SFIU and shall report the transaction or attempted to the SFIU as a suspicious transaction. Some people may not have official documents, such as a passport or birth certificate or other identification documents listed in section 5 of the MLPR. In such cases, a risk-based approach should be taken and alternative means of identification may be acceptable, such as a letter from a reputable and identifiable party; section 15 of the MLPR specifies requirements for financial institutions to apply simplified customer due diligence for low risk customers. This is consistent with the Basel Committee on Banking Supervision’s General Guide to Account Opening and Identification, which provides a list of acceptable identity documents, but goes on to state that: In particular jurisdictions there may be other documents (other than standard documents such as identity cards) of an equivalent nature which may be produced as satisfactory evidence of customer’s identity. (paragraph 12) It is important that the customer acceptance policy is not so restrictive that it results in a denial of access by the general public to banking services, especially for people who are financially or socially disadvantaged. (paragraph 16) Financial institutions should take into consideration the need to balance verification requirements against access to financial services. What is Identity? Section 5 of the MPLR provides an extensive list of customer identification and verification documents. Financial institutions should include in their internal policies and procedures a list of documents that it is prepared to accept from a customer to verify identity. In circumstances where customers do not have such documents, the financial institution should seek guidance from the SFIU.
24 The identity of unincorporated businesses or associations (e.g. self employed persons who own a business) should be verified by establishing the identity of the partner, proprietor or owner. This should be done using the same documents that are used to identify a natural person. Financial institutions should conduct on-going due diligence on relationships with each customer and scrutiny of any transactions undertaken by customers to ensure that the transaction being conducted is consistent with the reporting institution’s knowledge of the customer, the customer’s business and risk profile. Where necessary, for example in the case of Politically Exposed Persons, financial institutions should obtain information as to the source of funds. Customers who are legal persons Section 6 of the MPLR outlines requirements for financial institutions when dealing with legal persons. The following sections of the Guideline provide additional guidance for financial institutions when dealing with certain classes of customer. Direct Clients - Partnerships Where an application for business is made by a partnership, the identity of each individual partner who is an account signatory or who is authorised to give instructions to the financial institution, should be verified as if he or she is a prospective direct personal client. In the case of a limited partnership, the identity of a limited partner need not be verified unless he or she is a significant investor (i.e. has contributed more than 10% of the total capital of the partnership). Direct Corporate Clients A financial institution should obtain the following information and documentation concerning all prospective direct company clients:
25
26 Non-profit organizations (NPOs) Section 6(6) of the MLPR requires that where the customer is a non-profit organisation, group (e.g. social club) or agency the financial institution must satisfy itself as to the legitimate purpose of the organisation by reviewing the organisation’s charter, constitution, or trust instrument. In addition, to these requirements a financial institution should also identify and verify the identity of those persons authorised to act on behalf of the organisation. In this regard, procedures for establishing and maintaining business relationships with non-profit organisations should be consistent with the requirements of section 6(1) of the MLPR. Certification of Documents Suitable Certifiers A certifier must be a suitable person, such as for instance a lawyer, accountant, director or manager of a regulated bank, trust company or trustee company, notary public or member of the judiciary. The certifier should sign the copy document (printing his or her name clearly underneath) and clearly indicate his position or capacity on it together with a contact address and telephone number. The list of suitable certifiers is not intended to be exhaustive and financial institutions should exercise due caution when considering certified copy documents, especially where such documents originate from a country perceived to represent a high risk of financial crime or money laundering or from unregulated entities in any jurisdiction. Where certified copy documents are accepted, it is the financial institution’s responsibility to satisfy itself that the certifier is appropriate. In all cases, the financial institution should also ensure that the customer’s signature on the identification document matches the signature on the application form, mandate or other document. Reliance on Third Parties or Intermediaries – Introduced business Verifying identity is often time consuming and expensive and can cause inconvenience for prospective customers. It is therefore important that as far as possible financial institutions standardise and simplify their procedures and avoid duplicating the identification requirements where it is reasonable and practicable to do so. Although the responsibility to obtain satisfactory evidence of identity cannot be avoided by the financial institution that is performing a service for customer, there are occasions when it is reasonable to rely on another institution to undertake the procedures or to confirm identity. Section 11 of the MLPR provides that financial institutions may rely on a third party or intermediary to perform the customer identification requirements of the MLPA and MLPR. Those financial institutions which rely upon third parties or intermediaries are required to have in place policies and procedures consistent with the requirements of the MLPR. Further, financial institutions which rely on
27 third parties or intermediaries should conduct periodic reviews to ensure that an introducer that it relies on meets the criteria established by the MPLR. Consistent with section 11(6) of the MPLR, financial institutions are required on an annual basis to provide the SFIU with a list of all third parties and intermediaries upon which it relies to perform the customer identification requirements of the MPLA and MLPR. Where either a financial institution or the SFIU, in written advice, determines that the third party or intermediary is not complying with standards comparable to those in Samoa, the financial institution should terminate its relationship with that party. In addition, the financial institution should review customer relationships (e.g. identification documentation, nature of business relationship and transactions) established through the third party or intermediary to ensure that it knows its customers and their business. Where a financial institution determines that it does not have adequate information on the customer it should take measures to obtain missing information. Should problems continue, the requirements of section 17 of the MLPA are relevant and the financial institution should contact the SFIU. Relying on due diligence conducted by a third party or intermediary, in Samoa or in a foreign jurisdiction, however reputable, does not in any way remove the ultimate responsibility of the recipient financial institution to know its customers and their business. Financial institutions should not rely on financial institutions that are subject to weaker standards than those governing the banks’ own KYC procedures or those applicable to Samoa. Exemptions from Identification Requirements Section 16(4) of the MLPA provides limited exemptions to the identification requirements of the Act. Specifically, documentary evidence of identity will not normally be required if:
28 Lower Risk Customers, Jurisdictions and Business Relationships In addition to these exemptions, section 15 of the MLPR provides that a financial institution may apply a simplified customer due diligence procedures to certain customers where the risk of money laundering or the financing of terrorism is considered to be low. Notwithstanding this: Financial institutions must at a minimum obtain information as required by section 15(3) of the MLPR. Financial institutions should ensure that where appropriate that those persons opening accounts have the authority and approval to open and operate accounts. In all cases, the financial institution should ensure that it fully understands the nature of the relationship and any transactions. Non resident customers may only qualify for simplified CDD if they are resident in a jurisdiction that has in place anti-money laundering and countering the financing of terrorism measures that are at a minimum equivalent to those in Samoa. Financial institutions should have in place procedures to monitor developments is those jurisdictions in cases where it decides to apply simplified CDD. Simplified CDD is not acceptable where the financial institution has reason to believe the jurisdiction does not have standards equivalent to those in Samoa. In making this determination, financial institutions should have regard to assessments published by the FATF, International Monetary Fund, World Bank and other agencies such as the Asia Pacific Group on Money Laundering of which Samoa is a member Should a financial institution suspect money laundering or terrorist financing it should subject the relationship (and all others from the jurisdiction) to enhanced due diligence and, as appropriate, submit a STR to the SFIU. Higher Risk Customers, Jurisdictions and Business Relationships Section 14 of the MLPR requires financial institutions to perform additional customer due diligence measures for categories of customer, business relationships or transactions with a higher risk of money laundering. Staff and financial institutions should give special attention to business relationships and transactions with persons, including companies and financial institutions, from countries which do not or insufficiently apply the FATF Recommendations. Whenever these transactions have no apparent economic or visible lawful purpose, their background and purpose should, as far as possible, be examined, and a suspicious transaction report should be submitted to the SIFIU. Financial institutions that conduct international transactions should, as part of their customer acceptance policy, maintain lists of jurisdictions which have weak anti-money laundering requirements or are considered to be high risk because organized criminal activities are prevalent. To assist financial institutions identify high risk jurisdictions, such as those which do not comply with or insufficiently apply the FATF’s recommendations in relation to anti-money laundering and countering the financing of terrorism, it is recommended that financial institutions that conduct international transactions
29 draw on evaluations conducted by agencies such as the International Monetary Fund, World Bank and the Asia Pacific Group on Money Laundering (APG). In this regard for example, the APG conducts regular assessments of jurisdictions’ AML/CFT systems and these can be found on the APG’s website, www.apgml.org . In cases where a customer is regarded as higher risk, financial institutions must take reasonable steps to:
30 Correspondent banking relationships Correspondent accounts that merit particular care involve the provision of services in countries where the respondent banks have no physical presence. However, if banks fail to apply an appropriate level of due diligence to such accounts, they expose themselves to the range of risks identified earlier in this Guideline, and may find themselves holding and/or transmitting money linked to corruption, fraud or other illegal activity. Therefore consistent with the requirements of section 18(1) of the MLPR, banks should gather sufficient information about their respondent banks to understand fully the nature of the respondent’s business. Factors to consider include:
31 Politically exposed persons Business relationships with individuals holding important public positions and with persons or companies clearly related to them may expose a financial institution to significant reputational and/or legal risks. Such politically exposed persons (“PEPs”) are individuals who are or have been entrusted with prominent public functions, including heads of state or of government, senior politicians, senior government, judicial or military officials, senior executives of publicly owned corporations and important political party officials. The FATF defines a PEP as an individual who has been entrusted with prominent public functions in a “foreign country”. However, financial institutions are strongly encouraged to apply similar standards to domestic PEPs. Accepting and managing funds from PEPs that are related to crime will severely damage a financial institution’s own reputation and can undermine public confidence in the ethical standards of Samoa’s financial system. In addition, a financial institution may be subject to costly information requests and seizure orders from law enforcement or judicial authorities (including international mutual assistance procedures in criminal matters) and could be liable to actions for damages by the state concerned or the victims of a regime. Under certain circumstances, a financial institution and/or its officers and employees themselves can be exposed to charges of money laundering, if they know or should have known that the funds stemmed from corruption or other serious crimes. As part of a financial institution’s duty to verify a customer’s identification, financial institutions should gather sufficient information from a new customer, and check publicly available information, in order to establish whether or not the customer is a PEP. Financial institutions should investigate the source of funds before accepting a PEP. Non face to face Verification Financial institutions should apply equally effective customer identification procedures and on-going monitoring standards for non-face-to-face customers as for those available for interview. Clearly, in such situations, photographic evidence of identity is inappropriate and it is therefore important to undertake not only address verification but also to put in place additional procedures to establish personal verification. For example, there are three main areas of information (i.e. address details, employment details and the name and date of birth of the applicant), which could be checked to establish beyond reasonable doubt that a prospective new customer is genuine and that the named applicant is not the victim of an identity theft. In accepting business from non-face-to-face customers:
32
3 FATF Special Recommendation VII was developed with the objective of preventing terrorists and other criminals from having unfettered access to wire transfers for moving their funds and for detecting such misuse when it occurs.
33 Monitoring and Risk Management On-going Monitoring of Accounts and Transactions The effect of section 20 of the MLPA is to place a requirement on financial institutions to monitor transactions. On-going monitoring is an essential aspect of effective KYC procedures. Financial institutions can only effectively control and reduce their risk if they have an understanding of normal and reasonable account activity of their customers so that they have a means of identifying transactions which fall outside the regular pattern of an account’s activity. Without such knowledge, financial institutions are likely to fail in their duty to report suspicious transactions where they are required to do so under the MLPA. The extent of the monitoring needs to be risk-sensitive. For all accounts, financial institutions should have systems in place to detect unusual or suspicious patterns of activity. This can be done by establishing limits for a particular class or category of accounts. Particular attention should be paid to transactions that exceed these limits. Certain types of transactions should alert financial institutions to the possibility that the customer is conducting unusual or suspicious activities. They may include transactions that do not appear to make economic or commercial sense, or that involve large amounts of cash deposits that are not consistent with the normal and expected transactions of the customer when considered against the customer’s profile. Very high account turnover, inconsistent with the size of the balance, may indicate that funds are being “washed” through the account. Risk Management – Compliance Reviews, Internal and External Audits Effective KYC procedures embrace routines for proper management oversight, systems and controls, segregation of duties, training and other related policies. The board of directors of the financial institution should be fully committed to an effective KYC programme by establishing appropriate procedures and ensuring their effectiveness. To ensure compliance with the MLPA, regulations and guidelines, financial institutions are required under section 31(1) of the MLPA to appoint a compliance officer. Policies and procedures should:
34 Directors, if it believes management is failing to address KYC procedures in a responsible manner. Internal audit plays an important role in independently evaluating the risk management and controls, through periodic evaluations of the effectiveness of compliance with KYC policies and procedures, including related staff training. External auditors also have an important role to play in monitoring financial institutions’ internal controls and procedures, and in confirming that they are in compliance with the requirements of the MLPA. Where a financial institution is required to have its accounts audited, the external auditor is required under section 32 of the MLPA to report on the institution’s compliance with the requirements of the MLPA. Section 20 of the MLPR provides guidance to auditors on the areas and matters to be reviewed. The SFIU will require that a financial institution’s external auditors provide it with a copy of the external audit review. A risk based approach to Customer Due Diligence (CDD) CDD should be applied on a risk basis, and to be effective it must include enhanced CDD for higher risk customers and may include simplified CDD for lower risk customers. To assist financial institutions determine the appropriate level of due diligence to be conducted on customers, they should create a profile for each customer of sufficient detail to enable it to implement the CDD requirements of the MLPCA. The customer profile should be based upon sufficient knowledge of the customer, including the customer’s proposed business with the financial institution, and where necessary the source of customer funds. Financial institutions must apply enhanced CDD for customers that are likely to pose a higher risk of money laundering or terrorist financing (“enhanced CDD”) including, but not limited to politically exposed persons. Enhanced CDD must include reasonable measures to establish the source of wealth and source of funds of customers. Enhanced CDD must be applied to higher risk customers at each stage of the CDD process. The general rule is that customers must be subject to the full range of customer due diligence measures as provided in the MLPA. In certain circumstances where the risk of money laundering or terrorist financing is lower or, where information on the identity of the customer and the beneficial owner is publicly available, or where adequate checks and controls exist elsewhere in national systems, simplified measures may be employed. To assist financial institutions develop an appropriate risk-based approach to Customer Due Diligence (CDD), in June 2007 the FATF released a document entitled Guidance on the Risk-based Approach to Combating Money Laundering and Terrorist Financing. As noted above, there should be intensified monitoring for higher risk accounts. Every financial institution should set key indicators for such accounts, taking note of the background of the customer, such as the country of origin and source of funds, the type of transactions involved, and other risk factors. For higher risk accounts:
35
36 to the SFIU and should be retrieved or reproduced in legible and useable form within a reasonable period of time. For the purposes of this Guideline a “reasonable period of time” is taken to mean a period not exceeding five working days. Reporting and Recognition of Suspicious Transactions A suspicious transaction will often be one, which is inconsistent with a customer’s known legitimate business. The first key is to observe whether a transaction, or series of transactions, is consistent with the nature of the customer’s business or occupation. Examples of what might constitute suspicious transactions are provided in appendices to this Guideline. Identification of these types of transactions should prompt further investigations, such as enquiries about the source of funds. Reporting of suspicious transactions Section 23 of the MLPA requires financial institutions to report to the SFIU any suspicious transaction stating the reason for the suspicion, the identity of the business involved, the transaction or any other circumstances concerning that business transaction which gives any officer or employee of the financial institution reasonable grounds to suspect that the transaction involves proceeds of crime. Where a financial institution suspects, has reasonable grounds to suspect or has information that a transaction or attempted transaction may be related to a money laundering offence or financing of terrorism, the financial institution must as soon as practicable after forming the suspicion but no later than 2 working days, report the transaction to the FIU. This reporting requirement is outlined in Section 23(2) of the MLPA. Section 31(1) of the MLPA requires financial institutions to appoint a compliance officer(s) to be responsible for ensuring the company’s compliance with the requirements of the MLPA. The Compliance Officer(s) would be responsible for reporting suspicious transactions to the FIU in the format attached (refer Part 5). Section 23(2) of the MLPA states that a suspicious transaction report must: a) be in writing and may be given by way of mail, fax or electronic mail or such other manner as may be prescribed; b) be in such form and contain such details as may be prescribed; c) contain a statement of the grounds on which the financial institution holds the suspicion; and d) be signed or otherwise authenticated by the financial institution. A suspicious transaction report may be given orally, including by telephone, but a written report must be prepared in accordance with section 23(2) of the MLPA within 48 hours after the oral report is given. Compliance Officers must keep a register of all reports made to the SFIU and all reports made internally to them by employees.
37 Directors, officers and employees of financial institutions are prohibited from disclosing the fact that an STR or related information is being reported to the FIU. If financial institutions form a suspicion that transactions relate to money laundering or terrorist financing, they should take into account the risk of tipping off when performing the customer due diligence (CDD) process. If the financial institution reasonably believes that performing the CDD process will tip-off the customer or potential customer, it may not choose to pursue that process, and should file an STR. Financial institutions should ensure that their employees are aware of any sensitive to these issues when conducting CDD. All financial institutions have a clear obligation to ensure: a) that each relevant employee knows to which person he or she should report suspicions; and b) that there is a clear reporting chain under which those suspicions will be passed without delay to the Money Laundering Compliance Officer. Recognition of Suspicious Transactions As the types of transactions which may be used by a money launderer are almost unlimited, it is difficult to define a suspicious transaction. Suspicion is personal and subjective and falls far short of proof based on firm evidence. However, it is more than the absence of certainty that someone is innocent. Nevertheless, the financial institution would not be expected to know the exact nature of the criminal offence or that the particular funds were definitely those arising from a crime. Where there is a business relationship, a suspicious transaction will often be one which is inconsistent with a customer’s known legitimate business or personal activities or with the normal business for that type of account. Therefore, the first key to recognition is knowing enough about the customer and the customer’s business to recognise that a transaction or series of transactions is unusual. Questions that a financial institution might consider when determining whether an established customer’s transaction might be suspicious are:
38 types of transactions and circumstances that have given rise to suspicious transaction reports by staff, with a view to updating internal instructions and guidelines from time to time. Examples of suspicious transactions that may be relevant to different classes of financial institutions are included in the Part 4 of this Guideline. Education and Training Section 31(1)(c) of the MLPA requires that financial institutions must establish and maintain internal procedures:
39 PART 4 – SPECIFIC GUIDELINES FOR DIFFERENT CLASSES OF FINANCIAL INSTITUTION This section of the Guideline outlines some of the key requirements for some types of financial institutions and should only be taken as a guide. Financial institutions should ensure that they implement policies and procedures consistent with the requirements of the MLPA and MPLR. Examples of suspicious transactions for different types of financial institution are also provided for information. Separate appendices address minimum requirements for persons whose regular occupation or business is the carrying out of:
40 INFORMATION FOR BANKS & CREDIT UNIONS The following summary of the legislative requirements under the MLPA applies to you if you are a credit union or carrying out banking business as defined in: The Central Bank of Samoa Act 1984; and The Financial Institutions Act 1996; or The International Banking Act 2005. Reporting Suspicious Transactions - You must report where there are reasonable grounds to suspect that a transaction or an attempted transaction is related to the commission or attempted commission of a serious offence, a money laundering offence or a terrorist activity financing offence. Terrorist Property - You must report where you know, or suspect, that there is property in your possession or control that is owned or controlled by or on behalf of a terrorist or a terrorist group. Record Keeping You must keep the following records:
41
42 Compliance Regime The following five elements must be included in a compliance regime:
43
44
45 and sheer volume in which wire transfers are carried out makes them an ideal mechanism for criminals to hide transactions. Examples of potentially suspicious wire transfers include:
46
47 INFORMATION FOR INSURANCE COMPANIES, BROKERS & AGENTS The following summary of the legislative requirements under the MLPA that apply to you if you carrying out insurance transactions, including carrying on the business of an insurer or insurance intermediary. Insurance companies operating in, or from within Samoa, should also ensure that agents who act on its behalf to sell insurance policies comply with the requirements of the MLPA, the MPLR and this Guideline. Reporting Suspicious Transactions - You must report where there are reasonable grounds to suspect that a transaction or an attempted transaction is related to the commission or attempted commission of a serious offence, a money laundering offence or a terrorist activity financing offence. Terrorist Property - You must report where you know, or suspect, that there is property in your possession or control that is owned or controlled by or on behalf of a terrorist or a terrorist group. Record Keeping You must keep the following records:
48 In cases where a third party is involved, you must obtain specific information about the third party and their relationship with the individual providing the cash or the client. Politically Exposed Person You have to take reasonable measures to determine whether you are dealing with a politically exposed person for new or existing relationships. You also have to keep records and take additional measures. Compliance Regime The following five elements must be included in a compliance regime:
49
50 INFORMATION FOR ACCOUNTANTS & LAWYERS Your Obligations If you are an accountant or accounting firm, lawyer (barristers and solicitors) or law firm, you have the regulatory requirements under the MLPA when you engage in any of the following activities on behalf of any individual or entity:
51 Identification requirements You must take specific measures to identify the following individuals or entities:
52 Examples of Suspicious Transaction Accountants’ Transactions The following scenarios may give reasonable grounds for suspicion:
53
54 INFORMATION FOR MONEY REMITTANCE/SERVICES BUSINESSES Your Obligations The following summary of the legislative requirements under the MLPA applies to you if you are a money services business. A money services business means an individual or an entity that is engaged in the business of any of the following activities:
55
56 In cases where a third party is involved, you must obtain specific information about the third party and their relationship with the individual providing the cash or the client. Compliance Regime The following five elements must be included in a compliance regime:
57
58 INFORMATION FOR REAL ESTATE AGENTS Your Obligations The following summary of the legislative requirements under the MLPA applies to you if you are a real estate broker or sales representative when you act as an agent regarding the purchase or sale of real estate. These requirements do not apply to your activities related to property management. If you are an employee of a reporting entity, these requirements are the responsibility of your employer except with respect to reporting suspicious transactions and terrorist property, which is applicable to both you and the employer. If you are a real estate agent acting on behalf of a broker, these requirements are the responsibility of the broker except with respect to reporting suspicious transactions and terrorist property, which is applicable to both. Reporting Suspicious Transactions - You must report where there are reasonable grounds to suspect that a transaction or an attempted transaction is related to the commission or attempted commission of a money laundering offence or a terrorist activity financing offence. Terrorist Property - You must report where you know or suspect that there is property in your possession or control that is owned or controlled by or on behalf of a terrorist or a terrorist group. Record Keeping You must keep the following records:
59 Third Party Determination Where a cash transaction record is required (i.e. for transactions in excess of $10,000), you must take reasonable measures to determine whether the individual is acting on behalf of a third party. When a client information record is required, you must take reasonable measures to determine whether the client is acting on behalf of a third party. In cases where a third party is involved, you must obtain specific information about the third party and their relationship with the individual providing the cash. Politically Exposed Person You have to take reasonable measures to determine whether you are dealing with a politically exposed person. You also have to keep records and take additional measures to monitor such higher risk transactions. Compliance Regime The following five elements must be included in a compliance regime:
60
61 INFORMATION FOR TRUST & COMPANY SERVICE PROVIDERS Your Obligations If you are a trust or corporate service provider or a trustee company business as defined in the Trustee Companies Act 1987 (collectively “TCSPs”), you have regulatory obligations under the MLPA when you prepare for and carry out transactions for a client in relation to the following activities:
62 Record Keeping You must keep the following records:
63 There should be a regular review of the risk assessment and management processes, taking into account the environment within which the TSCP operates and the activity in its market place).
64 INFORMATION FOR DEALERS IN PRECIOUS METALS, STONES AND JEWELLERY Your Obligations A dealer in precious metals and stones (DPMS) means an individual or an entity that buys or sells precious metals, precious stones or jewellery, in the course of its business activities.
65
66 PART 5 – SFIU REPORTING FORM The following form has been issued by the Samoa Financial Intelligence Unit to enable financial institutions to meet their reporting obligations under the MLPA. Copies of the forms can be obtained from the SFIU. MONEY LAUNDERING PREVENTION AUTHORITY (CENTRAL BANK OF SAMOA) SUSPICIOUS TRANSACTION REPORT (Money Laundering Prevention Act 2007) PLEASE WRITE IN BLOCK LETTERS PART A -IDENTITY OF CUSTOMERS AND /OR AGENTS INVOLVED IN THE SUSPICIOUS TRANSACTION PERSONAL ACCOUNT OR AGENT COMPANY ACCOUNT PART B – TRANSACTION DETAILS TRANSACTION DATE AMOUNT CURRENCY CASH
3 Nature of Business Yes or No
67 NOTE: FOR MULTIPLE TRANSACTIONS OR MULTIPLE FACILITIES PLEASE RECORD DETAILS ON A SEPARATE SHEET Details Of Facilities With Financial Institutions Involved Account Name Account Type Account Number Names of Signatories
PART C – GROUNDS FOR SUSPICION Give details of the nature of circumstances surrounding the transaction and the reason for suspicion If space is not enough please attach supplementary sheet. Number of additional pages. PART D – IDENTIFICATION DETAILS (eg. Drivers Licence, Passport, Birth Cert, Id & etc). Agent Conducting Transaction ID Type ID Number Issuer Account Holder (eg. Drivers Licence, Passport, Birth Cert, Id & etc). ID Type ID Number Issuer Description FOR PERSONAL ACCOUNT HOLDERS ONLY
Sex : Male / Female Race Eye Colour Height (Feet) Build Skin colour Hair style/ colour Age Clothing Distinguishing marks/identifying features (tattoo, facial, hair, accent, etc) STAMP PASSPORT PHOTO
68 PART E FINANCIAL INSTITUTION DETAILS AND PLACE OF TRANSACTION FOR MONEY LAUNDERING AUTHORITY USE ONLY Institution Type (eg: Bank,Trust Co, Insurance Co etc) Name of Institution Address Telephone Fax number E-Mail Address Please forward this form direct to the Money Laundering Prevention Authority L5 of the Central Bank building immediately when a suspicious transaction is detected.