KYB Compliance in Singapore (2026): Rules and Process

Singapore KYB compliance goes beyond an ACRA search. It supports business verification in Singapore by verifying the company, directors, representatives, ownership and UBOs, while covering AML screening, risk assessment and ongoing monitoring.

Singapore strengthened beneficial-ownership and corporate-service-provider rules in 2025. The FATF/APG’s 2026 evaluation noted broad registry coverage but data-accuracy limitations, making independent verification essential for effective KYB Singapore processes.

This guide covers Singapore KYB requirements, ACRA verification, UBO identification, AML screening, customer risk assessment, CDD, EDD, ongoing monitoring and automation.

What Is KYB Compliance in Singapore?

KYB compliance in Singapore is the process of verifying a company's identity, registration details, activities, directors, representatives, shareholders, beneficial owners and controllers. It combines ACRA and Bizfile checks with ownership mapping, UBO verification, AML, sanctions and PEP screening, risk assessment, CDD, EDD where needed, and ongoing monitoring. Effective business verification in Singapore helps organisations understand not only whether a company exists, but also who owns and controls it.

Singapore has no single universal KYB law; requirements come from corporate transparency, AML/CFT, MAS, Corporate Service Providers Act and sector-specific rules. KYB verifies the business, KYC verifies the people behind it, and AML screening assesses financial-crime risk. Together, these controls form the foundation of KYB compliance Singapore businesses may need to apply based on their sector and activities.

What Are the Main KYB Rules in Singapore in 2026?

Singapore’s KYB framework combines corporate transparency, AML/CFT obligations, beneficial ownership requirements, and sector-specific regulations rather than relying on one standalone KYB law.

Understanding these Singapore KYB requirements helps businesses conduct business verification in Singapore, verify company details through ACRA, identify UBOs and registrable controllers, screen directors and beneficial owners, and apply appropriate customer due diligence.

Companies Act and ACRA

Singapore’s Companies Act and ACRA provide the foundation for KYB checks. Through Bizfile, teams can verify a company’s name, UEN, incorporation date, status, registered office, directors, shareholders and other corporate details. However, an ACRA search does not confirm the ultimate beneficial owner, uncover hidden control or complete AML screening. ACRA verification is therefore an important first step in KYB Singapore, but it is not the entire process.

The Central RORC supports transparency and investigations, but its information is not publicly accessible, so regulated firms may need independent UBO verification, ownership mapping and supporting documents. This is why business verification in Singapore should combine ACRA data with reliable independent sources and risk-based due diligence.

Corporate Service Providers Act 2024

The Corporate Service Providers Act 2024 matters to Singapore KYB compliance because it took effect on 9 June 2025 and strengthened ACRA’s oversight of corporate service providers. Registered CSPs must apply AML, CFT and counter-proliferation financing controls.

The accompanying regulations cover customer and director verification, beneficial ownership, screening, risk assessment, enhanced due diligence, ongoing monitoring and record keeping. These requirements provide a useful example of how a structured KYB compliance Singapore workflow can connect company verification, ownership analysis, AML screening and ongoing risk management.

Singapore KYB Process: 8 Key Steps

Follow these eight practical steps to verify a Singapore business, identify its beneficial owners, assess AML risk, and meet applicable customer due diligence requirements.

From ACRA and UEN checks to ownership mapping, sanctions screening, enhanced due diligence, and ongoing monitoring, this process helps create a consistent and defensible KYB Singapore workflow. It also shows why business verification in Singapore should extend beyond a basic registry search.

Step 1: Collect and verify the company’s core details

Gather the company’s legal name, UEN or registration number, legal structure, registered address, incorporation jurisdiction, business activities and expected account or transaction activity. These details form the foundation of KYB compliance in Singapore and help establish the company’s identity, purpose and expected risk profile.

Compare the information provided by the business with reliable, independent sources. For Singapore entities, use ACRA or Bizfile where appropriate, and request supporting documents when registry information is incomplete, inconsistent or outdated. This combination of customer-provided information and ACRA verification strengthens the overall business verification Singapore process.

Step 2: Confirm the company’s legal existence and status

Check the company against ACRA, Bizfile or another reliable and independent corporate registry. Confirm that the entity exists, is active, has the stated legal structure and operates from the reported jurisdiction.

Verify that the company’s name, UEN, registered address, incorporation date, directors and business activities match official records. Any discrepancy should be documented, investigated and considered in the KYB risk assessment before onboarding. An ACRA search can confirm important corporate facts, but it should be treated as one component of broader KYB compliance Singapore controls.

Step 3: Verify directors and authorised representatives

Identify and verify directors, partners, managers and authorised representatives connected with the business. Confirm each person’s identity, position and authority to act for the company using reliable and independent sources.

This step connects KYB with KYC because the individuals representing or controlling the business must also be verified. Request board resolutions, authorisation letters or other evidence where authority is unclear, especially for higher-risk customers. Verifying these individuals is an essential part of KYB Singapore and helps prevent unauthorised or concealed control.

Step 4: Trace ownership and identify beneficial owners

Review direct and indirect shareholders, trace ownership through intermediary entities and identify the natural persons who ultimately own or control the company. Apply the relevant Singapore beneficial ownership and Register of Registrable Controllers requirements without relying solely on a registry entry.

Check for nominee directors, nominee shareholders, trusts, offshore holding companies and other arrangements that may obscure control. If no beneficial owner can be identified through ownership, assess who exercises significant control or executive authority and document the reasonable steps taken. Thorough ownership mapping is central to business verification in Singapore because an entity’s registered information may not reveal its ultimate controllers.

Step 5: Screen the company and connected individuals

Screen the company, directors, beneficial owners, controllers, authorised representatives and other relevant connected parties for sanctions, PEP exposure, terrorist-financing risks and adverse media. This AML screening step helps identify financial-crime risks that a basic ACRA company verification check may not reveal.

Use reliable, independent screening sources and document potential matches for review. Where relevant, include sanctions screening, PEP screening, adverse media checks and terrorist-financing indicators as part of the Singapore KYB and customer due diligence process. Combining ACRA verification with individual and entity screening creates a more complete KYB compliance Singapore framework.

Step 6: Assess the customer’s overall risk profile

Evaluate customer, geographic, industry, ownership, product, transaction and screening risks. Consider factors such as complex ownership structures, nominee arrangements, high-risk jurisdictions, unusual business activity and negative screening results when completing the KYB risk assessment.

Assign an appropriate risk level, such as low, medium or high, and document the reasoning behind it. A risk-based approach helps determine the required level of customer due diligence, review frequency and ongoing monitoring in Singapore. It also ensures that KYB Singapore checks are proportionate to the customer’s actual risk rather than limited to a standard ACRA search.

Step 7: Apply enhanced due diligence to higher-risk relationships

Investigate higher-risk relationships more deeply by collecting additional corporate documents, verifying the ultimate beneficial owner and reviewing complex ownership or control structures. Enhanced due diligence may also require source-of-funds or source-of-wealth checks, adverse media analysis and confirmation of the customer’s commercial purpose.

Obtain senior management approval where appropriate and apply stronger controls before onboarding or continuing the relationship. EDD should be proportionate to the identified AML, sanctions, PEP, geographic and transaction risks rather than applied as a fixed checklist to every customer. This risk-based approach supports stronger KYB compliance Singapore outcomes while avoiding unnecessary friction for lower-risk businesses.

Step 8: Make a documented decision and monitor the relationship

Approve, reject or escalate the customer based on the KYB verification, AML screening, risk assessment and CDD or EDD findings. Maintain a complete audit trail covering documents reviewed, verification sources, ownership analysis, screening results, risk decisions, approvals and review dates.

Continue ongoing monitoring after onboarding for ownership changes, new directors, sanctions alerts, PEP exposure, adverse media, company-status changes, unusual activity and other risk developments. Event-driven reviews and periodic refreshes help keep Singapore KYB information accurate throughout the customer relationship. Ongoing monitoring also ensures that business verification in Singapore remains current after the initial ACRA and KYB Singapore checks are complete.

How Does AML Screening Fit Into Singapore KYB?

AML screening turns basic company verification into meaningful financial-crime due diligence. ACRA records may confirm that a Singapore business exists, but they do not show whether the company, its directors, UBOs, registrable controllers, authorised representatives or connected parties pose sanctions, corruption, money-laundering or terrorist-financing risks.

A robust kyb compliance singapore process should screen the company and relevant individuals against sanctions lists, PEP databases, terrorist-financing information, regulatory records and credible adverse media. Effective business verification singapore should be risk-based, documented and supported by procedures for resolving false positives, escalating potential matches and applying enhanced due diligence.

Screening should also continue after onboarding. Ownership changes, new directors, PEP exposure, sanctions updates or adverse media can change a customer's risk profile. Ongoing monitoring helps compliance teams update risk assessments and decide whether to approve, restrict, review or exit the relationship. This makes kyb singapore more than a one-time check against ACRA records.

ACRA RORC Deadlines Businesses Should Know

Singapore’s Register of Registrable Controllers (RORC) requirements are a key part of 2026 kyb compliance singapore. Businesses incorporated or registered from 16 June 2025 generally need to establish their RORC from incorporation or registration, verify controller information annually, and keep the Central RORC updated with ACRA.

When details change in the private register, the corresponding Central RORC update is generally due within two business days. The Central RORC is not publicly accessible, so compliance teams should obtain reliable evidence, map ownership and control, and independently verify beneficial owners, directors and nominee arrangements during business verification singapore. ACRA data is an important starting point for kyb singapore, but it should be combined with independent verification and risk-based due diligence.

ACRA requires businesses to send an annual notice to each registrable controller to confirm or update their information. Failure to complete this verification can result in a fine of up to S$25,000 for the company, while controllers who fail to respond may also face fines of up to S$25,000. 

For effective KYB and AML compliance in Singapore, organisations should combine RORC checks with UBO identification, ownership mapping, sanctions screening, PEP screening, risk assessment and ongoing monitoring. This integrated approach strengthens business verification singapore and helps compliance teams use ACRA information appropriately.

2026 KYB Compliance Best Practices

Singapore KYB compliance in 2026 requires a risk-based approach that combines business verification, beneficial ownership checks, AML screening, and ongoing monitoring. A strong kyb singapore framework should use ACRA and other reliable sources while recognising that registry information is only one part of complete business verification singapore.

The following best practices can help compliance teams build a more accurate, efficient, and defensible KYB process.

Verify data independently - Cross-check customer-provided information against reliable and independent sources, such as ACRA, Bizfile, foreign corporate registries, official company documents and reputable databases. Independent verification helps confirm the entity’s legal name, UEN, registration status, directors, registered address and business activities. Using ACRA data as a starting point supports business verification singapore, but teams should investigate inconsistencies rather than relying on a single record.

Trace ownership to the real controllers - Look beyond direct shareholders and follow intermediary entities, holding companies and nominee arrangements until you identify the ultimate beneficial owners and persons exercising significant control. A complete ownership map supports accurate UBO verification and helps reveal opaque or high-risk structures. This is a core requirement of effective kyb compliance singapore and should form part of every material kyb singapore review.

Combine KYB with KYC - KYB verifies the business, but KYC is needed to verify the individuals behind it. Screen and verify directors, beneficial owners, controllers and authorised representatives to confirm their identities, authority and potential exposure to sanctions, PEP status or adverse media. ACRA company information can help identify relevant individuals, but their identities and risk profiles require separate verification.

Use risk-based due diligence - Apply customer due diligence proportionate to the customer’s risk profile. Complex ownership, high-risk jurisdictions, nominee relationships, PEP exposure, sanctions alerts or unexplained activity may require enhanced due diligence, source-of-funds checks, senior approval or additional documentation. A risk-based approach prevents kyb compliance singapore from becoming a rigid checklist and helps teams focus resources where they are most needed.

Monitor after onboarding - Corporate ownership, company status and AML risk can change after approval. Use ongoing monitoring to detect new directors, shareholder changes, UBO updates, sanctions matches, adverse media, business-activity changes and other events that may require rescreening or a new risk assessment. Monitoring ACRA updates and other reliable data sources helps maintain current business verification singapore records throughout the customer relationship.

Maintain defensible records - Keep a clear audit trail of the information collected, verification sources, ownership analysis, screening results, risk assessment, EDD findings and approval decision. Complete records help demonstrate that the business followed a consistent KYB compliance process and can support regulatory reviews. Records should show how ACRA information, customer documents and independent checks were assessed as part of the overall kyb singapore workflow.

Penalties for KYB and AML Compliance Failures

Singapore kyb singapore and AML compliance failures can lead to regulatory action, financial penalties, criminal liability, reputational damage, customer offboarding and increased supervisory scrutiny. Consequences may arise from inaccurate or outdated Register of Registrable Controllers information, inadequate customer due diligence, weak beneficial-owner verification, incomplete sanctions or PEP screening, poor record keeping, ineffective ongoing monitoring, or failure to file a Suspicious Transaction Report when legally required.

ACRA states that certain RORC failures can attract fines of up to S$25,000, while registered corporate service providers may face fines of up to S$100,000 for each prescribed AML/CFT/CPF breach. 

Penalties vary by sector and circumstances, so businesses should maintain reliable audit trails, apply risk-based kyb compliance singapore checks, escalate suspicious cases and continuously monitor corporate customers. Strong business verification singapore processes should use ACRA records alongside independent sources, ownership analysis, screening and documented compliance decisions.

Common KYB Challenges for Businesses in Singapore

Singapore businesses face several KYB challenges, from complex ownership structures to changing regulatory requirements and cross-border verification. These challenges make kyb compliance singapore an ongoing process rather than a one-time company check.

Understanding these obstacles helps compliance teams build faster, more accurate processes for company verification, UBO identification, AML screening, risk assessment, and ongoing monitoring. Effective business verification singapore also requires teams to combine registry information, ownership analysis, individual screening and risk-based review.

Foreign shareholders

Foreign shareholders can complicate kyb singapore because verification may involve multiple overseas registries with different access rules and disclosure standards. Teams may need to reconcile foreign records with ACRA Bizfile data to identify controllers and UBOs. Automated ownership mapping can reduce delays and improve auditability while helping compliance teams maintain a consistent business verification singapore process.

Nominee arrangements

Nominee directors or shareholders may conceal true ownership or control. KYB checks should identify nominees, verify the nominator and assess the arrangement’s purpose. Higher-risk cases may require enhanced due diligence, source-of-funds or source-of-wealth checks, and closer monitoring.

Reviewing nominee relationships is an important part of kyb compliance singapore because registered information may not always reveal the person exercising ultimate control.

Static risk assessments

A customer’s risk profile can change after onboarding. Use periodic reviews and event-driven monitoring to detect new directors, ownership changes, business expansion, sanctions, adverse media or unusual transactions. 

Material changes should trigger rescreening, UBO verification, CDD or EDD, and escalation where risk increases. ACRA updates and other corporate changes should be incorporated into the ongoing kyb singapore review process.

False positives

Common names, incomplete identifiers and inconsistent transliterations can create false-positive PEP, sanctions and adverse-media alerts. Compare dates of birth, nationality, address, role and jurisdiction before escalating matches. 

Document decisions and apply risk-based thresholds to distinguish genuine risks from unrelated individuals while maintaining effective controls. Accurate identifiers from ACRA and other reliable sources can improve business verification singapore results and reduce unnecessary reviews.

Maintaining evidence

Compliance teams should record the information collected, sources checked, ownership findings, screening results and approval decisions. Keep key documents, registry extracts, UBO calculations, risk scores, EDD findings, reviewer notes and timestamps in a central audit trail. 

Independent verification and clear records are essential for demonstrating a defensible kyb compliance singapore process, particularly when ACRA information must be supplemented with additional evidence.

Bottom Line

Singapore KYB compliance in 2026 goes beyond checking ACRA registration. A robust process verifies the company, UEN, activities, directors, representatives, ownership and ultimate beneficial owners. It also includes AML, sanctions, PEP and adverse-media screening, risk assessment, enhanced due diligence where needed, record keeping and ongoing monitoring.

As corporate structures become more complex, automated KYB platforms can combine ACRA registry checks, UBO identification, KYC, AML screening, risk scoring, CDD/EDD and ongoing monitoring. This reduces manual work, improves auditability and helps teams make faster, more confident onboarding decisions.

Binderr Services helps businesses streamline kyb singapore verification, screening, risk assessment and ongoing monitoring through one integrated compliance workflow.

FAQs - KYB Compliance in Singapore